Acceptable use and email compliance for buyers
Version 2026-10-29-draft · Effective [EFFECTIVE DATE]
Draft, not in force. This page has not been reviewed by an advocate yet and is not legal advice. Items in [BRACKETS] are details still to be filled in.
Not built yet
- Screening against opt-out registers is not built yet.
getLeads helps you find companies. You send the messages, so you are responsible for following the law where you and your recipients are. This page is part of our Terms of Service. It is general guidance, not legal advice.
The rules for everyone
- Contact businesses, about things relevant to their business.
- Say who you are, use a real sender name and address, and don't use misleading subject lines.
- Include an easy opt-out in every message and honour it quickly (within 10 business days at the latest).
- Keep a do-not-contact list, and check it before every campaign.
- No resale. Don't resell, publish or share exported data, or use it to build a competing database or lead service.
- Keep the source and licence notices that come with exports.
- No spam, harassment, fraud, or targeting of individuals rather than businesses.
- If a company asks to be removed, delete it from your copies and tell us at [PRIVACY EMAIL].
Country notes (check before you send)
| Where the recipient is | What to know |
|---|---|
| Kenya | Data Protection Act 2019 and its regulations limit commercial use of personal data. Use the company's generic contacts, offer an opt-out, and get consent before marketing to an individual's personal email or phone. |
| USA | CAN-SPAM applies to B2B email too: accurate headers, a physical address, a clear opt-out, honour opt-outs within 10 business days. Penalties are per email. |
| UK | PECR allows email to corporate bodies with an opt-out, but sole traders and some partnerships count as individuals and need consent. UK GDPR applies to any personal data. |
| EU | GDPR applies to any personal data; rules on B2B email vary by country (e.g. France allows relevant B2B email with an opt-out). |
| Germany | Consent needed. UWG §7: marketing email generally needs prior consent, even to businesses. |
| South Africa | Consent needed. POPIA s.69: direct marketing by email or SMS needs consent, and POPIA also protects companies. |
| Nigeria | Consent needed. NDPA 2023 and its rules: direct marketing needs consent and an opt-out. |
| Elsewhere | Check local anti-spam and data-protection law. |
Every export carries a short version of this warning.
What we do on our side
- Sell company-level data only, from open, licensed sources and the firm's own site.
- Exclude sole traders and businesses on opt-out registers we screen.
- Keep a removal and suppression list and act on requests within 10 business days.
- Never send marketing email on your behalf.
If you break these rules
We may suspend or close your account. See Terms of Service, section 7.
Questions: info@getleads.site