Privacy & outreach practices

How we handle correspondence.

Last updated 13 July 2026.

The Reply Shop is an outbound correspondence studio. We write to businesses on behalf of our clients, one reader at a time. This page explains whose data we hold, why we're allowed to write, how anyone can make us stop — and what happens to your own details if you contact us.

Who we write to

We write to businesses, not consumers: a named person in their professional role at a company we believe our client can genuinely help. We do not build consumer marketing lists, and we do not sell, rent, or share the data we hold with anyone.

Why we're allowed to write

Our first email rests on legitimate interest (GDPR Article 6(1)(f), and the equivalent basis under UK GDPR): a proportionate, business-to-business message that a reasonable person in that role would expect, sent with a clear way out. In the United States the same emails follow CAN-SPAM: honest headers and subject lines, a real postal address, and a working opt-out in every message.

We weigh that interest against the reader's every time we decide to write, which is why the reading comes before the draft and why we don't write to anyone we have nothing worth saying to.

What data we use, and where it comes from

Business contact details and publicly available professional information: a company's own website and careers page, local press, public reviews, professional profiles, and the sources a person would use to prepare for a real conversation. We keep only what we need to write well and to honor a "no", and we correct or delete on request.

When you contact us

If you email us, or leave your address in the form on this site, we hold what you send — your email address, any line you add about your business, and the fact and time you got in touch — for one reason: to write back, and to work together if it comes to that. That is also the lawful basis: you've asked to hear from us, and we're taking the first steps toward a possible engagement (GDPR Article 6(1)(b), with your consent under 6(1)(a)). We will not add you to a marketing list or write to you about anything else.

Those details sit in our own customer records — a Twenty CRM instance we run ourselves — and with the privacy-first tools that carry the message to us, nowhere we don't control. We don't sell or rent them. Ask us any time and we'll show you what we hold, correct it, or delete it: reply to any email from us, or write to the address below.

How we measure the site

We count visits with Umami, a privacy-first analytics tool that sets no cookies and builds no advertising profile. It records rough, aggregate things — which pages are read, and whether someone clicked to get in touch — never your name, and nothing that follows you off this site. That's why there's no cookie banner in your way.

How to make us stop

Every email carries a one-click way out and a reply-to that a person reads. Use either one and you're opted out immediately, recorded once and honored forever, across everything we or our clients will ever send. You never have to explain why, and you never have to ask twice.

You can also write to us directly to opt out, or to see, correct, or delete what we hold:

How long we keep it

Active correspondence data stays only while an engagement is live, and an enquiry that doesn't become work we delete once the conversation has plainly ended. Opt-out records are the exception: we keep the minimum needed, usually just an address and the date, and we keep it permanently, so that a "no" can never be undone by a future campaign.

Questions

Write to hello@thereplyshop.com and a person will answer within one business day.