Compliance

What we refuse to do is part of the product.

Anyone can claim compliance. Here is the specific version: what gets logged on every send, how opt-out works, which markets are blocked at system level, and what we will not do even when asked.

1 click
to opt out, with no form in between
Global
suppression applies across every campaign and client
100%
of sends logged with their legal basis
0
personal-data files sold

The traffic light, without euphemisms

Green · we operate United States · Spain

Business outreach with a full record

Businesses are contacted with a legal basis logged per send and the data origin stored. In the US that means honest headers and subject lines, a real physical mailing address in every send, and an opt-out that works the first time.

  • Clear identification of the sender and the client being represented
  • One-click opt-out on every channel, printed mail included
  • Exportable record of every send, with date and reason
Amber · conditions apply Both markets · depends on the owner

Sole proprietors and individual professionals

A sole proprietor isn't a company, and the rules differ. They're separated before anyone is contacted, using verifiable ownership data, which is identifiable on 42% of live websites.

  • Do-not-call registries checked before any dial
  • Trade-specific calling windows, so nobody is called mid-service
  • Frequency caps per business, with a block if contacted within 90 days
Red · excluded by default Germany · Austria

Jurisdictions where cold outreach is prohibited

No cell opens. This isn't a recommendation: the system blocks the send unless there is demonstrable prior consent verified one by one, and at that point it isn't cold outreach anymore.

  • Blocked at system level, not at campaign configuration
  • No exceptions on client request
  • The attempt is logged as a rejected send, with its reason

How opt-out works

It is what counts most if a complaint ever arrives, so it is the part that has to work best.

  1. 01

    One click

    A visible link in the email and a short printed URL on the letter. No login, no intermediate steps.

  2. 02

    Instant confirmation

    Confirmed on screen right away, not by a follow-up email that may never arrive.

  3. 03

    Global suppression

    The business is blocked across every campaign, channel and client, white label included.

  4. 04

    Proof

    The opt-out is stored with its timestamp, so it can be evidenced if anyone disputes it.

The short list

What we do

  • Log the legal basis and data origin of every send
  • Work from business data: public phone, website, category, coordinates
  • Separate companies from sole proprietors before contact
  • Include a physical mailing address in every US send
  • Target ads from the cell's aggregate figures, never per person

What we do not do, and will not

  • Sell personal-data files
  • Harvest profiles from professional networks
  • Upload contact lists to ad platforms
  • Send cold into jurisdictions where it's prohibited
  • Reactivate anyone who opted out, whatever list they arrive on

What gets logged on every send

No record, no send. It is the difference between answering a complaint with paperwork and reconstructing what happened from memory.

FieldWhat it storesWhat it is for
legal_basis The legal basis invoked for that specific send Justify the send without reconstructing it after the fact
data_origin Which source the record came from and when it was last verified Prove the data isn't of unknown provenance
channel Channel and exact sender: email, phone or letter Trace a complaint back to the send that caused it
suppression Whether the business is globally suppressed, and since when Stop the send before it happens
transition Origin and destination state, with timestamp and reason Rebuild the whole campaign if you're audited
Anatomy of a send record with its five fields: legal_basis stores the legal basis invoked, data_origin where the data came from and when, channel the exact channel and sender, suppression whether the contact is globally opted out, and transition the origin and destination state.
The five fields are written before sending, not afterwards. Rebuilding a campaign once the complaint has landed is redoing your homework, and it doesn't count as traceability.

This page describes how we operate; it is not legal advice. Each client remains the controller for the data of their own commercial relationship, and the corresponding data processing agreement is signed before the first cell opens.