Marketing consent, collected so it holds up

Marketing consent is a guest's permission to receive marketing from a venue: a newsletter, a new menu announcement, an invitation to an event, an offer. It sounds like a formality, a box on a booking form. In practice, it decides who a venue may write to, how it must ask, and what happens if anyone ever questions whether a message should have been sent. Consent collected carefully is an asset. Consent collected carelessly is a risk sitting in every list.

Many venues have lists built on shaky ground: email addresses taken from bookings, boxes ticked by default, sign-up sheets with no record of what guests were told, subscribers from an old system with no proof of anything. Sending email marketing to those lists can break the law in many countries, damage the venue's reputation with guests and harm the deliverability of every email it sends.

This guide sets out how to collect marketing consent so it holds up: where to ask, how to word it, how to confirm it, what to keep as proof, how to let guests withdraw it, and how consent fits within data protection and guest privacy more broadly. It is practical guidance, not legal advice; rules vary by country, so check what applies where you trade.

Marketing consent is a guest's clear, active agreement to receive marketing messages from you. In many places, data protection and electronic marketing rules require it before sending marketing by email or text message, with limited exceptions. Under the EU's General Data Protection Regulation, for example, valid consent must be freely given, specific, informed and unambiguous, given by a clear affirmative action.

In plain terms, that means the guest knew what they were agreeing to, chose to agree by doing something, such as ticking an empty box, and could easily have said no. Silence, a pre-ticked box or simply booking a table is not consent to marketing.

Consent is not the only lawful basis for using guest data. Confirming a booking, sending a reminder or keeping an allergy on file do not need marketing consent, because they are part of serving the guest. Marketing is different, and needs its own permission.

Consent has to hold up in three ways. Legally, a venue may need to show that a guest agreed, when and how, if the guest or a regulator asks. Practically, a list of guests who genuinely chose to hear from you performs far better than one assembled from every email address the venue has ever collected. And reputationally, guests who receive marketing they never asked for feel their trust has been broken.

There is also a technical reason. Email providers watch how recipients react to messages. Emails sent to people who did not expect them are more likely to be marked as spam, which can push the venue's future emails, including booking confirmations, into spam folders. Our guide to email deliverability covers why that happens.

A smaller list of guests who really want to hear from you is worth more than a large list of uncertain origin.

Ask for marketing consent where guests are already sharing their details and thinking about the venue. The most natural places are the booking form, the waitlist, the feedback form and the end of an online order. Each reaches guests at a moment when they are engaged and likely to say yes if the offer is appealing.

The booking form is usually the best. Guests are choosing to visit, and an optional box to receive news from the venue fits naturally. Place it near the end, after the guest has chosen a time and entered their details, so it does not get in the way of the booking.

You can also ask in the venue, for example with a card or a QR code, but make sure the same standard applies: a clear explanation, an active choice and a record of the agreement.

The wording should tell guests exactly what they are agreeing to, in plain language. Who will contact them, how, about what, and how often. For example:

"Send me news, events and occasional offers from [venue] by email. You can unsubscribe at any time."

Avoid vague wording such as "keep me updated" or "join our community", which does not say what will happen. Avoid bundling consent with something else, such as agreeing to terms and conditions, because consent must be a separate choice. And never pre-tick the box.

If you plan to contact guests through more than one channel, such as email and text message, ask separately for each, so guests can choose.

Not every guest books online. Walk-ins join the waitlist, regulars chat at the bar, and guests at events fill in cards. Each is a chance to invite guests to hear from you, and each needs the same standard as the booking form: a clear explanation, an active choice and a record.

On a waitlist, an optional choice to receive news works well, as long as joining the waitlist does not depend on it. In person, a card or a QR code that leads to a proper sign-up form is better than writing email addresses on a sheet, because the form records the wording and the moment of agreement automatically.

Avoid paper sign-up sheets where you can. They are hard to read, easy to lose and rarely record what guests were told.

