Building an Email List from Orders

An order can create a customer relationship, but it does not automatically create unlimited permission to send marketing emails. List growth must preserve evidence and customer choice.

Separate necessary order data from marketing

An email address may be needed for a receipt, order confirmation or support. That operational need is not the same as agreement to receive promotions. Keep the checkout usable when marketing is declined.

Choose the lawful route before designing the box

Design the checkout fairly

• Use an unticked, clearly labelled choice where consent is relied upon.
• Name the restaurant or group that will send the emails.
• Describe the likely content without vague “partners and offers” wording.
• Link to concise privacy information.
• Avoid making marketing a condition of ordering.
• Record the version of wording shown.

Handle marketplaces and third parties

Do not assume a contact detail visible in a marketplace order can be transferred into the restaurant’s marketing database. Check the contract, platform role and customer information. Bought or shared lists require due diligence and still need a compliant route for the intended electronic marketing.

Use incentives carefully

A sign-up benefit must have prominent conditions, availability and expiry. Model whether the incentive creates an additional healthy order rather than discounting behaviour that would have happened anyway. Do not describe a conditional benefit as free without making the condition clear.

Maintain list quality

Deduplicate without merging conflicting preferences, suppress objections, correct invalid details and delete or anonymise information that is no longer needed. Keep only the minimal information required to prevent future unwanted marketing.

Audit procedure

1. Export records with source and permission fields.
2. Sample the checkout evidence.
3. Remove or quarantine unsupported entries.
4. Test unsubscribe propagation.
5. Document retention and suppression.
6. Approve new collection points before launch.

Control every collection point

Maintain a register of checkout, app, Wi-Fi, loyalty, competition and paper forms. Each entry should show wording, system field, business identity, privacy link and owner. Retire old forms so they cannot continue creating records under obsolete wording.

Test supplier exports

Export a sample with permission source, date, channel, wording version and suppression. If the provider cannot retain or export this evidence, the list may be difficult to defend or migrate. Do not rely only on a single “subscribed” flag.

Measure quality, not only growth

Report new valid subscribers, unsupported records, opt-outs, complaints, failed addresses and second-order contribution by collection source. A smaller list with clear evidence and healthy engagement is more valuable than a large database that cannot be used confidently.

Related guides

• Restaurant Marketing and Customer Retention — the main guide for the wider topic.
• Email Marketing for Takeaways — the broader guide that frames this implementation.
• Email Deliverability and Compliance — a closely related operational control to review alongside this page.
• Email Campaign Types for Restaurants — a closely related operational control to review alongside this page.

Sources and date checked

Guidance checked: 24 July 2026. Recheck current ICO, supplier and advertising guidance before acting.

• ICO guidance on direct marketing using electronic mail
• ICO: plan direct marketing
• ICO: respect people’s direct-marketing preferences
• ASA guidance on promotional marketing