Compliance

Cold Email Compliance: Lawful By Default

Rules for emailing companies differ by country. Where a company may be emailed without prior consent, the sender must be identified and every message must offer a working opt-out. Where consent is required, FirmLead does not send at all.

See Country By Country

A Check Before Every Email

Country rule, do-not-email lists, sender address, mailbox limits, the quality gate and whether the company already said no. It runs before every single email and there is no way to skip it.

A Footer In The Reader's Language

Every email carries a plain-text footer with where the contact came from, the sender's name and postal address, an unsubscribe link and a privacy notice.

Opt-Outs That Work Forever

One-click unsubscribe headers (RFC 8058), an unsubscribe page that never expires, and "stop" replies honoured across all of the sender's campaigns. Recipients can also block every company that uses FirmLead.

Data Kept Only As Long As Needed

Leads nobody contacted, or who never answered, are deleted after 12 months. Only a hash of an opted-out address is kept, so the opt-out keeps working. Sender domains are checked for SPF, DKIM and DMARC.

Country By Country

The same rules the app enforces before every email.

Country	Can companies be emailed?	In FirmLead	Notes
Estonia	Yes, to company addresses (info@, sales@ …). A person's work address only after you confirm it is a business contact.	Enabled	Companies (legal persons) may be emailed without prior consent when every message offers an opt-out. Sole traders and other natural persons need consent. Source
Finland	Yes, to company addresses (info@, sales@ …). A person's work address only after you confirm it is a business contact.	Enabled	Act on Electronic Communications Services (917/2014): section 200 requires consent for natural persons; section 202 allows direct marketing to an organisation unless it has expressly refused. Industry guidance (ASML 2018): allowed without consent when the offer relates to the recipient's role; no mass mailings to named work addresses. Sole traders are natural persons. Source
France	Yes, to company addresses (info@, sales@ …). A person's work address only after you confirm it is a business contact.	Enabled	CNIL: B2B email is allowed without prior consent when the message relates to the recipient's professional role, the sender is identified and an opt-out is offered. Source
United Kingdom	Yes, to company addresses (info@, sales@ …). A person's work address only after you confirm it is a business contact.	Enabled	PECR: corporate subscribers (companies, LLPs) may be emailed without consent if the sender is identified and an opt-out is offered. Sole traders and partnerships are individual subscribers and need consent. Source
Ireland	Yes, to company addresses (info@, sales@ …). A person's work address only after you confirm it is a business contact.	Enabled	S.I. 336/2011 regulation 13: consent for natural persons; a business (corporate) subscriber may be emailed unless it has objected (regulation 13(4); DPC prosecution of Viking Direct), with the sender identified and a valid opt-out address. Source
Latvia	Yes, to company addresses (info@, sales@ …). A person's work address only after you confirm it is a business contact.	Enabled	Information Society Services Law article 9(6): the consent rules of article 9(1)-(3) apply to commercial messages to natural persons; companies may be emailed when every message offers an opt-out and refusals are honoured (article 9(4)). Sole traders are natural persons. Source
Norway	Yes, but only to general company addresses (info@, post@). A person's address, even at work, needs consent.	Enabled	Marketing Control Act section 15: consent for every natural person, including an individual work address, even when the offer is for the employer. Addresses that do not belong to a specific person (post@, firmapost@) may be emailed. Forbrukertilsynet guidance section 2.4. Sole proprietorships (ENK) are natural persons. Source
Sweden	Yes, to company addresses (info@, sales@ …). A person's work address only after you confirm it is a business contact.	Enabled	Marketing Practices Act (2008:486) section 19: consent only for natural persons; section 20: every marketing email, also to companies, needs a valid opt-out address. Government bill 2003/04:43 section 6.5: no consent rule for legal persons. Sole traders are natural persons. Source
United States	Yes. Every email must identify the sender and offer an opt-out.	Enabled	CAN-SPAM: no prior consent needed. Truthful headers and subject, a working opt-out honoured within 10 business days, and a valid physical postal address. No GDPR Art. 14 notice. Source
Austria	No. Prior consent is required, so FirmLead does not send there.	Not enabled	TKG 2021 section 174: prior consent is required for marketing email, including to companies. Source
Australia	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Spam Act 2003: consent is needed; inferred consent for conspicuously published addresses (Schedule 2 clause 4) only when the message relates to the person's role, judged case by case. List-only until a legal review. Source
Belgium	Yes, but only to general company addresses (info@, post@). A person's address, even at work, needs consent.	Not enabled	Code of Economic Law VI.110 and the Royal Decree of 4 April 2003: consent is the rule; opt-out is allowed for legal persons only to impersonal addresses (info@). Kept list-only: the decree text was read only through commentary, and the Data Protection Authority (opinion 02/2026) recommends moving to opt-in. Source
Bulgaria	Yes, to company addresses (info@, sales@ …). A person's work address only after you confirm it is a business contact.	Not enabled	Electronic Commerce Act article 6: consumers need prior consent (6(4)); companies may be emailed unless their address is in the Consumer Protection Commission's register of legal persons who refuse unsolicited messages (6(2)-(3)), and every unsolicited email must be clearly marked as unsolicited on arrival (6(1)). Not switched on: FirmLead does not check that register or mark the email yet. Source
Canada	No. Prior consent is required, so FirmLead does not send there.	Not enabled	CASL: commercial electronic messages need consent. Implied consent for conspicuously published addresses (section 10(9)(b)) is narrow, judged case by case, the sender must prove it, and section 9 makes helping a violation an offence. List-only until a legal review. Source
