Guide
Email Marketing for Small Business: A Practical 2026 Guide to Starting From Zero
A practical plan for shops, cafes and service businesses starting email from scratch: domain setup, consent rules, the first three automations, and what to send when you think you have nothing to say.
By Sangeeth · June 2026 · 14 min read
Most small businesses come to email in one of two ways. Someone tells them they should "have a newsletter", or they notice that customers who already know them keep coming back and want to make that happen on purpose. The second reason is the right one. Email marketing for a small business works best as a way to stay in touch with people who have already bought, booked or walked in, not as a way to find strangers.
This guide is for a shop, a cafe, a salon, a bike workshop or a bookkeeper starting from zero. It covers the order to do things in: authenticate a sending domain, collect addresses legally, build three automations, pick a cadence you can keep, and measure the numbers that tie back to sales.
What you need before your first send
You need less than most software onboarding suggests: a domain you control, a platform that can authenticate mail for it, a way for people to sign up, and something worth sending. Segments, A/B tests and elaborate templates can wait until you have a few months of sends behind you.
Decide on day one who the email is for, and write it down in one sentence. A cafe telling regulars about a seasonal menu is a different job from a plumber reminding past customers that boilers need servicing before winter. "Tell past customers about new stock and restocks so they buy again" is a good example. Every later decision about cadence, content and measurement is easier with that sentence in front of you.
- A domain you own, with access to its DNS settings
- A mailbox on that domain that someone actually reads, such as hello@yourshop.com
- A postal address you are willing to put in the footer of every marketing email
Choose a sending domain and authenticate it
Do not send marketing email from a Gmail, Outlook or Yahoo address. You cannot add DNS records to gmail.com, so no platform can authenticate bulk mail as coming from it, and Gmail's sender guidelines require bulk senders to align the From domain with SPF or DKIM. If you do not own a domain yet, buying one is step one.
Sending campaigns from your main domain is fine at small volumes. If you plan to send regularly, a subdomain such as news.yourshop.com keeps marketing reputation partly separate from the mailboxes staff use for invoices and suppliers. Either way, use a From address people recognise and can reply to. A no-reply address throws away replies, which are often the most useful feedback you get.
The three records, briefly
SPF lists the servers allowed to send for your domain. DKIM signs each message so receivers can confirm your domain authorised it and it was not altered. DMARC tells receivers what to do when those checks fail and where to send reports. For a business using Google Workspace for staff mailboxes and a separate platform for campaigns, the records look something like this:
yourshop.com TXT "v=spf1 include:_spf.google.com include:spf.your-email-platform.example ~all"
abc123._domainkey.yourshop.com CNAME abc123.dkim.your-email-platform.example
_dmarc.yourshop.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@yourshop.com"
Copy the real values from your providers' setup screens. Two errors catch small businesses most often: publishing a second SPF record instead of merging into the existing one (a domain may have only one), and pasting the full hostname into a DNS panel that already appends the domain, which produces _dmarc.yourshop.com.yourshop.com. Starting DMARC at p=none is normal; tighten it once reports show all your legitimate mail passing.
The full walkthrough, including alignment and moving DMARC to enforcement, is in our email deliverability guide. SendDoggie's guided domain setup lists the records your domain needs and runs live DNS checks, so you can see which record is missing or malformed rather than waiting a day to find out.
The rules that apply to you
The baseline mailbox-provider rules apply to every sender, and the legal rules apply from your first email. This is a summary, not legal advice; the linked sources are short and worth reading.
