Emails, SMS, and WhatsApp are some of the most effective marketing channels when used correctly. But since they are personal and intrusive channels, there are some rules to comply with when importing and targeting contacts from your database for your marketing strategy.
Local laws may have additional requirements. To ensure you are in compliance with local laws imposed where your organization is established or where your customers might be located, we advise you to contact your legal counsel. Sendinblue shall not be responsible if your use of the Sendinblue services does not comply with those laws and regulations.
What is a legitimate contact list?
A legitimate contact list does not allow you to send mass communication campaigns to all those contacts. Ensure you segment your contacts database before sending your campaigns to avoid soft and hard bounces, and therefore a suspension of your account. To learn more about digital marketing best practices and how to segment your contacts, check our dedicated articles for email, SMS, and WhatsApp.
According to your type of business, B2C (Business to Consumer) or B2B (Business to Business), your contact list is considered legitimate in the following cases:
✅ You import contacts who gave their consent to receive your communications (opt-in contacts). A consent is legitimate and compliant if:
- It is freely given, specific, informed, explicit, and unambiguous. In some cases, it must also be active consent, such as checking a box or entering contact details in a subscription form, for example. To comply with the GDPR, the consent box must be unchecked by default.
- Contacts know which type of communication they will receive and which communication channel in the subscription form.
- It was made within the last two years.
✅ You import contacts with whom you already have a business relationship.
✅ You import contacts you gathered via a partner form (the name of my company must appear on the form, and the number of partners is limited to 10).
✅ You are an NGO (Non-governmental organization) and import all my members.
Every situation for B2C companies, plus:
✅ You import professional contacts (via business cards).
✅ You use non-personal email addresses.
✅ Commercial prospecting is authorized and tolerated to a certain extent.
However, there are contact lists that are always forbidden to import into Sendinblue:
❌ Purchased, rented, borrowed, or third-party lists of email addresses;
❌ Contacts acquired by copying publicly visible email addresses from websites or social networks, such as LinkedIn (a.k.a. “scraping”).
Examples of legitimate and non-legitimate contact lists
|When a customer buys products from my online or physical store, I always provide them with a link to my newsletter subscription form that they can fill out to choose which marketing communications they want to receive from my brand.||✅||This situation is perfect! Customers can fill in the form themselves and choose which communications they want to receive.|
|One of my partners includes a checkbox on their subscription form and asks customers if they want to receive marketing communication from my company.||✅||The name of your company must appear on the form, and it should be clear to customers that you are a partner. The maximum number of partners is 10.|
|After creating an account on my website, customers are redirected to a subscription form to choose if they want to subscribe to my newsletter and receive my marketing communications.||✅||Your subscription form has to contain an unchecked box that your customers must check themselves to indicate their consent to receive your marketing communications. To ensure that you respect the GDPR, the consent box must be unchecked by default.|
|A client contacted me directly via email to ask for information about a product I'm selling. Since they are interested in this product, I want to send them newsletters about it.||❌||Your contact may be interested in this product, but they did not explicitly consent to receive bulk marketing emails. However, you can still send them a one-to-one email redirecting to your subscription form to ask for their explicit consent.|
|I retrieved a list of contacts from a political character containing the contact details of several people.||❌||Those contacts did not give their explicit consent to receive communications from an identified source. The fact that an email address was given to a Consulate or Embassy shall not be considered proof of consent.|
|I want to import a list of contacts into Sendinblue but realized that one of the email addresses is a role-based email address.||❌||Role-based email is a group address associated with a company, department, or group. These email addresses are often forwarded to a group of people and not a specific individual. Considering this, you won’t be able to receive explicit and verifiable consent from a role-based email address.|
|Two and a half years ago, I collected the consent of several contacts via a subscription form for my newsletter. Unfortunately, covid delayed the launch of my brand. I was finally able to open my store this week and want to send them a newsletter to share the news.||❌||Contact lists that have not been updated in the last two years are not considered compliant, as the contacts in those lists might not remember that they subscribed to this newsletter. Since they are not expecting this communication, sending them marketing communications might increase the number of abuse complaints and hurt your reputation.You can always send a one-to-one communication to share the news and include a link to your subscription form to confirm their consent.|
|I recently acquired a second brand. I want to send marketing emails to the contacts who subscribed to my first brand, as they might be interested in it.||🧐||Contacts who consent to receive marketing emails from your first brand do not necessarily want and expect to receive marketing emails from your second brand since they did not agree directly to receiving them. However, you can always send them a one-to-one email sharing the news and include a link to your subscription form for this second brand.|
|I imported all my employees' email addresses to send them emails.||🧐||As an employer, you are allowed to provide a list of your employees' business email addresses, but only in connection with employer-provided benefits, such as health insurance. You can always contact your employees in a one-to-one email to obtain their consent by sharing your subscription form and activating the double opt-in form to confirm their consent.|
|I just opened my company, and to grow my contact database, I want to import my friends, family, or past colleagues' contact details into Sendinblue.||🧐||Your current and past relationships with individuals do not constitute consent from them to receive bulk communication from your new brand. This method also doesn’t give you the opportunity to obtain verifiable consent from those contacts.However, you can send one-to-one communications to your past and current relationships and share with them an electronic or paper subscription form. This will allow you to confirm their consent to receive your marketing communications and obtain proof of this consent.|
|Some of my customers shared their details with me in-store but did not fill in a subscription form to receive my marketing communication.||🧐||Since there is no proof of their explicit consent to receiving your marketing communications, you cannot send newsletters to those contacts. However, you can send a confirmation email redirecting those contacts to your subscription form. This will allow you to confirm their consent to receive your marketing communications and obtain proof of this consent.|
Specificities from SMS marketing
For SMS marketing, contacts need to give their explicit consent via an SMS subscription form. To ensure the best deliverability for your SMS marketing, ensure you follow our best practices that will also give you an idea of how to collect your contact consent for SMS marketing.
Specificities linked to WhatsApp marketing
For WhatsApp marketing, contacts need to give their explicit consent given via:
- In a WhatsApp thread,
- In a form,
- By phone (using an interactive voice response (IVR) flow),
- In-person or on paper (customers can sign a physical document to opt-in).
Consent to receive marketing communications is channel based. For example, it is forbidden to send SMS marketing communications to a customer who only agreed to receive your marketing communications over WhatsApp even if you have their phone number.
To learn more, check our dedicated article Collect your contacts' consent for WhatsApp messages.
🤔 Have a question?
If you have a question, feel free to contact our support team by creating a ticket from your account. If you don't have an account yet, you can contact us here.