Retargeting for Guide Businesses

- The practice is defined in law as targeting based on activity across numerous websites.
- Data segments may not target an overly narrow audience, which stops most small operations.
- In-ad notices may show a person which of your segments they are on, and you may not obscure them.
- An opt-out binds, and a business must wait at least twelve months before asking somebody back.
- Retargeting multiplies existing traffic, so it cannot rescue a site nobody visits.
Somebody read your trip page in February, did not write, and now sees your boat on every website they open for a fortnight. That is the whole idea, and most guides meet it first as a customer finding it faintly unsettling before meeting it as an advertiser being sold it.
Both reactions are useful. The technique works, in a narrow set of circumstances that are easy to state. It is also the single most regulated thing a small operator can switch on by accident, it has a legal definition, and one platform rule quietly rules out most guides before any of the rest matters.
The definition worth knowing
California's consumer privacy law gives the practice a name and a description, and it is the clearest short statement of what is happening. The attorney general's guidance on the law explains that sharing refers specifically to sharing for cross-context behavioral advertising, which it defines as the targeting of advertising to a consumer based on the consumer's personal information obtained from the consumer's online activity across numerous websites.
Read the definition rather than the marketing. The load-bearing phrase is across numerous websites: the thing being used is not what somebody did on your site, it is what they did everywhere, assembled by a third party who watched. That is why the law treats it as sharing rather than as ordinary advertising, and it is why a rule written about data brokers lands on a guide who added a tag to a booking page.
The channels that never follow anybody are gathered at the getting-booked hub, and most of them are better first moves for an operation with no traffic yet.

Why a guide's list is probably too small
Before any of the privacy questions, there is a mechanical one that ends the conversation for a lot of operations, and it sits in the platform's own policy on personalized advertising.
Among the things advertisers are not allowed to do: use your data segments in a way that targets an overly narrow or specific audience. The policy spells out the case that catches small businesses, which is where combining your data segments with other targeting criteria, such as geographic limitations or other user segmentation, results in an ad targeted to a relatively small number of users.
Now picture the guide version. A few hundred people visited the trip page over a season. You want to reach the ones near one town, who looked at one species, in one month. Each of those filters is a geographic or segmentation criterion, and stacked on a small starting list they produce exactly the outcome the policy names.
The reason for the rule is straightforward. An audience small enough to reach is an audience small enough to identify, and being individually followed by a business you visited once is a different experience from seeing an advertisement.
The practical consequence is that retargeting is a channel for operations with real traffic. A guide with a site nobody visits cannot retarget their way out of that, and the fix is upstream, in the work described in the local search piece and in whichever paid channel is actually open, weighed in the channel comparison.
What the platform forbids outright
The same policy carries a short list of prohibitions that a guide could breach without any bad intent, usually by trying to be helpful.
You may not run ads that collect or contain personally identifiable information unless using an ad format provided for that purpose, with collecting email addresses, telephone numbers or credit card numbers within the ad itself given as examples. You may not use such information in connection with any anonymous or pseudonymous information, including in your data segments, which the policy notes were previously called remarketing, or in cookies or data feeds. You may not share it through your data segment tags or product data feeds. And you may not send precise location information without first obtaining consent.
The location clause is the one worth pausing on in this trade. A guiding site is full of location, because that is the product, and a site that quietly reports where the visitor is standing has crossed from describing a place to collecting one.
The label you are not allowed to hide
There is a disclosure provision that most advertisers have never read and every customer has seen. The platform may include in-ad notice labels disclosing personalized advertising, and may display which of your data segments a person is on along with the corresponding domain name. The instruction to advertisers is flat: you must not modify or obscure these notices.
Sit with what that means from the other side of the screen. Somebody who looked at your booking page once can be shown, inside the advertisement, that they are on a list belonging to your domain. The person you are following is told they are being followed, and told by whom.
That is a good reason to run this channel only in a way you would be content to explain to the person seeing it. There is a version of retargeting that reads as a helpful reminder of something they were already considering, and a version that reads as surveillance, and the customer can see enough to tell them apart.
The policy also requires disclosure in your own privacy policy when using data segments or re-engagement features, and provides a parameter for switching the collection off for users who do not want personalized ads.