| Rule set | What it requires in practice | Source |
|---|---|---|
| Gmail, all senders | SPF or DKIM, valid forward and reverse DNS for sending IPs, TLS, and a spam rate in Postmaster Tools below 0.3% | Gmail sender guidelines |
| Gmail, more than 5,000 messages a day | Both SPF and DKIM, a DMARC record (p=none is allowed), From domain aligned with SPF or DKIM, one-click unsubscribe plus a visible unsubscribe link | Gmail sender guidelines |
| Yahoo, bulk senders | SPF and DKIM, a passing DMARC policy of at least p=none, one-click unsubscribe, unsubscribes honoured within 2 days, spam rate below 0.3% | Yahoo sender best practices |
| CAN-SPAM (US) | Accurate headers, honest subject lines, identify the message as an ad, a valid postal address, a working opt-out honoured within 10 business days | FTC compliance guide |
| GDPR and ePrivacy (EU), PECR (UK) | Marketing email to individuals generally needs consent you can prove, withdrawing must be as easy as giving it, and a narrow "soft opt-in" exception covers existing customers | GDPR, ICO |
Gmail recommends keeping the spam rate below 0.1% and never reaching 0.3%. A small list hits those thresholds quickly, because a handful of complaints on a small send is a large share of it. That is why permission matters even where the law is lenient: CAN-SPAM does not require prior consent, but mailbox providers measure whether recipients wanted your mail, and they decide where it lands.
Never buy or rent a list. Purchased addresses fail every consent test above and generate complaints and bounces. The ICO states plainly that the soft opt-in does not cover bought-in lists.
Build your list legally
Your best subscribers are people who already bought from you or came through the door, so put sign-up where they already are rather than running giveaways that attract people who only want the prize.
- Checkout. An unticked checkbox at online checkout ("Email me about new stock and offers") is the best source most shops have. Under GDPR, pre-ticked boxes do not count as consent (Recital 32), so leave it unticked if you sell to the EU or UK.
- Website form. An email field, an optional first name, and a sentence saying exactly what people will get and how often. "New arrivals and one offer a month" sets an expectation you can keep; "Subscribe to our newsletter" sets none.
- In person. A QR code at the counter that opens the sign-up form. Paper sheets produce typos and leave no record of what people agreed to.
- Bookings and quotes. Service businesses can add the same opt-in to booking forms. Keep it separate from the terms checkbox; GDPR requires the consent request to be distinguishable from other matters.
Single or double opt-in?
Double opt-in only adds an address after the person clicks a confirmation link. It blocks typos, fake addresses and bots that submit other people's addresses, and it gives you a timestamped record of consent, which matters because GDPR Article 7 puts the burden of proving consent on you. The cost is that some genuine people never click, so the list grows more slowly.
A sensible split: double opt-in on public website forms, where bots and typos come from, and single opt-in at checkout, where the address has just received an order confirmation and is very likely real. Whichever you choose, store where and when each person signed up. You will need it the first time someone asks why they are on your list.
Importing customers you already have
Most businesses start with a spreadsheet of past customers, a till-system export, or years of contacts in a mailbox. This is where small businesses take on the most risk, so sort before you upload.
- Separate customers from everyone else. Suppliers, one-off enquiries and trade-fair business cards are not a starting audience.
- Check the legal basis by region. CAN-SPAM in the US is opt-out based. In the UK and EU, the soft opt-in lets you email existing customers about similar products only if you offered a simple opt-out when you collected their details and in every message since. If you never did, you need fresh consent.
- Start with recent customers. Someone who bought last month remembers you; someone from several years ago may not, and their address may be dead. Import recent customers first and judge the results before adding older ones.
- Re-permission older or uncertain contacts. Say who you are and what you will send, ask them to click to stay on the list, and keep only those who click.
An import that bounces heavily on its first send damages your reputation before you have built one. The email list cleaning guide covers validation and bounce handling.
The first three automations to set up
Automations do more for a small business than campaigns because they run whether or not you have time that week. Build these three in order and keep each one short.
1. Welcome email
Triggered when someone joins. Deliver anything the form promised, say who you are in a few sentences, and tell them what to expect and how often. A shop can link its best sellers; a service business can link the page that answers the questions it hears most. One email is enough to start, and the welcome email sequence guide covers extending it into a series.
2. Abandoned cart
For online shops. Triggered when a known shopper leaves items in the cart. Show the items, link back to the cart, and answer the likely objection, usually shipping cost, delivery time or returns. Start with a plain reminder before adding discounts, so you do not train customers to abandon carts on purpose. See the abandoned cart emails guide for timing.
3. Post-purchase
Triggered by an order. Keep order and shipping confirmations as plain transactional mail, then add a separate marketing follow-up: how to use or care for the product, and a review request once the customer has had time to use it. A service business can do the same after a job, with a reminder when the next service is due. The post-purchase email sequence playbook covers timing and keeping transactional and marketing mail apart.
