Data sources and compliance: where every LeadForge row comes from
LeadForge lists contain only business contact details that the business itself publishes. Each email is copied from the business’s own website and carries the exact page URL. Nothing is guessed, bought from brokers or scraped from personal social profiles.
Where each field comes from
| Field | Source |
|---|---|
| business_name, name_source_url | The business’s own website: its structured data (JSON-LD), its site name tag or its page title. name_source_url is the page. A site that names no business is dropped. |
| address, address_source_url | The business’s own website: a postal address in its structured data or a street address printed on the page. Blank when the site prints none. |
| category | The niche you ordered. We do not copy categories from map listings. |
| website | A candidate business website. Public map listings or web search are used only to find these websites (or you send us the domains); no map-listing field is stored in or shipped with your list. |
| email, email_source_url | The business’s own website: home page plus up to four contact/about pages. Kept only if printed there (mailto link, visible text, or an address the page itself decodes). |
| mx_records | A DNS lookup of the email domain’s mail servers at check time. |
| phone, phone_source | The first tel: link on the business’s own site, with the page. Blank when the site has none; we never fill it from a map listing. |
| opener, opener_basis_quote | Written by an AI model from the business’s home page; kept only if the quote appears word for word on that page. |
What we never do
- Guess or pattern-generate emails (no firstname@domain).
- Ping mailboxes, or call a list “100% verified”.
- Buy data, or scrape personal social-media profiles.
- Include recruiting inboxes (careers@, jobs@) or website-builder addresses.
- Build lists of EU or UK businesses.
- Sell the same premade list to many buyers: every list is built for its order.
Removal and opt-out
Any business can ask to be left out. Email leadforge@mail.tab.bot with the subject “Remove” and the business’s website or email address. What exists today: a plain suppression file in our pipeline (one email address or domain per line, with the date and reason). The list builder loads it on every run, skips a suppressed domain before reading its site, and drops any suppressed email; an automated test checks both. A domain entry removes the business and every address at it. As of 2026-10-14 the file holds no entries, because no removal request has been received (no outreach has been sent). Lists already delivered are the buyer’s responsibility; every buyer must honour opt-outs (see below).
The rules for you, the sender (basics, not legal advice)
- US — CAN-SPAM. Commercial email needs accurate header and sender information, a non-deceptive subject line, your valid physical postal address, and a clear way to opt out; you must honour an opt-out within 10 business days. Source: FTC CAN-SPAM compliance guide.
- Canada — CASL. Commercial electronic messages generally need consent. Implied consent can apply when an address is conspicuously published, without a statement refusing messages, and your message is relevant to the recipient’s business role. Sources: CASL, s. 10(9); CRTC FAQ.
- Australia — Spam Act 2003. Messages need consent (which can be inferred from a conspicuously published business address when the message relates to the recipient’s role), accurate sender identification and a functional unsubscribe. Sources: ACMA; Spam Act, Schedule 2.
- EU and UK — GDPR / PECR. A business email that identifies a person is personal data, and UK PECR limits unsolicited email to sole traders and partnerships. That is why LeadForge does not build EU or UK lists. Sources: ICO guide to email marketing; European Commission: data protection.
This page is general information, not legal advice. You are responsible for how you use a list.
Last updated