Legal
Legal, GDPR & Data Protection
Refunds, server location, backups, GDPR, the DPA, data export, security, cold email compliance and fees, in one place.
Overview
BulkResponse LLC has provided bulk and cold email services since 2008 and is based in Hawthorne, California, USA. This page covers legal and data-protection topics that customers ask about most. It adds to our Terms and Conditions and our Privacy Policy and does not replace them. If anything here conflicts with the Terms, the Terms apply.
Quick links
- Terms and Conditions: bulkresponse.com/terms-and-conditions
- Privacy Policy: bulkresponse.com/privacy
- Refund and cancellation policy: this page, Refund & Cancellation (and section 9 of the Terms)
- Data Processing Agreement (DPA): available on request
- Pricing: bulkresponse.com pricing
Refund & Cancellation
Recurring fees are charged at the start of each billing cycle. You must cancel your account before the next billing cycle starts. If you do not cancel before the next cycle, that cycle is charged and there are no refunds. Fees are non-refundable once paid, as set out in section 9 (Fee & Refunds) of the Terms.
Plans are cancelled by request. To cancel, open a ticket on our help desk or email support@bulkresponse.com before your next billing date.
Before you cancel, export any data you want to keep. See Data Export & Account Closure.
Data Storage & Server Location
Our servers are in Rochester, New York, United States. Account data, uploaded contact lists, suppression and unsubscribe records, and campaign data are stored on these servers.
This covers both data about you as our customer (account and billing contact details) and the contact data you upload to send campaigns.
Backups & Disaster Recovery
Data is backed up regularly, so disaster recovery is quick. Backups run every night at midnight and are kept in the United States. If a server fails, we restore service and data from our backups.
GDPR & EU Data Subjects
Yes, we support customers who send to contacts in the European Union, the EEA and the United Kingdom.
Roles
When you upload contacts and send campaigns, you are the data controller: you decide whose data is processed and why. BulkResponse is the data processor: we process that data only to provide the Services and on your instructions.
Lawful basis
You are responsible for having a lawful basis to email every contact you upload. For B2B cold outreach this is usually legitimate interest. You should document a legitimate interest assessment, keep messages relevant to the recipient's professional role, identify yourself clearly, and honor objections straight away. Some countries also have electronic marketing rules (such as PECR in the UK) that can require consent for certain recipients. You must check the rules for the countries you send to.
Data subject rights
Because you are the controller, you answer requests from your contacts (access, correction, deletion, objection, restriction and portability). You can edit, export, suppress or delete contacts in your account. If a data subject contacts us directly about your campaigns, we will promptly pass the request to you. We will help you respond where we reasonably can.
For data we hold about you as our customer, see the Privacy Policy or contact support@bulkresponse.com.
International transfers
Data is hosted in the United States. If you send personal data of people in the EU, EEA or UK to us, that is a transfer outside Europe. Standard Contractual Clauses (SCCs) are available on request. For UK transfers, contact us about transfer mechanisms at support@bulkresponse.com.
Data Processing Agreement
A Data Processing Agreement (DPA) is available on request. Email support@bulkresponse.com (or sales@bulkresponse.com) with your company name, account email and the name of the person who will sign. The DPA can include the Standard Contractual Clauses for EU transfers.
Data Export & Account Closure
Yes. Before you close your account, you can export your data from the account yourself, as CSV files, including:
- Contact lists
- Suppression lists
- Unsubscribe lists and records
- Campaign statistics
These exports are self-serve in the app. Export everything you need before closing.
After the account is closed, your data is deleted within 7 days. Backup copies are also removed within 7 days. Billing and transaction records may be retained where the law requires.
Security
We protect data with technical and organisational measures appropriate to an email sending service. Passwords are stored encrypted, and access to customer data is restricted to staff who need it to provide the Services.
If we become aware of a personal data breach affecting your data, we will notify you without undue delay and within 72 hours of becoming aware of it.
Keep your login details private. You are responsible for activity under your account.
Subprocessors
We use these third-party providers to run the Services:
| Subprocessor | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA |
| Linode | Hosting and infrastructure | USA |
Questions about subprocessors: support@bulkresponse.com.
Acceptable Use & Cold Email Compliance
You must follow every law that applies to your email, including:
- CAN-SPAM (USA): accurate sender and header information, honest subject lines, a valid physical postal address, and a working way to opt out.
- GDPR and PECR (EU, EEA and UK): a lawful basis for each contact, clear identification of the sender, and respect for objections.
Rules for every campaign:
- Every email must include a working unsubscribe link.
- Do not use purchased, rented, scraped or harvested lists. The only exception is verified B2B data, such as leads from our Lead Finder or a reputable B2B data provider, used under a lawful basis.
- Do not market the products and services listed in section 10 (Products Prohibited to be Marketed through BulkResponse) of the Terms.
We may suspend sending or accounts that break these rules or the Terms.
Unsubscribe & Suppression Handling
When a recipient clicks the unsubscribe link, their address is added to your suppression list and they are not mailed again from your account. Bounced addresses are automatically suppressed.
You can upload your own suppression list, for example contacts who opted out elsewhere. Suppression and unsubscribe records stay in your account until you close it, and you can export them at any time. Do not remove unsubscribed addresses to mail them again.
Fees & Additional Charges
All plans, packs and add-ons are shown on our pricing page. There are no hidden fees. You pay only for the plan and any paid add-ons you choose.
Paid add-ons shown on our site:
- Bulk email servers: $20 per server per month (each server adds up to 5,000 emails a day)
- Mailboxes: $3 per mailbox per month
- Email list cleaning: one-time packs, priced on the pricing page
- Dedicated servers and dedicated IPs: custom quote based on your daily volume
Adding your sending domain, publishing SPF, and getting our support team's help with DKIM are part of setup. There is no charge for the sending domain, SPF/DKIM setup or use of our shared sending infrastructure.
Cookies
Our website uses cookies and similar technologies to keep you signed in, remember preferences and understand how the site is used. You can block or delete cookies in your browser settings, but some parts of the site and app may not work without them. Our site uses a GDPR cookie consent tool: you can accept or decline non-essential cookies through the consent banner.
Emails sent through the Services may use tracked links for click statistics. You can turn off click tracking per campaign. If you send to EU or UK contacts, you are responsible for any notice or consent tracking requires.
Contact for Legal & Privacy Requests
Legal and privacy requests, DPA and SCC requests: support@bulkresponse.com
Sales and billing: sales@bulkresponse.com. Cancellation: support@bulkresponse.com or the help desk.
Support: help.bulkresponse.com
Phone: +1 (628) 262 3981
Post: BulkResponse LLC, 3501 Jack Northrop Ave., Suite #D1442, Hawthorne, CA 90250, USA
We have not appointed a Data Protection Officer or an EU or UK representative. Send all data protection requests to support@bulkresponse.com.
Changes to This Page
We may update this page from time to time. The date below shows when it last changed. Significant changes will be announced on the site or by email.
Last updated: October 30, 2026