Keep receipt consent separate from marketing consent in your CRM

Consent to receive a receipt does not automatically permit marketing messages. Your CRM should record receipt delivery and marketing permission as separate purposes, with separate channels and withdrawal history.

This approach follows recent guidance from the United Kingdom's data protection regulator. The guidance explains that consent for an electronic receipt does not cover direct marketing, and marketing messages must also provide a clear opt-out path.

Why receipt and marketing records must stay separate

A receipt serves the transaction. It confirms a purchase, appointment, payment, or other service event that the customer requested. Marketing serves a different purpose because it promotes future services, offers, reminders, or news.

When one checkbox covers both activities, staff may not know what the customer agreed to receive. The fix is simple: create separate consent fields for service messages and promotional messages.

• Service receipt: The customer asked for a record of a transaction or service event.
• Appointment or service notice: The customer needs information about an existing request or relationship.
• Email marketing: The customer agreed to promotional messages by email.
• Text marketing: The customer agreed to promotional messages by text.

Do not treat a general phrase such as "updates" as proof of permission for every channel. The regulator says consent should be specific and informed about the type of electronic marketing involved.

What the United Kingdom guidance says

The guidance says electronic marketing to individual subscribers generally requires consent unless a specific exception applies. It also says consent must explain what the messages are for, who will rely on the consent, and how the person can withdraw it.

It gives a practical example: a retailer may use an email address to send an e-receipt, but that permission does not authorize a later marketing email. The business must ask clearly and separately for direct marketing permission.

The guidance also says every marketing email or text should identify the sender and explain how recipients can opt out. Store that requirement in your campaign process, not just in an employee's memory.

Build separate CRM fields

Start by reviewing every form, checkout page, intake process, and staff-created contact record. List each reason your business sends messages, then match each reason to the channel it uses.

1. Create a field for service communications, such as receipts and appointment notices.
2. Create a separate field for promotional email permission.
3. Create a separate field for promotional text permission.
4. Add a status for withdrawn, declined, expired, or unknown permission where appropriate.
5. Record the date, source, wording, and channel for every new permission.

A hosted CRM should make the purpose visible before a staff member sends a campaign. If the system only shows one broad marketing flag, add a review step before using that list.

Use clear field labels

Labels should describe the action, audience, and channel. "Marketing allowed" creates uncertainty, while "Promotional email permission" gives staff a direct answer.

• Service email required
• Promotional email permission
• Promotional text permission
• Service text required
• Marketing opt-out date
• Permission source and wording

Keep service messages separate from promotional campaigns even when both use the same email address or phone number. The address identifies the person, but it does not define the permission.

Check the wording customers see

Review each consent statement for plain language. It should say what the person will receive, which channel will deliver it, who will send it, and how the person can withdraw permission.

Do not hide a marketing request inside a receipt request or privacy notice. Use a separate, unticked choice when your legal requirements call for consent, and avoid making a requested service depend on optional marketing permission.

For example, a form might state: "Send me promotional email about services and offers from this business." A second choice might state: "Send me promotional text messages about services and offers from this business."

Use wording that matches the actual campaign. If the business later adds a new channel or a different marketing purpose, review whether the original permission still covers it.

Preserve proof instead of storing only yes or no

A yes-or-no field cannot answer important questions later. Your CRM should preserve the evidence needed to understand how permission was collected.

• The date and time of the action
• The form, page, staff process, or other source
• The exact wording shown at the time
• The channel covered by the choice
• The business or organization named in the request
• The date and method of withdrawal

Keep changes as a history rather than overwriting the original value. This helps staff suppress future campaigns without erasing the reason the record changed.

When importing contacts, do not mark marketing permission as confirmed merely because the record contains an email address or phone number. Set the status to unknown until the source and purpose are verified.

Apply the rule to existing contacts

Export a list of contacts with marketing permission, then separate the records by source and channel. Give priority to contacts collected through receipts, invoices, appointment forms, and service requests.

1. Find records where service and marketing permission share one field.
2. Check whether the original wording and collection source remain available.
3. Move supported permissions into the correct channel field.
4. Set unsupported or unclear permissions to unknown.
5. Exclude unknown records from promotional campaigns until the basis is confirmed.

Do not ask every person to confirm permission without first checking your records. A careful review may resolve many contacts while preventing unnecessary messages to people whose preferences are already clear.

Create a campaign check before sending

Every campaign should identify its purpose, channel, audience, and suppression rules before staff select recipients. This turns consent into a repeatable operating rule.

• Confirm that the campaign is promotional or service-related.
• Select only the matching channel permission.
• Exclude withdrawn, declined, expired, and unknown records.
• Check that the message identifies the sender.
• Check that the opt-out method works and updates the CRM.
• Save the audience rule and campaign date with the send record.

If someone opts out after a campaign is prepared, refresh the audience before sending. A saved list can become inaccurate when a customer changes preferences.

Use one standard across your countries

AppWT CRM serves businesses in the United States, the United Kingdom, Australia, and Canada. Requirements differ by country and message type, so businesses should confirm the rules that apply to each audience.

The operational standard can remain consistent: separate service and marketing purposes, separate channels, preserve evidence, and suppress future marketing after an opt-out. Legal review should determine whether a particular exception, consent method, or retention period applies.

Make the next CRM review practical

Choose one intake path first, such as receipt emails from your service form. Compare the wording customers see with the fields your CRM stores, then correct the gap before reviewing other sources.

The goal is not more fields for their own sake. The goal is a record that lets staff answer four questions quickly: what did this person request, through which channel, when, and can the business send this message now?