Collect Guest Emails at Your Direct Ordering Checkout With Clear Consent

Your own ordering page can build an email list that you own, but only if you ask for permission the right way. Add one unticked, plainly worded opt-in box at checkout, store the guest's choice, and honor every opt-out quickly. That one change keeps you inside the email rules of the United States, the United Kingdom and Canada.
This post covers what to ask for, where to place the box, what to record and how to send your first message. It is general information, not legal advice, so check your own situation with a qualified adviser.
Why checkout is the right place to ask
A guest who just placed an order is paying attention and trusts you. They are also giving you a name, a phone number and often an email address because the order needs them. That makes checkout the best moment to offer a second, separate choice about marketing.
Asking here also gives you data tied to a real purchase. You know what the guest ordered, when, and whether it was pickup or delivery. You do not rent that list from anyone, and no outside platform can take it away.
Keep order messages and marketing separate
Two kinds of email exist at checkout. The first is the order confirmation and pickup update. The guest needs these to get their food, and they are not marketing.
The second is anything that promotes your restaurant, such as a weekend special or a new menu. This one needs its own permission. Do not bundle the two, and do not make the marketing box a condition of ordering.
What the rules say in each country
United States
The Federal Trade Commission explains the CAN-SPAM Act in its compliance guide for business. Your header information must be accurate, and your subject line must not mislead. You must say clearly that a message is an advertisement.
Each marketing email must also include a valid postal address and a clear way to opt out. The FTC states that you must honor an opt-out request within 10 business days. It also notes that each separate email in violation can carry penalties of up to $53,088.
The guide adds that you cannot contract away your legal responsibility. If a vendor sends email for you, you are still accountable for what goes out under your name.
United Kingdom
The Information Commissioner's Office says you need specific consent before sending marketing email to individuals. It gives the example of a guest actively ticking an opt-in box.
There is a limited exception called the soft opt-in. It applies when the person bought something from you, you offered a clear chance to opt out when you collected the address, and every message includes an unsubscribe option. It covers similar products or services only, and it does not cover bought-in lists.
Canada
Canada's anti-spam law requires consent before you send commercial electronic messages. The regulator's guidance says a purchase within the previous two years can create an existing business relationship, which allows implied consent for a set period. You must be able to prove that consent exists.
The same guidance says you must stop sending to someone who unsubscribes within 10 business days. Your unsubscribe link must also keep working for at least 60 days after you send a message.
Build the checkout opt-in step by step
- Add a separate checkbox. Place it below the contact fields, and leave it unticked by default. A pre-ticked box is weak proof of a real choice.
- Use specific words. Write something like: "Send me offers and menu news from our restaurant." Name your business and say what you will send.
- Keep the email field useful. Explain that the address is used for the receipt, so guests do not leave it blank or type a fake one.
- Link your privacy page. Add a short line that points to how you store and use guest details.
- Offer an easy exit. Say that guests can unsubscribe in any message.
Record the choice, not just the address
An address on a list proves little. You need to know whether that guest agreed, when they agreed and what the box said at that moment. The Canadian guidance makes this point directly: you must be able to prove consent.
Keep these fields for every guest:
- The email address and the order number that created it
- The date and time of the choice
- The exact opt-in wording shown on the page
- The channel, such as direct ordering checkout
- The date of any opt-out
If your ordering page cannot store these, ask your web team to add them. Save the wording each time you change the box, so old records still match what guests saw.
Send a useful first message
Send a welcome email soon after the guest opts in, while they remember ordering. Keep it short and honest. Thank them, say what to expect and how often, and show the unsubscribe link.
Then keep your promise. If you said you would send weekly specials, do not send daily reminders. Guests who feel overloaded unsubscribe, and some report the message as spam.
Use order history with care
Order history lets you send better messages. A guest who always orders vegetarian dishes does not need a note about a new steak special. Still, use history only for the purpose the guest agreed to.
Handle opt-outs fast
Treat an opt-out as final. The regulators above allow up to 10 business days, but your list tool can usually do it at once. Same-day removal is the easy standard to meet.
Check three things each month:
- Opted-out guests do not reappear on a new order. A fresh order should not turn marketing back on.
- The unsubscribe link in your latest email still works.
- Any outside email service you use applies your suppression list.
A short monthly checklist
- The marketing box is unticked and separate from the order.
- The wording names your restaurant and the type of messages.
- Each email shows who you are, a postal address and an opt-out.
- Each guest record shows the date, wording and channel of consent.
- Opt-outs are applied within a day, and never later than the legal limit.
Rules change and differ between countries, so confirm the current text on each regulator's site before you launch. If you serve guests in more than one country, apply the strictest standard to everyone. That keeps your checkout simple and your list clean.
Frequently asked questions
Can I email every guest who places an order on my website?
Not automatically. In the United Kingdom, a guest who bought from you may be emailed about similar products only if you offered a clear chance to opt out when you collected the address. In Canada, a recent purchase can create implied consent for a limited time. The safest path in all three countries is an unticked opt-in box at checkout.
How fast must I honor an unsubscribe request?
The FTC says United States senders must honor an opt-out within 10 business days. Canada's regulator also sets 10 business days. Most restaurants can do it the same day by using a list tool that suppresses the address automatically.
Should I make email marketing a condition of placing an order?
No. Keep the receipt email separate from the marketing opt-in. A guest should be able to order with only the contact details needed to fill the order, and the marketing box should stay optional and unticked.
Sources
See how direct ordering works end to end. Read the full walkthrough or see AppWT Relay.