The opt-out, and what it obliges you to do
The California guidance sets out a right to opt out of sale or sharing, meaning a consumer may request that businesses stop selling or sharing their personal information. With some exceptions, businesses cannot sell or share after receiving that request unless the consumer later authorises it again.
The mechanics have teeth. A business that sells personal information must provide a clear and conspicuous link on its website allowing an opt-out request to be submitted. It cannot require somebody to create an account to make the request. It should not require identity verification, though it may ask basic questions to identify which information belongs to that person. If the link is missing, broken or hard to find, the guidance tells consumers they may report the business.
None of that is onerous for a one-boat operation. What is fatal is not knowing it applies, which is the usual state of a guide who accepted a tag from an agency and never asked what it did. Choosing that agency well is its own subject, treated in the questions to ask before hiring one.
The twelve-month rule
One provision deserves separate attention because it runs against every instinct in marketing. After somebody opts out, a business must wait at least twelve months before asking them to opt back in.
A year. Not a season, not until the next campaign. That is a legislature deciding that a refusal should hold long enough to be meaningful, and it means an opt-out is not a temporary setting to be re-litigated with a better offer.
The right response is to treat the whole channel as recoverable rather than repairable. If somebody opts out, the relationship is not over; the tracking-based route to them is. Every other route stays open, including the one that works best in this trade, which is the direct one described in the pre-trip messaging piece.
Under sixteen, which matters more than guides expect
The guidance sets a different default for young people. A business may only sell the personal information of a child it knows to be under sixteen if it gets affirmative authorisation, an opt-in rather than an opt-out. For children under thirteen, that opt-in must come from a parent or guardian. For those at least thirteen but under sixteen, it can come from the child.
Guiding businesses run family trips, youth programmes and school partnerships, and their websites are read by teenagers planning a birthday or a first trip. That is not an edge case in this trade, it is a normal Tuesday, and the default flips for those visitors.
The practical answer for a small operation is not a consent architecture. It is to keep behavioural tracking off anything aimed at young people and to route family enquiries through a form and a phone call, which is faster anyway.
The signal you may never see
There is a way to opt out that involves no link and no form. The guidance describes submitting an opt-out request via a user-enabled global privacy control, a browser-level signal a visitor sets once and sends to every site they touch.
Two consequences for a guide. Some proportion of your visitors have already opted out before arriving and will never appear in any list, whatever your site says. And the honest reading of a retargeting audience is that it is not your visitors, it is the subset of visitors who had not turned this off.
That is worth knowing before drawing conclusions from the numbers. An audience that looks small may be measuring how privacy-conscious your visitors are rather than how interesting your page was.

Taking stock of what you actually hold
Underneath the advertising question is a plainer one, and there is federal business guidance written for exactly the operator who has never thought about it. Its five principles are stated as take stock, scale down, lock it, pitch it and plan ahead.
Take stock means knowing what personal information you hold and where. The guidance is emphatic that no inventory is complete until you check everywhere sensitive data might be, and lists the places people forget: laptops, home computers, flash drives, digital copiers, mobile devices. It also says to trace how information arrives, through websites, email, post and contractors, and what is collected at each entry point.
Run that on a guiding operation honestly and the list is longer than expected. Booking forms, waivers, deposit records, text threads, an email list, photographs with faces, an old spreadsheet of past clients, and whatever an agency holds on your behalf.
The five principles applied to a one-boat operation
| Principle | What it means on a guiding operation |
|---|---|
| Take stock | List every place client details sit, including phones and old drives |
| Scale down | Keep only what the business needs, not everything ever collected |
| Lock it | Protect what you keep, including the waiver archive |
| Pitch it | Dispose properly of what is no longer needed |
| Plan ahead | Decide now what you would do if something leaked |
Scale down is the one that pays immediately. Most guides hold client data for years out of inertia rather than need, and the fastest way to reduce risk is to stop keeping what was never useful. Waivers are the obvious case, since they must be kept, kept safely and kept for a defined period rather than forever, which is the discipline set out in the waiver workflow piece.
What retargeting is genuinely good for
Having set out everything against it, the case for it in this trade is narrow and real.
