Compliance & GDPR

We sell B2B business-contact data for legitimate outreach. Here's how we approach lawfulness, suppression, and your responsibilities as the sender.

Lawful basis

Our B2B contact data is processed on the basis of legitimate interest (GDPR Art. 6(1)(f)) for business-to-business communication. We focus on professional, role-based business contacts rather than personal consumer data.

Suppression & erasure

We maintain a suppression list of unsubscribes, complaints, and erasure requests, and remove those records at delivery. To request removal of a record, contact us and we'll suppress it across future deliveries.

Your responsibilities

When you send outreach using a purchased list, you're the data controller for that campaign. You're responsible for complying with the laws that apply to you, including CAN-SPAM (US), CASL (Canada), and GDPR/PECR (EU/UK). That means providing a working opt-out, honoring it promptly, and identifying yourself truthfully.

Data accuracy

Source data is rebuilt daily, and every list on the site publishes the date of its current build plus how old that makes it, so you know a dataset's age before you buy rather than after. Records are verified again at delivery. See How we verify for details and the bounce guarantee.

Compliance documentation with every order

Every delivery email links to a printable data compliance statement naming your specific dataset: its provenance, build date, lawful basis, who controls what and from when, and the regimes that apply to your outreach: GDPR, CAN-SPAM and CASL, plus UAE PDPL and Saudi PDPL on our Gulf lists. It's written to be handed straight to a procurement or legal team.

This page is general information, not legal advice. Consult your own counsel for your specific obligations.