Email marketing ethics gets treated as compliance paperwork — a consent checkbox and a privacy link — when it is actually the thing that determines whether a list is worth owning. A list of people who agreed to hear from you behaves differently from a list of people who were added to one.
Seth Godin named this in Permission Marketing in 1999, before any of the regulation existed. His argument was commercial rather than moral: attention that was granted converts, and attention that was taken does not.
What follows is what permission actually requires, the four things that make it work, how to measure whether you still have it, and why one of the most repeated predictions about privacy turned out to be wrong.
What permission marketing is
Permission marketing means you only send to people who agreed to receive it. That sounds obvious and almost nobody does it strictly, because implied consent and purchased lists are easier in the short term and expensive in the long one. A list built by asking costs more to assemble and behaves better afterwards.
The contrast is with interruption: advertising that buys its way in front of someone who did not ask. Permission reverses the sequence — the audience chooses the relationship, which means the conversation starts from a different place.
The idea at its simplest
Godin framed it as handing the customer control over what they receive. In a channel where everyone can send, the scarce thing is not the ability to reach someone but their willingness to be reached. Permission is the only way to acquire that willingness, and it cannot be bought.
Interruption against permission
Interruption breaks into whatever someone was doing. Permission arrives because they expected it. The practical difference shows up in the numbers nobody reports: how many people open the second email, and how many are still opening after a year.
How the relationship changed
Communication used to run one way and at scale: the same message to everyone, measured by how many were reached. Digital channels made it possible to send different things to different people, which made relevance a reasonable expectation rather than a luxury.
That expectation is now the baseline. A message that ignores what somebody already did with your business reads as a message from a company that does not keep records, which is a worse impression than sending nothing.
Adopting this is not primarily an ethical position, though it is one. It produces a list that keeps working, which is the asset that survives every change in advertising cost and platform policy.
Where the idea came from
Godin’s 1999 book made one claim that has held up: permission must be earned, and it cannot be transferred or purchased. Buying a list acquires addresses, not permission, and the difference becomes visible the first time you send to it.
The underlying principle is that the relationship has to be built on trust and relevance, in that order. Relevance without trust is surveillance; trust without relevance is a newsletter nobody opens.
Godin described a hierarchy of permission levels, from situational — a single transaction, one message — up to what he called intravenous, where the customer has delegated the decision entirely. Most businesses operate at the bottom of that scale and write as though they were at the top.
The book anticipated the problem interruption advertising now has: as the volume of messages rose, the cost of being ignored rose with it. Permission was the proposed answer and it has aged better than most predictions from 1999.
The principles that matter
Two of Godin’s points do the most work. Frequency builds trust, provided each message was worth receiving. And marketing should be a dialogue rather than a broadcast, which in email terms means a reply address that reaches a person.
The third is that you have to give something in exchange for the attention. Content that is genuinely useful is the price of entry, and treating the subscription itself as the value exchange is the most common reason lists go quiet.
From push to pull
Push sends messages regardless of whether anybody wanted them. Pull creates something people come toward. The shift was not driven by ethics but by arithmetic: as the cost of sending fell to nothing, the value of being wanted rose.
The inbound methodology that grew out of this operationalized it through search, content and automation. The mechanics changed; the principle did not. Attention is granted, and what you do with it determines whether it is granted again.
None of which makes advertising wrong. It makes advertising a way to find people, and permission the way to keep them, and confusing the two is how businesses end up renting their audience indefinitely. For a small company the practical consequence shows up in which campaigns are worth sending at all.
The four pillars
Four things have to be true for any of this to work. Missing one does not weaken the strategy; it removes it.
Explicit consent
The person actively agreed, in a way they would recognize if reminded. Not a pre-ticked box, not a condition of downloading something, not a line in terms nobody read. Double opt-in costs you some subscribers and removes the ones who would never have opened anything.
Relevance in every message
Each send has to be worth the recipient’s attention on its own, because permission is granted continuously rather than once. Two irrelevant messages in a row withdraw it, whatever the consent record says.
