Get your first customers

Is it legal to cold email people in India, and do I need their consent first?

The short answer

For business-to-business outreach in India there's no blanket ban on emailing a stranger, but the DPDP Act and basic decency both point the same way: be transparent, make it easy to opt out, and don't scrape and blast at scale. If you email people in the EU or send anything marketing-heavy, GDPR and CAN-SPAM style rules matter more, so include who you are and a real unsubscribe path. As a starting point, treat every cold email as if the recipient will screenshot it, and you'll stay on the right side of both the law and your reputation.

Go deeper, your way

18 hand-picked resources, 17 link-checked. Pick how you want to dig in.

▶️ Video
✓ Link checked Free Beginner

Why we picked it Michael Seibel runs YC and has read thousands of these, so this is the receiving end talking back: what actually makes an investor open, read, and reply. It is a short, direct talk that pairs well with the written pieces if you would rather hear the reasoning than read it. Useful precisely because it comes from the person you are trying not to annoy.

How To Cold Email Investors

On Y Combinator (YouTube) by Michael Seibel 6 min watch

  • Investors decide in seconds, so the first line has to earn the next one; front-load what is interesting about you.
  • A cold email that respects the reader's time reads as competent, and competence is what removes the desperate tone.
  • You are opening a relationship, not closing a round, so ask for a short conversation rather than a check.
Watch on YouTube youtube.com
▶️ Video
✓ Link checked Free Beginner

Why we picked it Once you have a list of people to reach cold, this shows you how to write emails they actually answer. Seven concrete principles (short, human, personalized, credible, clear ask) with examples. It pairs directly with the go to them, do not wait for them idea.

How to Convert Customers With Cold Emails

On Y Combinator Startup Library by Aaron Epstein ~33 min

  • Keep cold emails short, human, and personalized
  • Lead with credibility and one clear ask
  • A warm intro still beats cold by two to three times
Open ycombinator.com
🎧 Podcast
✓ Link checked India Free Intermediate

Why we picked it An Indian founder story where the early demand test was manual, cold emails and direct outreach to find the first customers before the product had proven itself. It is a grounded counterpoint to the landing page: sometimes the fastest way to measure intent in a B2B market is to ask people to commit directly. Useful if your buyers are enterprises who will never fill in a consumer style waitlist form.

How Khadim Batti Built Whatfix Into a Global SaaS Leader

On Prime Venture Partners Podcast by Prime Venture Partners ~50 min

  • In B2B, direct outreach can measure intent faster than a public page
  • A first paying customer is the strongest demand signal there is
  • Early traction in India often comes from manual hustle, not viral pages
Open primevp.in
📄 Article
✓ Link checked India Free Advanced

Why we picked it Read the actual law once, at least the consent and notice sections, so you are not relying on someone else's paraphrase. Section 6 spells out what counts as valid consent (free, specific, informed, unconditional) and it is shorter and plainer than most Indian statutes. Skimming the actual text takes twenty minutes and settles arguments with cofounders faster than a blog post.

The Digital Personal Data Protection Act, 2023 (Official Text)

From Ministry of Electronics and Information Technology (MeitY), Government of India ~30 pages

  • Consent must be free, specific, informed, unconditional, and given through clear affirmative action.
  • The Act applies to any processing of digital personal data, not just marketing.
  • Notice requirements and the right to withdraw consent sit in the same sections as consent itself.
Open meity.gov.in
📄 Article
✓ Link checked India Free Beginner

Why we picked it Translates the DPDP Act's consent rules into what actually changes for a business, not a legal treatise. It is the piece to send a cofounder who wants the practical checklist (pre-ticked boxes are out, consent has to be revocable, every marketing email needs a real opt out) without wading through the Act itself.

Understanding India's DPDP Consent Management Rules for Businesses

From India Briefing (Dezan Shira & Associates) ~8 min read

  • Pre-checked consent boxes and bundled consent are no longer valid.
  • Users can withdraw consent at any time, and you must stop processing when they do.
  • Non-compliance penalties can run into hundreds of crores of rupees.
Open india-briefing.com
📄 Article
✓ Link checked Free Intermediate

Why we picked it One paragraph of the actual regulation, the one that says direct marketing can count as a legitimate interest under GDPR. When someone tells you GDPR bans cold email outright, this is the line to point to, and reading it yourself takes thirty seconds.

