Underneath the legal checkboxes that ask visitors to accept cookies lies a bigger truth: consent, by itself, is a weak foundation for marketing because it doesn’t create trust. Trust is what actually keeps people listening and buying.
I’ve seen that customer expectations are contradictory: two thirds of people are concerned about the sheer amount of data brands collect, and a large majority of people say data privacy is a growing worry.
Despite my work and proximity to the problem, I am among this majority - I have concerns about my data as well.
But more than six out of ten shoppers still want brands to learn from their habits and send relevant offers. The real tension isn’t between personalization and privacy, but between surveillance and reciprocity.
Is the personal information I'm giving away equal in value to what companies are giving me back? Am I even aware of the implications?
When people feel that their information is being harvested indiscriminately, confidence plummets. Only about one in five consumers feel confident that their data is used appropriately, and almost half have already cut ties with a brand because of privacy worries.
Conversely, when a company treats personal data with care and communicates clearly how it will be used, loyalty goes up; more than four out of five users say the way a company handles their data signals how they will be treated as customers, and 84 % are more loyal to businesses with robust security controls.
Shoppers reward relevance, too: 64 % say most marketing is too generic and want messages tailored to their preferences, 73 % are more likely to buy when they receive product suggestions that match what they’ve shared, and 65 % will tolerate a higher message frequency if the content actually reflects their needs.
What emerges from these numbers is simple: collect only what people voluntarily give you, be explicit about why you need it, and use it to deliver something they value.
When we revamped our data collection operations around these principles, we discovered that far too much of the data we had collected was unused.
Globally, according to Forrester, about 73 % of data gathered is unused by businesses. This is why so we stopped hoarding behavioral signals and shifted to zero‑party data: explicit preferences and feedback that customers share because they see a direct benefit.
To do this, we redesigned sign‑up flows to ask only for information that powers better experiences, like favorite product categories or communication cadence, and we built a preference center where people can update those choices anytime.
We rewrote our privacy copy to sound less like a lawyer, because more than half of people admit they often click “agree” without reading policies, and roughly two‑thirds find typical privacy notices ineffective.
I, again, am among those people who basically never reads the notice.
I usually click deny out of hand because why indulge them if I don't have to? I get annoyed when the company doesn't offer a decline option (which is technically illegal in Europe). I click decline not because I genuinely worry about someone using Google Analytics to know I live in Berlin, but because my data is a currency. It's money that I own (or should own) Why even indulge the company at all when no promises of meaningful return have been made?
I don't generally feel that I have anything to gain from ads (I block them), or "additional benefits" of that page, by giving that information. I'm also annoyed that my user journey was interrupted by having to search for a tiny X or a "Deny" option hidden in the "Manage settings" tab (again, illegal in Europe).
We began measuring success not just in clicks or conversions, but in how often prospects remark on our clarity; internal surveys and support tickets show a drop in privacy‑related questions, and, as a result, Facelift's unsubscribe rates have fallen.
The shift also required us to rethink our technology. A composable stack built from interoperable components allows us to plug in new consent‑management tools or replace a data‑warehouse module without ripping apart the entire system, which is vital in a space that has exploded from about 150 marketing‑technology tools in 2011 to more than 15,000 in 2026.
We anticipate that by 2027, most organizations will have begun adopting composability as a core digital principle of their tech stacks; so adopting it early gives us the ability to respect privacy while still personalizing content.
The numbers make it clear that trust and relevance can co‑exist.
More than three-quarters of buyers are even willing to share an email address if it means receiving personalized experiences. In other words, people are not anti‑data; they’re anti‑exploitation. They will reward brands that articulate a clear value exchange and honor it. For us, that has meant using what we learn about a person to serve them more quickly: remembering their size, preferred communication channel, or price range and reflecting that in everything from our website to our triggered emails.
It has meant training customer‑facing teams to talk about data handling as a point of pride, and it feeds into the way we sell ourselves as a European brand; a brand that adheres to customer-centric rules, and a cultural social contract of respect for privacy.
It has meant choosing AI models that respect consent signals rather than override them - a topic very important to us as an AI company.
It has also meant resisting the temptation to treat consent as a checkbox to mine more information; we no longer see regulation as an obstacle to growth but as an incentive to design better experiences.
The upshot has been a more engaged audience, which supports evidence that 93 % of shoppers are likely to stick with a brand that personalizes well, and a reduction in wasted effort, because our messages land with people who actually care.
If there is one lesson I take from these statistics, it is that the future of marketing belongs to teams that view data as a relationship rather than a resource: one that must be nurtured, respected and rewarded.