A relationship rather than a transaction
The point is the second purchase and the fifth, which means sending things that are useful when there is nothing to sell. A list that only hears from you during a promotion learns to associate your name with being sold to.
And the fourth pillar, which is the one businesses resist: making it easy to leave. A visible, single-click unsubscribe raises the quality of everyone who stays and protects your deliverability. Hiding it keeps the number high and the engagement low.
What email marketing ethics buys a business
The commercial case is straightforward: you are communicating with people who already indicated interest, so every message starts from a better position than any advertisement could.
Conversion and return
Permission-based campaigns convert better than interruption at comparable volume, for the obvious reason. The specific multiples quoted for this are worth treating carefully: the widely repeated figures come from vendor marketing rather than from independent research, and they are usually averages across industries that have nothing in common. Measure your own against what you were doing before.
Lower cost per customer
The cost advantage is real and its size depends entirely on what you are comparing against. Reaching an existing list costs almost nothing per message; acquiring the person who joined it was the expense. That is why list quality matters more than list size, and why the cheapest subscriber is usually the worst one.
Retention and lifetime value
People who chose the relationship stay in it longer. They buy again more often, which raises lifetime value, and the effect compounds because each repeat purchase makes the next one more likely. This is the slowest benefit to appear and the largest once it does.
What makes this more than a moral argument is that it is the only version of email that keeps working as the channel gets more crowded. Deliverability is now partly a function of engagement, which means a list built on permission reaches the inbox and a list built on volume increasingly does not.
| What improves | Why | How to verify it yourself |
|---|---|---|
| Conversion | The audience already indicated interest | Compare against your pre-permission baseline |
| Cost per message | Reaching an owned list is near-free | Divide campaign cost by list size |
| Retention | The relationship was chosen | Track repeat purchase rate by cohort |
| Deliverability | Engagement is a ranking signal for inboxes | Watch inbox placement as the list ages |
The last row is the one that has changed most in the past few years, and it is the reason permission has stopped being optional even for businesses that do not care about the ethics.
How to implement it
Three stages, and the first one determines everything downstream.
Give people a reason to subscribe
Permission is traded for something. The forms that work:
- Articles that answer a question your buyers actually ask.
- A guide or template substantial enough that someone would pay for it.
- A live session where the audience can ask things.
- Original research or data nobody else published.
Match what you offer to where the person is. Someone comparing options wants different material from someone who has not identified the problem yet, and offering the wrong one produces a subscriber who never opens anything.
Design the opt-in properly
The signup is where most permission is lost, usually by asking for too much. The checklist:
- A page with one purpose and nothing competing with it.
- The fewest fields the next step genuinely needs.
- A button that states what happens, and a line stating what you will send and how often.
An incentive helps and changes who signs up. A discount attracts buyers; a useful document attracts people researching. Both are legitimate and they produce different lists, so pick according to which one you want.
Segment, then personalize
Permission is specific. Someone who agreed to receive one kind of message did not agree to all of them, which is where segmentation stops being an optimization and becomes part of the consent:
- Define the two or three audiences you genuinely serve differently.
- Use automation to send on behaviour rather than on a schedule.
- Let people choose what they receive, which is the only form of segmentation they can verify.
Godin’s framing was that you compensate the customer for their attention. Current tools make that possible at scale, and they also make it possible to automate something impersonal very efficiently. The tool does not decide which.
All of this presupposes knowing who you are asking. Permission from the wrong audience produces a list that is compliant, engaged with nothing, and expensive to store.
Where permission applies beyond email
Email is the clearest case and not the only one. Any channel where you can reach someone directly raises the same question: did they ask for this?
Email as the primary channel
Email remains the best-suited channel because the consent is explicit, the record is auditable, and the recipient can leave in one click. Double opt-in and segmented lists are what make it defensible rather than merely legal.
Push notifications and automated messages
Push, SMS and messaging apps are more intrusive than email by a wide margin, because they arrive on a surface people associate with personal conversation. The permission bar is correspondingly higher, and the tolerance for irrelevance is close to zero.
