A testimonial's persuasive power lives almost entirely in its specifics. "Great product — Anonymous" convinces nobody. "Cut our onboarding time in half — Priya Nair, Head of Operations at Northwind Logistics," next to her photo and her company's logo, convinces a stranger that this is real and that it could work for them. But every one of those identity details — name, title, company name, logo, headshot — is something the customer owns, not you. Publishing them without clear permission is at best a trust violation and at worst a legal one. This guide shows you how to secure those rights cleanly, so the proof you collect is proof you can actually use.
Why a quote and the right to publish it are two different things
Founders routinely conflate two separate things: getting a customer to say something nice and getting the right to attribute and display it. A customer who fires off an enthusiastic email has given you the words. They have not necessarily agreed to see their face on your homepage, their employer's logo on your pricing page, or their job title quoted in an ad campaign.
That gap matters for three reasons. First, trust: a customer who discovers their likeness on your site without being asked feels used, and a single angry "please take that down" can cost you the relationship. Second, accuracy: titles and company affiliations change, and using them without a conversation means you may publish something that is no longer true. Third, exposure: names, photos, and logos carry real legal weight — likeness rights for individuals, trademark rights for company logos. Treating the quote as a blank check to use all of it is how a marketing win becomes a takedown notice.
The four assets you need permission for — separately
Permission is not one switch; it is a set of them. A customer might happily grant some and decline others, so ask about each explicitly rather than assuming a blanket yes:
- The quote itself. Permission to publish their words, ideally with light editing for clarity that you let them approve.
- Their name and title. Full name and role add credibility, but some customers will only allow a first name, an initial, or "a senior manager at a logistics firm."
- Their company name and logo. This often requires a different person's sign-off — marketing, legal, or brand — because the logo belongs to the company, not your contact.
- Their photo. A headshot dramatically lifts believability, but it is also the most personal asset and the one customers most often want to control.
The practical move is to present these as a short menu, not a single demand. "I'd love to feature your quote with your name, title, company logo, and a photo — are you comfortable with all of those, or would you prefer to leave any out?" gives the customer an easy, low-pressure way to grant what they can.
How to ask so you actually get a yes
The request that works is specific, low-effort for the customer, and honest about where the testimonial will appear. Vagueness creates hesitation; precision creates confidence. Tell them exactly what you want to use and exactly where it will show up.
A clean ask looks like this:
"Thank you — that means a lot. Would you be open to us featuring this on our website? We'd attribute it to you as Priya Nair, Head of Operations, Northwind Logistics, alongside your company logo and, if you're comfortable, a headshot. Here's roughly how it would look: [link or mockup]. You'd be welcome to review the final wording before it goes live."
Three things make that work. It is specific about the assets. It shows them where and how it will appear, removing the fear of the unknown. And it offers approval of the final wording, which costs you little and resolves most hesitation. If your customer is in a larger organization, add one line acknowledging that the logo may need a separate sign-off: "If using the company logo needs a quick check with your marketing or legal team, I'm happy to send a short request you can forward."
Capture consent you can actually prove later
A verbal "sure, go ahead" on a call is worth very little six months from now, when you have forgotten the conversation and the customer has changed jobs. The standard you want is consent in writing, tied to the specific assets, with a date. You do not need a lawyer-drafted contract for most cases — you need an unambiguous paper trail.
The lowest-friction methods, in rough order of formality:
- Email confirmation. After the conversation, send a one-line recap — "Confirming you're happy for us to use your quote, name, title, company logo, and headshot on our website" — and ask them to reply "yes." Their reply is your record.
- A short consent line in your collection form. If you gather testimonials through a form, include a clear checkbox: "I grant permission to publish this testimonial along with my name, title, company, and photo on [Company]'s marketing materials."
- A brief release for higher-stakes use. For paid ads, case studies, or anything with broad distribution, a short written release naming the permitted uses protects both sides.
Whatever the method, store it where you can find it again. Keep the consent record attached to the testimonial itself, so the moment you reach for the quote you can also see exactly what you were allowed to do with it. A tool that keeps the proof and the permission together saves you from publishing something you can no longer verify you had the right to use.
The mistakes that turn a testimonial into a liability
A few avoidable errors account for most of the trouble teams get into:
Assuming the quote covers everything. A nice email is not consent to use a photo or a logo. Ask for each asset.
Using a logo on your contact's say-so alone. Your contact usually cannot authorize use of their employer's trademark. When in doubt, route the logo request to the right team and get it in writing.
Letting attribution go stale. A title or company that was accurate at collection may be wrong a year later. Note the date, and when you spot drift, update or pull it rather than publishing something false.
Editing the quote past the point the customer approved. Tightening for clarity is fine if they sign off; rewriting their meaning to sound better is fabrication. Keep their words their words, and let them confirm the final version.
Avoid those four, and permission stops being a risk and becomes a routine, two-minute step in your collection process.
Make permission part of the ask, not an afterthought
The cleanest way to never get caught short is to fold the permission question into the original request, so consent arrives at the same moment as the quote. When you ask a happy customer for a testimonial, ask in the same breath how you may attribute it and which assets you may use. You walk away with the words and the right to publish them, captured together and dated — proof you can put to work immediately, with nothing left to chase down later.