Customer Data Consent for Restaurant Marketing
Consent is one possible route for marketing data use, not a decorative checkbox. It must match the specific activity, remain evidenced and be as easy to withdraw as it was to give.
Consent is one possible route for marketing data use, not a decorative checkbox. It must match the specific activity, remain evidenced and be as easy to withdraw as it was to give.
Separate the legal questions
p>First identify whether the activity is direct marketing, which channel is used, whether PECR requires consent or permits a valid soft opt-in, and which data-protection lawful basis applies. Do not use “GDPR consent” as a blanket answer for every purpose.Design a valid consent choice
- Use clear, specific language.
- Name the restaurant or group relying on the choice.
- State the channel and expected content.
- Keep the box unticked.
- Do not make marketing a condition of ordering.
- Link to privacy information.
- Allow granular choices where the systems can honour them.
Record evidence
| Field | Why it matters |
|---|---|
| Person/contact reference | Links the choice to the correct record |
| Date and source | Shows when and where it occurred |
| Wording version | Shows what the person was told |
| Affirmative action | Shows how the choice was made |
| Channel and purpose | Prevents over-broad reuse |
| Withdrawal or objection | Stops later contact |
| Supplier/system | Supports audit and migration |
Understand the soft opt-in separately
The products and services soft opt-in is not general permission. It has specific requirements around the customer relationship, similar goods or services and opt-out at collection and in every message. Document every requirement rather than labelling the record “legitimate interest”.
Handle withdrawal and objection
Stop the relevant marketing promptly. Do not switch to another lawful basis to continue the same activity after consent is withdrawn. Keep minimal suppression data where needed to prevent accidental re-contact.
Account access and deletion
An account deletion request, marketing objection and full erasure request are related but not identical. Remove data that is no longer needed, preserve limited records where another valid purpose requires them, and explain the result clearly.
Govern supplier forms
Review checkout, app, Wi-Fi, loyalty and competition forms. The restaurant remains responsible for understanding what the supplier records and whether preferences reach every campaign tool.
Handle data-protection complaints
From 19 June 2026, organisations have specific legal requirements for handling data-protection complaints under the Data (Use and Access) Act 2025. Maintain an accessible complaint route, acknowledge and investigate complaints, and record the outcome. Recheck current ICO guidance for the required process.
Review consent after material change
If the sender identity, channel or purpose changes materially, do not assume the original wording still covers the activity. Compare the new use with the evidence and seek a fresh choice where necessary.
Keep a consent-change log
When forms, suppliers or wording change, record the release date and affected collection points. Existing records retain the evidence of the choice originally made; do not overwrite history with the newest wording. This supports accurate responses to questions and complaints.
Related guides
- Restaurant Marketing and Customer Retention — the main guide for the wider topic.
- Customer Data and Database Management — the broader guide that frames this implementation.
- How to Build a Customer Database — a closely related operational control to review alongside this page.
- Customer Segmentation for Takeaways — a closely related operational control to review alongside this page.
Sources and date checked
Guidance checked: 24 July 2026. Recheck current ICO, supplier and advertising guidance before acting.
Operational, legal and platform requirements can change. Recheck official guidance and supplier documentation before altering a live service.
Related practical guides
Restaurant Marketing and Customer RetentionCustomer Lifetime Value for TakeawaysCustomer lifetime value is an estimate of future contribution, not a permanent label attached to a person. For an independent takeaway, a simple …Read guide →Restaurant Marketing and Customer RetentionHow Restaurant Loyalty Apps WorkA loyalty app records eligibility, earning and redemption against a customer account. The visible reward is only one part of a system that also n…Read guide →
Restaurant Marketing and Customer RetentionAcquiring First-Time CustomersThe first transaction should prove that the takeaway can deliver a clear, dependable experience—not merely that it can issue a large discount. A …Read guide →Restaurant Marketing and Customer RetentionRestaurant Loyalty and Retention GuideRetention is the result of a reliable experience and a sensible reason to return. A loyalty scheme can support that relationship, but it cannot c…Read guide →
POS and Kitchen SystemsBackup and Recovery for POS DataA backup is useful only if the business knows what it contains, how often it is created and how to restore it. Cloud hosting may protect some tra…Read guide →Restaurant AppsApp Retention and EngagementRetention means customers continue to receive enough value to order through the app. It is not the same as keeping notifications switched on or t…Read guide →Connect customer ordering with operations and profit
Use the wider guide library to check the menu, kitchen, fulfilment, payment and financial implications of each decision.
Browse all practical guides