Guide · Marketing
Email List Building: How to Grow a List With Consent
Email list building in Singapore starts with one rule: ask first. A list of people who said yes earns more trust, breaks fewer rules and is easier to defend than a list you bought or scraped. This guide shows where to put your sign-up forms, what the consent line should say, and what to do when someone wants out.
Start with a clear yes
An email address is personal data when it belongs to a person. The Personal Data Protection Act 2012 (PDPA) says you must tell people why you collect their data on or before you collect it. You must also have their consent for that purpose.
The Act sets two limits on how you get that consent. You cannot make someone agree to more than is reasonable to give them a product or service. You also cannot get consent with false or misleading information.
In practice, this means a newsletter box should say what the person will get and how often. If the only way to download a price guide is to accept weekly sales emails, that is a consent problem, not a clever trick.
Sources: Singapore Statutes Online, PDPA 2012 section 14; Singapore Statutes Online, PDPA 2012 section 20
Do not treat a published address as consent
The Spam Control Act 2007 covers commercial emails and texts that people did not ask for. It calls a message unsolicited if the person did not request it or agree to it. It also says an address does not count as consent just because the person posted it on a website.
That rules out a common shortcut. Copying addresses from a directory, a social page or a business card pile is not list building. It is a list with no permission behind it.
The Act has extra duties for bulk senders. Bulk means more than 100 similar messages in 24 hours, more than 1,000 in 30 days, or more than 10,000 in a year. Small senders should not assume they are safe. A permission-based list keeps you clear of the problem either way.
Sources: Singapore Statutes Online, Spam Control Act 2007 section 5; Singapore Statutes Online, Spam Control Act 2007 section 6
Five places to collect sign-ups on your own site
- The footer form. It sits on every page and costs nothing to add.
- A form beside useful content. A checklist, template or price guide works well. Say what is inside, and keep the form short.
- The contact or quote form. Add a separate, unticked box for marketing. A person can still send the form without ticking it.
- The checkout or booking page. The same rule applies: a separate box, not a pre-ticked one.
- A confirmation step. Send one email asking the person to confirm. It proves the address is theirs and the choice is real.
Ask for the least you need. A first name and an email are enough for most newsletters. Every extra field lowers sign-ups and adds data you must protect.
The PDPC publishes sample clauses for marketing consent. They offer tick boxes for each kind of message and each channel, such as email, so people pick what they want. They are examples only, and the PDPC says following them does not guarantee compliance.
Sources: PDPC, Sample Clauses for Obtaining and Withdrawing Consent
Write the consent line in plain words
A good line is short and says who, what and how often. For example: "Yes, send me the monthly email from Example Studio with marketing tips. I can unsubscribe at any time." Link it to your privacy policy.
Skip long legal text that nobody reads. Skip vague phrases like "partners and affiliates" unless you name them. If you plan to use the list for a new purpose later, tell people before you do it.
Keep a simple record for each sign-up: the address, the date and time, the page the form was on, and the exact words shown. If someone asks how you got their address, you can answer in one minute. This habit is good practice. It is not a step the law spells out in these words.
Sources: Singapore Statutes Online, PDPA 2012 section 20; PDPC, Sample Clauses for Obtaining and Withdrawing Consent
Make leaving easy and act on it
Under the Spam Control Act, a bulk sender of unsolicited commercial email must give an unsubscribe route. Good practice is to give one in every marketing email. The email must include an address the person can use to unsubscribe, plus a clear statement saying so. The statement must be clear and easy to see, and in English. For email, the route must be an email address.
Timing matters too. After someone submits an unsubscribe request, you cannot treat them as having agreed to messages sent more than 10 business days later. Most email tools remove people at once. Use that feature, and test it with your own address.
The PDPA backs this up. A person may withdraw consent at any time by giving reasonable notice. You must tell them the likely effects of withdrawing, and you cannot stop them from doing it.
Remove unsubscribed people from every list, not just the one they clicked from. Do not send a "we miss you" email afterward.
Sources: Singapore Statutes Online, Spam Control Act 2007 Second Schedule; Singapore Statutes Online, Spam Control Act 2007 section 5; Singapore Statutes Online, PDPA 2012 section 16
A short checklist before you press send
- Every person on the list asked to be there.
- The form says what you send and how often.
- The marketing box is separate and not pre-ticked.
- Each email has a working unsubscribe link and a plain statement about it.
- You can find the sign-up record for any address.
- Unsubscribes are removed fast, and well inside 10 business days.
This guide is general information, not legal advice. For your own list, read the Acts linked above or speak to a lawyer.
Sources: Singapore Statutes Online, Spam Control Act 2007 Second Schedule
Sources
- Singapore Statutes Online, PDPA 2012 section 14
- Singapore Statutes Online, PDPA 2012 section 20
- Singapore Statutes Online, Spam Control Act 2007 section 5
- Singapore Statutes Online, Spam Control Act 2007 section 6
- Singapore Statutes Online, Spam Control Act 2007 Second Schedule
- Singapore Statutes Online, PDPA 2012 section 16
- PDPC, Sample Clauses for Obtaining and Withdrawing Consent