Why permission is the starting point
A newsletter works best when the people receiving it expect it and want it. Permission is not only a legal matter; it also affects whether your messages get read. People who never asked for your email tend to ignore it, mark it as spam, or unsubscribe, and complaints can hurt how mailbox providers treat your future messages.
This article covers general principles, not legal advice. Rules about marketing email differ by country, region and sometimes by type of recipient, and some places require explicit opt-in while others mainly require an easy opt-out. If you send to people in more than one place, check the rules that apply to you or ask a qualified professional.
What consent usually means
In everyday terms, consent means a person knowingly agreed to receive a specific kind of message from you. Good consent tends to have these qualities:
- Specific. They agreed to your newsletter, not to “offers from partners” in general.
- Informed. It was clear what they would receive and roughly how often.
- Freely given. Signing up was not hidden inside something they needed to do anyway, such as buying a product.
- An action they took. A box they ticked or a button they pressed, rather than a box already ticked for them.
- Easy to withdraw. Leaving is about as simple as joining.
Having someone’s email address is not the same as having their permission to market to them. A customer who gave you an address to receive a receipt or a repair update expected that message, not necessarily a monthly promotion.
Asking clearly at sign-up
The sign-up form is where consent is won or lost. A few practices help:
- Say what the newsletter contains and how often it is likely to arrive
- Use a separate, unchecked option for marketing instead of bundling it with an order or account form
- Keep the form short; an email address and perhaps a first name is often enough
- Link to your privacy policy so people can see how the address will be used
If you build forms with online forms tools, check the defaults, since some pre-tick options or collect more fields than you need.
Confirming and recording
Many senders use a confirmation step, often called double opt-in: after someone signs up, they receive a message asking them to confirm. This reduces typing mistakes, stops people from signing up someone else, and gives you a clearer record. It adds a small step, so some people never finish it. That trade-off is a judgment call.
Whatever you choose, keep a record of consent alongside each address in your contact database:
- The date and time of sign-up
- Where they signed up (which form or page)
- What they agreed to, such as the wording shown at the time
- Any later change, such as an unsubscribe
Without this, you cannot show where an address came from, and you cannot sort out disputes. Treat these records as part of handling customer data carefully, with limited access and a retention period you can explain.
Existing customers and purchased lists
Two situations cause the most confusion.
Existing customers. In some places, businesses may email existing customers about similar products with an opt-out; in others, a separate opt-in is expected. Because this varies, the safest general habit is to ask customers directly and keep transactional messages, such as invoices and shipping notices, separate from marketing.
Bought or borrowed lists. The people on a list you purchased have not agreed to hear from you. Such lists often carry old, wrong or trap addresses, and sending to them risks complaints and being blocked. Building your own list slowly is typically the more reliable path.
Making opting out easy
Every marketing email should include a visible unsubscribe link, and requests should be processed promptly. Do not make people log in, answer a survey or send a reply to leave. Some senders offer a middle option, such as fewer emails or only certain topics, but the full unsubscribe should always remain available.
Keep a suppression list: the addresses that have opted out, so they are never re-imported by accident when you merge lists or move to a new tool. Forgetting this during a data migration is a common way for unsubscribed people to be mailed again.
Content and identity
Consent covers what people agreed to receive, so keep your emails honest and recognizable:
- Use a sender name people recognize
- Make subject lines reflect the content
- Include your business name and a way to contact you
- Stay within the topic they signed up for
If someone signed up for monthly tips and then receives daily discount blasts, they may feel the permission was abused, even if no rule was technically broken.
Maintaining a healthy list
Consent is not a one-time event. Occasionally review who is still engaged. People who have not opened anything for a long time can be sent a final “do you still want this?” message and then removed if they do not respond. A smaller list of interested readers is usually better than a large one of silent addresses, and it lowers the chance of complaints.
Also remember basic account protection for the tool that holds your list. Email addresses are personal data, so a strong password and two-factor authentication on that account are sensible, along with limiting who can export the list.
A short checklist
- Ask for permission with plain, specific wording
- Do not pre-tick marketing boxes
- Record when, where and what each person agreed to
- Include a working unsubscribe link and honor it quickly
- Keep opted-out addresses on a suppression list
- Check the rules for the places where your readers live, and get professional advice for anything unclear
Outcomes vary, and following these habits does not guarantee compliance in every jurisdiction, but they reflect a respectful baseline that most rules build on.