If you plan to send marketing by text message or through messaging apps, treat each channel separately. A guest who agreed to receive emails has not agreed to receive texts. Ask for each channel on its own, with its own wording, and record each choice.

Text messages feel more personal than email, and many guests are more protective of their phone number. Use the channel sparingly, for messages guests would genuinely want, and make it just as easy to stop.

Rules for text and app marketing can differ from those for email, so check what applies where you trade.

Consent must be freely given, which means guests must be able to say no without losing anything they came for. A guest who does not tick the marketing box must still be able to book a table. Making the booking conditional on agreeing to marketing undermines the consent.

Present the choice fairly. A clear, unticked box with a short explanation is fair. A large "Yes, sign me up" button beside a tiny "no thanks" link is less so. A form that keeps asking until the guest agrees is not a free choice at all.

A real choice also produces better results. Guests who chose to join are more likely to open, read and act on your emails.

Confirmation, often called double opt-in, means sending a short email after the guest signs up, asking them to confirm by clicking a link. Only guests who confirm are added to the marketing list. It is not required everywhere, but it has clear benefits.

It proves that the email address is real and belongs to the person who signed up, which protects against typos, fake addresses and people signing up others without permission. It shows clearly that the guest wanted to join. And it keeps the list clean, which helps every email you send reach inboxes.

Keep the confirmation email short and friendly: thank the guest, say what they have signed up for, and give one clear button to confirm.

Keeping proof of consent is what makes it hold up. For each guest who agrees, keep a record of when they agreed, how (for example, the booking form or the waitlist), what they were told at the time (the wording of the form), and, if you use confirmation, when they confirmed.

Store this on the guest's own record, alongside their contact details, so it can be found quickly if needed. Keep copies of the wording you used over time, because forms change, and you may need to show what a guest saw when they agreed.

Without proof, consent is only an assumption. With it, you can answer any question about why a guest is on your list.

Guests must be able to withdraw consent as easily as they gave it. Every marketing email should include a clear unsubscribe link, and unsubscribing should take one or two clicks, without logging in or explaining why. Many rules require this, and it is good practice everywhere.

Act on withdrawals immediately. A guest who unsubscribes should not receive another marketing email, from any venue in the group, in any campaign that is already scheduled. Record the withdrawal on the guest's record, so it is respected everywhere.

Withdrawing marketing consent does not end the relationship. The guest can still book, receive booking confirmations and reminders, and be welcomed as a regular. Only marketing stops.

Some countries have limited exceptions to the consent requirement. In the UK, for example, a rule often called the soft opt-in can allow a business to send marketing about its own similar products to existing customers whose details it collected during a sale or negotiations for a sale, as long as they were given a clear chance to opt out at the time and in every message. The Information Commissioner's Office publishes guidance on direct marketing that explains when it applies.

Exceptions like this are narrow and easy to get wrong, and they do not exist everywhere. Many venues choose to rely on clear, confirmed consent for all marketing, which works wherever they trade and leaves no room for doubt.

If you rely on any exception, take advice and keep records of how it applies.

In a group, consent needs to be clear about who will be sending messages. A guest who signs up at one venue may expect news from that venue, not from every venue the group owns. If you plan to market the whole group, say so in the wording: "news from [group] and its restaurants".

Respect withdrawals across the group. A guest who unsubscribes from one venue's emails should not start receiving another venue's, unless they separately agree.

Keep consent records centrally, so every venue in the group sees the same status for each guest.

Many venues have old lists of email addresses from previous systems, sign-up sheets or past events, without clear records of consent. Using them is risky. If you cannot show that the guests agreed to receive your marketing, it is safer not to send it.

Instead of mailing an uncertain list, invite those guests to opt in again the next time they book or visit, through your normal consent process. Some venues send a single message asking guests to confirm they want to stay on the list, but even that may count as marketing in some places, so take advice first.

