Legal

GDPR / CAN-SPAM

Operational guidance for lawful email sending, consent, suppression, and recipient rights.

Last updated: May 25, 2026

Customer responsibility

Businesses using Flow by DababonPro are responsible for determining their legal basis for sending email, maintaining accurate records, honoring recipient preferences, and ensuring their campaigns comply with applicable law.

GDPR considerations

For GDPR-regulated data, maintain a valid lawful basis, collect only necessary data, protect personal information, respond to data subject requests, and document how subscriber data is obtained and used.

CAN-SPAM considerations

Commercial email should avoid misleading headers or subject lines, identify the sender clearly, include a valid physical postal address when required, provide a working unsubscribe path, and honor opt-out requests promptly.

Suppression and list hygiene

Use bounce, complaint, and unsubscribe data to prevent future sends to suppressed recipients. Do not re-import or reactivate contacts who opted out, complained, or hard-bounced unless you have a valid and documented reason.

Campaign review

Use campaign previews and dry runs before sending to estimate reach, exclusions, and bounce risk. Review high-risk lists before sending at scale.

Not legal advice

This page is general product guidance, not legal advice. Consult qualified counsel for compliance requirements specific to your business, recipients, regions, and sending practices.