Switzerland	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Unfair Competition Act article 3(1)(o): mass advertising by telecommunication needs prior consent, also to companies; existing customers excepted. Source
Cyprus	Not reviewed yet, so FirmLead does not send there.	Not enabled	Not reviewed: the B2B email rules of the national electronic communications law need a legal check. Source
Czechia	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Act 480/2004 section 7: commercial communications by email only to users who gave prior consent; the UOOU states that users include legal persons. Source
Germany	No. Prior consent is required, so FirmLead does not send there.	Not enabled	UWG section 7(2): prior express consent is required for marketing email, including B2B. Source
Denmark	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Marketing Practices Act section 10: prior consent is required for marketing email, also B2B. Source
Spain	No. Prior consent is required, so FirmLead does not send there.	Not enabled	LSSI article 21: commercial email needs the recipient's prior request or express consent; the AEPD applies it to companies too. Only existing customers are exempt (21.2). Source
Greece	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Law 3471/2006 article 11: the telecom regulator (EETT) states that no communication for commercial promotion is allowed without the subscriber's prior explicit consent; no B2B exception found. Source
Croatia	Yes, to company addresses (info@, sales@ …). A person's work address only after you confirm it is a business contact.	Not enabled	Electronic Communications Act article 50(1): email marketing needs the end user's prior consent; 50(4): paragraphs 1 and 2 do not apply to communications to legal persons; 50(3) (no hidden sender, a valid opt-out address) applies to everyone. So companies may be emailed with an opt-out; sole traders (obrt) are natural persons. Not switched on: FirmLead does not write Croatian yet. Source
Hungary	Yes, but only to general company addresses (info@, post@). A person's address, even at work, needs consent.	Not enabled	Business Advertising Act (XLVIII of 2008) section 6(1): advertising by email to a natural person only with prior, clear and express consent; the E-commerce Act (CVIII of 2001) sections 14 and 14/A add sender and labelling duties but no consent rule for companies. So only general company addresses could be emailed. Kept list-only: practitioner guides read Hungarian practice as consent for B2B too; needs a legal review. Source
Iceland	Not reviewed yet, so FirmLead does not send there.	Not enabled	Not reviewed: the B2B email rules of the Electronic Communications Act need a legal check (Iceland applies the EU ePrivacy rules through the EEA). Source
Italy	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Privacy Code art. 130: prior consent is required for marketing email. Source
Lithuania	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Law on Electronic Communications: direct marketing by email only with the prior consent of the subscriber or registered user, which includes companies; no B2B exception found. List-only until a legal review says otherwise. Source
Luxembourg	Not reviewed yet, so FirmLead does not send there.	Not enabled	Not reviewed for companies. Law of 30 May 2005 (article 11): the CNPD says email prospecting needs prior consent when there is no customer relationship; whether that covers legal persons was not confirmed in the consolidated text. Source
Malta	Not reviewed yet, so FirmLead does not send there.	Not enabled	Not reviewed: the B2B email rules of the national ePrivacy regulations need a legal check. Source
Netherlands	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Telecommunications Act article 11.7(1): prior consent for electronic messages to every end user. The B2B exception (11.7(3)(a)) covers only contact details a company designated and published for receiving unsolicited commercial messages, which a general contact address is not. Source
New Zealand	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Unsolicited Electronic Messages Act 2007 section 4: deemed consent only for addresses conspicuously published in a business capacity, without a no-spam notice, for a message relevant to the role; the sender must prove it (section 9(3)). List-only until a legal review. Source
Poland	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Electronic Communications Law (PKE, 2024): prior consent is required for marketing email, including B2B. Source
Portugal	Not reviewed yet, so FirmLead does not send there.	Not enabled	Not reviewed: the rules for companies (Law 41/2004 and the national opt-out list kept by the Direcao-Geral do Consumidor) need a legal check. Source
Romania	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Law 506/2004 art. 12(1): commercial communications by email only with the subscriber's or user's prior express consent; art. 12(4) applies paragraphs (1) and (3) to legal-person subscribers too. Only own customers buying similar products are exempt (12(2)). Source
Slovenia	Not reviewed yet, so FirmLead does not send there.	Not enabled	Not reviewed: the B2B email rules of the Electronic Communications Act (ZEKom-2) need a legal check. Source
Slovakia	No. Prior consent is required, so FirmLead does not send there.	Not enabled	Electronic Communications Act 452/2021 section 116(3): email for direct marketing only with the subscriber's or user's prior provable consent, obtained before the first contact; no exception for companies. Fines up to 5% of turnover (section 124(3)), enforced by the regulator. Source

What We Don't Do

No bought or rented lead lists. Contacts come from public registers, the company's own website and public map listings.
No LinkedIn or social-network scraping, and no personal profiles.
No tracking pixels or open tracking. We only see replies.
No fake personalization: the AI may use only facts from the company's own website or the register, never invented ones.
No sending through third-party email services: every email goes out from the sender's own mailbox.

Questions: info@firmlead.io

Find Your Next Customers With FirmLead

Tell it what you sell. It finds the companies and writes the first emails. 7-day free trial, card required. See pricing

Find My First Leads Try The Demo