Foundational guide

First-Party Customer Data for Local Businesses

Updated September 1, 2026 · 12 min read

The short answer

First-party customer data is contact information a customer gave you directly, with consent, on your own property. Unlike followers, you can reach it without paying a platform and keep it when algorithms change. Capture it at a moment of goodwill, log the consent wording, and send infrequently.

You do not own your audience

Most local businesses have built their customer relationships on rented ground. 59% of small businesses say unpaid social media is the channel they use most, ahead of email at 33%, paid social at 25%, review sites at 24% and SMS at 15% (Constant Contact). A separate 2026 survey puts unpaid social at 66% of small businesses and email at 53% (LocalIQ).

The risk in that mix is not that social does not work. It is that the reach is granted, not owned, and it moves. In the same LocalIQ survey, small business use of TikTok fell from 34% to 22% in a year while Facebook climbed above 90%. Audiences that took years to build get repriced by decisions you are not part of.

Meanwhile the thing owners say works best is the thing that travels by relationship. 83% of small business owners name customer referrals as their best acquisition source, up from 65% the year before (LocalIQ).

A first-party list is the version of that you can actually operate: names, emails, phone numbers and consent records that sit in your systems and cost nothing per send.

What an owned list is worth

The value of a list is not its size. It is the revenue you can produce from it without buying reach.

Line How to calculate Example
Contacts with valid consent Captured x consent rate 600 x 70% = 420
Email recipients per send Contacts x deliverable share 400
Clicks per send Recipients x click rate 400 x 2.62% = 10
Visits from clicks Clicks x visit conversion 10 x 25% = 2.5
Revenue per send Visits x average ticket 2.5 x $60 = $150
Annual value, monthly send Revenue per send x 12 $1,800
Cost of reach Zero per send on an owned list $0

The click rate above is Mailchimp's all-industry average of 2.62%, alongside an average open rate of 35.63% and unsubscribe rate of 0.22% (Mailchimp). Those are platform averages across all senders, not a promise about your list.

Text behaves differently. Klaviyo's platform data shows SMS flows, which are triggered by customer behaviour, are only 7.6% of sends yet drive 45.2% of SMS revenue, with flow click rates near 10% and roughly eight times the revenue per recipient of broadcast campaigns (Klaviyo). The lesson for a local business is that a well-timed single message beats a monthly blast.

Repeat customers are where the money is. Adobe's analysis of 33 billion visits found 40% of US ecommerce revenue came from returning or repeat purchasers who made up only 8% of visitors, and that repeat purchasers spend about 15% more per order (Adobe Digital Index, 2012). That study is old and ecommerce is not a barbershop, so treat it as directional. Bain's own published figure, also widely misquoted, is that in financial services a 5% increase in retention produces more than a 25% increase in profit (Bain).

What owners get wrong about lists

"My followers are my list." You cannot export them, you cannot reach them without the platform's permission, and their attention is sold to whoever pays.

"I will collect emails later, once I am busier." The moment of goodwill is not repeatable. A customer who just had a good visit will give you their details. The same customer next Tuesday will not.

"A bigger list is a better list." Contacts without consent are a liability, and contacts who never open depress deliverability for everyone else.

"Text is just faster email." Legally it is a different regime. Commercial texts require written consent (FCC), and the private right of action means $500 per unlawful message, trebled if willful (47 U.S.C. 227(b)(3)).

"They know us, so they will not mind." 82% of business leaders believe they deeply understand their customers, but only 45% of consumers agree (Twilio).

A list is a standing invitation, not an asset class

The useful mental shift is to stop thinking of a customer list as a database and start thinking of it as a set of standing invitations. Every contact on it has said, in writing, that you may get in touch.

That framing sets the rules. An invitation can be withdrawn, so make withdrawal easy. An invitation is specific, so do not use a review reward opt-in as a licence to send weekly promotions. And an invitation is a courtesy, so the frequency should be one you would be comfortable defending to the person's face.

It also sets the bar for what you send. Consumer patience is not improving: 44% of consumers describe themselves as very or extremely loyal to their favourite brands, down from 48% the year before, and only 60% rate brands good or excellent on engagement (Twilio).

A small, consented, rarely-messaged list outperforms a large, scraped, over-messaged one on every measure that matters, including the legal one.

  1. Attach capture to a moment, not a form. The reward for feedback, the loyalty stamp, the appointment booking, the receipt. Standalone "join our newsletter" cards collect almost nothing.

  2. Ask for one channel at a time. Email consent and text consent are separate agreements and should be separate checkboxes.

  3. Write the consent line in plain words, next to the box. State who is sending, what they will receive, and how to stop.

  4. Never pre-tick, and never make consent a condition of the reward or the purchase. Prior express written consent must not be required as a condition of purchase (47 CFR 64.1200).

  5. Store the evidence, not just the outcome. Save the exact wording shown, the timestamp, the page or card, and the identifier. A checkbox with no record of what it said is not much of a record.

