Built for Australian law.
Not adapted to it.
Almost every lead platform is American software built around CAN-SPAM, with Australian law as an afterthought. SalesM8 is designed the other way up: the Spam Act 2003, the Privacy Act 1988 and the Do Not Call Register are the spec we build to, not a disclaimer we bolt on.
This page explains the rules in plain English and exactly where SalesM8 fits. It's general information, not legal advice.
Three laws govern Australian outreach.
Spam Act 2003
Governs every commercial email and SMS with an Australian link. Three rules: consent, identify yourself, and give a working unsubscribe.
Read the breakdownPrivacy Act 1988
The 13 Australian Privacy Principles (APPs) set how personal information is collected, used, secured and corrected — including for direct marketing.
Read the breakdownDo Not Call Register
Australians can list private numbers to block telemarketing calls. Business numbers generally can't be listed — which is why B2B calling works differently.
Read the breakdownThree rules for every message — plus one about honesty.
The Spam Act covers commercial email, SMS and instant messages with an Australian link. The ACMA enforces it and has fined major Australian brands millions for getting it wrong. The good news: the rules are simple, and done right they make your outreach better, not weaker.
Consent — express or inferred
You may only send a commercial electronic message with the recipient's consent. Consent can be express (they opted in) or inferred (an existing business relationship, or the B2B publication test below).
SalesM8 surfaces business contact details published in public and government sources — the exact foundation the inferred-consent test is built on. We never sell scraped personal inboxes.
Identify who's sending
Every message must clearly and accurately identify the person or business that authorised it, with contact details that stay accurate for at least 30 days after sending.
Every SalesM8 lead ties back to a real business identity — ABN, business name, source record — and our guidance is blunt: send as who you are, with real reply details. No spoofed senders, no cloaked domains.
A working unsubscribe
Commercial messages must contain a functional, low-cost unsubscribe facility that keeps working for 30 days, and opt-outs must be honoured within 5 business days.
Set a lead's status to opted-out in the SalesM8 CRM and it stays on the record for every future touch — your suppression list lives where you actually work, not in a forgotten spreadsheet.
No deceptive subject lines
Subject lines and sender details must not mislead the recipient about who you are or what the message is about. "RE:" fakery and bait subjects invite complaints — and regulator attention.
Our free spam checker flags misleading patterns and spam-trigger phrasing in your copy before you ever hit send.
B2B outreach is legal in Australia — under a specific test.
The Spam Act allows consent to be inferredfor business contacts when three conditions are all met. This is the legal foundation of compliant Australian B2B prospecting, and it's exactly the standard SalesM8's lead data is built around.
Conspicuously published
The work email address or number was published openly by the business or the person in their work role — a website, a public register, a directory.
Relevant to their role
Your message relates to that person's role or the business's line of work. Pitching scaffolding to a builder: relevant. Pitching it to their accountant: not.
No opt-out statement
The publication isn't accompanied by a statement that unsolicited commercial messages are unwanted. If it says "no marketing", that's a no.
The Australian Privacy Principles, applied.
The Privacy Act's 13 APPs govern how personal information is handled. Company data isn't personal information, but sole traders' and individuals' details are — so we hold the whole platform to the personal-information standard. Here's how the principles that matter for lead intelligence map to what we actually do.
Open & transparent
Organisations must manage personal information openly and tell people what's collected and why. Our Privacy Policy spells out exactly what SalesM8 holds and where it comes from.
Collection
Personal information must be collected lawfully and fairly. Our lead data is drawn from public sources — the Australian Business Register, ASIC, AusTender, state DA portals and public listings.
Use & direct marketing
Information may only be used for expected purposes, and direct marketing must always carry a simple way to opt out. That opt-out obligation is baked into the Spam Act workflow above.
Quality of data
Information used must be accurate, up to date and complete. We only surface leads with a verified phone or email on file — contactable records, never stale filler rows padding out a count.
Security
Personal information must be protected from misuse and unauthorised access. SalesM8 data is hosted in Australia (AWS Sydney) and encrypted in transit and at rest.
Access & correction
Individuals can ask what's held about them and have it corrected or suppressed. Email us and we action access, correction and suppression requests — no forms, no runaround.
Full detail in our Privacy Policy. To request access, correction or suppression of your details, email leadm8.au@gmail.com — support answered in AEST business hours.
Calling businesses vs calling people.
What the Register covers
Australians can list numbers used primarily for private or domestic purposes to block unsolicited telemarketing calls. Numbers used primarily for business generally can'tbe listed — which is why calling a company's published business line sits outside the Register's scope.
One trap: sole traders and small operators sometimes run the business off a personal mobile. If a number could be a private one, check it against the Register before dialling — washing a list is cheap; a complaint isn't.
How SalesM8 approaches it
- Our lead pool is business contact data from public registers — business lines and published work contacts, not consumer phone lists
- Every lead links back to a business identity (ABN, tender award or DA record), so you always know it's a business you're calling
- The calling cockpit logs every call against the lead, giving you a clean record of who was contacted, when, and what was said
- Set a lead to "do not contact" and the status stays on its record — one place your suppression decisions actually stick
Compliance is a partnership. Here's the split.
No lead platform can make your outreach compliant for you — anyone who claims otherwise is selling you a lawsuit. What we can do is make the compliant path the easy path.
Your obligations when you send & call
- Send only with express or properly inferred consent
- Identify your business accurately in every message
- Include a working unsubscribe and honour it within 5 business days
- Keep your own suppression list and respect it forever
- Check numbers against the Do Not Call Register if you call individuals or sole traders
What SalesM8 commits to
- Source lead data from public and government registers — ABR, ASIC, AusTender, state DA portals
- Surface only contactable, verified business contact details
- Host all data in Australia (AWS Sydney), encrypted in transit and at rest
- Action access, correction and suppression requests on real people's data
- Never sell your data, or anyone else's, to third parties
Don't take our word for it.
This page is general information about Australian law as it relates to sales outreach. It is not legal advice, and it doesn't replace it. If your outreach involves consumers, sensitive information or high volumes, talk to a lawyer who knows the ACMA and OAIC landscape.
Prospect like the law is on your side.
Because done properly, it is. Start with verified Australian business leads sourced from public registers — free, no card, data hosted in Australia.