Email marketing software strategy: campaign governance

An email marketing software strategy should authorise one defined use of email, not every platform feature. For each campaign or automated message, record: purpose, intended recipients, address-acquisition route, message type and accountable owner.

Record evidence, metric, decision threshold, stop condition and recovery action. Set a review date; a platform can execute it, but cannot decide the processing or message is lawful.

This guide concerns organisations operating in England. The privacy and electronic-marketing sources cited here apply across the UK, while mailbox-provider rules have the geography and recipient scope stated by their publishers. Legal positions, regulator guidance and provider requirements need a fresh check before publication and before a material campaign change.

What to take away

Record one defined purpose and recipient population per campaign, not a single customer email label.
Separate research, service, direct marketing and requested information because each has different permission rules.
Build a permission ledger with source, notice, classification, lawful basis, objections and suppression matches.
Decide tracking purpose and fallback before sending, as open pixels fall under storage and access rules.
Choose evidence and metrics based on the decision, not on email opens or provider-reported counts.

Begin with a campaign decision record

Keep one record for each purpose and recipient population. Combining a newsletter, research invitation, receipt and account warning under a single label such as "customer email" makes ownership and permission difficult to test.

Campaign decision record

Field	Decision to record	Evidence or control
Purpose	the specific change the message is meant to support	approved campaign brief
Recipient population	the people or subscriber type eligible to receive it	query and exclusion logic
Acquisition route	where each address came from and what was said at collection	source and notice record
Message type	direct marketing, genuine research, requested information or service communication	documented classification
Channel	email, text, social direct message or non-directed route	channel-specific assessment
Owner	one person accountable for approval and stopping	named role and deputy
Evidence	material supporting the audience need and any objective claim	dated evidence register
Metric	numerator, denominator, period, source and exclusions	versioned metric card
Threshold	point that prompts continuation, change or escalation	approved decision rule
Stop condition	event that pauses sending automatically or by instruction	monitored control
Recovery	investigation, correction, re-test and approval route	incident or campaign runbook
Review date	scheduled check plus event-based triggers	calendar and change log

The ICO's direct marketing planning guidance says organisations should decide what information they want to use, what they want to do with it, who is responsible and which lawful basis applies before activity begins. That is a legal and governance boundary, not proof that a proposed strategy is effective.

Keep four types of communication apart

Classification turns on purpose and content, not the folder or automation that sends the message.

Research participation

Genuine market research is not direct marketing, per the ICO's overview of electronic and telephone marketing. A survey becomes direct marketing if it carries promotional material or collects details for later marketing.

Recruitment, processing research data and later promotional use need separate records, and agreement to an interview is not permission to add the participant to a marketing list.

Service communication

A routine message that supplies information about a current contract or past purchase may be a service message. Adding an offer can change the analysis.

Keep service templates in a distinct stream, restrict promotional modules, and give the service owner authority to reject additions. A password reset should not inherit a sales email's audience, tracking or success measure merely because the same software delivers both.

Direct marketing

The ICO's electronic-mail guidance covers messages that promote products, services, aims or ideals. Subscriber type and acquisition history matter. Consent and the products-and-services soft opt-in are different routes, and the latter has cumulative conditions. Have a qualified reviewer document the route for the specific population instead of applying a general "legitimate interest" tag.

Requested information

A person can request a particular item, such as a quotation or guide, without asking for an ongoing sequence. Fulfil the request, retain the evidence needed for that purpose and assess any later marketing separately. The software's ability to start a nurture flow does not expand the request.

Build a permission ledger before an audience segment

The ledger should preserve address source, collection date, privacy information shown, subscriber classification, the PECR analysis, the UK GDPR lawful basis, objections, withdrawals and suppression matches. Do not collapse those fields into a single consent flag.

Implement the ledger in the email platform or its connected CRM as structured fields, not a single free-text note: link each audience rule to its purpose, source, notice version and subscriber classification. Make audience entry depend on the approved purpose and eligibility decision, synchronise withdrawals and suppression records before sends, and test imports and integrations so they cannot silently restore suppressed addresses.

UK GDPR lawful basis answers why personal data may be processed, while PECR can separately require consent for the electronic-marketing message. The ICO's summary of electronic mail marketing explains the limited products-and-services soft opt-in and distinguishes individual subscribers from corporate subscribers. Sole traders and some partnerships count as individuals for these rules.

A named UK specialist must check the facts, including charity provisions or sector rules, before release.

Transparency is another decision. The ICO says organisations collecting information for marketing should explain the use and relevant sharing when they collect it; its lead-generation guidance also addresses information obtained indirectly. The campaign record should point to the notice version, not simply say "privacy policy accepted".

An unsubscribe is not a deletion instruction by default. The ICO's preference guidance explains why a suppression list can help prevent renewed marketing. Test exclusion logic across new imports, restored backups and connected systems. Stop a send if the current suppression data cannot be applied.

Decide whether tracking belongs in the plan

Open pixels and decorated links are not neutral reporting switches. The ICO says email tracking pixels fall under the separate rules for storage and access technologies. Its final storage and access technologies guidance discusses consent, information and exceptions under PECR.

Record the purpose of each tracking technology, the information it obtains or accesses, its legal assessment and a less intrusive fallback. The campaign should still function when tracking is unavailable. Provider-reported opens may be affected by privacy features, image blocking and automated activity, so do not use an open count as a business outcome or a legal permission signal.

