What Is an Opt-In?
An opt-in occurs when a person voluntarily provides their contact details and consents to receive marketing messages from a business. In email marketing, this typically happens when someone completes a sign-up form on a website, selects a checkbox during an online purchase, or responds to a call-to-action such as "Subscribe to our newsletter." The opt-in is the moment consent is given, and without it, sending marketing email is considered unsolicited.
There are two primary types of opt-in. A single opt-in adds the subscriber immediately after they submit a form, with no further verification required. A double opt-in sends a confirmation email to the address provided. The subscriber only joins the list after clicking the confirmation link. Single opt-in grows lists faster, but double opt-in produces a cleaner, more engaged list because it verifies that the email address is valid and that the person genuinely intended to subscribe.
In South Africa, the Protection of Personal Information Act (POPIA) places specific obligations on businesses that collect and use personal information for direct marketing. Consent must be voluntary, specific, informed, and unambiguous. Businesses cannot use pre-ticked boxes or bury marketing consent inside lengthy terms and conditions. A clear, standalone opt-in statement gives businesses the legal basis to send email marketing and provides documented proof of consent if a subscriber later raises a complaint with the Information Regulator.
The quality of the opt-in experience also affects list performance. A vague "sign up here" prompt will attract fewer and less interested subscribers than a form that clearly explains what the subscriber will receive, how often they will receive it, and what value they can expect. Being transparent at the opt-in stage sets expectations correctly and reduces future unsubscribe rates because subscribers know what they signed up for.
Opt-In In Practice
The two scenarios below are illustrative examples, not Juicy Designs client results. The figures indicate the scale of effect that opt-in work typically produces, so treat them as indicative rather than measured.
Picture a Cape Town skincare brand that adds a pop-up form to its website offering first-time visitors a 15% discount code in exchange for their email address. The form states: "Subscribe to receive your discount code, skincare tips, and exclusive offers. You can unsubscribe at any time." A transparent, value-driven opt-in of this kind would typically attract subscribers who are genuinely interested in the brand and the offer, and the result would be a list that opens campaigns, redeems vouchers, and buys repeatedly.
Now imagine a business that adds email addresses to a list without explicit consent, perhaps by exporting contacts from LinkedIn or scanning business cards collected at an industry event in Sandton. Even if those individuals might welcome the communication, sending to them without consent violates POPIA, risks being marked as spam, and can result in deliverability problems that affect the entire email programme. A properly managed opt-in process is not just a legal requirement. It is also a better business practice because it builds a list of people who actually want to hear from you.
Single versus double opt-in
| Single opt-in | Double opt-in | |
|---|---|---|
| How it works | Submitting the form subscribes them | They must confirm via an emailed link |
| List growth | Faster | Slower, typically noticeably smaller |
| List quality | More typos, bots and disengaged addresses | Verified addresses, higher engagement |
| Deliverability | More bounces and spam complaints | Materially better sender reputation |
| Proof of consent | Weaker | Timestamped confirmation you can produce |
For most South African businesses, double opt-in is worth the smaller list. A verified, engaged list of 2,000 outperforms an unverified 5,000 on revenue and protects your ability to reach the inbox at all.
What POPIA requires from an opt-in
POPIA governs direct electronic marketing in South Africa, and section 69 is the part that matters for email and SMS. In practice, a compliant opt-in needs:
- A genuine, active choice. No pre-ticked boxes, and consent cannot be bundled into accepting terms and conditions.
- Clarity about what they are agreeing to. Who is contacting them, about what, and how often.
- A record. What they consented to, when, and how. If you cannot evidence consent, you do not have it.
- An easy opt-out in every message, honoured promptly.
- Separate consent for separate purposes. Agreeing to a quote is not agreeing to a newsletter.
Existing customers are treated differently from cold contacts, but the safe operating rule is simple: collect consent explicitly, record it, and make leaving easy.
Common mistakes
- Pre-ticked consent boxes. Not valid consent.
- Bundling marketing consent into terms acceptance. Also not valid.
- Buying or scraping lists. No lawful basis, and it destroys deliverability alongside the compliance exposure.
- No consent records. Leaves you unable to demonstrate compliance if challenged.
- Hiding the unsubscribe. Drives spam complaints, which damage sender reputation far more than unsubscribes do.
We build compliant capture and nurture flows as part of email marketing. See also our South African email marketing guide.
FAQ
What is the difference between single opt-in and double opt-in?
Single opt-in adds a subscriber immediately after they submit a form. Double opt-in sends a confirmation email and only subscribes the person after they click the confirmation link. Double opt-in produces a smaller but more engaged list with fewer invalid addresses, lower bounce rates, and stronger legal proof of consent under laws like POPIA.
Is opt-in required by law in South Africa?
South Africa's Protection of Personal Information Act (POPIA) requires that direct marketing by electronic means, including email, be based on consent or an existing customer relationship. Businesses must give recipients a clear and easy way to opt out. Sending unsolicited marketing email without consent can result in regulatory action and reputational damage.
Is double opt-in required in South Africa?
POPIA does not explicitly mandate double opt-in, but it does require demonstrable consent. Double opt-in is the simplest way to produce that evidence, and it improves deliverability at the same time, which is why most established senders use it.
Can I email people who gave me their card at an event?
Only for what they reasonably expected. Handing over a card in a business context is not blanket consent for a marketing newsletter. Follow up personally about the conversation you had, and ask them to subscribe explicitly if you want to add them to a list.