  6. Send a single welcome message quickly. It confirms the address works and sets the frequency expectation. Under FCC rules a one-time confirmation text with no marketing content is permitted and is presumed within consent if sent within five minutes (FCC 24-24).

  7. Process opt-outs immediately and everywhere. Do not require a specific keyword, do not route revocation through one channel only, and honour it within ten business days (FCC 24-24).

  8. Review the list quarterly. Remove hard bounces, suppress anyone with no engagement for twelve months, and deduplicate.

Toutedly captures contact details alongside a video submission, with the consent wording and timestamp stored with the record, which is the part that usually goes missing when this is run on paper.

What good looks like

Benchmarks here come from two different platform panels, so read them as separate yardsticks rather than one scale.

Measure Working target Source basis
Consent capture rate at point of reward 60% or better Working target, no published benchmark
Email open rate Around 35% All-industry average 35.63%
Email click rate 2.6% or better All-industry average 2.62%
Email unsubscribe rate Under 0.22% All-industry average
SMS campaign click rate 8.9% good, 14.6% or higher great Klaviyo US thresholds
SMS conversion rate 2.1% or higher is great Klaviyo US thresholds
SMS unsubscribe rate Under 0.5% Klaviyo US thresholds
Send frequency, local business Email monthly, SMS only when triggered Judgement, not benchmark

The email figures are Mailchimp's all-user averages last updated in December 2023 (Mailchimp). The SMS thresholds are Klaviyo's published bands for US campaigns (Klaviyo).

Be sceptical of the numbers that circulate about text messaging. The often-quoted 98% open rate and 20% to 35% click-through rate cannot be traced to a primary study, and they contradict platform data where 14.6% is already considered great.

One channel benchmark is worth acting on directly: being asked by email is the single most effective review-request channel, rising from 32% to 40% of consumers (BrightLocal 2025).

Wording you can copy

Email consent checkbox:

Email me occasional news and offers from [Business Name]. Unsubscribe any time using the link in any email.

Text consent checkbox, separate and never pre-ticked:

Text me my reward and occasional offers from [Business Name] at the number above. Consent is not a condition of any purchase. Message and data rates may apply. Reply STOP to cancel, HELP for help.

Counter or card wording that earns the details:

Scan, record 20 seconds of honest feedback, and we will text you $5 off your next visit.

Staff sentence:

"If you want the credit sent to your phone, tick the text box on the last screen. If you would rather not, the code shows on screen anyway."

Welcome message, sent once:

Thanks for the feedback, Sam. Here is your $5 credit, code SAM5, good for 30 days. We text about once a month. Reply STOP any time.

Monthly email, plain structure:

Subject: What is on this month at [Business Name] One thing that changed, one thing to book, one customer video. Unsubscribe link in the footer.

Unrewarded review ask, sent by email:

If you have a minute, an honest review on Google helps other people find us. No discount attached, we are not allowed to offer one.

Re-permission email for an old list:

We are tidying our list. If you still want occasional emails from [Business Name], click here to stay. If we do not hear from you, we will stop emailing.

Toutedly stores the consent wording shown to each customer with their record, so re-permission and audit are a lookup rather than a reconstruction.

Your first 30 days

The goal in month one is a small, clean, provable list, not a big one.

Week Do this Done when
Week 1 Pick one capture moment and write the two consent lines. Decide where records will live. Wording is written and a storage place exists
Week 2 Capture on every transaction at that moment. Log wording, timestamp and channel for each. 20 or more consented contacts with records
Week 3 Send one welcome message and one useful email. Measure opens, clicks and unsubscribes. You have your own baseline numbers
Week 4 Clean the list, remove bounces, and audit any older list for missing consent records. Every contact has a provable consent record

If an old list has no consent evidence, do not merge it in. Run a re-permission email to it separately, and keep only the people who respond.

What you can and cannot do legally

This is general information for US businesses, not legal advice, and rules change.

Texting requires prior express written consent. For commercial texts, consent must be in writing (FCC). The definition at 47 CFR 64.1200(f)(9) requires a written agreement bearing the signature of the person called, with a clear and conspicuous disclosure of what they are agreeing to, and it may not be required as a condition of purchasing any good or service (47 CFR 64.1200). An electronic tick, freely given, can satisfy the signature requirement.

Revocation must be easy and broad. Consumers may revoke consent in any reasonable manner. Stop, quit, end, revoke, opt out, cancel and unsubscribe are treated as per se reasonable, you may not designate an exclusive method, and you must honour a revocation within ten business days (FCC 24-24). The element extending a revocation across message categories was delayed to 11 April 2026 (FCC Order DA 25-312).

The penalty is per message and privately enforceable. The TCPA provides $500 per violation, trebled for willful or knowing violations, and consumers can sue directly (47 U.S.C. 227(b)(3)).

A reward for feedback is not a licence to buy sentiment. If you use the list to solicit feedback, compensation may not be conditioned expressly or by implication on a review expressing a particular sentiment (16 CFR 465.4).

Publishing a rewarded testimonial requires disclosure. The reward is a material connection that must be disclosed clearly and conspicuously (16 CFR 255.5).

