Compliance
B2B Data and GDPR: What You Can Legally Use for Outreach
2 September 2026 · 6 min read
Companies House data is public by law, but GDPR still applies the moment you use personal data, like a director's name, for outreach.
For most B2B prospecting, the lawful basis is legitimate interest: you have a genuine business reason to contact them, and it's what they'd reasonably expect.
That means being relevant. Emailing a plumbing supplier about plumbing supplies is defensible; adding them to an unrelated newsletter is not.
Always identify yourself, give a clear opt-out, honour it immediately, and never use data you've been asked to delete.
Company Explore only surfaces data from public registers, and our GDPR compliance page explains exactly what we show and why.




