Opt-outs in cold email: compliant without killing replies

A compliant B2B cold email in the UK needs two things: it identifies who is sending, and it gives the recipient a working way to say no. Neither requires a formal unsubscribe link — a plain-text line such as "if this isn't relevant, reply 'not interested' and you won't hear from me again" is commonly used to meet the requirement, and it reads far better in a one-to-one email. Handled properly, the opt-out protects your reply rate rather than killing it.

This is not legal advice; it is a description of how we build the mechanism.

What does UK law actually require?

PECR — the UK's electronic marketing rules — permits cold email to corporate subscribers, provided the sender does not conceal their identity and provides a valid address the recipient can use to opt out. That is the whole obligation for the email itself: say who you are, make "no" easy. The wider infrastructure this sits inside — domain reputation, authentication, volume discipline — is covered in the practical guide to cold email deliverability; the opt-out is the compliance layer bolted onto it.

Note what the law does not require: a branded unsubscribe page, a preference centre, or the word "unsubscribe" at all. It requires a working route out.

Should the opt-out be a link or a line of text?

For cold outbound at our volumes — 25–40 emails per day per inbox — a plain-text opt-out line typically works better than a formal link, for the same reason plain text beats HTML in cold email generally: it looks like an email from a person, not a broadcast from a platform. A footer with an unsubscribe button and a company logo signals "bulk marketing" to both the reader and, arguably, the filter.

Two caveats. First, Google and Microsoft's bulk-sender rules require one-click list-unsubscribe headers for high-volume senders — commonly cited around five thousand emails a day to their users. Disciplined cold outbound runs far below that threshold, but if you ever operate at bulk scale, the header becomes mandatory. Second, whichever format you choose, it must actually work, permanently. A decorative opt-out is worse than none.

What happens mechanically when someone opts out?

The opt-out is only compliant if the machinery behind it is. Here is the mechanism we install:

1. When a reply contains an opt-out, the sending tool detects it — or a human does within the day — and the contact is marked do-not-contact.
2. When the contact is marked, they are removed from every active sequence immediately, not just the one that prompted the reply.
3. When they are marked, they also join a permanent suppression list held outside any single campaign.
4. When any future list is loaded, it is checked against the suppression list before a single email is queued. An opt-out honoured once and violated three months later is a complaint waiting to happen.

The suppression list is a one-way door. Contacts go in; they do not come out.

Does offering an opt-out reduce replies?

No — and the arithmetic runs the other way. A recipient who does not want your email has three options: ignore it, opt out, or mark it as spam. The first is neutral. The second is neutral. The third damages your domain reputation, and mailbox providers weigh spam complaints heavily — a small number of complaints outweighs a large number of quiet opt-outs. A clear, easy opt-out is a pressure valve: it routes the "no" somewhere harmless.

What actually kills replies is landing in spam, which is a placement problem, not an opt-out problem. A campaign holding a healthy positive-reply rate — we work to roughly 4%, and treat below 3% as a signal to fix the campaign — loses nothing measurable to a courteous opt-out line.

Where does the opt-out sit in the wider system?

It is one item on the sending-infrastructure checklist before campaign one, alongside authentication, warm-up, and verification — the unglamorous layer that decides whether anything else works. And it clarifies your follow-up universe: a contact who opts out is gone for good, but a contact who simply never replied has said nothing at all. Those contacts belong in structured, patient follow-up — the 90-Day Follow-Up Framework exists precisely because silence is not a no.

Compliance done properly is invisible: the people who want out get out, the people who might buy keep hearing from you, and your domain's file stays clean.

---

Next step: the Growth System Audit — £450, seven days, credited against any build — maps where your growth system leaks and what to build first.