Consent-first marketing: why your own customer list is worth more than any algorithm
Tracking people across the internet is getting harder, and customers expect to be asked first. Here's how to build a list of people who actually want to hear from you.
For years, online marketing ran on other people's data. Platforms followed customers around the internet, and businesses paid to reach them. That's getting harder. Safari and Firefox block third-party tracking cookies by default, iPhones ask people before apps can track them, ad costs keep rising, and a single change to an algorithm can cut your reach overnight.
The businesses that are doing well in spite of all this have something in common: they have their own list of customers who said yes to hearing from them. That's first-party data, collected with consent first.
What first-party data means, in plain words
First-party data is information customers give you directly: their email or mobile number when they order, what they bought, which flavour they prefer, the city they ship to, the answers to your quick poll. It's yours, it's accurate because it came from the customer, and no platform can take it away.
Compare that with your Facebook followers. You don't own that list. Facebook decides who sees your post, and if your page is restricted or hacked, those followers are gone.
Why "consent first" matters
In the Philippines, the Data Privacy Act of 2012 (Republic Act 10173) says you need a lawful reason to collect and use personal information, and for marketing that usually means the person's consent. That consent should be freely given, specific and informed: people need to know what they're signing up for. The National Privacy Commission (NPC) can act on complaints, and customers can ask you what you hold about them or ask you to delete it.
The law is only half of it. Customers can tell when they're being tracked or spammed, and they unfollow, block and report. When they choose to join your list, they open your messages, reply, and buy again.
This article is a practical guide, not legal advice. If you handle a lot of personal data, or sensitive data like health or financial details, talk to a lawyer or read the NPC's guidance.
How to collect customer data the right way
1. Ask clearly, at the right moment
The best time to ask is when the customer is already happy: right after an order, at the counter, or after you've answered their question. Say exactly what they'll get: "Want a message when we restock the ube jam? About twice a month, and you can stop anytime."
2. Use an unticked checkbox
On your website or order form, the "Send me news and promos" box should start unticked. A pre-ticked box isn't real consent. Keep it separate from accepting your terms of sale, so people can buy without signing up.
3. Only ask for what you'll use
If you only send email, don't ask for a birthday, address and phone number too. Every extra field puts people off and adds data you have to protect. A name and an email address is plenty to start.
4. Give something worth signing up for
Early access to new products, a members-only discount, a monthly tip sheet, a free size guide. People trade their email for something useful, not for "subscribe to our newsletter".
5. Write down when and how each person said yes
Keep a simple record: the date, where they signed up (website form, shop counter, event) and what they agreed to. Most email tools do this for you. If a customer ever asks, you can show it.
6. Make leaving easy
Every email needs an unsubscribe link, and every text or Viber blast should say how to stop. Honour it quickly. A clean list of interested people performs far better than a big list of people who ignore you.
7. Have a short, honest privacy policy
Explain what you collect, why, how long you keep it, and who to contact. Write it in plain words. You can see this site's privacy policy as an example of keeping it short and specific.
Turning the data into sales, without being creepy
- Remind, don't chase. "Your coffee beans usually run out about now. Want the same order?" is helpful. Messaging someone five times in a week is not.
- Group customers simply. New customers, repeat customers, and people who haven't ordered in three months each need a different message.
- Ask for preferences. A one-question poll ("Sweet or savoury?") gives you useful data and customers like being asked.
- Measure what your messages do. Add tracking tags to the links in your emails with our free Campaign Link Kit, so you can see which messages bring visits and orders without tracking individual people. Our guide to UTM links explains how.
Keep what you collect safe
Store customer lists in one place with a strong password and two-step login, not in spreadsheets attached to old emails. Limit who on your team can see them. Delete what you no longer need. If something leaks, the NPC expects you to act fast, so it's better to hold less.
The bottom line
Algorithms change, ad prices rise and platforms come and go. A list of customers who chose to hear from you stays yours. Start this week with one clear sign-up offer and an unticked checkbox, and treat every person who says yes like a regular.