Conversion Rate Optimization (CRO)Personalisation and running a CRO programme · Lesson 18 of 20

Personalisation and segmentation that pays off

Article · 11 min · 9 min lecture

Video lecture

Personalisation and segmentation that pays off

15 chapters · about 9 min · full transcript

Coming soon

Chapter 1 of 15

Personalisation that pays off

  • Made for each visitor, or unmeasurable mess?
  • Levels: rules to AI
  • Segments that pay
  • Holdouts and privacy

The narrated lecture is in production

Every chapter is scripted and ready. Browse the chapters and read the full transcript now — the video will appear here when it’s published.

Chapters

What personalisation means in CRO

Personalisation shows different content or experiences to different visitors based on who they are or what they have done. Done well, it increases relevance; done badly, it adds complexity, creeps people out, or breaches privacy expectations.

Levels of personalisation

LevelBased onExampleComplexity
ContextualTraffic source, campaign, landing pageAd about "abayas for Eid" lands on a curated Eid collectionLow
GeographicCountry or cityCurrency, delivery times, payment methods, languageLow–medium
BehaviouralPages viewed, cart contents, visit countReturning visitor sees "Continue where you left off"Medium
LifecycleCustomer statusExisting customers see upgrade offers, not first-order discountsMedium
Predictive / algorithmicMachine-learning recommendationsProduct recommendations, ranked contentHigh

Start with contextual and geographic personalisation — they are low-risk, easy to maintain and often high-value.

Rules-based versus algorithmic

  • Rules-based: "If utm_campaign contains 'eid', show Eid hero". Transparent and predictable, but each rule needs maintenance.
  • Algorithmic: recommendation engines or AI-driven experiences. Scalable, but need enough data, careful monitoring, and clear evaluation against a control.

Either way, test personalisation against a non-personalised control. Many personalisation efforts add operational cost without measurable uplift.

Privacy and trust

Personalisation often uses personal data, so:

  • Respect consent choices — do not use behavioural data for personalisation where consent is required and not given.
  • Be transparent in your privacy notice about how you personalise.
  • Avoid "creepy" signals (referring to sensitive categories such as health, religion or finances in ways the user did not expect).
  • Avoid discriminatory outcomes — for example, showing different prices to groups in ways that may be unfair or unlawful.

Segment selection: where personalisation pays

A segment is worth personalising for when it is:

  1. Large enough to matter and to measure.
  2. Different enough in needs or behaviour.
  3. Identifiable reliably at the moment of the visit.
  4. Actionable — you have a meaningfully different experience to offer.

Examples: first-time versus returning visitors; wholesale versus retail buyers; visitors from a specific partner or creator campaign; country-specific delivery and payment expectations.

Worked example: a skincare brand across the Gulf and UK

A skincare brand sells in the UAE, Saudi Arabia and the UK. Its research shows different questions by market: Gulf customers ask about suitability for hot climates and delivery speed; UK customers ask about ingredient sourcing and recyclable packaging. The team implements:

  • Geographic personalisation of the product page's benefit bullets and delivery messages.
  • Contextual personalisation for creator campaigns: visitors from a specific creator's link see a hero with that creator's (disclosed) recommendation.
  • A holdout: 10% of visitors see the generic page to measure incremental impact.

AI-driven personalisation in 2026: what is new

  • Platform recommendation engines (for example Shopify Search & Discovery and apps, Algolia, Bloomreach, Dynamic Yield, Nosto) and ecommerce AI assistants now personalise search results, product recommendations and even on-site copy in real time.
  • Generative personalisation — AI writing different headlines or product descriptions per segment — is available in several experimentation and ecommerce tools.
  • Conversational shopping assistants on sites and in marketplaces answer questions and recommend products.

These increase the number of "versions" customers see, which raises three duties: measure incrementally (holdouts), constrain what the system may say (approved claims, prices from the catalogue, no invented policies), and respect privacy (consent, transparency, no sensitive inferences).

Hands-on: a personalisation rule with a holdout

name: returning-visitor-delivery-reassurance
audience: returning visitors, UAE, viewed a product >= 2 times in 7 days, no purchase
trigger: product page view
experience: show "Order by 23:59 for delivery tomorrow in Dubai & Sharjah" + saved-size shortcut
data_used: first-party on-site behaviour (consented analytics), location from delivery settings (not IP guessing)
excluded: logged-out users without consent for personalisation cookies; sensitive categories
holdout: 10% of eligible visitors see the default page (for incremental measurement)
primary_metric: revenue per eligible visitor (vs holdout)
guardrails: return rate, complaints mentioning 'delivery'
review_date: 6 weeks after launch

Privacy boundaries

  • Base personalisation on first-party data collected with appropriate consent and explained in your privacy notice. Under UK/EU GDPR, profiling needs a lawful basis; automated decisions with legal or similarly significant effects have extra rules. Saudi Arabia's PDPL and the UAE's federal data-protection law also regulate personal data processing — check local requirements.
  • Avoid sensitive inferences (health, religion, financial difficulty, children) unless you have a clear legal basis and it is genuinely in the customer's interest.
  • Do not personalise prices by individual profile without legal review; dynamic pricing that feels unfair damages trust and can raise consumer-law concerns.
  • Offer transparency: "Recommended because you viewed…" builds trust.

Common mistakes

  • Personalising before the base experience is good.
  • Creating dozens of segments that nobody maintains.
  • No control group, so impact is assumed.
  • Using sensitive or non-consented data.
  • Showing returning customers first-order discounts they cannot use.
  • Personalising on unreliable signals, such as guessing gender from names or location from a VPN exit point.
  • Forgetting the fallback: when a signal is missing, visitors should see a sensible default, not a broken or empty block.

A step-by-step rollout

  1. Start with one segment and one page, using evidence from research that the segment's needs differ.
  2. Design the personalised experience and a clear control.
  3. QA the targeting rules: can the segment be identified reliably, and what happens when signals are missing (for example, consent denied or unknown location)?
  4. Run the personalised experience against the control for a full test duration.
  5. If it wins, roll it out, keep a small holdout, and schedule a review date so the rule does not become stale.
  6. Only then add the next segment.

Every rule you add is something someone must maintain. A handful of well-performing, documented rules beats dozens of forgotten ones.

Personalisation planning template

| Segment | How identified | Evidence of different needs | Experience change | Metric | Control % | Owner |

Key takeaways

  • Start with contextual and geographic personalisation — low risk, high value.
  • Always measure personalisation against a non-personalised control.
  • Respect consent and avoid creepy or discriminatory personalisation.
  • Personalise only for segments that are large, different, identifiable and actionable.

Check your understanding

Quick questions to lock in the lesson. They don’t count towards your certificate.

  1. Which is the lowest-complexity, often high-value, form of personalisation?
  2. How should the impact of personalisation be measured?
  3. Which personalisation practice raises the biggest trust and legal concern?
  4. An AI personalisation tool shows strong engagement, but there is no control group. What is the most important next step?

Put it into practice

Identify two segments on your site that meet all four criteria and plan one personalised experience for each, including a control group.

Enrol for free to save your progress

Reading is always free. Enrol to keep your place, take the final assessment and earn a verifiable certificate.