A spreadsheet is a perfectly good first CRM. One row per contact, clear columns, a few drop-down lists and a dated next step on every row will carry a small team a long way. What breaks a customer list is rarely Excel itself; it is the lack of entry rules. Below you will find a template to copy, the rules that keep it usable, what GDPR expects if you deal with people in Europe, and the signs that it is time to switch to a dedicated CRM.
What a customer database in Excel should contain
A customer list answers three questions: who is this person, where does the relationship stand, and what happens next. Every column should serve one of them. Anything else slows down data entry, and under data protection rules you should only keep what you actually need.
The template
Create a sheet with these columns in this order, then convert the range into a table (Insert, then Table) so filters and formulas extend automatically to new rows.
| Column | Example | Entry rule |
|---|---|---|
| ID | C-0042 | Unique, never reused |
| Type | Prospect | List: Prospect, Customer, Former customer, Partner |
| Company | Lambert Woodworks | Full legal name, no abbreviations |
| First name | Claire | Its own column |
| Last name | Lambert | Its own column |
| Job title | Owner | Short text |
| claire@lambertwoodworks.com | One address per cell | |
| Phone | +1 503 555 0142 | International format, stored as text |
| City | Portland | Text |
| Country | United States | List |
| Source | Trade show | List: Website, Trade show, Referral, Inbound call |
| Stage | Proposal sent | List: First contact, Meeting, Proposal, Won, Lost |
| Owner | KB | List of team initials |
| First contact | 03/14/2026 | Real date, never text |
| Last contact | 10/02/2026 | Real date |
| Next step | Call back once plans arrive | Verb plus object, one action only |
| Next step date | 10/27/2026 | Real date |
| Opted out of marketing | No | List: Yes, No |
| Notes | Prefers morning calls | Factual, no judgment |
If you sell to consumers, drop the company column, add a mailing address, and add a "Marketing consent" column holding the date consent was given.
Data entry rules that prevent a mess
A list shared by three people degrades within weeks if everyone types things their own way. Set these rules on day one.
One row per contact
One person, one row. If a company has two contacts, it takes two rows with the same company name. Never put two emails in a cell or two people on a row: sorting, filtering and any future import all break.
Drop-down lists wherever possible
Type, source, stage, owner: these columns should only accept predefined values. In Excel, select the column, go to Data, then Data Validation, and choose List (Microsoft support). Keep the values on a separate "Lists" tab so you edit them in one place. Without this, "Trade show", "tradeshow" and "TRADE SHOW 2026" will soon sit side by side.
Dates that are real dates
A date typed as text ("early Oct", "2/10") will not sort and cannot trigger a reminder. Enforce a date format with data validation and reject anything else. If your team spans the US and Europe, agree on one format, because 10/02 means October 2 to one person and February 10 to another.
Short, factual notes
Under GDPR, people can ask to see what you hold about them, notes included. Write "tense call about the delivery date", not an opinion about the person.
Tracking follow-ups in the sheet
The column that matters most is the next step date. A contact with no next step is a contact nobody will follow up with.
Add a calculated "Follow up" column. If the next step date sits in column Q:
=IF(AND(Q2<>"",Q2<=TODAY()),"Follow up","")
Then add conditional formatting to highlight the matching rows. Every Monday, filter on "Follow up" and sort by owner: the week's call list is ready.
Three habits keep this reliable:
- after every conversation, update "Last contact", "Next step" and its date, even if the step is "nothing until January";
- one next step per row; a second one goes in the notes or in your task tool;
- after a customer meeting, write down what each side committed to; our meeting minutes template gives you a short structure for it.
What GDPR expects from a customer and prospect list
If you deal with people in the European Union, the General Data Protection Regulation (GDPR) applies as soon as your list holds names, emails or phone numbers of individuals. The UK, the US states and other countries have their own rules, so check the ones that apply where your contacts are. The principles below are a sound baseline either way.
Tell people, and honor objections
You must tell people that you will use their data for direct marketing, in your privacy notice or at the latest in your first message, and that they can object free of charge. Once someone objects, you can no longer use their data for marketing (European Commission). That is the job of the "Opted out of marketing" column: the person stays in the list, flagged "Yes", so nobody contacts them again by mistake.
