Email Marketing

Suppression List

Also called do-not-email list, suppression file

A list of addresses your email platform must never send marketing to, such as people who unsubscribed, complained or hard bounced.

Quick facts: Suppression List

Category
Email Marketing
Also called
do-not-email list, suppression file
Level
Beginner
Affects
PECR and UK GDPR compliance, sender reputation, data migrations, spam complaints
Where to see it
Your email platform's suppression or unsubscribe settings, CRM opt-out fields, exports kept for migrations
In this article4
  1. How a suppression list works
  2. Why it matters
  3. Common mistakes
  4. How to act on it

A suppression list is a list of email addresses your platform must never send marketing to, whatever other list or segment they appear on. It typically holds people who unsubscribed, complained, hard bounced or asked you not to contact them.

How a suppression list works

Before each send, your email platform checks every recipient against the suppression list and skips any match. Because the check happens at the moment of sending, it works even when a suppressed address turns up again on a new list, through a CRM sync or in a spreadsheet someone uploads.

Most platforms maintain several categories automatically:

  • unsubscribes, through the unsubscribe link or one-click unsubscribe;
  • hard bounces, where the address does not exist;
  • spam complaints passed back through feedback loops;
  • manual additions, such as someone who phoned asking to be removed, or an objection to direct marketing under UK GDPR.

Some businesses also keep a single suppression file across several systems, so that a person who opts out of the newsletter is not then emailed by a separate events or ecommerce platform.

Why it matters

Emailing someone who has opted out breaches PECR and their right under UK GDPR to object to direct marketing, and unsolicited marketing is one of the areas where the ICO most often takes enforcement action. The most common way it happens by accident is an import: an old customer list is uploaded to a new platform, and everyone on it, including people who unsubscribed years ago, is treated as a fresh subscriber.

A suppression list prevents that. The ICO accepts that you can keep just enough information about someone who has opted out, normally the email address, to make sure you do not contact them again. So when a person asks you to erase their data, keeping their address on a suppression list is usually the correct response rather than a contradiction.

It also protects your sender reputation, because re-mailing people who complained and addresses that no longer exist is one of the fastest ways to damage it.

Common mistakes

  • Deleting unsubscribers outright. It feels respectful, but it removes the record that stops them being re-added the next time someone imports a list.
  • Losing suppressions when changing platform. Export the suppression list from the old platform and load it into the new one before importing any contacts.
  • Not syncing across systems. An unsubscribe in your newsletter tool means little if your shop platform sends its own marketing to the same person.
  • Storing more than you need. A suppression list needs the address, the date and the reason, not the whole customer profile.
  • Using suppressed contacts for other marketing. Repurposing the list to target the same people elsewhere is not what they would expect, and it defeats the point.

How to act on it

Find out where your platform keeps suppressions and what each category contains. Export a copy and store it somewhere secure with limited access. Make “load suppressions first” a fixed step in any import or migration, and check that unsubscribes and objections flow between every system that sends marketing: your email platform, your CRM, your shop and any text message tool.

Add suppressions from phone calls and emails promptly, and pair the list with a sunset policy so inactive contacts are moved on in an orderly way.

If your customer data lives in several systems that do not talk to each other, a digital marketing strategy review is a sensible place to work out how they should connect.

Do and do not

Do

  • Load suppressions before any import or migration
  • Sync opt-outs across every system that sends marketing
  • Keep only the address, date and reason

Do not

  • Delete unsubscribers outright
  • Lift a suppression because an address appears in an import
  • Use suppressed contacts for other marketing

Questions people ask about this

Is keeping a suppression list allowed under UK GDPR?

Yes. The ICO accepts that you can keep the minimum information needed, usually just the email address, to make sure you respect someone's request not to be contacted. Without it you could not reliably honour their objection. Keep only what is necessary and use it for no other purpose.

What if someone on my suppression list signs up again?

If they actively subscribe again through your sign-up form, with fresh consent, you can remove them from suppression and email them. Record the new consent, with the date and source, so it is clear why they are back. Do not lift a suppression because the address appeared in an import or a third-party list.

What is the difference between a suppression list and an unsubscribe list?

An unsubscribe list is one part of a suppression list. The suppression list is wider: it also covers hard bounces, spam complaints, objections made by phone or letter, and any address you have decided never to email. All of them are excluded from every send, whichever list they appear on.

Related terms

Found this useful?

Share it, or ask an AI to summarise it

Back to the glossary

Knowing the term is the easy part

Applying it to your own site and budget is the work. Book a call and I will tell you what actually applies to you.