If your shop runs on Shopify or WooCommerce, these triggers can come straight from the store. SendDoggie connects to both, with sequences triggered by abandoned carts, new customers and product review requests, and syncs your catalogue so emails can include product blocks without rebuilding them by hand.
A sending cadence you can keep
The right frequency is the one you can sustain without sending filler. A list that hears from you on a predictable schedule stays engaged; a list that hears nothing for months and then gets three emails in a week unsubscribes and complains.
Start with one campaign a month, or every two weeks if you genuinely have new things to say that often, such as regular new stock or a changing menu. Put the dates for the next quarter in your calendar now. Add extra sends only for real events: a sale, a launch, a restock people asked for, a holiday closure. Raise the regular frequency only when you keep running out of space rather than ideas, and watch unsubscribes and complaints after any change.
Send time matters less than people think. Pick a time when customers plausibly read email and you can answer replies, then leave it alone so timing does not muddy what you learn from content.
What to write when you have nothing to say
Small business newsletters usually die at the blank page, not in the software. Keep a running note of material as it comes up during the week, so writing a campaign becomes selection rather than invention. Reliable sources:
- What is new or back. New stock, a menu change, a new service, a restock. The easiest email to write and the one customers expect.
- How to get more from what they bought. Care instructions, recipes, setup tips. A bike workshop explaining how to check tyre wear before winter is useful and brings in bookings.
- The question you answer every week. If customers keep asking it at the counter, the answer belongs in an email.
- Behind the scenes and seasonal. A new supplier, a staff pick, a local event, holiday hours. Short and specific beats long and general.
A short email with one point and one link is a perfectly good campaign:
Subject: New this month: [the specific thing]
[One or two sentences on what it is and why a regular would care.]
[One image or product block, if it helps.]
[One link or button: View it / Book now / Reserve a table]
[Sign-off from a real person.]
[Footer: business name, postal address, unsubscribe link]
Not every email needs a designed template. A short note from the owner in plain text often reads as more personal; our comparison of plain-text vs HTML email covers when each works better.
Measure clicks and revenue, not opens
Open rate is now the least reliable email metric. Apple's Mail Privacy Protection downloads remote content, including tracking pixels, in the background when a message arrives, regardless of whether the person engages with it. Many recorded opens are not opens at all, so comparing yours to a generic benchmark tells you little. The open rate benchmarks guide explains what the number can and cannot tell you.
| Measure | What it tells you | When it gets worse |
|---|---|---|
| Clicks | Whether content and offer interested people | Make each email about one thing with one clear link |
| Orders, bookings, reservations | Whether email produces business | Check links land on the right page and the offer is real |
| Replies | Whether people see a real business worth talking to | Write more personally; invite questions |
| Unsubscribes | Whether frequency and content match the sign-up promise | Check recent sends against your one-sentence purpose |
| Bounces and complaints | List quality and whether recipients expected you | Pause and investigate before the next send |
To connect emails to sales, tag links with UTM parameters so your analytics or store reports can attribute orders to the campaign:
https://yourshop.com/products/winter-blend?utm_source=newsletter&utm_medium=email&utm_campaign=2026-11-new-stock
If you sell offline, ask at the till or put a code word in the email. Compare each send with your own previous sends, not someone else's averages. For spam rate, register your domain with Google Postmaster Tools, which is where Gmail reports the figure its guidelines refer to.
Keep the list clean
Suppress hard bounces after the first failure, and suppress unsubscribes and spam complaints immediately and permanently. Platforms do this automatically, but the protection disappears when someone re-imports an old copy of the original spreadsheet, which is the most common way unsubscribed people end up back on a list.
Inactive subscribers need a decision rather than an automatic delete. When someone has not clicked or bought in a long time, send a short re-engagement email and stop mailing those who still do not respond. Define "a long time" by how often your customers buy: a coffee subscriber and a once-a-year boiler service customer are not comparable. The list cleaning guide has the full process.