It may mean starting with a smaller list. A smaller list built properly grows quickly, and it can be used with confidence.

Marketing consent is one part of guest privacy. Guests trust the venue with their details, and consent is how they decide how far that trust extends. Respect it in how you use their data, not just in whether you can send an email.

Use the information you hold sensibly. Write to guests about things they are likely to care about, at a sensible frequency. Never use sensitive information, such as allergies or health details, to target marketing. Explain in your privacy notice how you use guest data for marketing, and how guests can change their mind.

Privacy rules vary between countries. The UAE, for example, has its own federal data protection law. Check the rules where you trade, and take advice if you are unsure.

Consent gives you permission to write; it does not guarantee that guests will want to read. Email marketing works best when it is relevant, occasional and useful: a new menu, an event, a seasonal opening, a quiet-night offer for guests who like weekday lunches. Our guide to restaurant marketing strategies that survive a year covers how email fits into a wider plan.

Send at a sensible frequency, and do not send the same message to everyone. Guests who chose to hear from you can still choose to stop, and they will if every email feels irrelevant.

Watch how guests respond. Rising unsubscribes or falling clicks are a signal to send less, or to make each email more useful.

The team plays a part in consent. Hosts and servers who take bookings by phone, add guests to the waitlist or hand out sign-up cards need to know how to ask for consent properly and how to record it.

Train them to ask clearly, never to sign guests up without asking, and never to add guests' details to a marketing list because they seemed friendly. A server adding a regular's email to the newsletter "because they would like it" may mean well, but it is not consent.

Make the process simple. If the system records consent automatically when the guest makes a choice, there is less room for mistakes.

Review how you collect consent at least once a year. Check the wording on every form, confirm that boxes are unticked by default, test the confirmation email and the unsubscribe link, and make sure consent records are being kept for every new subscriber.

Check your lists too. Are there subscribers with no consent record? Are unsubscribes being respected across every campaign and venue? Are old, inactive subscribers still being mailed years after they last opened an email?

Fix what you find, and keep a note of what you checked and when.

Here is an illustrative venue that rebuilt its marketing consent. The details are examples.

In servearound, guests opt in to marketing as they book, with a choice of their own, and confirm it by email; only confirmed subscribers are ever mailed. Opt-in, confirmation and unsubscribe are tracked on the guest's own record, every campaign email carries an unsubscribe link, and an unsubscribe lands on the guest's record at once. Campaigns only goes to the guests who opted in, and its audiences use allergens and diets only to leave guests out, never to target them.

Booking confirmations and reminders are part of the booking itself, separate from marketing, so a guest who never subscribes still receives everything they need for their visit. See Campaigns.

You can send them what they need for the booking. Marketing usually needs separate consent, or a narrow exception where the law allows it.

Not everywhere, but it proves the address is real and the guest wanted to join, and it keeps the list clean.

When the guest agreed, how, what they were told, and when they confirmed.

It is rarely a good idea, and in many places it is unlawful for email marketing. Build your own list with consent.

Immediately. No further marketing should reach the guest.

Not automatically, but if a guest has not engaged for a long time, consider whether continuing to mail them is reasonable.

Be very careful. Many places have stricter rules for children's data and marketing, and some products, such as alcohol, must never be marketed to them. Keep marketing for adults.

It helps. A line such as "about twice a month" sets expectations, and guests who know what to expect are less likely to unsubscribe.

Marketing consent is a guest's clear, active agreement to receive marketing, and it has to hold up legally, practically and reputationally. Ask where guests are already engaged, especially the booking form, with plain wording, an unticked box and a real choice. Confirm it by email, keep proof of when and how it was given, and make withdrawing it as easy as giving it.

Treat consent as part of guest privacy and data protection, avoid mailing old lists without proof, train the team to ask properly, and review your process every year. A smaller list of guests who genuinely chose to hear from you is the foundation of email marketing that works.