State privacy laws may apply on top. Several US states now give residents rights to access and delete personal information, with thresholds that vary. Check your own state and get advice before selling or sharing data with any third party.

Mistakes that cost you the list

Bundling email and text into one checkbox. It saves a line of design and voids your evidence for both.

Making consent a condition of the reward. That is exactly what the definition of prior express written consent excludes (47 CFR 64.1200).

Storing the tick but not the wording. In a dispute, the question is what the customer agreed to, not whether a box was checked.

Importing an old spreadsheet. Contacts collected for one purpose years ago are not consented for marketing today. Re-permission or leave them out.

Sending too often, then too rarely. A burst of weekly emails followed by silence trains people to unsubscribe. Monthly, on a fixed day, beats sporadic.

Ignoring unsubscribes for a few days. The obligation is ten business days at the outside (FCC 24-24), and slower than that is both unlawful and rude.

Treating the list as a broadcast channel. Triggered messages tied to a real event outperform blasts by a wide margin in platform data (Klaviyo).

Where Toutedly fits

Toutedly is a video capture tool, and the contact record is a by-product of the capture rather than the pitch. When a customer scans your code, records honest feedback and claims a reward, they can opt in to email and to text as two separate, unticked choices. What you get back is the video file, a drafted caption with the disclosure line, hashtags, an @mention, and the customer's contact details with the consent wording and timestamp stored alongside.

That pairing matters because it solves the sequencing problem. Most consent capture fails not because customers refuse but because nobody asks at the moment the customer is willing, and nobody records what was shown when they said yes.

Toutedly does not send your marketing for you, does not auto publish, and does not verify that a public review was posted. Export the contacts into whatever email or SMS tool you already use, and keep the consent record with them.

You can run this on a paper form and a spreadsheet, and if your volume is low you probably should. Plans are Free at $0, Pro at $49 a month and Business at $99 a month. If you have never collected consent at the counter, start with one moment and one checkbox this week.

Questions people ask

What counts as first-party customer data?

Information a customer gave you directly, on your own property, with consent: name, email, phone number, visit history, preferences and the consent record itself. It is distinct from followers on a social platform, which you cannot export or reach without the platform, and from purchased lists, which carry no consent you can prove.

Why is an email list better than social followers?

Reach on an owned list costs nothing per send and cannot be repriced by a platform. Small business use of TikTok fell from 34% to 22% in a single year while Facebook rose above 90% (LocalIQ), which is the kind of shift that erases a rented audience without warning.

What is TCPA prior express written consent?

It is the standard required before sending commercial texts. Under 47 CFR 64.1200(f)(9) it means a written agreement bearing the person's signature, with a clear and conspicuous disclosure of what they are agreeing to, and it cannot be required as a condition of buying anything (47 CFR 64.1200). An electronic tick, freely given, can qualify.

Can I put email and text consent in one checkbox?

You should not. They are different agreements with different legal standards, and bundling them undermines your evidence for each. Use two unticked boxes with plain wording next to each, and record which one the customer selected along with the exact text they were shown.

How often should a local business email its list?

Monthly is a defensible default for most local businesses, on a fixed day, with something genuinely useful in each send. Text should be reserved for triggered, individual messages such as a reward, a booking confirmation or a reminder. Klaviyo's data shows triggered flows drive 45.2% of SMS revenue from 7.6% of sends (Klaviyo).

What email open rate should I expect?

Mailchimp's all-user averages are an open rate of 35.63%, a click rate of 2.62% and an unsubscribe rate of 0.22% (Mailchimp). Those are cross-industry platform averages rather than a target, and a small local list of recent customers often performs above them.

Is the 98% SMS open rate figure real?

It cannot be traced to a primary study. The nearest vendor assertion carries no year, sample or source, and it sits awkwardly beside platform benchmarks where a 14.6% click rate is already classed as great (Klaviyo). Plan with published benchmarks and your own numbers instead.

How do I clean an old customer list?

Remove hard bounces and duplicates, suppress anyone with no engagement in twelve months, and check whether each contact has a provable consent record. Where records are missing, run a re-permission email and keep only those who respond. Do not merge an unconsented list into a consented one.

What should I actually send customers?

Something that changes their next visit: a new item, a schedule change, a booking window, a customer video, a genuinely useful reminder. Avoid sending because it is the first of the month with nothing to say. Only 45% of consumers agree that brands deeply understand them (Twilio).

Can I email customers asking for a Google review?

Yes, provided nothing is offered in return and you ask all customers rather than a filtered subset. Email is the most effective review-request channel, cited by 40% of consumers, up from 32% (BrightLocal). Keep the reward, if you offer one, attached to first-party feedback instead.

What records do I need to keep for consent?

The exact wording displayed, the date and time, the channel consented to, the source page or card, and the identifier the customer supplied. Keep them for as long as you are contacting the person and for a reasonable period afterwards. The record of what was shown is what matters in a dispute, not the tick itself.

Sources