Email Marketing Best Practices for Online Stores

Every “best practices” list tells you to write good subject lines and send at the right time. That advice is cheap. What a small store actually needs to know is what the numbers look like right now, which rules can get your mail blocked or fined, and which workflows produce orders. This guide covers those three things, with every figure tied to a source we checked on November 10, 2026.

Two things this guide is not: it is not based on hands-on testing of any platform, and it is not a ranking of tools. It is a compilation of published platform benchmark data, official sender requirements from Google and the FTC, and documented ecommerce research. Where a number comes from a vendor’s own data, we say so — and remember that each platform’s benchmarks describe its own user base, not the whole industry.

1. Know what “normal” actually is (2025–2026 benchmarks)

Before optimizing anything, calibrate. Two independent 2026-era datasets put ecommerce email performance in the same band:

Sources: Mailchimp’s benchmark page (checked Nov 10, 2026) and Omnisend’s 2026 ecommerce marketing statistics report via its statistics page. Two caveats keep these numbers honest: Mailchimp calculates averages from “billions of emails delivered by our system (where campaign tracking was activated, and where users reported their industry)” — and it “only tracked campaigns that went to at least 1,000 subscribers” — so the figures describe tracked, self-classified Mailchimp campaigns, not all stores everywhere. Omnisend’s figures likewise describe its own merchant base.

Practical read: if your store’s regular campaigns open around 30% and click around 2%, you are in the normal band — not failing. A store clicking far below 1.74% has a relevance problem (audience, offer, or targeting), not a “subject line magic word” problem. And since ecommerce unsubscribes average just 0.19% per Mailchimp, a spike above that is an early warning that frequency or content has drifted.

2. Build the list on permission — never buy it

Modern email marketing is “built on permission, segmentation, and personalization,” as Brevo’s guide puts it — the 1978-style blast-to-everyone era is over. For a store, permission is not just polite, it is the input every deliverability rule below assumes.

What this means concretely:

• Collect addresses at checkout, via signup forms and popups, and through post-purchase flows — from people who chose to hear from you.
• Never buy or rent lists. Recipients who never asked for your mail report it as spam, which feeds directly into the spam-rate ceiling in the next section.
• Prune deliberately. Google’s sender guidelines recommend you “periodically send messages to confirm that recipients want to stay subscribed.” A smaller engaged list outperforms a big dead one on every metric that matters.

Growing the list is exactly where a pop-up tool earns its price: See Privy pop-ups and email capture captures emails with pop-ups, exit-intent and wheel campaigns built for Shopify stores (our partner link carries a 30%-off first-3-months offer).

3. Pass the authentication bar before anything else

Since February 1, 2024, senders of more than 5,000 messages per day to Gmail accounts must meet Google’s bulk-sender requirements. Most small stores send far less than that, so the hard threshold won’t apply — but Google’s guidance notes that “large providers, such as Google, AOL, and Yahoo, typically follow these guidelines,” so treating them as the standard is the safe default. The baseline Google sets for all senders is “SPF or DKIM” authentication for your sending domains, valid forward and reverse DNS (PTR) records, and a TLS connection for transmitting email.

For bulk senders, Google’s requirements are:

1. SPF and DKIM email authentication for your domain.
2. DMARC authentication for your sending domain.
3. One-click unsubscribe: “Marketing messages and subscribed messages must support one-click unsubscribe, and include a clearly visible unsubscribe link in the message body.”
4. Spam rate below 0.30% as reported in Google Postmaster Tools.
5. Don’t impersonate Gmail From: headers, and keep the From: domain aligned with your SPF or DKIM domain.

The good news for a store on a mainstream email platform: the platform does the technical setup, and you confirm it in the tool’s domain-settings page. What only you can do is keep the spam-rate input low — which loops back to permission-based list building. Google’s own warning about non-compliant mail is blunt: it “might not be delivered as expected, or might be marked as spam.”

4. Treat CAN-SPAM as a checklist, not a suggestion (US stores)

If you have US customers, the CAN-SPAM Act applies to commercial email you send them, regardless of your list size. The FTC’s compliance guide boils down to rules a store can audit in ten minutes:

• No false or misleading headers; no deceptive subject lines. Your “From” must identify you; the subject must reflect the content.
• Tell recipients where you are: “Your message must include your valid physical postal address” — per the FTC, that can be “your current street address, a post office box you’ve registered with the U.S. Postal Service, or a private mailbox registered with a commercial mail receiving agency.”
• Honor opt-outs fast: “You must honor a recipient’s opt-out request within 10 business days.”
• Keep the opt-out mechanism alive: “Any opt-out mechanism you offer must be able to process opt-out requests for at least 30 days after you send your message.” And you “can’t charge a fee” or “require the recipient to give you any personally identifying information beyond an email address” to process an opt-out.
• You are responsible for your vendors. Per the FTC, “even if you hire another company to handle your email marketing, you can’t contract away your legal responsibility” to comply — and both the company whose product is promoted and the company that sends the message may be held responsible.

The stakes are not theoretical: per the FTC, “Each separate email in violation of the CAN-SPAM Act is subject to penalties of up to $53,088” — and multiple parties (both the product company and the sender) can be held liable. If you also sell to customers in the EU or UK, separate opt-in-based privacy laws apply there; check those separately before adding European shoppers to marketing flows.

