How do I build an email list in compliance with GDPR?

Your own email list is one of the few channels you control: it does not change rules overnight and it reaches those who asked to receive. But it is also a place where it is easy to go wrong. This article gathers the general principles for building it cleanly. It is not a substitute for legal advice, which is worth seeking if you have doubts about your case.

Step 1: decide what the list is for

A useful newsletter, notices of new services, a monthly summary? Whoever signs up has to understand what they will receive. If you cannot say in one sentence what the list is for, it is not ready.

Step 2: ask for consent clearly

• A box the person ticks, never already ticked.
• Say what they will receive and how often: "a summary once a month, with articles and news".
• Link to the privacy policy, in plain language.
• Ask only for what is needed. The email and, at most, the name. Each extra field puts people off.
• Do not bundle consent for the list with that for something else (for example, sending a proposal).

Step 3: keep the record

You should be able to show who signed up, when and through which form. Many email tools record this automatically. Check that yours does.

Step 4: make leaving easy

Every email carries an unsubscribe link that really works, in one click. Deal quickly with removal requests. Whoever wants to leave and cannot will mark the email as spam, and that harms all later sends.

Step 5: respect what you promised

If you said "one a month", do not send three a week. If you said it was about one subject, do not send advertising for another. Trust is lost quickly.

What to avoid

• Buying lists. The people did not ask to receive from you, and that is a legal and reputational problem.
• Adding contacts from business cards or LinkedIn without asking them.
• Hiding the consent in the middle of terms nobody reads.
• Keeping data without need or for longer than necessary.

For customers who have already bought from you, there are specific rules that allow contacting them about similar services, provided they have been able to refuse. It is worth checking how they apply to your case.

How to give a good reason to sign up

Whoever signs up wants something in return. Offer useful content: a monthly summary, a checklist, a template the person really uses. Do not promise what you do not deliver, and do not use the "incentive" as a pretext to fill the list with people who do not care about you. A small, interested list is worth more than a large, indifferent one. You can add the form to pages like a landing page and use your customers' questions as the topics of each send. In Digital Marketing, email lists come in when there is regular content to give them.

Review your form in ten minutes

Open the sign-up form as if you were a new person and answer five questions. Is the box unticked? Is it clear what I will receive and how often? Is there a link to the privacy policy? Does it ask for more than the email and the name? If I sign up, do I get a confirmation with a way to leave? If any answer is "no", that is the first thing to fix. Repeat the experiment from a phone, where many forms appear cut off or hard to tick.

In short

• Your own list is only worth it if people are there because they wanted to be.
• Clear consent, with an unticked box, frequency and privacy policy.
• Keep the record and make leaving easy in every email.
• No bought lists and no contacts added without asking.

Quick questions

Can I email people who gave me a business card?

It is not automatic. Receiving a card is not the same as agreeing to receive newsletters. Ask, and if the person says yes, record the consent.

Can I send news to my customers?

There are specific rules for customers who have already bought, which allow contacting them about similar services provided they have been able to refuse. Check how they apply to your case.

How long can I keep the contacts?

Only as long as needed for the purpose. If someone stopped opening emails a long time ago, it is worth cleaning the list and deleting those who no longer want to receive.