How consent rules and skills gaps reshape a loyalty marketing plan

What to take away

A loyalty marketing plan in England is best read as a set of pressures rather than one growth figure, and this guide covers the two that move it most: consent rules and skills. Demand for retention programmes holds steady because replacing a customer costs more than keeping one. What changes is the cost of proving a scheme works.

That makes the useful question which parts of your plan move first when conditions change. The loyalty marketing trends and outlook for England in 2027 sets out the demand and cost backdrop this article builds on.

What is driving demand in England?

Retention budgets are defended harder than acquisition budgets in most planning rounds. A scheme that can show repeat purchase behaviour has an easier case than one reporting sign-ups alone.

Boards ask for payback periods rather than member counts. A programme that cannot name the behaviour it changes tends to lose that argument.

The Customer Engagement 2026 agenda from the Data & Marketing Association shows loyalty, personalisation and measurement sitting together on the programme, which is where practitioner attention sits for the year ahead.

Referral sits inside that frame. A referred customer arrives with a reason to trust the brand, so referral marketing software earns its place when it can attribute the arrival to a named advocate.

What is pushing costs up?

Consent and data work is the main cost driver. Each new communication channel adds a lawful basis question, and answering it properly takes analyst and legal time.

The ICO direct marketing guidance, including its Guide to Privacy and Electronic Communications Regulations, sets out how consent, soft opt-in and suppression should be handled, and it applies to loyalty messaging as much as to cold outreach. Its electronic mail marketing guidance states that you must not send marketing emails or texts to individuals without specific consent, and that the soft opt-in does not apply to prospective customers or new contacts such as bought-in lists. You must also give a clear chance to opt out, both when you first collect the details and in every message you send.

The rule underneath is regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003. It bars sending unsolicited direct marketing by electronic mail unless the recipient has previously notified the sender that they consent. The exception, the soft opt-in, applies only where the sender obtained the contact details in the course of a sale or negotiations for a sale, the marketing is about the sender's own similar products and services, and the recipient was given a simple means of refusing. A loyalty scheme that recruits members at checkout can often rely on it; a referral scheme that emails a friend's address cannot, because that contact was never a customer.

Electronic marketing also sits under the Communications Act 2003, the statutory backdrop the regulator works from. Neither source is new, but both shape what a scheme can lawfully do and what it costs to run.

Re-permissioning an existing list costs more than collecting consent at sign-up. Suppression files, preference centres and audit trails need maintaining year round, and one extra channel can add weeks of analyst time before the first message goes out.

Where does the skills gap bite?

The national picture is measured by the Department for Education's Employer Skills Survey. In 2024, 12% of employers reported skills gaps (at least one member of staff judged to lack full proficiency), lower than in 2022 (15%), and there were around 1,078,300 employees with skills gaps in England. The same survey counted 345,300 hard-to-fill vacancies in 2024, down from 850,000 in 2022, with 8% of employers holding at least one vacancy proving hard to fill. The gap has narrowed, but it has not closed, and specialist roles feel it first.

Where analytics and lifecycle roles are hard to fill, the shortfall shows up as delayed reporting rather than failed launches. A scheme can go live on time and stay unreadable for months.

Before you commit to a reporting timetable, list the roles it depends on: who builds the cohort reports, who maintains the suppression file, who owns the consent records. Any role without a named person is the point where the plan will slip.

If you cannot hire, narrow the metric set. Three measures finance trusts beat twelve nobody maintains. Contract cover solves a launch but rarely the reporting cycle that follows.

How should you read a forecast?

Treat any outlook as a scenario, not a prediction. Build three versions: costs flat, costs up by an amount you state and can defend, and a consent change that removes a channel.

Each row should carry a source or a stated assumption. If a number has neither, remove it.

What triggers an update?

Update the outlook when something named changes: a new ICO position on consent, a platform pricing change, a regulator ruling, or a shift in your own retention rate.

Two changes warrant an immediate refresh: a shift in the lawful basis you rely on, and a platform price rise beyond your modelled range. Set the trigger in writing with an owner and a date. A forecast with no trigger becomes an annual document nobody reads.

Common questions

Is the outlook the same across the UK?

No. Marketing rules apply UK-wide, but the practical picture differs by nation. Keep the plan England-specific where your data is, and check devolved guidance separately.

How often should a small team refresh it?

Twice a year is usually enough for a small scheme, plus an immediate refresh when a named trigger lands.

Does referral marketing follow the same outlook?

Broadly yes. Referral shares the consent and attribution pressures of loyalty, so the same triggers apply. Referral performance is easier to attribute to a named person.