Outbound outreach and its legal limits

Most domains never receive an inbound offer. For those, the only route to a sale is finding the businesses for which the name would be an upgrade and contacting them. Done carefully this is ordinary business development. Done as bulk mail it produces complaints, blocked addresses and, in several jurisdictions, enforcement risk.

Building the target list

Start from the term rather than from a directory. For a keyword name, the buyers are the companies already competing on that phrase: businesses whose trading name contains it, advertisers bidding on it, and firms that registered the same term in another extension. That last group is the strongest signal available, because a company holding the hyphenated or country code version has already decided the term matters, a point developed in the extension effect.

Rank the list before writing anything. A prospect that is already using a weaker version of the name, is spending on advertising for the term, and has recently raised money or rebranded is worth a considered message. A prospect that merely operates in the sector is not. Twenty researched approaches outperform two thousand generic ones, and only the first approach is defensible under European rules.

What the message contains

Keep it to a short paragraph and a plain offer. The elements that matter:

• The domain, named once, in the first line
• One sentence on why it fits that specific business, referring to something real such as the name they currently use
• A clear statement that the name is available and that the sender owns it
• One route to reply, and nothing else
• The sender's identity, in full, with a working address

Leave out appraisal reports, traffic claims, and any suggestion that a competitor is about to buy the name. Naming a price is optional. Stating one filters the list quickly but caps the deal; leaving it open invites more replies and more time spent on prospects who were never going to pay. Either way the exchange that follows is governed by the patterns in negotiation basics.

The rules in the European Union

The framework comes from the ePrivacy Directive, article 13, which requires prior consent for unsolicited electronic mail sent for direct marketing to subscribers. For recipients that are companies rather than individuals, the directive leaves member states to set the level of protection, so the position genuinely differs by country and the law that applies is the one where the recipient sits.

• Germany applies the strictest reading. Under the Act against Unfair Competition, advertising email without prior express consent is treated as an unreasonable nuisance whether the recipient is a consumer or a business, with only a narrow exception for existing customers.
• The Netherlands allows contact with legal persons and with people acting in a professional capacity without prior consent, provided the electronic contact details were published by that user for the purpose and the message matches the purpose attached to them, under article 11.7 of the Telecommunicatiewet.
• France permits business to business prospecting on a professional address without prior consent where the message relates to the recipient's professional role, with information given at first contact and an immediate objection route.

Alongside that sits the General Data Protection Regulation, because a named person at a company is still an identified individual. A lawful basis is required, and legitimate interests can serve for business prospecting where the interest is balanced against the recipient's expectations. Article 14 requires that the recipient be told who is processing their data and where it was obtained when the data was not collected from them, which in practice belongs in the first message. Article 21 gives an unconditional right to object to direct marketing, so every message needs a working way to stop further contact, and a request to stop must be honoured across all future sequences.

Two further limits are easy to miss. Registration data obtained from registrar and registry lookup services carries terms that forbid its use for mass unsolicited commercial messages, and gTLD registrars are bound by the same restriction, so a list scraped from lookup records is not a lawful source. Telephone contact is governed separately at national level, with its own opt-out registers, and the rules for calling a business differ from those for calling a consumer in most member states.

Volume, follow-up and record keeping

One follow-up is reasonable, sent a week or two later, adding something rather than repeating the first message. A third is rarely productive and moves the activity toward the behaviour regulators describe as nuisance.

Keep a suppression list of everyone who has asked not to be contacted, keep it across campaigns rather than per campaign, and record where each address came from. Those records are what turns an assertion of compliance into something demonstrable, and they also stop the same prospect being approached twice about the same name, which is the fastest way to lose a buyer who was still thinking about it. Names that produce no reply after a full cycle of outreach are candidates for the review described in portfolio and renewal discipline.