How to Build an Australian Spam Act-Compliant Email List From Scratch

Building an email list for an Australian e-commerce store is not complicated — but doing it in a way that is Spam Act 2003-compliant, commercially effective, and set up for long-term engagement requires more intentionality than most brands apply.

The most common list-building mistake Australian e-commerce brands make: they grow their list as fast as possible using whatever tactic is available, without thinking about the quality of consent they’re collecting or the long-term engagement profile of the subscribers they’re acquiring. The result is a large list that performs poorly — because a third of it has vague or invalid consent, another third signed up for a one-time discount and has no interest in the brand, and the remaining third is the genuinely valuable audience that’s being diluted by the rest.

This guide covers how to build a Spam Act-compliant, commercially valuable email list from scratch.

What the Spam Act Requires for List Building

Before covering tactics, it’s worth establishing the legal baseline. Under the Australian Spam Act 2003, you cannot send commercial electronic messages to someone without their consent — either express or inferred.

For list-building purposes, express consent is the gold standard. Every list-building tactic you use should be designed to collect express consent — meaning the subscriber clearly and actively agrees to receive commercial emails from your brand.

What express consent for email list building looks like:

• A sign-up form with a clear statement: “Subscribe to receive marketing emails from [Brand Name]”
• A checkbox at checkout (unticked by default): “I’d like to receive marketing emails from [Brand Name]”
• A lead magnet page where subscribing is explicitly the exchange for the free resource

What does NOT constitute express consent:

• Pre-ticked consent checkboxes at checkout
• “Join our community” language that doesn’t specify commercial email
• Business card collection at events without explicit email opt-in
• Purchasing or importing a list of any kind
• Competition entries without a clear marketing opt-in statement

Every list-building tactic below is designed to collect clean, explicit, documented consent. This protects you legally and ensures your list is full of people who genuinely want to hear from you — which directly affects open rates, click rates, and email revenue.

Tactic 1: Website Pop-Up / Sign-Up Form

The website pop-up is the most volume-efficient list-building tool available to Australian e-commerce brands. A well-configured pop-up on a mid-traffic Shopify store can add 200–500+ new subscribers per month.

Spam Act-compliant pop-up configuration:

The form headline and copy must clearly communicate that the subscriber is signing up to receive marketing emails. Examples:

• “Get 10% off your first order. Subscribe to our emails.” ✓
• “Join our list for exclusive offers and new arrivals.” ✓
• “Stay connected and be the first to know.” ✗ (too vague — doesn’t clearly indicate commercial email)

There should be no pre-ticked consent checkbox. If you include a checkbox for GDPR or local compliance purposes, it must be unticked by default.

The submit button text should be action-oriented and honest: “Subscribe,” “Get my discount,” “Yes, I’m in” — not “Submit” which has neutral connotations.

Pop-up timing and targeting:

• Exit-intent pop-ups (triggered when a cursor moves towards the browser close button) convert at 2–5% of triggered impressions
• Time-delay pop-ups (shown after 20–40 seconds on site) convert at 1.5–3%
• Scroll-triggered pop-ups (shown after 40–60% of page scroll) convert at 1–2.5%
• New visitor targeting (suppressing pop-ups for returning subscribers) improves user experience and conversion quality

Value exchange for Australian audiences:

• Percentage discount (10–15% off first order): strongest conversion, but attracts discount seekers
• Dollar value discount (AU$10–$20 off): cleaner for premium brands where percentage discounts feel inappropriate
• Free shipping on first order: very effective for brands with product categories where shipping costs are a barrier
• Free gift with first purchase: works well for beauty, supplements, and food brands
• Exclusive content: recipe e-book, styling guide, workout programme — relevant for food, fashion, and fitness brands

Platform recommendations:

• Klaviyo Forms: Native pop-up builder with tight Shopify/Klaviyo data integration. Best option for Klaviyo users.
• Omnisend Forms: Strong if you’re on the Omnisend platform
• Privy: Dedicated pop-up tool with Shopify integration; works with multiple ESPs
• Justuno: Advanced targeting and A/B testing

Tactic 2: Checkout Opt-In

The checkout page is the highest-intent page on your Shopify store. A subscriber acquired at checkout has just demonstrated genuine purchase intent — making this your highest-quality list-building moment.

Spam Act-compliant checkout opt-in:

Shopify’s native email marketing opt-in checkbox is Spam Act-compliant when configured correctly. The checkbox must be:

• Clearly visible on the checkout page
• Unticked by default (this is critical — a pre-ticked checkbox does not constitute valid express consent)
• Accompanied by clear language: “I’d like to receive marketing emails from [Brand Name]”

On Shopify, the checkout opt-in checkbox can be configured in your Shopify admin under Settings > Checkout > Email marketing. Ensure “Preselect the option to opt in” is turned OFF.

Subscribers acquired through checkout opt-in typically have:

• Higher first-purchase conversion (they’ve already purchased once)
• Better engagement rates than pop-up subscribers
• Cleaner intent signal — they opted in at the most deliberate moment possible

Tactic 3: Post-Purchase Email Sign-Up

Customers who purchase but don’t opt in at checkout can be invited to join your email list via a dedicated post-purchase flow. This is distinct from the post-purchase marketing flow — it’s specifically designed for purchasers who are currently not email subscribers.

