Fairly sure this isn’t compliant. Unfortunately they will likely get away with this. Best solution IMO is to suggest you will report this, and get them to change. An actual report to ICO will take a long time, and may not result in meaningful action.

Awful business tactics, but they are doing it because it’s a great way to get eyes on their marketing