Email & SMS Marketing Compliance Policy

4.1 Rules by jurisdiction

• EU/EEA GDPR + ePrivacy Opt-in consent before any marketing email/SMS; consent must be unbundled (not tied to other terms, no pre-ticked boxes), specific per channel, logged with timestamp/IP/text shown, and withdrawal must be as easy as giving it. Limited soft opt-in for existing customers for similar services, always with opt-out.
  • Opt-in before send
  • Unbundled
  • Per channel
  • Consent logged
  • Easy withdrawal
• United Kingdom PECR Materially the same — opt-in or soft opt-in, clear sender identity, working unsubscribe.
  • Opt-in or soft opt-in
  • Sender identity
  • Working unsubscribe
• United States CAN-SPAM No consent required, but every message must have accurate headers and subject lines, be identified as an ad where applicable, include our valid physical postal address, and offer an unsubscribe honoured within 10 business days.
  • Accurate headers
  • Ad identification
  • Postal address
  • Unsubscribe ≤ 10 business days
• Canada CASL Express opt-in required (implied consent only in narrow existing-relationship cases), sender identification, and unsubscribe processed within 10 business days; consent records retained.
  • Express opt-in
  • Sender identification
  • Unsubscribe ≤ 10 business days
  • Records retained

4.2 Required marketing email footer

Every marketing email carries this footer, unchanged apart from the bracketed values:

4.3 SMS rules

• Sender identification Every marketing SMS identifies the sender.
• Opt-out in every message Each SMS includes an opt-out — "Reply STOP".
• Frequency disclosed Message frequency is stated at opt-in.
• Quiet hours Respected per the recipient's local law.

4.4 Opt-in checkbox (signup forms)

Signup forms use this checkbox, unticked by default and separate from Terms acceptance: