Cold Email for Small Businesses: A Practical, Legal Guide

Disclosure: SAASTOOLY earns a commission when you buy through some of the links on this page, at no extra cost to you. This guide is general information, not legal advice.

Cold email has a bad reputation, mostly earned by people who send thousands of identical messages to anyone with an inbox. Done properly, it is one of the most direct ways for a small business to start conversations with the exact customers it wants: a web designer writing to local shops, a consultant writing to a shortlist of companies, a supplier introducing itself to buyers.

The difference between useful outreach and spam comes down to four things: who you write to, what the law allows where they are, whether your emails reach the inbox, and whether the message is worth reading. This guide covers each.

First, check that cold email is allowed for you

Rules on unsolicited commercial email differ by country, and sometimes by whether you write to businesses or individuals.

United States: the CAN-SPAM Act allows commercial email without prior consent, but requires, among other things, accurate sender information, a subject line that is not misleading, a valid physical postal address, and a clear way to opt out that you honour promptly.
European Union and United Kingdom: data protection and electronic marketing rules are stricter. Whether you can email someone without consent depends on the country, whether the recipient is a business or an individual, and whether you have a legitimate interest you can justify and document.
Elsewhere: many countries have their own anti-spam laws, some of which require consent before any commercial email.

What this means in practice: before you send, check the rules for each country you will email, and keep a record of where you got each contact and why you are contacting them. If in doubt, ask a professional. This guide is not legal advice.

Step 1: Choose a narrow list of the right people

Most cold email fails before it is written, because it goes to the wrong people.

Define one ideal customer: industry, size, location and the problem you solve for them.
Find a specific person, not a generic inbox: the owner of a small shop, the marketing lead at a mid-sized company.
Start small. Fifty well-chosen contacts teach you more than five thousand random ones, and protect your sending reputation.
Verify addresses before you send. Invalid addresses cause bounces, and bounces damage your reputation with email providers.

Tools that find local businesses on Google Maps or verify email addresses can speed this up. Our new AppSumo deals roundup and email marketing lifetime deals cover some options, including list verifiers.

Step 2: Protect your main domain

Cold email carries a higher risk of spam complaints than email to subscribers. Many businesses send it from a separate domain that is clearly theirs (for example, a variation of the main brand) so that a reputation problem does not affect everyday email from the main domain.

Whichever domain you use:

Set up email authentication: SPF, DKIM and DMARC records, as your email provider's documentation describes. Major mailbox providers expect them.
Warm up new mailboxes gradually. Start with a handful of emails a day and increase slowly over several weeks.
Keep daily volume modest per mailbox. Sudden spikes look like spam.
Watch bounces and complaints. If either rises, stop and fix the list or the message.

Step 3: Write an email worth answering

Short, specific and about them. A simple structure:

A relevant opening line that shows you looked at their business, not a compliment that could apply to anyone.
The problem you noticed or the outcome you can help with, in one or two sentences.
Brief proof: a similar client, a result, or a relevant example.
One easy question as the call to action.

A template to adapt

Subject: Quick question about [specific thing]

Hi [Name],

I noticed [specific observation about their business, such as their booking page sending visitors to a phone number only].

We help [type of business] [specific outcome, such as take bookings online without a monthly fee]. For [similar client], that meant [result you can stand behind].

Would it be useful if I sent over two ideas for [their business]?

[Your name], [business name], [postal address] If you'd prefer not to hear from me again, just reply "no thanks" and I won't email you again.

Keep it under about 120 words. No attachments, no images, few links. Plain text reads as personal and tends to be delivered more reliably.

Step 4: Follow up, briefly and politely

Many replies come from follow-ups, because people are busy, not uninterested.

Send one to three follow-ups, several days apart.
Add something new each time: a short idea, a relevant example, a different angle. Not "just bumping this".
Stop immediately when someone replies, unsubscribes or asks you to stop.
End the sequence gracefully. A last message that says you will not follow up again often gets a reply.

Step 5: Handle replies and opt-outs properly

Honour every opt-out promptly and keep a suppression list so the person is never emailed again, from any mailbox.
Reply quickly to interested people. Speed matters more than polish.
Move warm leads out of the sequence and into a real conversation or your CRM.
Do not add cold contacts to your newsletter without their clear consent.

Step 6: Measure and improve

Track a few numbers per campaign:

Bounce rate: should be very low if your list is verified.
Reply rate: the main measure of whether your targeting and message work.
Positive reply rate: replies that lead to a conversation.
Unsubscribes and complaints: if these rise, your targeting or message is off.

Change one thing at a time (the list, the opening line, the offer) and compare over a few hundred sends, not a few dozen.

Common mistakes

Sending to large, unverified lists. The fastest way to damage your domain.
Long emails about yourself. The reader cares about their problem.
Fake familiarity: "Re:" or "Following up on our call" when there was no call. Misleading subject lines also break the law in some places.
No opt-out. Required in many countries, and simply polite everywhere.
Using your main domain from day one without authentication or warm-up.

💡 Keep learning

How to build an email list from zero → · Email marketing lifetime deals → · Social proof and testimonials →

Frequently asked questions

Is cold email legal? It depends on where your recipients are. In the United States it is generally allowed under CAN-SPAM if you follow its rules, including a valid postal address and an opt-out. Rules in the EU, the UK and many other countries are stricter. Check each market; this is not legal advice.

How many cold emails should I send per day? Start with a handful per mailbox on a new domain and increase gradually over several weeks. Keeping volume modest protects your sending reputation.

Should I use a separate domain for cold email? Many businesses do, so that any reputation problems do not affect everyday email from their main domain. Set up SPF, DKIM and DMARC on whichever domain you use.

How long should a cold email be? Short. Under about 120 words, focused on one specific problem and one easy question.

How many follow-ups should I send? One to three, several days apart, each adding something new. Stop as soon as someone replies or opts out.

What is a good cold email reply rate? It varies widely by industry, list quality and offer. Track your own rate and improve one variable at a time rather than chasing a benchmark.