Salon SMS GDPR Guide for Ireland and the UK

You can send marketing texts to clients who have consented, or to existing customers where specific conditions are met; every message must say who it's from and carry a free, easy opt-out; and an opt-out lasts forever.

If you remember nothing else, remember that. The rest of this guide is that sentence, unpacked.

The single most useful distinction in salon texting is the line between messages that are part of delivering the appointment and messages that are selling something.

Service messages are the admin of the appointment itself: booking confirmations, appointment reminders, "we're running ten minutes behind," aftercare instructions, a rescheduling note. These aren't direct marketing. They're you doing your job, and clients expect them as part of the service they booked.

Marketing messages are anything promotional: offers, new services, quiet-day invitations, win-back messages, anything designed to bring in a booking that doesn't exist yet. These fall under the direct marketing rules, and everything in this guide applies to them.

Now the trap that catches well-meaning salons: a service message with promotion bolted on becomes a marketing message. The reminder that ends with "and ask about 20% off treatments this month!" has crossed the line, and the whole text now needs to play by marketing rules. Keep reminders pure and your reminder channel stays simple and safe.

And the honest grey area: a due-back nudge, the friendly "about that time again" text covered in the guide to finding salon clients who are due back. It feels like service, because it serves the client. But it invites a booking that doesn't exist, so the safe and sensible position is to treat it as marketing and apply the full rules. Happily, as you're about to see, that's not a high bar for a salon texting its own regulars.

Two layers of rules apply to salon texting, and they work together rather than against each other.

The data layer: GDPR. In Ireland, the GDPR; in the UK, the UK GDPR alongside the Data Protection Act. This layer governs how you handle personal information generally: keeping client details accurate and secure, using them fairly, being able to show what you've recorded, and respecting a client's right to object to marketing.

The message layer: the ePrivacy rules. This is the layer written specifically for marketing texts, emails and calls. In the UK it's the Privacy and Electronic Communications Regulations, usually shortened to PECR. In Ireland it's the ePrivacy Regulations 2011. Both treat a text message as "electronic mail," so the same family of rules covers your texts and your emails.

And the message layer's core rule, in both countries, is the one that matters most: you can only send unsolicited marketing texts to individuals if you have their consent, or if you meet every condition of the existing-customer exception.

Consent here has a specific meaning, taken from the GDPR: a freely given, specific, informed and unambiguous yes, given by a clear action. A box the client ticked themselves counts. A box that came pre-ticked doesn't. Silence doesn't. "They gave us their number when they booked" doesn't, on its own. And whatever form the yes took, you should be able to point to a record of when and how it was given, because if a question is ever asked, the onus is on the business to show its homework.

Here's the part of the rules built for businesses exactly like a salon. Both countries recognise that a client who recently bought from you, handed over her details in the process, and was given the chance to say no to marketing has signalled something. The existing-customer exception, often called the soft opt-in, lets you market to her without separate consent, provided you meet all of the conditions. All of them, every time.

For a salon, the everyday translation is friendly. A client who comes in, pays, and was given a genuine chance to opt out of marketing can generally be texted about your services, because a colour client hearing about colour, treatments or a quiet-Tuesday slot is squarely "similar services." A name from a bought list, a competition entry, or a friend-of-a-friend's number can't be; the soft opt-in only ever applies to your own customers.

Now the Irish detail that deserves its own paragraph, because it changes how Irish salons should think about win-backs. In Ireland, the soft opt-in has a clock on it. If you haven't sent a client a marketing message in over twelve months, the exception lapses for that client. So a lapsed-client list built from clients last contacted two years ago may largely fall outside the soft opt-in in Ireland, even though those clients were once regulars. The practical move: keep your marketing rhythm gentle but alive for clients you value, check the last-contacted dates before any win-back campaign, and lean on recorded consent rather than the soft opt-in for anyone outside the window. The win-back templates are only as good as the list behind them, and in Ireland, the list has a sell-by date.

UK salons don't face that fixed clock under the commercial soft opt-in, but the spirit travels: the longer a client has heard nothing, the weaker the footing and the warier the welcome. Either side of the border, fresher is safer.