Social platforms and communities
A follow is a form of permission, and a weaker one than it looks: it is revocable silently and mediated by an algorithm you do not control. Which is the argument for converting followers into subscribers rather than treating the following as an asset.
Programmatic advertising sits at the other end, operating largely without meaningful consent. That gap is what the regulation has been closing, and it is why channels built on explicit permission have become more valuable rather than less.
What to measure
Permission is not a state you achieve once. It decays, and a small number of indicators tell you how fast.
Engagement
Three numbers, in order of reliability:
- Click rate: the most trustworthy signal that a message landed.
- Conversion rate: whether it produced the action it existed for.
- Open rate: useful for trends and unreliable as a measure, since privacy features in major mail clients now inflate and obscure it.
Value over time
Customer lifetime value is where permission shows its return, because the effect is cumulative. A subscriber who chose the relationship typically:
- Buys more often than an acquired contact.
- Spends more per transaction.
- Stays through the periods when you have nothing to sell.
Satisfaction, retention and attrition
Three more, and the last one is the honest one:
- Net promoter score: blunt, and useful as a trend rather than a number.
- Retention rate: the proportion still engaging after a defined period.
- Unsubscribe rate: the clearest measure of permission being withdrawn, and the one worth watching weekly.
| Metric | What it tells you | How much to trust it |
|---|---|---|
| Click rate | Whether the message landed | High |
| Conversion rate | Whether it did its job | High |
| Open rate | Rough direction only | Low, and falling |
| Unsubscribe rate | Permission being withdrawn | High |
| Retention | Whether the relationship holds | High, over quarters |
A rising unsubscribe rate alongside stable opens is the clearest early warning available: the people still there are the ones who have not got round to leaving. Treating unsubscribes as a loss rather than as information is how lists are allowed to rot.
Where privacy regulation has actually gone
The direction of travel has been consistent and the specifics have surprised people, including one prediction that was repeated everywhere and turned out to be wrong.
GDPR in Europe and CCPA in California established the principle that personal data requires a lawful basis and that consent must be informed and revocable. Similar frameworks have followed in other jurisdictions, and the practical effect for email is that permission now has to be documented rather than assumed.
Godin’s position was that permission would become the scarce asset. That has proved accurate for a reason he did not emphasize: it is now also a technical requirement, because mailbox providers use engagement to decide what reaches an inbox.
The prediction that failed concerns third-party cookies. For years every article on this subject, including the Spanish version of this one, stated that they were being eliminated. Google abandoned that plan in 2024 and Chrome still supports them. Safari and Firefox block them by default, so the direction was right and the deadline was not — which is a useful reminder that a strategy built on somebody else’s announced roadmap is a strategy built on a guess.
What has genuinely changed is the value of data you collected yourself with consent. That was always the better asset and it is now the more defensible one, independent of what any browser decides next.
Which is the practical case for treating this as strategy rather than compliance. A business whose audience agreed to hear from it is insulated from platform decisions, advertising costs and regulatory change at once, and none of the alternatives offer that. Permission affects more of the marketing plan than the email part.
Frequently asked questions
What is permission marketing?
Sending only to people who actively agreed to receive it, and treating that agreement as something earned and revocable rather than as a record in a database. Seth Godin named the idea in 1999 and the commercial logic has held up.
What does a business get from it?
Better conversion from an audience that already indicated interest, near-zero cost per message to an owned list, longer retention, and — increasingly the decisive one — deliverability, since mailbox providers read engagement as a quality signal.
Which channels does it apply to?
Email most clearly, because consent there is explicit and auditable. Also push, SMS and messaging apps, where the bar is higher because they arrive on a personal surface. A social follow is permission too, and a weaker one, since it is mediated by an algorithm.
What should you measure?
Click and conversion rates, retention over quarters, and the unsubscribe rate — which is the clearest signal of permission being withdrawn. Open rates are now unreliable and still the most quoted.
Were third-party cookies eliminated?
No. Google abandoned the plan to remove third-party cookies from Chrome in 2024, and many articles on this subject still say otherwise. Safari and Firefox block them by default, so the privacy direction held even though the deadline did not.