Choose evidence before setting a target

State the decision first. If the purpose is to help eligible account holders finish a documented task, the outcome measure belongs at the end of that task, not at the email open. If the purpose is learning, define the question and sampling limits. If the purpose is revenue, distinguish attributed orders from evidence that email caused them.

The current Magenta Book describes evaluation as a systematic assessment of design, implementation and outcomes. It also distinguishes monitoring from causal assessment. This government framework is not an email benchmark, but its separation of inputs, activities, outputs and outcomes is useful when writing a measurement chain.

A metric card should contain:

population and eligibility query;
numerator and denominator;
unit, reporting period and timezone;
included and excluded events;
system of record and query version;
known uncertainty and likely data loss;
reporting owner and approval owner;
threshold, response and next review.

The GOV.UK Service Standard guidance on defining success recommends choosing metrics that show whether a service solves its intended problem and using evidence to fix problems. It concerns government services, so it supplies a planning principle rather than a commercial email target. Set no target merely because a dashboard exposes the number.

Treat content, accessibility and claims as controls

Every objective claim should have an evidence owner and a validity date. CAP's substantiation guidance says marketers should hold documentary evidence before publishing objective claims that consumers are likely to regard as capable of substantiation. Editorial approval should fail when the evidence is absent, expired or narrower than the wording.

Build an accessible reading and action path. The W3C's writing accessibility guidance recommends meaningful headings and link text, clear instructions and concise language. It is international standards guidance, not a ruling that an email satisfies the Equality Act. Test the message with relevant assistive technology and common clients, and route the organisation's duties to a qualified UK accessibility reviewer.

Separate authentication from permission and performance

SPF, DKIM and DMARC are domain and message-authentication controls. The National Cyber Security Centre's anti-spoofing guidance explains their roles and recommends monitoring and iteration. These controls can make impersonation harder; they do not grant consent, establish a UK GDPR lawful basis or prove that recipients want the message.

Mailbox operators can impose their own conditions. Gmail's sender-guidelines FAQ applies to messages sent to personal Gmail accounts and describes authentication, alignment, one-click unsubscribe and enforcement. Those are Google's global recipient-system rules, not English law. Provider classifications and thresholds may change, and satisfying them cannot guarantee inbox placement.

Create a pre-send technical gate for authentication alignment, valid sending identity, reply handling, unsubscribe operation, suppression synchronisation and message-stream separation. If any mandatory check fails, the owner pauses the campaign. Recovery means diagnosing the cause, correcting it, re-running the test and obtaining recorded approval, not simply reducing volume. After sending, review bounces, complaints and engagement against the campaign's pre-agreed stop rules; remove invalid addresses, investigate complaint sources and pause a segment when its results breach those rules. Monitor domain reputation and use seed or inbox-placement tests for important mail streams, then record findings before restart.

Assign ownership across the supplier boundary

Buying a platform does not transfer the buyer's campaign decisions. Map who determines purposes, builds segments, approves claims, manages domain records, processes objections, responds to incidents and authorises restart.

Where a supplier processes personal data for the organisation, the ICO's controller and processor contract guidance covers required contract terms, sub-processors, security assistance, audits and end-of-contract handling.

The Data (Use and Access) Act changes parts of the UK data-protection and electronic-marketing framework. Check which relevant provisions are in force before relying on this guidance.

Commercial due diligence must settle service scope, data export, deletion, support and exit arrangements, not assume the privacy terms answer every operational question.

Use a ninety-day sequence without inventing a forecast

During the first phase, approve one purpose, classify one population and trace one acquisition route. Then write the permission ledger, evidence register, metric card and stop rule.

Only then configure a limited controlled send, using non-production or properly authorised data as appropriate. Finally, compare observed operation with the agreed decision record and either continue, change or close the work.

Ninety days is an editorial planning horizon, not evidence that every organisation can launch in that period. Extend or stop the plan when legal review, accessible testing, authentication, supplier assurance or data quality is incomplete. Do not replace a failed gate with an assumed conversion benefit.

The approval question

Before release, ask one question: can the named owner show why this exact message may be sent to this exact population, how its claim and metric will be checked, and what will stop it? If the record relies on a platform setting, a generic privacy notice or a forecasted return, it is not ready.

The next action is to complete one campaign decision record and send it to named UK data-protection, electronic-marketing, advertising, accessibility, cybersecurity and commercial reviewers. Recheck all cited guidance and mailbox-provider requirements on the intended launch date.

Before you act

Create a campaign decision record for each purpose and population.
Classify each message as research, service, marketing or requested information.
Build a permission ledger before defining any audience segment.
Test suppression logic across imports, backups and connected systems.
Record tracking purpose, legal assessment and a less intrusive fallback.
Define metric, threshold, stop condition and recovery action before sending.

Common questions

What should a campaign decision record contain?

It should record purpose, recipient population, acquisition route and message type. It should also cover channel, owner and evidence. The record then needs a metric, threshold, stop condition, recovery action and review date, each with supporting evidence or control.

How does the ICO distinguish research from direct marketing?

Genuine market research is not direct marketing, but a survey becomes direct marketing if it carries promotional material or collects details for later marketing. Recruitment, processing research data and later promotional use need separate records, and interview agreement is not marketing permission.

Why can an unsubscribe not mean deletion by default?

An unsubscribe is not a deletion instruction by default. The ICO's preference guidance explains that a suppression list can help prevent renewed marketing. Test exclusion logic across new imports, restored backups and connected systems, and stop a send if current suppression data cannot be applied.