The booking decision for a guided trip is rarely made in one sitting. Somebody reads a trip page in February, discusses it with two other people, checks flights, and returns in April. The gap is where enquiries die, and a reminder inside that gap is genuinely useful rather than intrusive.
It also works for a specific, unglamorous case: the person who started a booking and stopped. Not a browser, somebody who filled in half a form. Reaching that person is closer to customer service than to advertising, and it is the one segment where the return is usually obvious.
What it is not good for is finding new people. It only reaches those who already came, so it multiplies whatever the rest of your work produced. Nothing multiplied by anything is still nothing.
What experienced guides do differently
They set a window that matches the decision. Two weeks for a local trip, considerably longer for a trip somebody flies to, and a hard stop at the end rather than an indefinite campaign. Following somebody for six months after one visit is how a business becomes a joke among the people it wanted.
They exclude people who already booked. Everybody knows this and a surprising number never do it, so clients spend the fortnight before their trip watching adverts for the trip they have paid for.
They keep the message useful rather than insistent. The best-performing version in this trade is usually information the person did not have, such as which weeks are still open, rather than a louder version of the page they already read.
And they write the privacy policy properly once. It takes an afternoon, it is required when using these features, and it is the cheapest possible form of not having a problem later.
Common mistakes
Installing a tag because an agency asked, without knowing what it collects or where the data goes. That is the origin of most of the trouble in this subject, and the fix is a single question asked before the tag goes on.
Stacking filters onto a small audience until it targets a handful of people, which the policy names directly and which a small-market business reaches faster than anybody expects.
Treating an opt-out as a temporary setback. The waiting period before asking somebody to opt back in is at least twelve months.
Running behavioural tracking across pages built for families and young people, where the default is affirmative opt-in rather than opt-out. And leaving the campaign on year-round, which converts a useful reminder into the thing everybody complains about.
What surprises people
That the practice has a statutory name and description at all. Most operators think of it as a setting rather than as a defined category of data sharing with rights attached.
That the platform may show a person which of your segments they are on, along with your domain, and that you are forbidden from obscuring that notice.
That the small-audience prohibition exists. Advertisers assume precision is always rewarded, and here there is a floor below which precision becomes identification.
And that a browser setting can opt somebody out before they ever reach your site, which quietly changes what your audience numbers mean.
When not to bother
When the site gets little traffic, because the audience will be too small to serve and probably too small to be permitted.
When there is no separate landing experience worth returning to. Retargeting sends people back to a page they already rejected, and if nothing has changed the second visit ends like the first, which is an argument for the work in the water and city pages piece.
When the calendar is already full, when the season is over, and when the budget would otherwise go to a channel that finds new people rather than re-reaching old ones. Video is the usual competing claim on that budget and it has a different profile entirely, taken up in the video ads piece.
The version worth running
If the traffic is there and the season justifies it, the shape that works in this trade is narrow enough to describe in a paragraph.
One audience: people who reached a trip page or started a booking, excluding anybody who has already booked and anybody who came only for a report or a fishing forecast. One window, matched to how long the decision actually takes for that trip type, with a stop date set at the moment you start rather than left open. One message, carrying something the page did not say, such as remaining dates or what the water is doing. And one destination, which is the specific page they were on rather than the homepage.
Then a single question at the end of the window: did enquiries rise, from people you can identify as returning visitors. If the answer is unclear, the campaign was too small to read, and the honest conclusion is that the traffic is not yet there rather than that the technique failed.
Everything else in this subject is machinery around that paragraph. The operations getting real value from it are the ones with enough traffic that the machinery is worth building, and for most guides that traffic has to be earned before it can be re-reached, which puts the work back where it started, on the pages and the unpaid results and the referral relationships that fill a calendar without following anybody around the internet.
Privacy rules move faster than anything else here. State privacy laws are amended frequently, platform targeting policies are revised without notice, and several states other than California now have their own regimes with different thresholds and definitions. Read the current text of the policy and of the law that applies where your customers live before switching any of this on, Where licensing, permits or waiver retention are involved, confirm the exact current requirement with the authority that issues it before you act, rather than relying on an article.
