Is reaching out to businesses legal? GDPR and the rules, in plain terms
Yes, you can email businesses, but there are rules, and they differ by country. Here's what's actually allowed when you reach out, explained without the legalese.
People assume cold outreach is either forbidden or a free-for-all. Neither is true. In most markets you can reach out to businesses, but how you do it decides whether you stay legal and land in the inbox instead of spam.
This isn't legal advice, but here's the shape of it.
Business contact, real relevance
Under GDPR and similar laws, reaching a person at a business about something genuinely relevant to their work is generally allowed, on a "legitimate interest" basis. The key words are relevant and proportionate. A researched, personal message to the right person is very different from blasting a purchased list.
What keeps you on the right side
- Send from your own domain and identity, not a hidden bulk sender.
- Make it easy to opt out, and honour it immediately.
- Keep volume human. Mass-blasting is where anti-spam laws bite.
- Only keep data you actually need, and be able to say where it came from.
It changes by country
Some markets are stricter (opt-in for certain contacts), others more permissive for B2B. If you sell across borders, the local rules matter, which is exactly why sending personally, from your own inbox, at a human pace, is the safe default everywhere.
Done right, "compliant" and "gets replies" are the same thing: relevant, personal, and clearly from a real person.
Want a hand with your own outreach?
Tell Selda who you want to reach. It finds them, writes to each one, and books the meetings, from your own inbox, with your approval. Start free, or book time with Justus.
Try it free →