GDPR Recital 47: Legitimate Interest and Direct Marketing

From gdpr-info.eu 1 page

  • GDPR explicitly allows direct marketing under the legitimate interest legal basis.
  • Legitimate interest still requires a balancing test against the recipient's rights.
  • The recital itself, not a blog's summary of it, is the source worth citing.
Open gdpr-info.eu
📄 Article
✓ Link checked Free Beginner

Why we picked it The regulator's own explanation of what a compliant commercial email looks like in the US, including the part founders skip: CAN-SPAM covers B2B email too, there is no small-business exemption. If you ever email a US contact, this is the checklist to run your template against.

CAN-SPAM Act: A Compliance Guide for Business

From Federal Trade Commission (FTC)

  • CAN-SPAM covers B2B email, not just consumer marketing.
  • You need accurate header info, a real physical address, and a working opt out.
  • Penalties are assessed per email, so a bad template multiplies fast.
Open ftc.gov
📄 Article
✓ Link checked Free Intermediate

Why we picked it The UK regulator's own walkthrough of the three-part test (purpose, necessity, balancing) that decides whether you can cold email someone under GDPR without asking first. It is written for the business doing the emailing, so it is more usable than most GDPR explainers you will find.

When Can We Rely on Legitimate Interests?

From UK Information Commissioner's Office (ICO)

  • Business contacts are more likely to reasonably expect professional outreach than consumers.
  • You still need to pass a purpose, necessity, and balancing test, not just claim legitimate interest.
  • The recipient's right to object overrides your legitimate interest the moment they raise it.
Open ico.org.uk
📄 Article
✓ Link checked Free Beginner

Why we picked it Written by a company that sells a cold email tool, so it is pragmatic rather than legalistic: what to put in your first email so it is compliant (who you are, why you are writing, where you found their address, how to opt out) and where legitimate interest actually breaks down. Good sanity check before your first EU-facing send.

How to Do Cold Emailing After the GDPR

From Hunter.io ~6 min read

  • State clearly who you are, why you are emailing, and where you got their contact info.
  • Legitimate interest works best when the recipient could reasonably expect your outreach.
  • Always include a one-click way to opt out or object.
Open hunter.io
📄 Article
✓ Link checked Free Beginner

Why we picked it The single-page comparison table you want the moment your outreach list spans India, the US, the EU, and a couple of other markets at once. It will not replace a lawyer, but it tells you quickly which jurisdictions need an opt-in and which just need an opt-out, so you know where to spend more care.

Is Cold Email Illegal? Country-by-Country Legal Guide

From Overloop ~7 min read

  • The US, India, and most of Asia allow B2B cold email with an opt-out, no prior consent needed.
  • Germany and several EU states expect opt-in even for B2B, stricter than the GDPR baseline.
  • Every jurisdiction converges on the same minimum: real sender identity plus a working unsubscribe.
Open overloop.com
📄 Article
✓ Link checked Freemium Intermediate

Why we picked it A tactical follow-on covering the channels and motions top B2B startups scale after the first ten. Grounds distribution strategy in real company examples.

How to win your first 10 B2B customers

From Lenny's Newsletter by Lenny Rachitsky ~15 min read

  • Content/SEO is a surprisingly dominant B2B channel (Vanta, Amplitude, Figma, HubSpot).
  • The core B2B channels: self-serve inbound, sales-assist inbound, outbound, content, paid, partnerships.
  • Pick and systematize the one channel that compounds for you.
  • Distribution strategy should follow evidence, not fashion.
Open lennysnewsletter.com
📄 Article
✓ Link checked Free Beginner

Why we picked it Steli Efti built his sales career on the belief that unanswered outreach is a maybe, and a maybe is what kills deals. This gives you his actual day-by-day cadence (four touches spread across roughly a week for a cold prospect, longer for one showing real interest) so you're not guessing at spacing.