Email marketing has extra rules in each EU country, and they usually differ between business contacts and consumers. In France, for example, consumers must give prior consent to marketing emails, while business contacts can be emailed about offers related to their job as long as they can opt out.
Set a retention period
Personal data must be kept for the shortest time possible, with time limits to erase or review it, and it must be kept accurate and up to date (European Commission). GDPR sets no fixed number. As a benchmark, the French regulator CNIL uses three years from collection or from the prospect's last contact for prospects, and the length of the relationship plus three years for customers (CNIL, in French). The "Last contact" column makes this easy: once a quarter, filter on dates older than your limit and delete or archive those rows.
Protect the file
A spreadsheet sent as an attachment ends up in ten inboxes. Keep one copy in a shared space with named access, remove access when someone leaves, and export only the columns you need when you have to share a list.
Signs it is time to move to a CRM
A spreadsheet works while one or two people maintain it. These signs mean it no longer does:
- Several versions are circulating: "customers_v4_final.xlsx" and "customers_v4_Karim.xlsx" no longer match.
- Follow-ups slip despite the tracking column, because nobody opens the file every day.
- The history lives elsewhere: conversations sit in individual inboxes, meeting notes in separate documents, and the sheet keeps one line of it.
- Duplicates keep appearing: the same company entered three times with three spellings.
- You cannot tell who changed what, or when a value changed.
- A data access or opt-out request takes an hour, because the person appears on several tabs and files.
- You need different permissions: a salesperson sees their own accounts, an assistant does not see the notes.
Two or three of these are enough to start looking at a dedicated tool.
How to migrate from Excel to a CRM
Migrations go well when the cleanup happens before the import, not after.
- Make a copy of the original file and work only on the copy.
- Remove duplicates (Data, then Remove Duplicates), checking on email first, then on company name (Microsoft support).
- Normalize: one value per cell, first and last names split, dates as dates, phone numbers in one format, list values harmonized.
- Purge rows past your retention period; there is no point migrating data you should delete.
- Map columns to CRM fields: write down the destination field for each column, and decide what to do with those that have no match.
- Export as CSV UTF-8 (File, Save As, CSV UTF-8) so accented names survive.
- Import ten rows as a test, check each one, then import the rest.
- Archive the spreadsheet as read-only and tell the team the date from which the CRM is the only source of truth.
Before choosing a tool, check whether it offers a CSV or Excel import and how it handles duplicates: that is where most of the migration time goes.
Where Omeon fits
In Omeon, contacts are a table shared by the team, with the fields of a customer list: name, email, phone, job title, a company linked to its own record, tags, source, opt-in date and a description. You can search, filter and sort it like a spreadsheet, and meetings held in Omeon are linked to the contacts who attended. Data is hosted in Europe, with the database in France.
In Omeon, the AI assistant reads an Excel or CSV file attached to a conversation and creates contacts from its rows. That works well for a few dozen contacts that you then check. For larger files, a direct CSV import for contacts arrives at the end of October 2026. If you hand the file to the assistant, an admin can restrict which AI providers are allowed, for example to Mistral's European models; our Mistral vs ChatGPT comparison covers that choice.
Summary
A customer list in Excel holds up with one row per contact, drop-down lists, real dates and a dated next step on every row. On data protection: tell people, honor opt-outs, set a retention period and keep notes factual. When several people edit the file and follow-ups start slipping, prepare the move to a CRM, and clean the data first.
FAQ
Excel or Google Sheets for a customer list?
Both work. Google Sheets makes simultaneous editing easy, and so does Excel for the web with Microsoft 365. What matters is a single shared version, not a file passed around by email.
How long can I keep a prospect in my list?
GDPR sets no fixed period: you decide one and justify it. The French regulator uses three years from collection or from the prospect's last contact as its reference, which is a reasonable benchmark elsewhere in Europe.
Is a spreadsheet CRM GDPR compliant?
It can be, if you inform people, honor objections and access requests, limit retention and control who can open the file. The tool matters less than the rules you apply to it.
When is a CRM Excel template no longer enough?
When several people edit it at once, follow-ups get missed, or duplicates and version conflicts take more time than selling. At that point a shared tool with history and permissions is worth considering.