guide

How to collect email addresses with a sign up sheet people trust

September 19, 2026 ・ Halict Editorial

An email sign up sheet is the cheapest thing on any marketing plan and the easiest to get wrong in a way that shows up months later. The sheet fills. The list looks healthy. Then the first real send goes out, a tenth of it bounces, a handful of people reply asking who this is, and somebody has to work out whether the list can legally be mailed at all.

None of that is a design problem. It comes from three decisions that get made by default: what the person was told they were signing up for, whether the address was ever checked, and where the list went afterwards. Each of them is worth making on purpose.

What people are actually agreeing to

A sign up sheet asking for an email address is asking for something more than a field. The person is agreeing to hear from a sender, about something, at some rate, with some way out. A sheet that leaves all four unstated collects addresses that will not open anything.

Say what they get. Not "updates" or "news". The monthly schedule, the discount code, the notice when bookings open. Specific beats generous.

Say how often. A rate is a promise that can be kept. Vagueness here is why people unsubscribe at the second email, and why the first send to an old list feels like an intrusion.

Say who it comes from. The sender name on the first email should be the name on the sheet. If the sheet said the venue and the email arrives from a marketing platform's default address, the reader has no way to recognise it.

Say how to leave. Mentioning that leaving is one click, on the sheet, raises completion. It reads as confidence rather than as a warning.

Those four lines are also close to what the rules require later, which makes writing them the cheapest compliance work available.

The clipboard and the web form are different problems

Two things get called an email sign up sheet, and mixing them up causes most of the damage.

A paper sheet at a desk or a counter collects handwriting. Somebody then types it in. This is where dead addresses come from: a missing letter in a domain, an ambiguous character, a person writing the address of a colleague. Transcription error rates on handwritten addresses are high enough that a paper sheet should be treated as a list of leads to confirm, never as a list to mail.

An online form collects what the person typed, which is better, but not clean. Typos in common domains, deliberately fake addresses, and shared inboxes all arrive through a web form too.

The practical rule is the same for both: the address is a claim until something has been delivered to it. Which means the confirmation email is not a courtesy. It is the check.

Paper sheet, typed in later Web form into a spreadsheet Form tool with response management
Address accuracy Depends on handwriting and typing What the person typed What the person typed, format checked
Proof of when and where they agreed A sheet of paper in a drawer The timestamp row Timestamp, plus the form that was used
Duplicates Found by eye, if at all Found by sorting Grouped on the email address
Confirmation to the person Somebody remembers to send it Automatic acknowledgement Automatic, with a record of the send
Who has the list Whoever has the file Whoever has the link The people invited to the workspace

The column that matters most for an email list is the second row. A year later, the question that arrives is not how many addresses there are. It is where a specific address came from and what that person was told, and only one of these three keeps an answer.

Getting addresses that work

Four checks remove most of the bad addresses, and none of them need a paid service.

Validate the format at the point of entry. An email field on a form does this, and it catches the missing at sign and the stray space. It does not catch anything else.

Send an immediate acknowledgement. This is the real check. If the address is wrong, the send fails, and the failure is visible right away rather than at the first campaign. Any form tool can send a reply on submission, and it should include what the person signed up for so they can see whether it matches what they expected.

Use confirmed opt in when the list will be mailed commercially. One extra click, a confirmation link, and the person who arrives on the list is a person who has proved both that the address is theirs and that they meant it. It costs a percentage of sign ups and it removes almost all of the bounces, the complaints and the arguments.

Group on the address rather than the name. The same person signing up at an event and again on the website is one subscriber, and a list that keeps them as two rows will send them everything twice. Tools that key their contact records on the email address handle this without anyone deduplicating by hand, which is one of the quieter differences between a form with response management and a form that only appends rows.

What is required before the first send

In the United States, commercial email is governed by the CAN-SPAM Act, and the Federal Trade Commission publishes the compliance guide. The requirements that touch a sign up sheet directly are worth reading in the original, and the short version is this.

Header information and subject lines have to be accurate, and the message has to disclose clearly that it is an advertisement where that is what it is. The message must carry a valid physical postal address, which can be a street address, a registered post office box, or a registered private mailbox.

Every message needs a clear and conspicuous explanation of how to opt out. The mechanism has to keep working for at least 30 days after the message went out, and an opt out has to be honoured within 10 business days. No fee can be charged for it, no information beyond an email address can be required, and the person cannot be made to do more than reply or visit a single web page.

The penalties are not nominal. The FTC states that each separate email in violation is subject to penalties of up to $53,088. The full guide is worth an hour before the first campaign: CAN-SPAM Act compliance guide.

