Compliance checklist · Marketing

What your website and marketing must show to stay compliant in marketing

The rules that apply to a UK marketing business, turned into what your site, ads and social posts must show, or must not say. Each point links to the regulator or the legislation it comes from.

General guidance, not legal advice. Rules change and depend on your circumstances; check the linked source or take advice from a qualified adviser before relying on any point.

Marketing rules

ASA / CAP Code

ASA CAP Code advertising standards

Every claim on the site, in ads and on social must be evidenced, not misleading, and clearly marked as an ad where it is one.

Source: ASA / CAP Code

PECR: electronic marketing and cookies

PECR electronic marketing and cookies

Ask for consent before non-essential cookies or analytics run, and before emailing or texting individuals for marketing; give an unsubscribe in every message.

Source: PECR: electronic marketing and cookies

UK GDPR and the Data Protection Act 2018

UK GDPR client and audience data

Publish a privacy notice that names who you are, what you collect on every form, why, how long you keep it and how people use their rights; link it from every form.

Source: UK GDPR and the Data Protection Act 2018

Copyright and intellectual property

Copyright and IP assignment in client contracts

Only use images, music, fonts and copy you own or are licensed for; client work shown in your portfolio needs permission.

Source: Copyright and intellectual property

Source being confirmed

Professional indemnity insurance

Check what this rule requires you to display or avoid saying, and keep the site consistent with it.

We are confirming the primary source for this point.

Off-payroll working (IR35)

IR35 off payroll for freelancers

Do not promise an "outside IR35" outcome in marketing; status depends on the facts of each engagement.

Source: Off-payroll working (IR35)

ICO data protection fee (registration)

ICO registration

Pay the data protection fee if it applies to you, and name the controller (legal entity) in the privacy notice.

Source: ICO data protection fee (registration)

Every UK business site

Whatever the sector, these apply to almost every business website.

Company and trading details

A limited company's site must show its registered name, company number, place of registration and registered office address.

Source: Company and trading details

Privacy notice

Say who you are, what each form collects, why, how long you keep it and how people use their rights.

Source: Privacy notice

Cookie consent

Non-essential cookies and analytics wait for consent, and refusing is as easy as accepting.

Source: Cookie consent

Honest claims

Every claim, review and comparison is true, evidenced and not misleading (CAP Code).

Source: Honest claims

Genuine reviews

No fake, bought or selectively hidden reviews (DMCC Act 2024).

Source: Genuine reviews

See how your site measures up

The free grader checks your site against the visible signals buyers, search engines and AI assistants look for, including several of the points above.

Grade my website