Required for all Legal basis: DSGVO Art. 6 Abs. 1 lit. a, Art. 7 / §7 Abs. 2 UWG

Double Opt-in: GDPR-Compliant Newsletter Signup

Newsletter advertising requires demonstrable consent. The double opt-in procedure is the established way to meet the requirements of the GDPR and UWG.

Also relevant around newsletter gdpr, newsletter consent, double opt in shopify, newsletter signup gdpr.

What Double Opt-in means

With double opt-in, the subscriber confirms their signup via a link in a confirmation email. Only after that may the newsletter be sent. Mandatory elements are a clear statement of purpose, a link to the privacy policy, the logged DOI confirmation, and an unsubscribe link that can be used at any time in every email.

Who it applies to

Every shop that runs email marketing or offers a newsletter is affected, regardless of industry.

What must be shown in the shop

Clear description of the purpose of the signup
Link to the privacy policy
Confirmation via double opt-in email
Unsubscribe link in every mailing

How ShopCompliance solves this automatically

ShopCompliance sets up a GDPR-compliant signup process with statement of purpose, privacy link, and double opt-in, and documents the consent. The unsubscribe link is automatically included in every email.

Implementing Double Opt-in in your Shopify store

1
Set up the signup form
ShopCompliance adds a clear statement of purpose and a link to the privacy policy to the newsletter form.
2
Send the confirmation email
After signup, the subscriber receives a double opt-in email. Only after clicking the confirmation link are they added.
3
Document the consent
The time and content of the DOI confirmation are logged. Every mailing automatically contains an unsubscribe link.

Checklist: Double Opt-in

✓Clear description of the purpose of the signup
✓Link to the privacy policy
✓Confirmation via double opt-in email
✓Unsubscribe link in every mailing

Risks of non-compliance

Promotional newsletters without demonstrable consent violate the GDPR and UWG and are regularly targeted with warning letters by competitors and associations. If proof of consent is missing, data protection fines from the supervisory authorities can additionally apply.

Legal notice: This article and the ShopCompliance templates are general information and non-binding samples, not legal advice. Content is provided automatically and not reviewed by a lawyer for your individual case. For a legal assessment of your specific situation, consult a lawyer. No warranty for completeness, accuracy or timeliness.

Meet it automatically with ShopCompliance

Activate the Double Opt-in module in a few clicks. ShopCompliance manages the mandatory information centrally and renders it automatically on your storefront, no theme code.

Open in the Shopify App Store

Frequently asked questions about Double Opt-in

Is double opt-in required by law?+

The procedure is not literally required, but it is considered practically the only secure proof of consent under the GDPR and UWG.

What must appear at signup?+

The purpose of the data processing, a link to the privacy policy, and a note on the ability to withdraw at any time.

May I advertise before confirmation?+

No. Before the confirmation link is confirmed, no promotional newsletter may be sent.

Do I need an unsubscribe link?+

Yes. Every promotional email must contain a simple unsubscribe link that can be used at any time.

Related compliance modules

Cookie Consent Banner Online Shop

Under the TDDDG and the GDPR, non-essential cookies and tracking technologies may only be set after active consent. A TD

Legal Texts Online Shop

Every online shop needs complete mandatory texts: imprint, terms and conditions, withdrawal instructions, and privacy po

Cancellation Button

Since 2022, the law has required a clearly visible cancellation button (Section 312k BGB) for ongoing contracts in onlin

Withdrawal Button

With the implementation of the Modernization Directive comes the withdrawal button. From 19.06.2026, online shops must p