Three things, no exceptions, in both countries.

Who it's from. The salon must be identifiable. Hiding or disguising the sender isn't allowed, and from a pure marketing standpoint it would be self-defeating anyway: the salon name is the reason the message gets read.

A free, easy way out. Every marketing message needs a working opt-out that costs the client nothing more than a standard reply: "Reply STOP to opt out" does the job. It has to genuinely work, every time.

Respect for the no. An opt-out applies immediately and permanently for marketing. The client can still book, still visit, still get her appointment reminders. She just never gets marketing again unless she actively opts back in herself.

What that looks like in practice:

Notice the compliant version is also simply the better text. The sender is named, the offer is specific to the client, and the exit is right there. The rules and good manners point the same direction, which is the quiet theme of this entire guide.

The rules stop being abstract the moment you open a client export, because everything above lives in columns you can actually look at. (If exports are new territory, the guide to using salon booking exports for SMS marketing starts from the download button.)

Before any campaign, run the list through this flow:

Is this message marketing?

• No, it's pure appointment admin → send it, and keep it pure.
• Yes, or it's borderline → next question.

Does everyone on the list have marketing consent recorded?

• Yes → make sure the message names the salon and carries the opt-out, and you're good.
• Not everyone → next question for those clients.

Do those clients meet every soft opt-in condition?

• They're genuine customers, the number came from them in the context of a sale, you're promoting your own similar services, they had a chance to opt out at the start and will again in this message, and (in Ireland) the twelve-month window is intact → proceed, with the salon named and the opt-out included.
• Any condition missing → don't send. Get consent first, ideally at the next visit; the till conversation gets that yes more easily than any campaign ever will.

And always: the opt-out list has been applied, so nobody who said stop is on this list, ever.

Pin this one up.

• The message is clearly marketing, and I'm treating it as such
• Everyone on the list has recorded consent, or meets every soft opt-in condition
• In Ireland: nobody on the list is outside the twelve-month window
• The salon is named in the message
• There's a free, easy opt-out, and it works
• Every previous opt-out has been honoured and removed from the list
• There's a record of where the consents came from, in case anyone ever asks
• I've read the final message and approved it myself

It's worth saying plainly: a salon can follow every rule above and still wear out its welcome. The rules set a floor. The goal is texts your clients are glad to get, and that's about judgement, not law.

The judgement comes down to three habits. Frequency: a client should hear from you when there's something genuinely useful to say, which for most salons means a couple of marketing texts a month at the very most, and usually fewer. Timing: send at hours you'd be happy to receive a text from a business. Relevance: the well-aimed message is the welcome one, which is why the targeted segments in this series, the right campaign for the right kind of diary gap, the due-back nudge in its window, beat any broadcast to the whole list. The same targeting that makes texts effective is what keeps them welcome, and what keeps the opt-out rate at a trickle instead of a verdict. For the tone side of that judgement, the text message etiquette guide for salons covers the dos and don'ts that keep a salon welcome.

Everything in this guide can be run by hand: consent column checked, opt-out list applied, windows counted, message reviewed. The risk in the manual version isn't ability, it's the busy Tuesday where a step gets skipped.

TextSavy builds the steps into the workflow itself. It works alongside the booking system you already have, by export or by direct connection, and the compliance handling is part of the platform: consent is respected in how lists are built, every message carries opt-out language, STOP and START replies are enforced automatically and permanently, and an audit trail records what was sent, to whom, and when, which is exactly the homework the rules expect a business to be able to show.

And the final safeguard is the one TextSavy treats as a feature rather than a formality: nothing sends without the owner reading and approving it. The checklist above effectively runs itself, and the last line of it, the human judgement, stays exactly where it belongs.

Want the rules handled as part of the workflow instead of a worry on top of it? See how TextSavy's compliance handling works, browse the ready-made wording in the template packs, and when you're ready, see the whole flow from booking data to approved campaign or book a demo and we will walk you through it. Texting your clients well was never the risky part. Not texting them at all is the cost that compounds.