Acceptable Use Policy

Last updated 23 August 2026 · Applies to organictraffic.io

Why this exists. The businesses in these files published their contact details so customers and suppliers could reach them. Using that reasonably keeps the whole category legitimate. Abusing it ruins it for everyone — so we enforce this.

1. What the data is for

  • Business-to-business outreach by email, phone or post, where you identify yourself and offer a way to opt out.
  • Enriching or de-duplicating your own CRM records.
  • Market research, territory planning, competitor mapping and TAM analysis.
  • Building targeted advertising audiences from business identifiers, where the platform permits it.
  • Partner, supplier or franchise recruitment.

2. What is prohibited

Redistribution

  • Reselling, sublicensing, publishing or giving away the raw data or any substantial part of it.
  • Uploading it to a public repository, marketplace, forum or shared drive.
  • Building a product or dataset from it that you then sell or license.

Channel misuse

  • SMS or text-message marketing. These are business landlines and switchboards; texting them is both ineffective and, in most jurisdictions, unlawful without prior consent.
  • Automated dialling, pre-recorded messages or robocalls.
  • Consumer marketing. These are businesses. Treating a sole trader's published business line as a consumer contact is outside both this policy and the law.
  • Sending from spoofed, forged or deliberately untraceable sender identities.
  • Ignoring an opt-out, unsubscribe or “do not contact” request.

Unlawful and harmful use

  • Fraud, phishing, impersonation of another business, or any deceptive scheme.
  • Harassment, threats, or repeated unwanted contact after a refusal.
  • Distributing malware or links to malicious content.
  • Marketing anything unlawful where you are or where the recipient is.
  • Any use that breaches CAN-SPAM, CASL, PECR, UK or EU GDPR, the Australian Spam Act, or the equivalent law in the recipient's jurisdiction.

3. Your responsibility

You are the data controller once a file is delivered. You decide who to contact, how and how often, and you are responsible for that decision. Compliance obligations vary by country and by channel; if you are running cross-border campaigns, take advice on the jurisdictions you are sending into.

Practically, this means: identify yourself and your business, say why you are contacting them, give a working opt-out, honour it immediately and permanently, and keep a record that you did.

4. Suppression requests

If a business asks to be removed from our data, we suppress it across all future builds within 5 working days. If you receive such a request about a record you bought from us, forward it to hello@organictraffic.io so we can suppress it at source as well as in your own list.

5. Enforcement

Where we have reasonable grounds to believe this policy has been breached we may suspend future orders, terminate your licence to data already delivered, refuse service permanently, and where the conduct is unlawful, report it to the relevant authority. No refund is due where a licence is terminated for breach.

6. Reporting abuse

If you have received unwanted contact and believe the sender used our data, email hello@organictraffic.io with the message headers. We investigate every report and will suppress your details on request whether or not the data came from us.