Email marketing strategy questions compared with what actually happens

What to take away

Stated answers, and what the send log shows

Ask a team about its email marketing strategy and you get the version written for a client review. Open the account and you find something else. Below, seven questions, each answered twice: once as the plan states it, and once as the send log shows it.

Does every country require opt-in consent?

Stated: consent is required, so we collect it.

Practiced: consent means different things in different markets, and teams apply one form to all of them. Canada's CASL framework is set out in the CRTC's CASL frequently asked questions, covering consent, identification, unsubscribe and proof. CASL penalties reach CAD 10 million for a business.

The U.S. CAN-SPAM framework allows opt-out for most commercial mail, while GDPR and CASL require opt-in. GDPR fines run to 20 million euros or 4 percent of global revenue, whichever is higher. Build a market-by-market requirement list before you build the form.

Can a business email another business?

Stated: B2B is exempt.

Practiced: the FTC states CAN-SPAM covers commercial messages including B2B email, and other jurisdictions distinguish recipient types differently. CAN-SPAM penalties apply per email; the FTC's 2024 inflation adjustment put the maximum near $53,000.

The risk usually sits in the address itself. A role inbox, a scraped conference list and a named contact who opted in three years ago are three different things wearing one field label.

Can a purchased list be used?

Stated: the vendor says the list is compliant.

Practiced: the ICO's electronic mail marketing guidance devotes sections to bought-in lists, soft opt-ins, public contact details and withdrawal. The seller's assurance is not the evidence.

Ask for original collection wording, sender identity, permitted recipients, list age and geography. If the basis cannot be verified, do not send.

The email marketing strategy you build on an unverified file is a strategy you will rebuild from zero after the first complaint spike.

What counts as a transactional email?

Stated: it is transactional, so it is exempt.

Practiced: classification follows content, not the template name or the sending domain. The FTC looks at primary purpose when a message mixes a receipt with a promotion. An order confirmation built in Klaviyo, Braze or Mailchimp stays transactional only while the content does.

Teams get caught adding a discount banner to an order confirmation, then wonder why the complaint rate moved. Keep receipts, password resets and shipping notices clean, and send promotions as promotions.

How often should you send?

Stated: twice a week, per the calendar.

Practiced: frequency tolerance is per contact, and it changes with lifecycle stage. A new subscriber and a two-year customer on the same cadence produce different complaint rates.

Watch complaints, unsubscribes and inactivity by segment rather than in aggregate, and check which email subscriber journey stages each contact has reached before adding a stream.

A sunset rule that stops mail after 180 days of no engagement, with a re-permission email before the cut, keeps deliverability intact. Google's bulk sender guidelines, in force since February 2024, treat a 0.30 percent spam complaint rate as the danger line.

Which metrics matter most?

Stated: open rate and click rate.

Practiced: Apple Mail Privacy Protection, introduced with iOS 15 in 2021, pre-loads pixels, so opens overstate real reading. Security scanners click links before a human sees them.

Track accepted delivery, verified action, conversion, refunds, complaints and unsubscribes. Google Postmaster Tools and Microsoft SNDS show domain and IP reputation, and Litmus and Email on Acid catch broken renders before a send.

Opens stay useful for subject-line testing across large sends, not for judging whether a person read anything.

How fast must an unsubscribe work?

Stated: within the legal window.

Practiced: deadlines differ by market. CAN-SPAM gives 10 business days, CASL says 10 days, GDPR requires action without undue delay and within one month, and Australia's Spam Act, enforced by ACMA, says five working days. The operational failure is rarely the deadline.

It is a suppression that applies to the campaign tool but not to the transactional platform, the SMS tool or the paid audience upload.

Klaviyo, Mailchimp, Braze, HubSpot and Salesforce Marketing Cloud each hold their own suppression list. Unless a scheduled sync or a central suppression table feeds all of them, a withdrawal lands in one place only.

Enforce withdrawal centrally and apply the shortest relevant standard unless counsel directs otherwise.

Worked comparison: a win-back sequence

A 90-day win-back for customers with no order in six months ships as three emails, 20 percent off, one send per week. Here is how that plan meets a live account:

The fix is not a new template. It is one tag per trigger, a wait step measured from the previous send, and a suppression list every platform reads.

Keep a decision record

A dated rule matrix, permission record, suppression log and message-classification decision turns an argument into a check. The GAO evaluation design guide pairs evaluation questions with evidence needs.

The W3C Privacy Principles statement warns against shifting privacy work onto individuals, which is what a buried unsubscribe link does.

Email marketing analytics supplies the outcome side of the same record.

When the basis is unclear, pause the audience or the stream. Sending software cannot determine the law, prove original permission, or recall a message.

Common questions

Is this legal advice?

No. It is an operating question set. Consent, transactional classification and unsubscribe rules vary by jurisdiction, so take qualified advice for the specific sender, recipient, market and content involved.

Can a vendor answer every compliance question?

No. A vendor can explain how its product behaves. The accountable business still owns the legal, data and operational review, and that review has to be current.

How often should these answers be reviewed?

Review when rules, markets, vendors, message types or acquisition methods change, and on a scheduled cadence. A dated rule matrix makes the next review a comparison rather than a rebuild.