Online marketing campaign: choose channels, track results and stay within the consent rules

Pick channels by buying moment, measure the action that earns money and compare cost per acquisition with the margin a customer brings.

In this topic: Marketing 12

Online, every click can be counted. That makes it easy to count the wrong thing.

Plan an online campaign from audience to channels, measure it within the consent rules, and judge it by what a new customer costs against the margin they bring.

How to set up an online marketing campaign you can measure

An online marketing campaign rarely fails on creativity. It fails on fit: the ad promises one thing and the page shows another, the tracking counts page views as leads, and the budget is judged on clicks. Start from the objective and the audience, pick two or three channels that match the buying moment, make the landing page keep the ad's promise, measure the action that earns money, and compare what a new customer costs with the margin they bring.

This page builds on create a marketing campaign and adds what is specific to online. The worked example is in euros; the method works in any currency.

Step 1: objective and audience by buying moment

Write one objective with a number and a date, such as first orders, qualified leads or booked calls. Then describe the audience by intent. Avinash Kaushik's See-Think-Do-Care framework helps: See is the widest group with no commercial intent yet, Think shows weak intent, Do is close to buying, and Care are your existing loyal customers. Each stage needs its own channel and its own measure.

Step 2: choose your online marketing channels

ChannelBest forYou pay forWatch out
Search engine optimisation (SEO)Think and Do: people searching for a solutionContent and timeSlow to build; rankings shift
Search adsDo: high intent at the moment of needMostly clicksBroad keywords eat budget
Organic social mediaSee and Care: familiarity and communityTime and contentReach depends on the algorithm
Paid socialSee and Think: groups not yet searchingImpressions or clicksMany cheap clicks, fewer buyers
EmailCare and Do: customers and subscribersA tool and contentNeeds a lawful basis, see below
Display and remarketingThink and Do: reminding visitors who leftImpressions or clicksTracking cookies need consent in Europe

A web shop often starts with search ads and email, a local service with search and map listings, a product nobody searches for yet with paid social. Ad formats and targeting change often, so check the platform's own help pages before you build.

Let the landing page keep the ad's promise

Send each ad group to a page that repeats the promise in its headline, shows the offer, answers the main doubts in the customer's words and asks for one action. Paid clicks that land on your home page are a frequent leak in small campaigns.

Step 3: tracking and measurement

  • Tag every link: campaign tags (UTM parameters, small labels in the web address) on links in ads, emails and posts show source, medium and campaign in your analytics.
  • Track conversions: set up the action that earns money, such as a purchase, a qualified form or a call, in each ad platform, for example through Google Ads conversion measurement.
  • Feed back what happened next: mark which leads became customers, so you judge quality rather than volume.
  • Respect consent in your tags: with Google's consent mode, tags do not store cookies after a refusal. It works with your consent banner; it does not replace it.
  • Trust your own books: every platform claims the sale, so compare platform totals with your order system.

Consent rules for cookies and email marketing

In Europe, cookies the service does not strictly need require prior consent, and so does marketing email to individuals, with a narrow exception for existing customers. The US works mainly on opt-out. This summarises principles; it is not legal advice.

MarketCookies and trackingEmail marketing
European Union: ePrivacy Directive and GDPRConsent after clear and comprehensive information; exempt only transmission and what is strictly necessary for the service the user asked for (source: EUR-Lex, December 2009). France's regulator CNIL: refusing should be as easy as accepting (source: CNIL, December 2021).Prior consent for individuals. A business that obtained an address in a sale may market its own similar products if the customer can object free and easily at collection and in every message. Member states set the rules for business addresses (source: EUR-Lex, December 2009).
United Kingdom: PECR, with UK GDPRConsent, except for strictly necessary storage and for statistics used to improve your service or its appearance, if users get clear information and an easy way to object. Advertising is never exempt (source: ICO, April 2026).Specific consent for individuals; soft opt-in for existing customers who bought or negotiated to buy similar products, never for bought-in lists. Companies may be emailed; sole traders and some partnerships count as individuals (source: ICO, November 2024).
United States: CAN-SPAM and state privacy lawsSet mainly by state privacy laws. In California, consumers may opt out of the sale or sharing of their data through a "Do Not Sell or Share" link or the Global Privacy Control signal (source: State of California Department of Justice, August 2026).No prior consent, but every commercial email, B2B included, needs accurate headers, an honest subject line, an ad disclosure, a postal address and an opt-out honoured within 10 business days (source: US Federal Trade Commission, July 2025).
Canada: anti-spam law (CASL)See the Office of the Privacy Commissioner.Express or implied consent, identification of the sender, unsubscribes processed within 10 business days (source: CRTC, February 2026).
Australia: Spam ActSee the national privacy regulator (OAIC).Express or inferred consent, sender details, unsubscribes honoured within 5 working days (source: Australian Communications and Media Authority, October 2026).
  • Cookies: does the law in your target countries require consent or an opt-out?
  • Email: is consent needed for individuals, is there an existing-customer exception, and are company addresses treated differently?
  • Every message: what must it contain, and how fast must an unsubscribe take effect?
  • Your tools: do your banner and email tool record when and how consent was given?

