
Rules and ethics
Renewal reminders or pre-contract information? Subscription commerce rules and ethics
Many subscription operators assume a renewal email covers their legal duties. This guide separates law from ethics and sets out England compliance steps.
What to take away
- A Manchester yoga studio that signs members up online and emails a reminder three days before each monthly charge has done the marketing job but not the legal job. Under the Digital Markets, Competition and Consumers Act 2024, the pre-contract information and the reminder are separate duties, and the reminder does not cure a gap at sign-up.
- Subscription rules come from three placesconsumer law (the DMCC Act 2024 and the Consumer Contracts Regulations 2013), data protection law (UK GDPR and the Privacy and Electronic Communications Regulations), and advertising codes enforced by the Advertising Standards Authority. A subscription can breach one without breaching the others.
- The Information Commissioner's Office expects consent for marketing emails to be specific and recorded. Its step-by-step guide to direct marketing for your small business sets out the evidence an operator should hold.
- England is the jurisdiction for this guide. Scotland, Wales and Northern Ireland share most of the consumer framework, but enforcement routes and some procedural detail differ. Take advice before applying any of this to a non-England customer base.
- Nothing here is legal advice. Individual cases, particularly pricing and contract terms, need a qualified adviser.
Why subscription commerce rules and ethics are not the same question
Subscription commerce rules and ethics are often treated as one subject. The rules are the floor set by statute and regulators. Ethics is the judgement call above that floor, usually about how easy it is to leave and how clear the price is.
A gym in Leeds can comply with every written duty and still generate complaints. If the cancellation button sits three menus deep, the customer experience is poor even where the contract is lawful. Regulators increasingly read the whole journey, not the terms page.
The first half covers the legal framework. The second covers the operating decisions that keep a subscription defensible when a customer, a regulator or a payment provider asks questions.
The starting point for any operator reviewing the basics is our overview of subscription commerce UK regulations in England, which maps the statutes and regulators to the parts of a subscription business they touch.
What does the DMCC Act 2024 require of subscription contracts?
The Digital Markets, Competition and Consumers Act 2024 is the primary source. It creates a dedicated regime for subscription contracts, separate from the older consumer protections. The regime covers pre-contract information, reminders before a renewal, and a straightforward route out of the contract.
The Act received Royal Assent on 24 May 2024. The subscription regime is not yet in force. The Secretary of State will set the detail in secondary legislation, including exact wording, timing and format duties. The government consulted on that legislation in 2024. Commencement is expected no earlier than 2027.
DMCC Act 2024 duties
- Tell essential terms before commitment
- Use a durable medium
- Remind before renewal locks payment
- Make exit no harder than entry
Each of those is a design decision as much as a legal one. A checkout that hides the annual price behind a monthly figure fails the first test. A reminder that arrives after the charge fails the second. A cancellation flow that requires a phone call during office hours fails the third.
The Act does not exist in isolation. Commercial arrangements with payment processors, affiliates and white-label partners carry their own obligations, and our guide to subscription commerce commercial contracts covers how those agreements should allocate compliance risk between the parties.
Are pre-contract information duties different from renewal reminders?
Yes, and conflating them is one of the most common compliance mistakes. Pre-contract information is given before the customer signs up. A renewal reminder is given later, before a further payment. They serve different purposes and have different timing.
Pre-contract vs renewal reminder
Pre-contract information
- Timing
- Before sign-up
- Purpose
- Disclose key terms
- Content
- Price, frequency, term, cancellation
- Format
- Durable medium
Renewal reminder
- Timing
- Before further payment
- Purpose
- Prompt customer to act
- Content
- Upcoming charge and cancellation route
- Format
- Timely notice
Pre-contract information should cover the price, the billing frequency, the minimum term, the cancellation method and any condition that triggers a charge. It should be in a form the customer can keep, such as a confirmation email or a downloadable summary.
A tick box that says "I agree to the terms" is not the same as disclosing the key terms.
A compliant example might read: "You are signing up to a monthly subscription at the price shown on this page. The first payment is taken today. After that, payments are taken on the same date each month. You can cancel at any time by clicking Cancel in your account. If you cancel, you will not be charged again."
A renewal reminder is a prompt. As a practical benchmark, it should arrive at least 7 days before a monthly renewal and at least 14 days before an annual renewal. The exact minimum will be set in the regulations once made and may depend on the nature of the service.
A reminder that arrives on the morning of the charge is unlikely to give the customer a real chance to cancel.
For advertisers, the Advice for businesses published by the Advertising Standards Authority and the Committee of Advertising Practice explains how these disclosures interact with advertising claims. If a landing page says "cancel anytime", the renewal reminder and the cancellation flow must make that claim true.
Where does data protection fit into subscription marketing?
Subscription businesses hold payment details, usage data and marketing preferences. That makes them data controllers for most of what they do, with duties under the UK GDPR and the Privacy and Electronic Communications Regulations.
Consent and soft opt-in checks
- Collect marketing consent separately
- Record wording and timestamp
- Apply soft opt-in to similar products only
- Include opt-out at collection and every message
- Do not rely on bought or shared data
The most frequent problem is consent. A customer who agrees to receive service emails has not necessarily agreed to receive marketing emails. The Information Commissioner's Office expects consent to be specific, informed and recorded, and it expects the operator to be able to show what the customer was told.
Soft opt-in rules can cover existing customers in some circumstances, but they are narrower than many operators assume. They apply to similar products, they require an opt-out at collection and in every message, and they do not cover data bought or shared from another business.
Our subscription commerce data protection in England guide walks through lawful bases, retention and subject access requests in more detail. The short version is that marketing consent and service consent should be collected and stored separately, with a timestamp and a record of the wording shown.
