What does GDPR say about using public business data for B2B outreach?

GDPR permits using publicly available professional contact data for B2B outreach under the legitimate interest legal basis, provided the communication is relevant to the recipient's professional role, you identify your company clearly, and you offer an easy way to opt out. Personal email addresses require explicit consent even if publicly available. Always document your legitimate interest assessment in writing and honor deletion requests within 30 days.

Is cold emailing to businesses legal under GDPR?

Yes, cold B2B email is legal under GDPR when three conditions are met: the recipient is a professional (not a private individual), the email is relevant to their business role, and you provide a clear unsubscribe option. The CAN-SPAM Act governs US emails and has similar requirements: no deceptive subject lines, a physical address and an opt-out mechanism. In Canada, CASL is stricter and requires implied or express consent even for B2B contacts.

How should I handle a GDPR data deletion request from a prospect?

When a prospect or client requests deletion of their data: acknowledge receipt within 72 hours, delete their record from your CRM, email lists and any third-party tools within 30 days, and send written confirmation. Keep a minimal log of the deletion request itself (name, date, action taken) for compliance purposes. You are allowed to retain data if you have a legal obligation to do so (for example, invoice records for tax purposes).

What data can I legally collect and store in a B2B contact database?

For B2B outreach purposes you can legally collect and store: company name, business address, business phone number, professional email address and job title, provided the data is used for a purpose the contact would reasonably expect given their role. You cannot store sensitive personal data (health, politics, religion) without explicit consent. Data must be accurate and kept only as long as needed. Periodic list cleaning is not just a deliverability best practice; it is a GDPR compliance requirement.

Legal & GDPR for Sales

Sell without legal issues. GDPR, public data, legal cold email and how to handle data deletion requests.

New

Legal

Google Maps scraping and GDPR What is fine, what needs care, and how to stay on the safe side

Google Maps scraping and GDPR explained: personal vs business data, lawful basis, the 120-result limit, CAPTCHAs, and how to stay on the safe side.

Jul 202613 min

New

Legal

Why Google Maps limits you to 120 results And what the cap really means for building lead lists

Why does Google Maps cap a search at about 120 results? Learn what the limit means, whether it is legal to scrape around it, and how to build full lists safely.

Jul 202613 min

New

Legal

Is selling scraped databases legal? A balanced look at the rules and the limits

Is selling scraped Google Maps databases legal? A balanced guide to GDPR, business vs personal data, CAN-SPAM, bans, CAPTCHAs, and the 120-result limit.

Jul 202614 min

Legal

GDPR Guide for B2B Sales Teams

Everything your sales team needs to know about GDPR to prospect legally. Legal bases, public data and best practices for B2B sales.

Oct 20256 min

Legal

How to Handle Data Deletion Requests

Practical guide to handling data deletion requests under GDPR. Deadlines, process, exceptions and how to comply with the right to erasure in B2B sales.

Jan 20264 min

New

Legal

Is It Legal to Scrape Google Maps? The honest answer

Is it legal to scrape Google Maps for business data? A clear, honest look at Google's Terms of Service, public data, GDPR, the hiQ ruling, real risks and...

Jun 202615 min

New

Legal

GDPR Cold Email Fines Real cases, real numbers, and how to stay clear

Real GDPR fines for cold email and marketing: actual AEPD and EU cases with amounts, what went wrong, and how to use legitimate interest correctly to stay...

Jun 202614 min

No articles found