Education Engine · 6 min read

Using First-Party Data (Even Without a DMP)

How to turn CRM, email and website data into audiences and better media performance using the ad platforms you already use.

Key takeaways

  • You do not need a data management platform (DMP) to activate your customer data.
  • Start with a data audit: where the data lives, whether it is permissioned, what it holds and how fresh it is.
  • Clean, hashed uploads of email and phone data to Google, Meta and LinkedIn create usable audiences.
  • Always have opt-in consent and align with the NZ Privacy Act 2020.

Can you use first-party data without a DMP?

Yes. A DMP helps with scale and automation, but small and mid-sized teams can activate first-party data with tools they already have. The major ad platforms have built-in audience features that accept your customer data directly.

Useful options include Google Ads Customer Match, Meta Custom Audiences, LinkedIn Matched Audiences, GA4 and Looker Studio for analysis, plus your email platform and CRM for segmentation. Start small, learn what works, and scale as your strategy matures.

Each platform uses your data a little differently:

  • Google Customer Match: upload a CSV of emails, phone numbers or addresses, then reach those customers on Search, Gmail, YouTube and Display. Layer it with high-intent keywords and raise bids for past customers who are searching again.
  • Meta Custom Audiences: upload CRM lists, build engagement-based audiences from video views or form activity, and retarget site visitors and engaged social users.
  • LinkedIn Matched Audiences: upload email or company lists and target job titles, industries or account-based marketing lists. It suits complex B2B sales with several stakeholders.

Why does first-party data matter now?

Third-party cookies are already blocked in Safari and Firefox, so audience targeting that relies on third-party data is becoming less effective. Meanwhile, Google, Meta and other platforms reward strong first-party signals. Advertisers who upload customer lists and set up conversion tracking see better targeting options and more efficient optimisation.

Most businesses already hold the raw material in their CRM, email platform and website analytics. The task is to use it more deliberately. Organisations that activate their owned data also tend to build stronger customer relationships. Doing so supports more relevant, personalised experiences, not just compliance with privacy changes.

What counts as first-party data?

First-party data is information you collect directly from your own audience. Common sources are:

  • Website visitors: pages viewed, time spent and behaviour tracked in analytics.
  • CRM and email lists: contact details, purchase history and email engagement.
  • Form fills and downloads: demographic and interest signals.
  • Phone call logs and appointment bookings: needs and service interests.
  • Event attendees and surveys: direct feedback on preferences and opinions.

How do you run a first-party data audit?

An audit shows what you can use and what needs fixing first. Ask four questions.

  1. Where is the data stored? Map every repository, from your CRM and email tools to spreadsheets and customer service systems.
  2. Is it permissioned for marketing? Review consent records, privacy policies and opt-in processes, and document when and how consent was given.
  3. What data points do you capture? List attributes such as email, region and behaviour, and check quality and completeness.
  4. How often is it updated? Set a sync schedule for each source, because stale data weakens targeting.

Consider how structured the data is, and whether time-sensitive campaigns need near real-time updates or whether regular batch syncs are enough. Data that is out of date can send the wrong message to the wrong person.

The audit also helps you decide which sources to activate first, based on value and accessibility.

How do you build custom audiences from your own data?

Follow four steps.

  1. Export data from your CRM, email tool, forms or customer service systems.
  2. Clean and format email, phone and postcode fields. Remove duplicates and invalid entries, and standardise formats.
  3. Upload as hashed lists to Google Ads Customer Match, Meta Custom Audiences, LinkedIn Matched Audiences or other platforms. Data is encrypted during upload.
  4. Segment by product interest, lifecycle stage, recency or frequency, value tier, demographics and engagement level.

Match rate is the share of uploaded users the platform can identify. Raise it by supplying both email and phone, keeping data fresh, removing typos and duplicates, cleaning before each upload and refreshing quarterly. The guide cites Customer Match rates of typically 60 to 70%, and LinkedIn rates of 30 to 60% depending on list quality.

Which tactics make the most of first-party data?

  • CRM retargeting: re-engage prospects who showed interest, such as abandoned cart users and dormant leads.
  • Lookalike audiences: build seed audiences from high-value customers, optimise for lifetime value, and test sizes such as 1%, 3% and 5%.
  • Cross-sell and upsell: offer complementary products, timed to typical repurchase cycles.
  • Suppression: exclude past buyers from prospecting to avoid redundant spend, and keep exclusion lists updated.

You can also build audiences from behaviour in GA4, such as add-to-cart without checkout, form views with no submission, and repeat visitors. Simple segments include new subscribers from the last 30 days, customers who viewed three or more pages, abandoned lead forms, and lapsed customers with no activity in six months.

Email and phone identifiers also give you deterministic matching, which reduces reliance on browser-based tracking.

What privacy and consent rules apply in New Zealand?

Privacy practice protects both compliance and customer trust. Follow these principles:

  • Have opt-in for marketing use, with clear wording and checkboxes that are not pre-ticked.
  • Include an easy unsubscribe link in emails and campaigns.
  • Never upload unpermissioned data to advertising platforms.
  • Align with the NZ Privacy Act 2020, including secure storage, breach notification and customers' rights to access and correct their information.

Review consent practices regularly, because regulations continue to change.

How do you measure and optimise first-party audiences?

Track CTR, CPL and CPA by audience type to see which segments perform. Rotate creative by lifecycle stage, refresh CRM lists monthly so you remove converted customers, and use GA4 to compare audience behaviour with campaign results. A/B test landing pages, use cross-channel attribution, and review bids by time of day.

In GA4 and Tag Manager, set up event tracking for form submissions, video engagement, product views and downloads. Then build audiences from engagement, scroll depth and funnel drop-off, and export them to your ad platforms.

Compare Customer Match and similar audiences against standard targeting, and adjust segments based on what the numbers show. Treat each audience as a test: keep the ones that lower your cost per acquisition, and retire the ones that do not.

Frequently asked questions

Is a DMP necessary for small teams?

No. Google, Meta and LinkedIn all let you upload customer lists directly. A DMP adds scale and automation but is not required to get started.

How do you improve audience match rates?

Supply more than one identifier, such as email and phone, and clean out typos and duplicates before each upload. Refreshing the list regularly also helps.

Can you upload any customer list to an ad platform?

No. Only upload data where customers have given permission for marketing use, and make sure your practices align with the NZ Privacy Act 2020.

Next step

Get a free media review

A 30-minute call with a senior strategist. We'll look at your current media, spend and reporting, and tell you plainly what we'd change.