Retargeting on a Small Budget, Within GDPR
By CodexierPublished 5 min read
Retargeting shows ads to people who have already visited your website or engaged with you, and for a small business with a small budget it is often the most efficient place to start advertising. It is also where privacy rules bite hardest, because it depends on tracking individual visitors. In Sweden that means consent before any tracking pixel loads, and consent means smaller audiences. This guide explains how retargeting works, how consent shapes it, which segments are worth paying for, how to avoid annoying people and how to tell whether it actually adds sales.
How retargeting works
A tracking pixel from Meta, Google, LinkedIn or TikTok on your site records visits and actions, and the ad platform builds audiences from them: everyone who viewed a product, everyone who started a booking, and so on. You then show those people ads while they browse elsewhere. Platforms can also match uploaded customer lists and build audiences from people who engaged with your social profiles or videos, which does not require any tracking on your own site.
Consent and audience size
Under the Swedish Electronic Communications Act, ad pixels may only load after the visitor has consented to marketing cookies, and GDPR applies to the data that follows. Visitors who decline are never added to your audiences, so a site with modest traffic can end up with audiences too small to serve ads to, since platforms require a minimum size. Plan for that from the start rather than being surprised.
| Audience source | Consent needed | Note |
|---|---|---|
| Website visitors via pixel | Yes, marketing consent before the pixel loads | Shrinks with every visitor who declines |
| Social media engagers and video viewers | Handled by the platform | Useful when site traffic is low |
| Uploaded customer lists | Need a legal basis for using the data for ads | Tell customers in your privacy notice; respect opt-outs |
| Server-side conversion events | Still needs consent for ad use | Improves measurement, does not bypass consent |
Google's Consent Mode v2 and Meta's Conversions API pass consent status along with events; configure them rather than working around the banner.
Our guides to Consent Mode v2 and the Meta pixel and Conversions API cover the technical setup.
Segments worth retargeting
Retargeting everyone who visited is the default and the least efficient choice. Someone who read one blog post and left is not a prospect yet; someone who viewed your prices twice and started a booking is. With a small budget, spend it on the few segments closest to buying, and exclude people who already converted.
High intent
Visitors to pricing, booking or checkout pages who did not complete, in the last one to two weeks.
Product or service interest
Visitors who viewed a specific service or product several times, shown an ad for that exact thing.
Always exclude
Recent customers and people who completed a booking, unless you are deliberately selling something new to them.
Frequency caps and creative
- Match the retargeting window to your sales cycle: days for a restaurant or salon, weeks for a B2B service.
- Cap how often one person sees your ads per week; being followed around the internet damages trust.
- Show something new, not the same ad they already ignored: an answer to a common objection, a review, a price example or a clear next step.
- Send people to the page that matches the ad, such as the booking step they abandoned.
- Refresh creative every few weeks for small audiences, since the same people see it repeatedly.
Avoid ads that reveal what someone looked at in sensitive categories, such as health services, finance or legal help. Beyond being creepy, advertising platforms restrict it and it can raise GDPR concerns about special categories of data.
Measuring incremental results
Retargeting looks great in ad platform reports because it targets people who were already likely to buy, and the platform takes credit when they do. The real question is how many of those sales would not have happened without the ads. Some platforms offer conversion lift tests with a holdout group; without that, pause retargeting for a few weeks and compare total bookings or orders against the same period with ads running, allowing for season.
When you should not retarget: with very low traffic or a sales cycle that happens mostly by phone, the audiences are too small and the effect too hard to see; spend on reaching new people or on the win-back emails to past customers instead. Our tracking and analytics setup configures consent, pixels and conversion events correctly; see pricing or book a call.
Frequently asked questions
Is retargeting legal in Sweden?
Yes, with consent. Ad pixels may only load after the visitor has accepted marketing cookies, your privacy notice must describe the use, and you need data processing arrangements with the platforms as required.
How big does an audience need to be?
Each platform sets its own minimum before ads can serve to an audience, and small audiences also cost more per result. If your consented visitor audiences stay below the minimum, use engagement audiences from social media or broaden the time window.
Can we upload our customer list for retargeting?
You can, but only with a legal basis for using the data this way, clear information in your privacy notice and respect for customers who have opted out of marketing. Platforms hash the data, but that does not remove your GDPR obligations.
What budget does retargeting need?
Small audiences need small budgets; spending more on the same few hundred people mostly increases frequency. Start low, cap frequency and increase only when you can see an effect on total sales.
Retarget the right people, with consent
Tell us your monthly traffic, your ad platforms and your consent setup. In fifteen minutes we can tell you whether retargeting is worth it for you and what to fix first.
Book a free 15-minute call