A controller sent me a marketing email after I signed up for a free trial, but did not give me a choice about this when I signed up. Their cookie banner was also not user-friendly, with no Reject All button available on the first layer. After the controller essentially ignored my complaints, the ICO eventually upheld my complaints and told the controller to add a Reject All button (see their full outcome below). Is the ICO finally doing something about non-compliance with the cookie consent rules?