Important. Messaging law varies by recipient, region, channel and relationship. This policy is a platform minimum, not legal advice and not a substitute for stricter local requirements.
1. Required audience standard
You may contact only audiences for which you can document a lawful basis or other legally sufficient permission. A public profile, published business address, verified mailbox or purchased list does not by itself prove permission. Use additional care with sole traders, partnerships and role addresses that may identify individuals.
2. Prohibited list practices
- Using stolen, breached, scraped-behind-login or unlawfully obtained lists.
- Buying or renting contacts without documented provenance and a valid right to use them.
- Appending addresses to people who could not reasonably expect the message.
- Re-uploading unsubscribed, objecting, complaining or otherwise suppressed contacts.
- Using generated-address combinations for indiscriminate or high-volume guessing.
3. Sender identity and content
From, reply-to, routing information and subject lines must be accurate and not deceptive. Clearly identify the organisation responsible for the message and include a valid postal address where required. Content must reflect the recipient’s likely business context and must not disguise advertising as a personal reply, legal notice, security alert or prior conversation.
4. Unsubscribe and objections
Commercial messages must provide a clear, functional and appropriately prominent unsubscribe method. Requests must not require login, payment or unnecessary information. US CAN-SPAM opt-outs must be honoured within 10 business days; WorldsContact requires suppression as soon as reasonably practicable and before any further automated send. Where GDPR/UK rules apply, direct-marketing objections must be honoured.
5. Suppression and preference records
Maintain a durable suppression record sufficient to prevent re-contact. Do not delete a suppression entry merely because the underlying audience record is deleted. Apply global and campaign-specific preferences consistently across imports, integrations, automation and manual sends.
6. Regional review
Assess GDPR lawful basis plus the applicable national ePrivacy marketing rules. Legitimate interests under GDPR does not automatically satisfy electronic-marketing requirements.
Assess UK GDPR and PECR, including whether the recipient is an individual subscriber and whether an exception applies.
Follow CAN-SPAM requirements for accurate headers and subjects, identification where required, a postal address and effective opt-out; also review state privacy and consumer-protection laws.
Review the recipient’s location and applicable consent, identification, timing and recordkeeping rules before sending.
7. Operational safeguards
Authenticate sending domains, warm infrastructure responsibly, monitor bounces and complaints, use conservative daily limits, stop sequences on reply or opt-out and investigate unusual performance. Do not rotate domains or mailboxes to defeat provider controls or hide poor complaint rates.
8. Enforcement thresholds
We may pause sending when we detect suspicious acquisition, invalid sender identity, suppression bypass, abnormal bounce or complaint signals, or a credible abuse report. Repeated or severe violations may lead to permanent suspension. Customers must cooperate with reasonable investigations and remediation.
9. Reporting unwanted mail
Forward the message with full headers to abuse@worldscontact.com. We may share relevant details with the responsible customer and require immediate suppression.