5. Automate the three workflows that actually produce orders

This is where published data is least ambiguous. Across Omnisend’s ecommerce dataset:

• Automated emails ended 2023 with a 42.1% open rate, 5.4% click rate, and 1.9% conversion rate — “significantly higher than campaign metrics.”
• In its 2025 data, automations were just 2% of email sends but drove 30% of revenue, earning about 16× more per send than scheduled campaigns.
• Per email, automated messages generated $2.87 versus $0.18 for campaigns.
• The top three automation types by orders: abandoned cart, welcome, and browse abandonment, which together accounted for 87% of all automated orders. Back-in-stock emails posted the highest conversion rate (6.46%), and birthday automations produced an average order value more than 4× the average ($744.37).

Why abandoned cart tops the list needs no vendor data at all — the behavior it recovers is enormous. Baymard Institute’s running average across 50 published studies (2006–2025) puts the documented cart abandonment rate at 70.22%, with individual studies ranging from 55% to 84%.

The recovery math (our illustration, using Baymard’s average): for every 1,000 shoppers who build a cart, roughly 702 leave without buying. An abandoned-cart series that wins back even 5% of those abandoned carts adds about 35 orders per 1,000 carts — from traffic you already paid for. Your abandonment and recovery rates will differ; the point is the order of magnitude of the opportunity.

For a store starting from zero, the sequence with the best documented payoff is: welcome series → abandoned cart → browse abandonment, then back-in-stock and order/shipping follow-ups. We cover the setup paths in detail in our welcome email series walkthrough and abandoned cart email setup guide.

6. Segment and personalize before you “optimize”

The single biggest performance gap in the numbers above is not subject-line wording — it is campaign-vs-automation, i.e., relevance at the time of send. Segmentation is how you push regular campaigns toward automated-level relevance:

• Split by customer status: first-time buyers, repeat buyers, browsers-who-never-bought, lapsed customers.
• Split by behavior: what they viewed, what they left in the cart, what they actually bought.
• Then send targeted content to each slice — “personalization and segmentation” is how Brevo’s guide frames the entire mechanism, and it matches what the automation data rewards.

Personalization here does not require AI tooling: name in the subject, product recommendations from browse/purchase history, and sending the right category of email to the right segment is most of the value.

7. Test subject lines like a scientist, not a copywriter

Subject lines are the most over-discussed and most cheaply improved element of email marketing. Brevo’s guide defines the discipline plainly: A/B testing is “testing different versions of an email (like subject lines) to see which performs better.” For a small store:

• Test one variable at a time (subject line OR preview text OR send time), on a meaningful sample, before rolling out.
• Keep subject lines honest and accurate — which is also a CAN-SPAM requirement (Section 4), not just a style preference.
• Judge by click rate and revenue per email, not opens alone; Omnisend’s 2025 data shows opens rising while clicks declined, so open-rate wins can be hollow.

The 10-minute weekly checklist

1. New subscribers came from consent-based sources (no purchased lists).
2. SPF/DKIM (and DMARC where required) verified in your email platform’s domain settings.
3. Every campaign footer: physical postal address + working unsubscribe link.
4. Postmaster Tools spam rate below 0.30% (if you send at volume).
5. Welcome, abandoned cart, and browse-abandonment automations active and tested.
6. Benchmark your campaigns against the ecommerce band above (≈30% open / ≈2% click) rather than guru numbers.
7. Unsubscribe or bounce rate spiking? Stop sends and fix the cause before the next campaign.

FAQ

What is a good open rate for an ecommerce store? On current data, roughly 30%: Mailchimp’s ecommerce industry average is 29.81% and Omnisend’s 2025 ecommerce average is 30.7% (both checked Nov 10, 2026). Both figures come from each platform’s own user base, and Mailchimp itself cautions that open-rate accuracy “may be impacted by Apple’s privacy changes and their Mail Privacy Protection (MPP) feature” — so treat opens as a directional signal and clicks as the real one.

Do Gmail’s 5,000-per-day sender rules apply to my small store? The mandatory requirements apply to senders of more than 5,000 messages per day to Gmail accounts. Below that, Google’s baseline recommendations still apply to everyone: SPF or DKIM authentication, valid forward/reverse DNS (PTR), TLS transmission, and clear unsubscribe handling. Meeting them early costs nothing and protects deliverability as you grow.

What time should a store send email? There is no universal best send time in the data we reviewed. Brevo’s guide suggests a starting point — “start with Tuesday/Thursday mornings (around 10 AM) or afternoons (around 3 PM)” — and then test. Treat any specific hour as a hypothesis for your own list, and judge the result by click rate and revenue per email, not opens (see the MPP caveat above).

How much revenue should a store email program generate per send? There is no universal number, but Omnisend’s 2025 ecommerce data gives a useful internal ratio: automated emails generated $2.87 per email versus $0.18 for scheduled campaigns — about 16× more, because an automated send reaches one person at the exact moment of intent.

Where can I compare what these platforms cost? See our cheap email marketing cost comparison and SMS vs email marketing breakdown for dated price tables across providers.

Tools that support these practices

Every practice above is table stakes on modern platforms. On this site we track dated pricing and policies for several, including Omnisend, GetResponse, Kit, and Moosend — see the guides linked above. The benchmarks in this article are sources, not endorsements: we cite Mailchimp and Omnisend because their datasets are public, ecommerce-specific, and dated, not because we tested or ranked the tools.

Disclosure: this site earns commissions from some email marketing providers listed in our comparisons. That never changes what we report — all figures here come from the linked sources and carry check dates.