The rules the team follows in each market
| GCC · PDPL | EU · GDPR + PECR | US · CAN-SPAM + TCPA | |
|---|---|---|---|
| Basis for B2B outreach | Documented consent or an existing relationship, with a source log per contact | Legitimate interest for B2B email in the UK, the Netherlands and the Nordics; mostly prior consent in Germany and Austria, so phone and LinkedIn come first there | B2B email without prior consent when it carries an unsubscribe link, a postal address and an honest subject |
| Unsubscribe in every message; sender identity in your name | Unsubscribe in every message; the first email says where your contact details came from | Unsubscribe honoured within 10 days; real postal address | |
| Sent by hand from your account manager’s own real profile; no automation tools | Sent by hand from your account manager’s own real profile; no automation tools | Sent by hand from your account manager’s own real profile; no automation tools | |
| Phone | Every call made by a person, never a voice robot, inside calling windows; no calls at prayer times, on Fridays or after 21:00 local time | Calls by people only, in business hours; TPS and CTPS checks in the UK; extra care with cold calls in Germany | Manual calls by people only, never prerecorded or AI voices; national and state do-not-call lists; 08:00–21:00 in the recipient’s local time |
| WhatsApp and SMS | Never a cold first touch: WhatsApp starts only after the prospect opts in, by tapping a WhatsApp link or asking for it, then approved templates from your business account | No WhatsApp first touch; SMS with consent | SMS only with prior written consent |
| Call recording | Notice at the start of every call | Notice; two-party consent in Germany | Notice on every call |
| Individual rights | Access, correction, deletion and withdrawal within 30 days | Access, deletion and objection within 30 days | CCPA where it applies |
| Data location | Hosted in-region, in Riyadh | Hosted in-region, in Frankfurt | Hosted in-region, in Virginia |
| Recording retention (default) | 12 months | 6 months | 12 months |
This table is engineering guidance for how the team works, not legal advice. Counsel reviews the rules for each market before launch. Calendars and calling windows per market.