Can you contact an abandoned checkout? Consent rules for email vs. mail

Recovery has a consent question built into its premise: the person you want to contact never finished telling you they want to hear from you. The rules that govern what you may send them differ sharply by channel — and knowing the difference is what lets a recovery program run aggressively and respectfully at once. (Plain English follows, not legal advice; jurisdictions differ and rules move.)

Email: narrow ground, walk it carefully

An abandoned checkout gives you an email address without a marketing opt-in — those are different gifts. The practical framework:

• Cart-specific messages stand on the transaction. A reminder about the checkout they started is the defensible use of that address. US law (opt-out based) accommodates it; stricter regimes tolerate it narrowly; everyone’s patience ends where the message drifts from their cart to your catalog.
• The address is not a list signup. Piping checkout emails into newsletters and promos without a separate opt-in is where stores cross from recovery into spam — legally in some places, reputationally everywhere.
• Unsubscribe is sacred and channel-wide for email. One step, honored immediately, backed by a suppression list that outranks every sequence (including mid-ladder).

Postal mail: broad ground, mind your manners

The US imposes no opt-in requirement for marketing mail to an address a customer gave you. The checkout address that couldn’t receive one more email can lawfully receive a recovery postcard — which is precisely why the postcard rung reaches shoppers the email rungs legally or practically cannot. The obligations that remain are practical: a real return address on every card (postal regulations expect it, and it’s literally this app’s name), restraint (one card per abandoned cart, ever — recovery is an event, not a subscription), and a respected stop-mailing request, law or no law.

The design consequence

Put the two rule sets together and the channel ladder writes itself: email does the high-frequency work where the transaction justifies it, and paper makes the single, higher-cost, consent-free touch for the carts that earn it. Neither channel is asked to do what its rules discourage — which is what “compliant by design” actually means.

What your tooling should guarantee

None of this should depend on your memory: suppression checked at send time (not just at scheduling), unsubscribe headers on every recovery email, instant sequence-stop on completion, mailability checks before any card, and a spend cap bounding the whole machine. The merchant’s job is the strategy; the plumbing’s job is making the wrong thing impossible.