Customer Data Consent for Restaurant Marketing
Consent is one possible route for marketing data use, not a decorative checkbox. It must match the specific activity, remain evidenced and be as easy to withdraw as it was to give.
Consent is one possible route for marketing data use, not a decorative checkbox. It must match the specific activity, remain evidenced and be as easy to withdraw as it was to give.
Separate the legal questions
p>First identify whether the activity is direct marketing, which channel is used, whether PECR requires consent or permits a valid soft opt-in, and which data-protection lawful basis applies. Do not use “GDPR consent” as a blanket answer for every purpose.Design a valid consent choice
- Use clear, specific language.
- Name the restaurant or group relying on the choice.
- State the channel and expected content.
- Keep the box unticked.
- Do not make marketing a condition of ordering.
- Link to privacy information.
- Allow granular choices where the systems can honour them.
Record evidence
| Field | Why it matters |
|---|---|
| Person/contact reference | Links the choice to the correct record |
| Date and source | Shows when and where it occurred |
| Wording version | Shows what the person was told |
| Affirmative action | Shows how the choice was made |
| Channel and purpose | Prevents over-broad reuse |
| Withdrawal or objection | Stops later contact |
| Supplier/system | Supports audit and migration |
Understand the soft opt-in separately
The products and services soft opt-in is not general permission. It has specific requirements around the customer relationship, similar goods or services and opt-out at collection and in every message. Document every requirement rather than labelling the record “legitimate interest”.
Handle withdrawal and objection
Stop the relevant marketing promptly. Do not switch to another lawful basis to continue the same activity after consent is withdrawn. Keep minimal suppression data where needed to prevent accidental re-contact.
Account access and deletion
An account deletion request, marketing objection and full erasure request are related but not identical. Remove data that is no longer needed, preserve limited records where another valid purpose requires them, and explain the result clearly.
Govern supplier forms
Review checkout, app, Wi-Fi, loyalty and competition forms. The restaurant remains responsible for understanding what the supplier records and whether preferences reach every campaign tool.
Handle data-protection complaints
From 19 June 2026, organisations have specific legal requirements for handling data-protection complaints under the Data (Use and Access) Act 2025. Maintain an accessible complaint route, acknowledge and investigate complaints, and record the outcome. Recheck current ICO guidance for the required process.
Review consent after material change
If the sender identity, channel or purpose changes materially, do not assume the original wording still covers the activity. Compare the new use with the evidence and seek a fresh choice where necessary.
Keep a consent-change log
When forms, suppliers or wording change, record the release date and affected collection points. Existing records retain the evidence of the choice originally made; do not overwrite history with the newest wording. This supports accurate responses to questions and complaints.
Related guides
- Restaurant Marketing and Customer Retention — the main guide for the wider topic.
- Customer Data and Database Management — the broader guide that frames this implementation.
- How to Build a Customer Database — a closely related operational control to review alongside this page.
- Customer Segmentation for Takeaways — a closely related operational control to review alongside this page.
Sources and date checked
Guidance checked: 24 July 2026. Recheck current ICO, supplier and advertising guidance before acting.
Operational, legal and platform requirements can change. Recheck official guidance and supplier documentation before altering a live service.
Related practical guides
Restaurant Marketing and Customer RetentionAcquiring First-Time CustomersThe first transaction should prove that the takeaway can deliver a clear, dependable experience—not merely that it can issue a large discount. A …Read guide →Restaurant Marketing and Customer RetentionRestaurant Loyalty and Retention GuideRetention is the result of a reliable experience and a sensible reason to return. A loyalty scheme can support that relationship, but it cannot c…Read guide →
Delivery ManagementDelivery Bags and EquipmentChoose delivery bags and equipment for the routes, food types and handling conditions of the business, then manage them as safety-critical operat…Read guide →
POS and Kitchen SystemsBarcode Scanners and Payment TerminalsPeripheral hardware should remove manual work without creating new reconciliation or security problems. A scanner must send the right identifier …Read guide →
Restaurant AppsApp Budget for Different Business SizesBusiness size is only a rough guide to app budget. Ordering complexity, number of locations, integration risk and the ability to maintain the pro…Read guide →Online OrderingManaging Marketplace ReviewsMarketplace reviews sit inside a commercial relationship that the takeaway does not fully control. The platform may own the customer interface, d…Read guide →Connect customer ordering with operations and profit
Use the wider guide library to check the menu, kitchen, fulfilment, payment and financial implications of each decision.
Browse all practical guides