This flow can be triggered in Shopify/Klaviyo by identifying purchasers who are not on your marketing list and sending them a single email invitation.

The invitation email:

• Acknowledge the purchase warmly
• Explain what they’ll receive if they subscribe: exclusive offers, early access, new arrivals
• Include a single click sign-up link that captures express consent
• Make opting out (doing nothing) the path of least resistance — this ensures only genuinely interested subscribers join

Tactic 4: Lead Magnets

A lead magnet is a free resource offered in exchange for an email address. For Australian e-commerce brands, effective lead magnets include:

Product-adjacent resources:

• “10 Recipes Using Our [Product]” for food brands
• “The Complete Skincare Routine Guide” for beauty brands
• “Camp Kitchen Essentials Checklist” for outdoor brands
• “How to Choose the Right [Product Category]” guides

Value-first content:

• Styling guides for fashion brands
• Training programme for activewear brands
• “What to Look for in a [Category] Product” educational content

Lead magnets typically drive lower volume than discount pop-ups but higher-quality subscribers — because the subscriber is demonstrating specific interest in the topic area, which is a better long-term engagement signal.

Spam Act compliance for lead magnets: The lead magnet sign-up page must clearly state that the subscriber is agreeing to receive marketing emails from your brand. “Get the free guide” is not sufficient consent language. “Get the free guide and subscribe to marketing emails from [Brand Name]” is.

Tactic 5: Social Media to Email Conversion

Australian e-commerce brands with strong Instagram, TikTok, or Facebook followings have an existing audience that has already demonstrated brand affinity. Converting these followers to email subscribers gives you a channel you own — as opposed to a social media audience that’s subject to algorithm changes.

Effective social-to-email tactics:

• Link-in-bio landing page with an email sign-up form (explicit consent language required)
• Instagram or TikTok Stories prompts directing to sign-up landing page
• Social-exclusive offers or early access available only via email subscription
• Facebook lead form ads with clear email marketing consent language in the form

Key compliance note for Facebook lead forms: Facebook lead generation ads have their own disclaimer system, but that disclaimer does not automatically satisfy Australian Spam Act requirements. The form must include language that specifically identifies your brand and the commercial email marketing purpose.

Tactic 6: In-Person and Event Collection

For Australian brands that sell at markets, pop-ups, or events, in-person list building requires specific attention to Spam Act compliance.

Paper sign-up sheets: “Please add me to your email list to receive news and offers from [Brand Name]” is acceptable consent language on a paper sign-up sheet, provided it’s clear and visible. Date and source of collection should be recorded for your consent audit trail.

Tablet or iPad sign-up at point of sale: A digital sign-up form at your market stall or event stand is cleaner for compliance documentation. Use a simple form with explicit consent language and a mandatory submission click. This creates a timestamped, documented consent record.

Barcode/QR code sign-up: A printed QR code directing to your sign-up form allows quick sign-ups at in-person events. The landing page must include full consent language.

What NOT to do: Collecting business cards at B2B events and importing them to your email list without explicit email marketing consent is a potential Spam Act breach. Even if someone hands you their card, it doesn’t mean they’ve consented to receive commercial emails.

Building a Consent Documentation System

As your list grows, you need to be able to answer a fundamental question: for any given subscriber, when did they consent, and how?

Most modern ESPs — including Klaviyo, ActiveCampaign, Omnisend, and Campaign Monitor — automatically record the source of a subscriber sign-up (pop-up, checkout, landing page, etc.) and the date. This creates an automatic consent audit trail for digitally acquired subscribers.

For manually acquired subscribers (in-person, events), you should document:

• Date of sign-up
• Event or location
• Sign-up method (paper form, tablet, QR code)
• Whether a copy of the consent form is archived

This documentation doesn’t need to be elaborate — a spreadsheet noting source, date, and form type is sufficient for most small-to-mid-sized brands. But you need something. If the ACMA ever investigates a complaint, being able to demonstrate consent for any subscriber is the difference between a clean outcome and a penalty.

Maintaining List Quality Over Time

Building a compliant list is an ongoing process, not a one-time setup.

Regular list hygiene:

• Suppress subscribers who haven’t opened or clicked in 180+ days (sunset flow)
• Remove hard bounces promptly (within 24–48 hours)
• Process unsubscribes immediately (comply with the five-business-day rule by using automated processing)
• Review and clean inferred-consent subscribers who haven’t engaged in 12–18 months

Re-consent campaigns: If you have a segment of subscribers with unclear or outdated consent — particularly inferred consent from purchases that are more than two years old — a re-consent campaign is the appropriate approach. Send a single clear email: “We’d love to keep in touch. Click here to confirm you still want to receive emails from us.” Anyone who doesn’t respond should be suppressed.

Let Excelohunt Build Your List Growth Strategy

A compliant, commercially productive list doesn’t grow itself. It requires the right mix of sign-up forms, consent language, lead magnets, and ongoing hygiene — all mapped to your specific brand and audience.

Excelohunt helps Australian e-commerce brands build Spam Act-compliant list growth strategies, configure sign-up forms across all major ESPs (Klaviyo, ActiveCampaign, Campaign Monitor, HubSpot, Mailchimp, Omnisend), and document consent correctly from day one.

Get your free email audit and list-building review →

We’ll assess your current list quality, identify any compliance issues, and give you a clear strategy for building a high-quality, compliant list.