First-Party Data: What It Is and What a Small Shop Can Collect
By Alva Chew · Updated
Definition First-party data is information you collect yourself from your own customers, such as purchases, email addresses and visit dates. It differs from third-party data, which you buy or get from other sources. For a shop, a points programme is a simple way to collect it, because the customer gives an email once and every purchase after that is linked to them.
What is first-party data?
First-party data is information you collect directly from your own customers. Google’s advertising policy puts it plainly: first-party data is information you collect from your customers, site visitors, and app users.
For a café, restaurant or shop, that means the email a customer gives you, the dates they visit and what they spend. You gather it yourself, so you know where it came from and what the customer agreed to.
How is it different from third-party data?
| Type | Where it comes from | Example |
|---|---|---|
| First-party | Your own customers, collected by you | Email, purchase history, points balance |
| Third-party | Bought or obtained from other sources | A purchased mailing list, a data broker’s audience |
Source: Google, Data use in personalized ads, which defines third-party data as user information you purchase or otherwise obtain from other sources.
The same policy page says that using first-party data to build ad audiences is allowed on Google’s platforms. Using third-party data for that purpose is not. The practical point for you is that data from your own customers is the data you can rely on.
What first-party data can a small shop collect?
You do not need much. Four fields cover most of what an owner acts on:
- Contact. An email address, given once when the customer joins.
- Purchases. The amount and date of each sale, linked to the member.
- Visits. How often each member comes back. See purchase frequency.
- Rewards. Points earned, points redeemed and the current balance.
Without a membership, a till records sales but not who made them. Ten sales of US$6 look the same as ten different customers. Linking each purchase to a member is what turns sales records into first-party data.
Why does it matter for a loyalty programme?
A loyalty programme is the usual way a small shop starts collecting first-party data, because the customer has a reason to identify themselves. They get points on every purchase.
With points, the data comes from an action customers already understand. They spend, they earn and they redeem. Nobody has to learn a stamp rule or a tier to be recorded. Our page on the points-based loyalty program shows how earn and redemption rates work.
A digital loyalty card records this automatically. A paper card gives you nothing to read back.
What do the privacy rules say?
Collecting first-party data does not mean you can use it for anything. In Singapore, the PDPA’s Purpose Limitation Obligation (section 18) says an organisation may collect, use or disclose personal data only for purposes that a reasonable person would consider appropriate in the circumstances, according to the PDPC’s Advisory Guidelines on Key Concepts.
Other countries have their own rules, and many are stricter. A safe habit anywhere is to collect only the fields you will use and to tell customers why you want them. Our PDPA guide for loyalty programmes goes through the Singapore rules in more detail.
What about cookies?
Websites often rely on cookies to track visitors. Google said in April 2025 that Chrome would keep its current approach to third-party cookie choice rather than add a new prompt. Cookie rules for advertisers keep changing, but a member’s email and purchase history do not depend on them.
How Gimify collects it
Customers join a Gimify programme by scanning a QR code and entering their email, with no app. Each purchase is recorded as points against that member, and the balance is shared across every outlet. Gimify is free for one outlet.
Questions owners ask
What is first-party data?
Information you collect directly from your own customers, site visitors and app users. Google's ad policy defines it as information you collect from your customers, site visitors, and app users.
What is an example of first-party data for a café?
A customer's email address, the dates they visit, what they spend and which rewards they redeem. You collect all of it yourself at the counter or through your loyalty programme.
What is the difference between first-party and third-party data?
First-party data comes from your own customers. Google's ad policy defines third-party data as user information you purchase or otherwise obtain from other sources.
Do I need consent to collect first-party data?
Usually you need a lawful basis, and in many places that means telling customers what you collect and why. Rules differ by country, so check your local data protection authority.
Do I need a CRM to use first-party data?
No. A loyalty programme that records email, purchase amount and balance already gives you the core fields. Add more only when you know what you will do with them.
Read next
Start free
Gimify is free for one outlet with unlimited members and no time limit. Unlimited outlets are one flat monthly price.
See plans