Email marketing can be one of the most valuable channels a small business owns. It can also create avoidable legal and reputational risk when consent is unclear, the sender is hard to identify or an unsubscribe request is ignored.
Australia’s Spam Act framework applies to commercial electronic messages, including many promotional emails and SMS messages. A sound campaign process is built around three essentials: permission, clear identification and a working unsubscribe facility. This practical checklist helps Australian businesses build those requirements into everyday marketing operations.
This article provides general information, not legal advice. Obtain advice for your specific circumstances, especially when buying data, operating across borders or using complex partner campaigns.
1. Confirm that you have permission before sending
Do not treat an email address as automatic permission to market. Consent may be express, such as a person actively ticking an unticked box or completing a subscription form. In limited circumstances it may be inferred from an existing relationship and the reasonable expectations created by that relationship.
The safest operational standard is simple: record what the person agreed to, when they agreed, where the consent was collected and which business or brands may contact them. Keep the wording shown at the point of collection. A CRM field that says only “subscribed” is less useful than a record that can demonstrate the source and scope of consent.
Avoid pre-ticked consent boxes. Keep newsletter consent separate from terms that are necessary to buy a product or make an enquiry. If a promotion, competition or download is used to attract sign-ups, say clearly that marketing messages will follow.
2. Be cautious with purchased or supplied lists
A list described as “opted in” is not automatically safe. Before using third-party data, ask for evidence showing how consent was obtained, what the person was told, which senders were named and whether consent covers your type of message.
Contracts with list suppliers help allocate responsibility, but they do not replace due diligence. Send a small, monitored test only after the consent basis has been verified. High complaint or bounce rates are warning signs, not merely performance metrics.
3. Identify the sender clearly
Every commercial message should make it easy for the recipient to understand who sent it and how to contact the sender. Use the business’s real trading name, a monitored reply address and accurate contact information.
The “from” name, subject line and body copy should work together. Avoid a subject line that disguises the commercial purpose or creates a false impression of an existing conversation. Trust is a conversion factor as well as a compliance requirement.
4. Provide a simple, functional unsubscribe
Place a clear unsubscribe link in every promotional email. Do not hide it in low-contrast text, force recipients to sign in or require them to explain why they are leaving. The process should be easy and free to use.
Australian guidance requires unsubscribe requests to be actioned within five business days. Build a central suppression list so an address removed from one platform is not accidentally re-imported through another spreadsheet, sales tool or agency account.
Test the full journey before every major campaign: click the link, submit the request, confirm the address is suppressed and check that automated journeys also stop.
5. Separate service messages from promotions
Receipts, security alerts and delivery notices may be necessary to complete a transaction. Adding promotional material can change how the message is treated. Keep essential service communications focused on the service task, and send marketing through consented channels.
This distinction also improves customer experience. A critical account notice should not be diluted by sales copy.
6. Audit automations, not just newsletters
Compliance problems often sit inside forgotten automations: welcome sequences, abandoned-cart messages, lead-nurture flows, birthday offers, event reminders and re-engagement campaigns. Review the trigger, consent basis, sender identity and exit rule for every active journey.
When a contact unsubscribes, determine whether the request applies to one list, one channel or all marketing from the organisation. Make that choice understandable at the point of unsubscribe and honour it consistently.
7. Use this pre-send checklist
We can show how and when every recipient consented.
The message matches the scope and reasonable expectation of that consent.
The sender’s legal or trading identity is clear.
Contact details are accurate and monitored.
The subject line is not misleading.
The unsubscribe link is prominent, free and tested.
Suppression lists are synchronised across the CRM, email platform and sales tools.
Automated follow-ups stop when the recipient opts out.
The campaign owner and approval record are documented.
Frequently asked questions
Can I email someone who gave me a business card?
That depends on the context and what the person would reasonably expect. A business card handed over for a quotation does not necessarily authorise an ongoing newsletter. When in doubt, ask for express consent.
Can I send one email asking for consent?
A message that asks for consent can itself be commercial. Do not use a cold campaign to manufacture permission after the fact.
How quickly must an unsubscribe be processed?
ACMA guidance says unsubscribe requests must be honoured within five business days. A well-configured platform should suppress the address immediately.
Turn compliance into a better customer experience
Permission-based marketing usually produces cleaner data, more relevant messages and stronger brand trust. If your consent records, automations or unsubscribe process are unclear, fix the foundations before scaling spend.
