How to Find Professional Contact Information Ethically: Best Practices

Finding the right person's work email or phone number is a normal part of business. Ethical practice comes down to three questions: is this a business contact detail, do you have a relevant reason to use it, and would the person find your approach fair and unsurprising?

This guide covers where to look, how to check what you find, what privacy and email laws expect, and the lines you should not cross. It is general guidance rather than legal advice, so ask your legal adviser about your specific situation.

Best practices at a glance

• Keep it professional

  Use work email addresses and business phone numbers. Avoid home addresses, personal phone numbers and personal social media accounts.

• Have a relevant reason

  Contact people because their role fits what you offer, not simply because you found their details.

• Collect only what you need

  If a name, role, company and work email are enough, do not gather anything more.

• Be open about who you are

  Use your real name and company, and be ready to say how you found the person.

• Make it easy to say no

  Include a clear way to opt out, then respect it everywhere.

• Keep records

  Note the source and date for each detail, so that you can answer questions and correct errors.

Where to look

Begin with sources the person or company has chosen to make public for business purposes.

• Company websites

  Leadership, team, press and contact pages often give names, roles and the right department.

• Professional networks

  LinkedIn profiles help confirm a person's current role. Follow each platform's terms, including any limits on automated collection.

• Published work

  Conference speaker pages, articles, press releases and podcasts can show who owns a topic.

• Official registers

  Company registers and licensing databases, such as the US NPI Registry for healthcare providers, can confirm businesses and credentials.

• Reputable data providers

  Ask how the data is sourced and verified, how often it is refreshed, and how people can opt out or request removal.

• Referrals

  An introduction from a shared colleague or customer is often the most welcome route of all.

• The company itself

  A main switchboard or a general inbox can direct you to the right person if you explain why you are calling.

How to verify what you find

• Confirm the role

  Check that the person still works there and still covers the area you care about, using at least two sources.

• Verify the email

  Use an email verification tool before sending. This protects both the recipient and your sender reputation.

• Check your own records

  Search your CRM and suppression list first, in case the person has already opted out or works with a colleague of yours.

• Date your data

  Record when you last checked. Business contact details go out of date as people change jobs.

• Do not guess in bulk

  Guessing email patterns and sending at scale leads to bounces and can reach the wrong people.

What the law expects

Rules depend on where the person is located as well as where you are based. Here are some common examples. In the United States, CAN-SPAM covers commercial email and requires honest headers and subject lines, a physical postal address and a working opt-out. Calling and text messages have their own rules, including the TCPA and do-not-call requirements.

In the EU and the UK, the GDPR applies to business contact details about individuals, so you need a lawful basis, must tell people how their data is used and must respect their rights. Separate electronic marketing rules also apply in those regions. Canada's CASL generally requires consent for commercial electronic messages, with limited exceptions. Check the current rules for every country you contact.

Lines you should not cross

• No pretexting

  Do not pretend to be someone else, or invent a reason, in order to get contact details from a receptionist or colleague.

• No hacked or leaked data

  Never use information from data breaches or lists with an unknown origin.

• No personal surveillance

  Do not look into someone's family, home or private life. It is intrusive, and it will not help your message.

• No scraping against the rules

  Respect website terms and technical limits. Ask your legal adviser if you are unsure.

• No sensitive data

  Do not collect or infer details such as health, religion or political views.

• No workarounds after an opt-out

  If someone says no, do not contact them from another domain, tool or colleague.

How to evaluate a data provider

If you buy contact data, you remain responsible for how you use it, so ask direct questions first.

• Sources

  Where does the data come from, and can the provider explain it clearly?

• Verification

  How are emails and roles checked, and what deliverability or accuracy standard is offered?

• Freshness

  How often are records updated, and can you see the last-verified date?

• Privacy

  Is there a published privacy notice, and how do individuals opt out or request removal?

• Sample

  Will the provider supply a sample built to your criteria, so you can test it before you buy?

Where NPLUS Global helps

We supply verified B2B, technology, healthcare and channel partner contact data, and we can clean and verify the records you already hold. Tell us the roles and companies you want to reach, and we will build a sample for you to review first.