For operators selling into the EU, the position is not identical. The European Commission's consumer rights and complaints page sets out the EU consumer framework, and UK firms with EU customers should check whether local rules add duties on top of the UK position.
What should a disclosure policy actually say?
A disclosure policy is the internal document that tells staff what customers are told, when, and by whom. It is not the same as the public terms and conditions. It is the operating manual behind them.
Disclosure policy contents
- Checkout information shown
- Renewal reminder wording
- Cancellation channels
- Charge dispute escalation route
- Who approves pricing changes
Our subscription commerce disclosure policy in England article sets out a structure you can adapt. The key point is that disclosure is a process, not a page. If the process is not written down, it will drift as the product changes.
For example, the policy could have four sections: journey stage, what is disclosed, who approves the wording, and where the record is stored. A simple table works. One row might cover the checkout page, another the confirmation email, and another the renewal reminder.
One practical test: can a new customer support agent answer, from the policy alone, what a customer was shown before they subscribed? If not, the policy is incomplete.
A numbered sequence for getting compliant
- Map your customer journeys. Write down every point where a customer sees a price, agrees to a term or is charged. Include free trials, upgrades and reactivations.
- Check pre-contract information against the DMCC Act 2024 duties. Confirm it is given before commitment, in a durable medium, and covers price, frequency, term and cancellation.
- Review renewal reminders. Confirm they are triggered before each charging renewal, not after, and that the timing gives the customer a genuine chance to stop the payment.
- Audit the cancellation route. Compare it with the sign-up route. If leaving takes more steps than joining, fix that before anything else.
- Separate marketing consent from service consent. Record what was shown, when, and how the customer agreed. Check soft opt-in use against ICO guidance.
- Check advertising claims against the ASA and CAP advice. Make sure "cancel anytime" and similar phrases match the actual flow.
- Document the policy and set a review date. Assign an owner for pricing and billing changes.
- Take advice on anything uncertain. The GOV.UK business regulation guidance and tools page is a useful starting point for identifying which regulator or framework applies.
That sequence is deliberately operational. Compliance fails most often at the handover between product, marketing and finance, not because nobody read the statute.
Compliance sequence
- Map customer journeys
- Check pre-contract information
- Review renewal reminders
- Audit cancellation route
- Separate marketing consent
- Check advertising claims
- Document policy and review date
How should operators handle cancellation and exit?
The legal duty is that exit should not be materially harder than entry.
Defensible cancellation flow
- No phone call required for online sign-up
- Cancellation link visible
- Confirm cancellation in writing
- State next charge date
- Explain data and access after exit
Common failures include requiring a phone call for an online sign-up, hiding the cancellation link below the fold, and offering discounts before confirming the cancellation. The last one is not automatically unlawful, but it should come after the cancellation is processed, not instead of it.
A defensible flow confirms the cancellation in writing, states when the next charge would have been, and explains what happens to data and access. That confirmation also protects the operator, because it creates a record of the customer's instruction.
For annual subscriptions, the timing of the reminder and the ease of exit matter more, because the sums involved are larger and the customer has less frequent contact with the service. A reminder that arrives two days before an annual charge is a weak defence if the customer complains.
What changes for 2027 and beyond?
Secondary legislation under the DMCC Act 2024 will fill in the detail of the subscription regime, including commencement dates for the main duties. Operators should plan for tighter rules on reminders and exit rather than assume the current position persists.
Enforcement posture is also shifting. The Competition and Markets Authority can now enforce consumer protection law directly, without going to court. It can impose fines of up to 10% of global annual turnover or £300,000, whichever is higher, for infringements. It can also accept undertakings and issue infringement notices. The ASA continues to act on misleading subscription advertising.
The direction of travel is toward clearer upfront pricing and easier exit.
Our subscription commerce England market guide for 2027 looks at what those changes mean for pricing, retention and product design over the next planning cycle.
Common questions
Do I need consent to email existing subscribers about a price rise?
A service message about a change to the contract is usually not marketing, so it does not need marketing consent. It should still be accurate and timely. If the same email promotes an upgrade or a new product, that part is marketing and needs a lawful basis.
Does the DMCC Act 2024 apply to free trials that convert to paid?
A free trial that converts into a paid subscription is generally within the regime's scope, because it creates a subscription contract. The pre-contract information should make the conversion price and date clear before the customer starts the trial.
Can I rely on a soft opt-in for lapsed customers?
Soft opt-in is narrower than many operators assume. It is designed for existing customers and similar products, with an opt-out at collection and in every message. Lapsed customers may fall outside it, so check the ICO guidance before relying on it.
Is a renewal reminder enough on its own?
No. A reminder is one duty among several. Pre-contract information, a fair cancellation route and accurate advertising all apply independently. A well-timed reminder does not fix a misleading checkout or a difficult exit.
This guide is general information about England and is not legal advice. Subscription terms, pricing and data handling should be reviewed by a qualified adviser for your specific circumstances.
In this guide
- UK subscription commerce contracts and marketing rulesUK guide to subscription commerce contract and marketing rules: PECR, ICO guidance, consumer terms, consent, price claims and pre-launch checks.
- Subscription commerce campaign checklistA practical subscription commerce campaign checklist for checking ad claims, marketing consent, trial terms and cancellation wording before launch.
- What subscription commerce data protection means for recurring billing operatorsSubscription commerce data protection in England: lawful bases, soft opt-in, ICO AI guidance, security duties and a practical checklist for recurring billing teams.
- Subscription commerce contract review checklistA subscription commerce contract review checklist for England-facing consumer terms, covering inherited US clauses, governing law, renewals, data and refunds.
- How a subscription commerce disclosure policy applies ASA rulesA subscription commerce disclosure policy should map ASA rules to claims and evidence, and align renewal, cancellation, data-protection and marketing notices.



