Legal

Acceptable use policy

Last updated 21 October 2026

The short version

• Only email people who have asked to hear from you. No bought, rented, shared or scraped lists, ever.
• Be honest about who you are and what you're sending, and let people leave easily.
• Keep bounces and spam complaints low. We pause sending that harms recipients or our reputation.
• Don't send prohibited content, or store data we don't allow, such as card numbers or passwords.

This policy applies to everyone who uses Organimate, and forms part of our Terms of service. It exists to protect the people who receive email sent through Organimate, our customers' sending reputation, and our own. Breaking it can lead to sending being paused or an account being closed (see section 9). Capitalised terms have the meanings given in our Terms.

1. Permission-based email only

You may send marketing Messages only to people who have given you permission, as Data Protection Law requires. For individuals in the UK under PECR, that means either:

• consent: a clear, specific, informed and freely given opt-in to receive marketing from you, which you can show; or
• soft opt-in: you collected their details during a sale or negotiation of a sale, you're marketing your own similar products or services, and you gave them a simple way to opt out both when you collected their details and in every Message since.

Other countries have their own rules, and you must follow those that apply to your recipients. You must keep records of how and when each person gave permission, and be able to show them to us on request.

Permission fades over time. Don't send marketing to people who haven't heard from you, or engaged with you, for a long period (as a guide, more than 12 months) without first re-confirming their interest.

2. Lists you must never use

You must not upload, import or email:

• purchased, rented, traded, borrowed or shared lists, or lists from data brokers or list-building services;
• addresses scraped, harvested or guessed from websites, directories or social networks, or generated by tools;
• co-registration or affiliate leads, unless the person explicitly agreed to hear from you by name;
• role addresses such as info@, sales@, postmaster@ or abuse@, unless the mailbox's owner opted in;
• addresses that unsubscribed, bounced or complained elsewhere, imported to get around their suppression; or
• addresses of people who gave their details for a different purpose, such as entering a competition, without clearly agreeing to marketing.

3. What every Message must do

• Clearly identify you as the sender, in the From name, the From and Reply-To addresses, and the content.
• Use subject lines and content that are honest and not misleading, and make clear when a Message is marketing.
• Include a working unsubscribe link in every marketing Message. Organimate adds a one-click unsubscribe automatically. Never remove, hide or break it, and never ask people to log in or pay to unsubscribe.
• Honour opt-outs. Organimate stops marketing to people who unsubscribe through it automatically. If someone opts out another way, such as by replying to you, record it in Organimate promptly, and within 10 business days at most.
• Include your business name and a valid postal address in marketing Messages where the law requires it, for example for recipients in the United States.
• Send from domains you own or are authorised to use, and authenticate them as Organimate asks (SPF, DKIM and DMARC) before sending from them.
• Mark a Message as transactional only if it genuinely is one: a receipt, an order, booking or delivery confirmation, a password reset, or an account or security notice the recipient needs. Transactional Messages bypass marketing opt-outs, so any promotional content in them must be minor and secondary, and allowed by law.

4. Keeping your sending healthy

Sending to people who don't want your email harms everyone who uses Organimate. You must:

• keep your hard bounce rate below 5% and your spam complaint rate below 0.1% of delivered Messages;
• remove invalid and long-inactive addresses, and investigate quickly if bounces or complaints rise; and
• not try to evade limits, suppression or our monitoring, for example by using several accounts, rotating sending domains or addresses, or spreading sending to dodge filters.

Organimate suppresses addresses that hard-bounce or complain automatically. We may slow, hold or pause sending if your rates exceed these levels, or if Messages hit spam traps, cause blocklistings or draw complaints from mailbox providers, and ask you to fix the cause before you send again.

5. Prohibited content and activities

You must not use Organimate to send, store or promote anything that is unlawful, or anything relating to:

• phishing, impersonation or spoofing, collecting credentials, or deceptive or fraudulent offers;
• malware, viruses or links to malicious or deceptive websites;
• content that sexually exploits or endangers children, or any illegal sexual content;
• pornography, escort or other sexually explicit adult services;
• harassment, threats, hate speech, or content that incites violence or promotes terrorism or extremism;
• illegal drugs and drug paraphernalia, weapons, ammunition or explosives;
• prescription medicines without the required authorisation, or unproven health claims;
• gambling, lotteries or betting without the required licence, and only to recipients for whom it is lawful;
• pyramid schemes, multi-level marketing recruitment, get-rich-quick or work-from-home schemes;
• payday loans, debt collection or credit repair, or regulated financial or investment products without the required authorisation, including the promotion of cryptoassets in breach of financial promotion rules;
• counterfeit goods, or content that infringes intellectual property, privacy or other rights; or
• selling, renting or brokering personal data or lists.

We may restrict or decline other content or industries that we reasonably consider high-risk for recipients or deliverability. If you are unsure whether your use is allowed, ask us at hello@organimate.co.uk before sending.

6. Data you may store

Store only the data you need, with a lawful basis for it. You must not store the following in contacts, custom fields or records:

• payment card numbers or security codes, bank login details, passwords or other authentication secrets;
• government identifiers such as passport or National Insurance numbers, unless you have a clear legal need and safeguards in place; or
• special category data (such as health, ethnicity, religion, sexual orientation, biometric or genetic data, political opinions or trade union membership) or criminal offence data, unless you have a lawful basis and a condition for it under Data Protection Law, have assessed the risk, and genuinely need it to communicate with that person.

Don't use Organimate to send marketing to children. You must not knowingly store data about children under 13, and you must follow the stricter rules that apply to younger people's data.

7. Protecting the service

You must not:

• try to gain unauthorised access to the Service, other accounts or our systems, or probe, scan or test their vulnerabilities without our written permission;
• interfere with or disrupt the Service, overload it, or get around API rate limits, sending limits, suppression or other controls;
• share accounts or API keys, or let anyone use the Service under your account who hasn't agreed to our terms;
• copy, reverse engineer or resell the Service, or use it to build a competing product, except as our Terms allow; or
• use the Service to store or send content on behalf of third parties as a reseller, agency or platform without our written agreement.

If you find a security vulnerability, please report it privately to abuse@organimate.co.uk and give us reasonable time to fix it before disclosing it. We won't take action against good-faith research that follows this approach and avoids harm to people and data.

8. Reporting abuse

If you received unwanted email sent through Organimate, or think someone is misusing the Service, tell us at abuse@organimate.co.uk. If you can, include the full email with its headers. We investigate every report. To stop receiving a sender's marketing, you can also use the unsubscribe link in their email.

9. Enforcement

If we reasonably believe this policy has been broken, we may do any of the following, depending on how serious the breach is and the risk to recipients and other customers:

• contact you and ask you to fix it;
• throttle or pause sending;
• require you to remove contacts or content;
• suspend features or the account; or
• end the agreement, as set out in our Terms.

We may act without warning where there is urgent risk, such as phishing, malware or a sudden surge in complaints. We may also cooperate with mailbox providers, our email infrastructure providers and authorities, and report unlawful activity.

10. Changes

We may update this policy as laws, industry standards and threats change. We'll change the date at the top, and tell customers about significant changes in advance where we can.