Why trade show marketing survey tools need a privacy check first

What to take away

Why the survey tool choice is a consent decision

A short stand survey looks harmless. It still collects personal data and often asks for an email address for follow-up. Under the UK GDPR and PECR, that follow-up is electronic marketing.

The Information Commissioner's Office guide to PECR is a reference point for consent, the soft opt-in and rules on calls and emails. Check the wording at the stand against the follow-up you intend to send: asking someone to complete a survey is not, by itself, consent to marketing.

The Privacy and Electronic Communications Regulations 2003 (PECR), regulation 22, generally requires prior consent for unsolicited electronic mail marketing to individual subscribers. The consent must be freely given, specific, informed and unambiguous, shown by a clear affirmative action; the soft opt-in is a limited exception, not a blanket rule for existing customers.

Decide and document a UK GDPR lawful basis for collecting and using responses. If your organisation is a controller, check the ICO's data protection fee self-assessment and whether an exemption applies.

What to compare across tools

The market splits into three rough groups: general form builders, event lead-capture apps and research platforms with panel access. Each solves a different problem.

Form builders are cheap and flexible. They struggle with offline capture when the venue wifi drops, which is common in exhibition halls.

Lead-capture apps scan badges and store responses locally, then sync later. They cost more and often lock exports behind a higher tier.

Research platforms add sampling and weighting. Useful if you want to size a market, unnecessary if you only need 80 stand conversations logged.

Treat the cost bands above as illustrative only. Verify the selected tool's current price, licence scope and data terms before purchase.

Consent wording for a busy aisle

Keep the survey brief, and separate the questions needed for research from any choice to receive marketing. Explain who is collecting the data, why it is needed and where the privacy notice can be found.

Avoid asking for information you already hold or do not need. Collecting fewer personal details makes the purpose clearer and reduces the data you must protect and retain.

Test the survey with five colleagues before the show. Check that the marketing choice is separate, unticked by default and easy to understand, and that the privacy notice explains how responses will be used.

For marketing by email, a reusable starting point is: “Tick here if you would like [company] to email you about [specific products or services]. You can unsubscribe at any time using the link in each email. See [privacy notice] for how we use and keep your data.” Name the organisation and the marketing purpose, use a separate unticked box, and adapt the wording to your actual practices.

After the event: retention and follow-up

Decide in advance how responses will be used and who needs access. Segment them within a week while the conversations are still memorable, but only use contact details for follow-up that your lawful basis and any required marketing consent allow.

Set a retention period that fits the stated purpose, record it in your privacy information and review it after the event. For separate observations about other exhibitors, see our trade-show marketing competitor research guide; do not add identifiable visitor data unless it is necessary for that purpose.

Before uploading responses or contact details to an advertising platform for paid follow-up, check that the proposed use is covered by your lawful basis and any required consent. Platform guidance on targeting and measurement does not replace your UK data-protection and PECR checks.

Check the survey vendor's contract and data handling

If the vendor processes personal data for you, check that you have a written processor contract meeting Article 28 of the UK GDPR. The contract should cover the processing, confidentiality, security, assistance with data-subject rights, deletion or return of data, and the use of sub-processors.

The Chartered Institute of Marketing's Sustainable Marketing Hub sets out guidance on environmental claims, and the Competition and Markets Authority expects claims to be substantiated, not implied.

Ask how to export responses, record consent, action deletion requests and delete or return the data when the service ends. Keep only what you still need for the stated purpose, and retain evidence of marketing consent while you rely on it.

A buying checklist

Common questions

Do I need consent to email someone who filled in a survey at my stand?

Usually, if the email is direct marketing to an individual subscriber, PECR regulation 22 requires consent unless the soft opt-in applies. That exception is limited to contact details collected during a sale or negotiations for a sale, marketing your own similar products or services, and providing an opt-out when details are collected and in each message. Rules differ for corporate subscribers; where personal data is used, you still need a UK GDPR lawful basis.

Can I use a free survey tool for a trade show?

Yes, if the specific plan meets your needs and its terms allow your intended use. Examples include Google Forms, Microsoft Forms, Typeform and SurveyMonkey; check each plan's data storage, export limits, commercial-use terms, processor contract and transfer safeguards before relying on it.

How many questions should a stand survey have?

Aim for five or fewer. Visitors are standing, often holding a bag, and deciding whether to continue. Long surveys reduce completion and annoy the people you most want to talk to.

What should I do with responses after the event?

Use responses only for the purposes explained to visitors, and route qualified leads to sales only where your lawful basis and any required marketing consent allow it. Follow your documented retention period, delete data when it is no longer needed, and keep evidence of consent while you rely on it.