Other jurisdictions set their own rules, and several are stricter about consent than CAN-SPAM is, so a list that will be mailed across borders should be built on confirmed opt in rather than on the minimum. The operational consequence for the sign up sheet is small and specific: record what the person was shown, when, and through which form, and keep that record for as long as the address is on the list.

Where the sheet sits decides who signs up

The same sheet performs very differently depending on where it is put, and the placement is a bigger lever than the wording.

A sheet in a website footer collects the smallest number of addresses and, per address, some of the best. Nobody reaches a footer by accident. The people who sign up there have already decided they want to hear more, which is why a footer form needs no persuasion and no incentive.

A sheet shown after something has been completed does better than one shown before. Immediately after a booking, a purchase, a download or a form submission, the person has just had a reason to trust the sender. This is the single most productive placement available and it is usually empty, because the confirmation screen is treated as the end of the process rather than as the best moment in it.

A sheet at a desk or a counter collects volume and quality together only if the ask is specific. "Join the mailing list" performs poorly. "Get the schedule when next term's dates are set" performs well, because it names the thing.

A sheet that interrupts, such as a pop up on arrival, collects the most addresses and the worst ones. Those addresses bounce more, open less, and complain more, and they are the reason list averages fall after a growth push. If that placement is used, confirmed opt in stops it damaging everything else.

Whichever placements are used, record which one each address came from. Without that column, there is no way to tell which sheet is producing subscribers and which is producing bounces, and the honest answer is usually surprising.

The fields worth asking for

Every extra field on an email sign up sheet costs completions, so the list should be short and each item should earn its place.

The email address is the only field that is genuinely required. Everything else is optional, including the name.

A first name is usually worth the cost, because it makes later messages readable. Asking for a full name rarely is.

One question that segments the list is often worth more than three that describe the person. Which of two things they came for, or which location they visit, gives every future send a reason to be relevant. Job titles and company sizes on a public sign up sheet mostly go unused.

Nothing else belongs on the form. What matters internally, such as which event the address came from, whether the confirmation was completed, or which segment somebody was put in, is not a question for the person signing up. It is something the team records beside the entry, which is why keeping internal fields separate from the respondent's own answers is worth more here than anywhere else. The demo shows that split on sample responses.

Where the list lives, and who can reach it

An email list is a pile of personal data, and a sign up sheet decides how carefully it is held.

A shared spreadsheet is the common answer and the weakest one. Everyone with the link has every address. Access, once granted, tends to persist: somebody who helped at one event still has the file a year later, and nobody remembers to check. Rows get overwritten, and there is no reliable record of what was sent to whom.

The better arrangement is boring. Collect through a form so the list is never handed around as a document. Keep it somewhere access is granted per person and can be revoked. Export when an export is needed, rather than living in the export. Know where the data is held, because that question will be asked by somebody eventually.

None of this requires enterprise software. It requires the list not to be a file that circulates.

What to change first

Write the four lines that say what the person gets, how often, from whom, and how to leave, and put them next to the field. Then add an immediate acknowledgement and treat its delivery as the check that the address is real. If the list is being worked on by more than one person, and the trouble is that nobody can see who has already been written to, Halict keeps the owner, the status and the sent replies on each entry.

Q1. Should an email sign up sheet use double opt in?

For a list that will be used for marketing, yes. Confirmed opt in costs a percentage of sign ups and removes most bad addresses, most complaints, and the later argument about whether a specific person actually agreed. For an internal list, or one that will only ever receive a reply to something the person asked about, an immediate acknowledgement is usually enough.

Q2. What does the law require before emailing a list collected this way?

In the United States, the CAN-SPAM Act requires accurate header information and subject lines, disclosure that a message is an advertisement, a valid physical postal address, and a clear way to opt out. The opt out must keep working for at least 30 days after the send and must be honoured within 10 business days. The FTC states that each separate email in violation is subject to penalties of up to $53,088.

Q3. How many fields should an email sign up form have?

One is enough, and two is common: the email address, plus a first name if later messages will use it. Each extra field reduces completions, and the answers to questions about job title or company size on a public sign up sheet usually go unused. A single question that segments the list is worth more than three that describe the person.

Q4. How do you deal with addresses collected on paper?

Treat them as leads rather than as subscribers. Handwritten addresses produce transcription errors at a rate that makes a paper sheet unsafe to mail directly, so type them in, send one confirmation immediately, and keep only the addresses where that confirmation was delivered. Recording which event the sheet came from is worth the extra column.

Q5. Is a shared spreadsheet an acceptable place to keep an email list?

It works and it leaks. Everyone with the link holds every address, access granted for one event tends to persist for years, and there is no record of what was sent to whom. Collecting through a form and keeping the list somewhere access is granted per person, then exporting when an export is genuinely needed, avoids most of that.

All guides

How to collect email addresses with a sign up sheet people trust | Halict