Rules change, as the UK's Data (Use and Access) Act showed for cookies, so check the regulator's site before each major campaign.

Step 4: judge results by cost per acquisition against margin

Cost per acquisition (CPA) = campaign costs / new customers from the campaign

Maximum CPA = contribution per customer over a chosen period x share you accept to spend on acquisition

Return on ad spend (ROAS) = campaign revenue / ad spend

Contribution is revenue minus product cost and other variable costs such as shipping and payment fees. ROAS works with revenue, so a healthy-looking ROAS can still lose money on a low-margin product.

Example: an online tea shop after six weeks

Callum Wren runs Tidewater Tea Company, a web shop for loose-leaf tea. A first order averages €40 excluding VAT and leaves €16 contribution. New customers order 2.5 times in their first year on average, so a customer brings €40 contribution in twelve months. Callum accepts spending half of that on acquisition: his maximum CPA is €20.

ChannelSpendNew customersCPADecision
Search ads€1,800120€15Scale in steps
Paid social€2,10070€30Test a new audience and offer, then decide
Email to subscribers, first-order code€20040€5Grow the list with consent at checkout
Remarketing€40020€20Keep, cap frequency, exclude buyers
Total€4,500250€18

Fictitious Firmfocus example. Amounts exclude VAT. Contribution is revenue minus tea, packaging, shipping and payment fees. New customers are first orders from people not yet in the customer database; the email cost includes the discount codes used.

On average the campaign stays under the €20 ceiling, but the average hides a channel at €30 per customer. Paid social looks fine on ROAS: 70 first orders of €40 bring €2,800 on €2,100 spend. Those orders leave only €1,120 contribution, so the channel pays back only if customers reorder as expected. Callum shifts budget to search until its CPA starts to rise, as it will when he buys pricier clicks.

Step 5: test, improve and scale

  1. 01

    Launch small

    Spend part of the budget first and check that every conversion is recorded.

  2. 02

    Compare variants

    One variable at a time: headline, offer, audience or page.

  3. 03

    Steer on quality

    Count customers and contribution, not form fills.

  4. 04

    Scale what works

    Raise budgets in steps; extra reach usually costs more per customer.

Small campaign vs larger campaign

Sole trader or new web shop

One high-intent channel such as search ads, an email list built with consent, campaign tags and free analytics. Use a banner that offers refusal as clearly as acceptance, and track spend, new customers and CPA per channel every week.

Business with an agency or in-house team

A consent management platform, conversion tracking linked to your customer database, and tests with a comparison group to see what the campaign really added. Ask for reports that show CPA against contribution.

Pitfalls in online campaigns

  • Judging on clicks or ROAS: both ignore margin and customer quality.
  • Buying an email list: in the EU and the UK the existing-customer exception does not cover bought-in addresses.
  • Tracking before consent: tags that fire before the visitor chooses, or a hidden refuse option.
  • Scaling too early: raising spend before audience, message and page have proved themselves.

The full campaign method is in create a marketing campaign. Paying partners per sale is covered in affiliate marketing, and setting up a shop in start an online store. All topics are on the Marketing page.

How much should I spend on an online marketing campaign?
Derive your maximum cost per acquisition from the contribution a customer brings, multiply it by the number of new customers you aim for, and start with a test budget well below that total. Add spend only where cost per acquisition stays under the maximum.
Do I need consent to send marketing emails?
In the EU and the UK you need consent for marketing email to individuals, with an exception for existing customers who bought similar products and could opt out. Canada and Australia also require consent. In the US, CAN-SPAM requires no prior consent but demands a working opt-out, an ad disclosure and a postal address.
Do analytics cookies need consent?
In the EU, cookies that are not strictly necessary need consent, and analytics usually falls in that group. The UK exempts analytics used only to improve your own service, if you inform users and let them object easily. Advertising and cross-site tracking need consent in both.
What is a good cost per acquisition?
One below your own maximum, which follows from the contribution a customer brings over a period you choose and the share of it you are willing to spend.
Profit and cost benchmark

Know your margin before you set a maximum cost per acquisition


Firmfocus jaarlidmaatschap voordelen

Maak gebruik van onze ondernemerstools en de laatste branche-informatie

Verkrijg direct toegang tot alle stappen, downloads en tools voor ondernemers.

Verkrijg direct toegang