Your first 90 days
A realistic plan for one person who also runs the business:
| When | What to do | Done when |
|---|---|---|
| Week 1 | Set up the platform, authenticate the domain, write your one-sentence purpose, add postal address and unsubscribe footer | SPF, DKIM and DMARC verify, and a test reaches the inbox of your own Gmail and Outlook accounts |
| Week 2 | Add the sign-up form, checkout checkbox and counter QR code; build the welcome email | You have signed up through each route and received the welcome email |
| Weeks 3–4 | Sort and import recent customers with a valid legal basis; re-permission older contacts; send your first campaign | First campaign sent; bounces and complaints reviewed |
| Month 2 | Build abandoned cart (shops) or post-job follow-up (services); keep the campaign schedule | Second automation tested with a real order or booking |
| Month 3 | Build the post-purchase follow-up; review clicks, orders and unsubscribes across all sends; adjust cadence | Three automations running and a note on what to change next quarter |
Hold off on segments, tests and extra automations until month three. Each is another thing to maintain, and you need some data of your own before you can tell whether a change helped.
Common mistakes
- Importing every contact you have ever had. Suppliers, enquiries and old business cards produce complaints and bounces.
- Treating a purchase as marketing consent. In the EU and UK it is not, unless the soft opt-in conditions are met.
- Long silences followed by bursts. People forget who you are, then mark you as spam.
- Judging campaigns by open rate. Privacy features inflate it. Use clicks and sales.
- Re-uploading an old spreadsheet. It can put unsubscribed and bounced people straight back on the list.
- Building ten automations in the first month. Three that work beat ten nobody has tested.
Troubleshooting
Test emails land in spam
Open the message in Gmail, choose "Show original", and confirm SPF, DKIM and DMARC all show PASS. If DKIM passes only for your platform's domain rather than yours, alignment is not set up and you need DKIM records on your own domain. If everything passes, look at content: link shorteners, a single large image with little text, and links to poorly reputed domains all count against you. The deliverability guide walks through the checks in order.
DNS records will not verify
Check for the doubled-domain problem, then a second SPF record, then quote marks your DNS panel added or stripped. Changes take time to propagate, so if the records look right, confirm with a public DNS lookup tool instead of editing them repeatedly.
Bounces or complaints spike after an import
Stop sending to the imported group and suppress the hard bounces. Find the source of the bad addresses, usually one legacy spreadsheet or paper sign-up sheet, and re-permission the rest of that source rather than mailing it again.
The sign-up form fills with odd addresses
Bots are submitting it, sometimes with real people's addresses. Turn on double opt-in for the form, add a bot check, and never mail unconfirmed addresses; that is how list bombing turns into complaints against you.
Best practices
- Send from your own authenticated domain with a From name customers recognise
- Check DMARC alignment, not only whether the records exist
- Put a visible unsubscribe link and your postal address in every marketing email
- Use unticked opt-in checkboxes and record when and where each person signed up
- Keep receipts and shipping updates separate from marketing
- Keep a send calendar and a running list of things to write about
- Tag links with UTM parameters and watch spam rate in Postmaster Tools
- Never import around your suppression list
Getting started? Create a free SendDoggie account to authenticate your domain, import customers from CSV, and build your first campaign with the drag-and-drop designer and starter templates, or as true plain text. Magic Email can turn a product URL and a short prompt into a branded first draft.
Key takeaways
- Email works best for bringing past customers back, so collect addresses at checkout, the counter and bookings.
- Send from your own domain with SPF, DKIM and DMARC. Every major mailbox provider now expects it.
- Permission is a deliverability issue as well as a legal one. Small lists cross spam-rate thresholds quickly.
- Import carefully: recent customers first, legal basis checked by region, older contacts re-permissioned.
- Build welcome, abandoned cart and post-purchase automations first. They run when you are busy.
- Pick a cadence you can sustain and keep a running list of material.
- Measure clicks, orders and complaints, compared with your own past sends.
Sources
- Google — Email sender guidelines
- Yahoo — Sender best practices
- Federal Trade Commission — CAN-SPAM Act: A Compliance Guide for Business
- EUR-Lex — Regulation (EU) 2016/679 (GDPR), Article 7 and Recital 32
- EUR-Lex — Directive 2002/58/EC (ePrivacy Directive), Article 13
- UK Information Commissioner's Office — Electronic mail marketing
- Apple — Mail Privacy Protection & Privacy
- Google Postmaster Tools