Rules and ethics
Part of What the UK rules on appointment setting agencies mean for outsourced sales teams
What are the advertising rules for appointment setting agencies?
A checklist on advertising rules for appointment setting agencies: CAP Code claims, ICO direct marketing duties and the contract terms behind what you promise.
What to take away
- The ASA recorded 44,116 cases and resolved 32,192 informally in its 2024 annual report.
- For appointment setting agencies, the CAP Code covers your website, landing pages, paid search ads and LinkedIn posts.
- The ICO expects a lawful basis, a clear privacy notice and a working opt-out.
- Keep dated evidence behind every claim about meetings booked or pipeline.
- Check what your adverts promise against what the contract allows.
Advertising claims and the CAP Code
The Advertising Standards Authority (ASA) administers the UK Code of Non-broadcast Advertising and Direct & Promotional Marketing (CAP Code), written by the Committee of Advertising Practice (CAP). Rule 3.1 prohibits materially misleading advertising, and rule 3.7 requires documentary evidence for objectively substantiable claims before publication. Rules 3.33–3.35 cover comparisons with identifiable competitors, requiring objective comparisons based on material, relevant, verifiable and representative features; rule 3.45 requires testimonials and endorsements to be genuine and related to the advertised service. For prices, rule 3.18 requires non-optional charges applying to most buyers to be included, while rule 3.19 requires any charge that cannot be calculated in advance to be identified and its calculation explained.
Claims about booked meetings and pipeline
Figures for meetings booked, reply rates or cost per appointment must rest on evidence. The CAP Code requires documentary proof before a claim runs. Say you book 40 meetings a month and you need a named client, a date range and the raw data.
Evidence for advertising claims
- Named client for each claim
- Date range of the data
- Raw data and sample size
- Dated evidence for comparative claims
- Label illustrative figures clearly
A team paying £400 a month for outreach might see 12 meetings. That is an illustration, not a benchmark you can promise. Superlatives such as best-in-class are hard to substantiate. Training events help agencies stay compliant, and the ASA training and events page lists sessions on evidence and claims.
Comparative claims need the same discipline. If you say your team books more meetings than a named rival, hold dated evidence for both sets of numbers. Label illustrative figures clearly rather than presenting them as averages.
Testimonials, logos and client names
Get written permission before naming a client or using their logo. Check whether the contract allows public references, and note the renewal date, because permission granted in year one may lapse. Keep the consent on file with the date and the approved wording. If a client asks for a claim to come down, remove it and log when you did.
Data protection and outbound outreach
Data protection duties are separate from advertising standards. They arise under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018; the Privacy and Electronic Communications Regulations 2003 (PECR) add rules for electronic marketing. The Information Commissioner's Office (ICO) oversees data protection and enforces PECR. An agency may need to pay the ICO data protection fee unless exempt; the fee regime is set by the Data Protection (Charges and Information) Regulations 2018.
Lawful basis and privacy notices
Under PECR regulation 21, unsolicited live marketing calls must not be made to numbers registered with the Telephone Preference Service (TPS) or Corporate Telephone Preference Service (CTPS), or to people who have objected, unless they have specifically consented. Regulation 22 generally requires prior consent for marketing by electronic mail, including texts, to individual subscribers, subject to the existing-customer soft opt-in; prior consent is not generally required for corporate subscribers, but the sender must identify itself and provide a valid opt-out address under regulation 23. The UK GDPR still applies when business contact details identify an individual: document a lawful basis, give the required privacy information and honour objections. The ICO step-by-step guide to direct marketing for your small business covers consent, screening and handling objections.
Outbound outreach compliance steps
- Identify lawful basis, usually legitimate interests
- Provide a privacy notice explaining data use
- Screen against corporate telephone preference service
- Record and honour every opt-out across channels
- Check bought data provenance and lawful basis
Record the lawful basis you rely on and provide required privacy information by the time you first contact a person where the UK GDPR requires it; do not wait for a complaint. Our guide to the UK rules and compliance guide sets out the wider regulatory picture for England, Scotland, Wales and Northern Ireland.
Suppression lists and opt-outs
Every opt-out must be recorded and honoured across all channels. One suppression list, checked before each dial or send, stops the same prospect being contacted twice. Keep records of when consent was withdrawn and who actioned it. If you buy data, check the supplier's provenance and whether they can show a lawful basis.
Screen phone numbers against the Telephone Preference Service (TPS) for individual subscribers and the Corporate Telephone Preference Service (CTPS) for corporate subscribers before each campaign, and honour any direct objection. Log the date of each screen alongside the contact record you relied on.
Contracts, pricing and disclosure
What your advertising promises versus what the contract says
Advertising often promises a set number of qualified meetings, while the contract promises best endeavours. That gap is where disputes start.
The Consumer Rights Act 2015 sets standards for services, including reasonable care and skill, and its wording is often mirrored in B2B terms. Read appointment setting agencies commercial contracts before you sign, because the terms on deliverables decide what you can advertise later.
Fees, minimum terms and cancellation
State fees clearly, including setup charges and any minimum term, and never hide a 12-month lock-in in a footnote. If you advertise a rolling monthly service, the contract must allow monthly cancellation on those terms.
Check notice periods, exit fees and data handling at the end, and keep a dated copy of the advert live when the client signed.
Advertising a price that excludes VAT, setup or a per-meeting fee is likely to mislead. Show the total a client pays in a typical month and say which parts vary.
| Check | Rule or source | Evidence to keep |
|---|---|---|
| Meeting or pipeline claims | CAP Code evidence rules | Client data, date range, sample size |
| Client logos and testimonials | Written permission | Signed consent with date |
| Cold outreach | UK GDPR and PECR | Lawful basis note, privacy notice |
| Opt-outs | ICO direct marketing guidance | Suppression list and action log |
| Service promises | Consumer Rights Act 2015 | Contract, advert version, date |
This is general guidance. Individual cases need a qualified adviser, especially in data protection or contract disputes.
Common questions
Do the advertising rules differ across the UK?
No. The CAP Code and UK GDPR apply across England, Scotland, Wales and Northern Ireland. PECR is also UK-wide, so one approach works unless a sector regulator adds requirements.
Can I advertise a guaranteed number of appointments?
Only if you hold evidence for that number and the contract supports it. A guarantee is a strong claim, and the ASA can ask for the data behind it.
Who enforces these rules?
The ASA handles advertising complaints and can require changes or refer persistent offenders to Trading Standards. The ICO handles data protection and direct marketing breaches, with powers including fines.
