Is Bobb GDPR compliant?
Bobb is built for GDPR compliance. We practice data minimization and purpose limitation, and we give people control over their data, including access, correction, deletion, and export. See our Privacy Policy for details.
What is the lawful basis for the prospect data?
We process business contact data to support business-to-business communication, under legitimate interest (GDPR Article 6(1)(f)). The data is kept for professional discovery and outreach, with safeguards in line with GDPR.
Where does the prospect data come from?
Only publicly accessible sources: business directories, company registries, company websites, professional publications and announcements, professional networks, and recruitment sites. We do not collect private contact details, sensitive personal data (like health, religion, or political views), or data from restricted sources. Records are updated and validated regularly, and outdated entries are removed. We work only with data partners who follow GDPR standards.
What am I responsible for when I use the outbound agent?
You are the data controller for your outreach. That means you:
- Have a valid legal basis for it, typically legitimate interest for B2B prospecting.
- Follow the law where you and your recipients are, including CAN-SPAM, CASL, GDPR, and PECR.
- Use an honest sender identity and include a way to opt out.
- Keep a suppression list and never contact someone again after they opt out.
- Answer requests from the people you contact (access, deletion, objection) within 30 days.
- Tell prospects how you got their information if they ask.
Bobb gives you the tools: lead and email previews before launch, country exclusions, one-click pause, and automatic opt-out handling. The full terms are in section 4 of our Terms of Service.
How should I answer "where did you get my email?"
Reply directly, since you are the controller. You can adapt this:
We found your professional contact details through a B2B prospecting platform that uses only publicly available business data, such as professional profiles, business directories, and company websites. We contacted you under our legitimate interest in business-to-business communication about professional services (GDPR Article 6(1)(f)). If you'd rather not hear from us, or want your details updated or removed, just say so and we'll handle it promptly.
Can someone opt out of Bobb's prospect data?
Yes. People can ask to access, correct, or delete their business data, or object to its use, by emailing nathan@trybobb.com. We respond within 30 days. Removal from Bobb doesn't remove someone from other B2B databases. If a Bobb customer contacted them, they should also opt out with that customer, who is responsible for the outreach and must honor it.
What about my newsletter?
Newsletter sending is permission-based. Send it only to people who have a relationship with you or were lawfully added. Every newsletter includes one-click unsubscribe, and Bobb suppresses opt-outs automatically.
More questions?
Email nathan@trybobb.com.