Consent is the legal basis for marketing mail in most jurisdictions and the practical basis for good deliverability: people who asked for mail rarely complain.
How to implement email consent management#
- Use an unchecked checkbox or a dedicated signup form; never pre-tick.
- Record timestamp, IP, source, and the exact wording shown at consent.
- Use double opt-in for marketing lists where feasible.
- Separate consent for different purposes (newsletter vs partner offers).
- Refresh consent for contacts older than two years with no engagement.
How to verify it worked#
Send a test message to seed mailboxes at Gmail, Outlook, and Yahoo, then inspect the Authentication-Results and delivery headers. Repeat after any DNS or sending-platform change.
Common mistakes#
- Bundling marketing consent into terms of service acceptance.
- Losing consent records during a CRM migration.
Frequently asked questions#
Is double opt-in required by law?
Not explicitly in most jurisdictions, but it is the easiest way to prove consent under GDPR and CASL and it improves list quality.