You're responsible for every message you send to a contact you found through Tomba. This guide sums up the rules in our Acceptable Use Policy. If the two differ, the policy applies.
This isn't legal advice. Check what applies in the places where you send.
What every message needs
Identify yourself as the sender accurately.
Include a valid postal address.
Use a truthful subject line.
Include a working, clearly visible unsubscribe option in every commercial message.
Respect opt-outs
An opt-out is when someone asks you to stop contacting them. Act on opt-outs and unsubscribes promptly, and leave those people out of all future outreach.
Have a lawful reason to contact someone
You need a lawful basis to use a contact's personal data. A lawful basis is a reason the law accepts, under the GDPR, the UK GDPR and any other data protection law that applies.
You also need to follow the anti-spam and marketing laws that apply. These include the CAN-SPAM Act (US), CASL (Canada), the ePrivacy Directive and its national versions (EU), and the Privacy and Electronic Communications Regulations (UK).
Give any privacy notice the law requires of you as a data controller, the person or company that decides how the data is used. Under Article 14 of the GDPR, that can mean telling people at first contact.
Some places require consent before you send unsolicited commercial email to individuals. Checking what applies where you send is your responsibility.
What you must never do
Don't do any of these with Tomba, or with data you get from Tomba.
Send unsolicited bulk email, spam, or any commercial message that doesn't meet anti-spam law.
Send phishing, fraud, or any other deceptive or misleading message, including messages that trick people into giving up information.
Harass, threaten, stalk, defame or intimidate anyone, or publish their private details.
Protect your sending
Verify your list before you send, so fewer messages bounce.
Set up your sending domain with SPF, DKIM and DMARC. These are email settings that prove you're allowed to send from your domain. You also need them to claim a credit for a hard bounce.
Don't suggest that Tomba endorses, sponsors, sent or is responsible for your messages.
What happens if the rules are broken
If we reasonably believe you've broken these rules, we can take any of these steps, in proportion to the breach:
Limit your usage.
Block IP addresses.
Remove or disable access to the content involved.
Suspend seats, API keys (the codes that connect other tools to Tomba) or the whole account.
Close your account by ending your agreement under our Terms of Service.
Report the activity to law enforcement or another authority where the law requires or allows it.
Where we can, we give you notice and a chance to fix a breach. In some cases we can act at once and without notice. These are a security risk, a risk of harm to a person, a threat to the service, or a legal requirement.
Report abuse
To report someone using Tomba in breach of these rules, email [email protected]. Include the account, domain or message involved, with the message headers, which are the technical details of the email, or any other evidence. We investigate reports, and we don't share the outcome with third parties.
Send security issues to [email protected]. To ask for data removal, email [email protected].
Related articles