Not a compliance programme. Nothing here tells you whether a particular privacy statute applies to your business, because that turns on revenue, data volumes and where your customers live, and those tests differ by state. What is here is the definition the practice is given in law, the platform rule that stops most small operators before the legal questions arise, and the handful of obligations that attach the moment somebody asks you to stop.
If your booking calendar has more open weeks than you’d like, I’ll build you a free preview of your booking site before you pay a cent.
Get a free website previewFollowing people around, examined properly
What is retargeting, in law rather than in marketing?
California's consumer privacy guidance gives it a name and a description. Sharing, it explains, refers specifically to sharing for cross-context behavioral advertising, defined as the targeting of advertising to a consumer based on the consumer's personal information obtained from the consumer's online activity across numerous websites. The load-bearing phrase is across numerous websites. What is being used is not what somebody did on your site but what they did everywhere, assembled by a third party who watched, which is why the law treats it as sharing rather than as ordinary advertising.
Is my audience big enough to use it?
Probably not, and this ends the discussion for many guides before any privacy question arises. The personalized advertising policy states that advertisers may not use data segments in a way that targets an overly narrow or specific audience, and it names the case that catches small businesses: where combining data segments with other targeting criteria, such as geographic limitations or other user segmentation, results in an ad targeted to a relatively small number of users. A few hundred seasonal visitors, filtered to one town and one species, lands squarely there.
What am I not allowed to do?
The policy sets out a short list. No ads that collect or contain personally identifiable information unless using a format provided for the purpose, with email addresses, telephone numbers and credit card numbers collected within the ad given as examples. No using such information in connection with anonymous or pseudonymous information, including in data segments, which the policy notes were previously called remarketing, or in cookies or data feeds. No sharing it through segment tags or product feeds. And no sending precise location information without first obtaining consent, which matters on a site whose product is a place.
Can the customer tell they are being followed?
Often, and you are forbidden from hiding it. The platform may include in-ad notice labels disclosing personalized advertising, and may display which of your data segments a person is on along with the corresponding domain name. The instruction to advertisers is flat: you must not modify or obscure these notices. So somebody who looked at your booking page once can be shown, inside the advertisement, that they are on a list belonging to your domain. That is a good reason to run only the version of this you would be content to explain to the person seeing it.
What happens when somebody opts out?
The route closes, and it stays closed for a while. A consumer may request that businesses stop selling or sharing their personal information, and with some exceptions a business cannot sell or share after receiving that request unless the consumer later authorises it again. Businesses must then wait at least twelve months before asking somebody to opt back in. A business that sells personal information must also carry a clear and conspicuous opt-out link, cannot require an account to submit the request, and should not require identity verification to honour it.
Does any of this change for younger visitors?
The default inverts. A business may only sell the personal information of a child it knows to be under sixteen with affirmative authorisation, an opt-in rather than an opt-out. For children under thirteen that opt-in must come from a parent or guardian; for those at least thirteen but under sixteen it can come from the child. Guiding operations run family trips, youth programmes and school partnerships, so this is not an edge case in this trade. The workable answer for a small operation is to keep behavioural tracking off anything aimed at young people.
What should the campaign actually look like?
Narrow enough to describe in a sentence. One audience of people who reached a trip page or started a booking, excluding anybody who has already booked. One window matched to how long that trip type takes to decide, with a stop date set when you start. One message carrying something the page did not say, such as remaining dates or what the water is doing. One destination, being the page they were actually on. Then one question at the end: did enquiries rise among returning visitors. An unclear answer usually means the traffic is not there yet.
Sources & methods
- California Consumer Privacy Act (CCPA) FAQ (California Attorney General)
- Restricted targeting in Personalized advertising (Google Advertising Policies Help)
- Protecting Personal Information: A Guide for Business (Federal Trade Commission)
Every figure here is traced to a named public source and checked against it. Licensing, tax, and fee rules change. Verify your state’s current rules with the agency directly before you count on any number here.
More field notes
Traffic first. Then it is worth re-reaching.
I'm Evan, and retargeting multiplies whatever your pages and your search results already produce, which is why the pages come first. I build booking sites and run the search and local SEO for owner-run guide operations, one operation per stretch of water. Text me at (470) 777-9686 and I'll build you a free preview of your site before you pay a thing.