The Winning Cold Email Follow-up Plan for Sales Teams

From Close by Steli Efti

  • A workable cold cadence is four emails on day 1, 2, 4, and 8 to 9
  • Each follow-up should restate the ask plainly, not repeat the whole pitch
  • Timing often matters more than copy: a non reply may just mean they were busy, not uninterested
Open close.com
🧵 Thread
✓ Link checked Free Intermediate

Why we picked it Josh Braun teardowns real cold emails line by line and explains exactly why each sentence works or doesn't, which is more useful than another list of rules. Reading a handful of his posts trains your eye to spot the difference between an email that sounds like a favor and one that sounds like a pitch.

This cold email hits all the right notes

From Josh Braun (LinkedIn)

  • Notice what motivated an actual reply, not just what sounds persuasive
  • Specific, small observations about the reader beat broad flattery
  • A low friction close makes it easy to say yes to something small
Open linkedin.com
📄 Article
✓ Link checked Free Beginner

Why we picked it This is a practical, step by step walkthrough with real before and after examples of cold emails, useful when you want a checklist rather than a philosophy. It is a good second read after the Josh Braun and First Round pieces, once you are ready to actually draft your first message.

How to Write a Cold Email: 6 Steps + Templates

From Woodpecker by Woodpecker 12 min read

  • Keep your first email under 100 words and focused on one ask
  • Write like you are talking to one specific person, not a list
  • Plan your follow up sequence before you send the first email
Open woodpecker.co
📖 Book
✓ Link checked Paid Beginner

Why we picked it The single best thing ever written on customer conversations. It teaches you to ask about the customer's life and past behaviour, not your idea, so you can't be lied to. If a founder reads one thing before talking to a single customer, it's this.

The Mom Test

From momtestbook.com by Rob Fitzpatrick ~130 pages

  • Talk about their life, not your idea.
  • Ask about specifics in the past, not opinions about the future.
  • 'That's so cool, I'd totally buy it' is a compliment, not data, dig for commitment and evidence.
Open momtestbook.com
🧵 Thread
✓ Link checked Free Beginner

Why we picked it A real founder community arguing, in public, about where cold outreach tips into being annoying: templated openers, I loved your post as a pretext, unsolicited quick call requests. Reading the replies is a fast way to calibrate your own emails against what other founders actually resent receiving.

Indie Hackers, Stop Sending Cold Emails

From Indie Hackers by David Delahunty (poster)

  • Recognizable templated openers like I see you liked my post read as insincere fast.
  • Unsolicited requests for a quick call are often more resented than an email.
  • The community values reciprocal value exchange over one-directional pitches.
Open indiehackers.com
✍️ Essay
Free Beginner

Why we picked it The permission slip to recruit users by hand, do things manually, and deliver 'insanely great' experiences to your first few customers. The cheapest, most honest way to validate demand is to go get it one person at a time.

Do Things That Don't Scale

From paulgraham.com by Paul Graham ~15 min read

  • Recruit your first users manually, don't wait for them to come.
  • A tiny group of users who love you beats a big group who like you.
  • Manual, unscalable effort early is a feature, not a failure.
Open paulgraham.com
🛠️ Tool
✓ Link checked Free Intermediate

Why we picked it A fill-in-the-blanks worksheet for documenting why your cold outreach counts as a legitimate interest, before a regulator or an annoyed prospect asks. Filling it out once for your outreach process takes an afternoon and gives you a real answer instead of a shrug if anyone challenges you.

Legitimate Interests Assessment (LIA) Template

From UK Information Commissioner's Office (ICO)

  • Walks you through the purpose, necessity, and balancing test in order.
  • A completed LIA on file is what demonstrates accountability, not just believing you are compliant.
  • Free download, reusable across every outreach campaign you run.
Open ico.org.uk

Terms in this answer

People also ask

Also in D2C

The same ground, over in Launch & get your first customers, our D2C track.

Also in How Founders Use AI

How founders actually use AI for this, over in Sales Prospecting.

Also in GTM

The same ground, over in Build pipeline, our GTM track.

eChai Partner Brands