How to Build an Email List From Scratch (Without Buying a Database)
Buying an email database is illegal in the EU — here's how to gather real subscribers legally, even when you're starting from zero.
You're just starting out, you have zero contacts, and someone offers you "50,000 verified email addresses" for pocket change. It looks like the perfect shortcut. It's actually the most expensive mistake you can make early on — and an illegal one in the EU.
The good news: a list you build yourself, one person at a time, is worth more than tens of thousands of bought addresses. People who signed up on their own actually open your emails and actually buy. On a purchased list, almost nobody knows who you are. In this article I'll show you why buying databases exposes you legally, and how to build a clean list that brings real customers, step by step.
Why buying an email database is illegal
In the EU, personal data is governed by the GDPR, and marketing messages by the ePrivacy Directive. A personal email address is personal data. To send marketing to someone, you need their consent — freely given, specific, informed and unambiguous.
The problem with a bought list is simple: those people never gave consent to you. Consent cannot be "resold" from one company to another. Even if the seller swears they're all opt-in, you can't prove how, when or for what exactly they agreed.
- You have no legal basis to send.
- You can't prove where the consent came from.
- You are the one liable to the regulator, not the seller.
GDPR fines reach amounts that can close a small business. It isn't worth it.
What a "legal" list actually means
A proper list isn't just about avoiding a fine — it's about having proof. For every subscriber you should be able to answer three questions: who they are, when they signed up, and what they agreed to.
A few practical rules:
- Consent is requested through a clear action. No pre-ticked boxes.
- You state explicitly what you'll send (newsletter, offers) and who you are.
- You keep a record: date, source, the text they accepted.
- Unsubscribing must be simple, one click, in every email.
There's also the "existing customer" exception: someone who already bought from you can receive offers for similar products, as long as you gave them the option to refuse. Even there, transparency is the rule.
Step 1: give people a real reason to sign up
Nobody hands over their email for "Subscribe to our newsletter." People give their address in exchange for something valuable — that's called a lead magnet.
Think of something useful and specific to your business:
- A short guide ("5 mistakes when choosing a contractor").
- A discount code for the first order.
- A checklist, a template, a small tool.
- Access to a waitlist or a special price.
The rule is that your lead magnet should attract exactly your customer, not just anyone. A salon doesn't want ten thousand curious browsers — it wants women in its town looking to book. The better the fit, the more valuable the list, even when it's smaller.
Step 2: put the form where people actually are
You need a place where the address is collected properly and with consent. The most natural one is your own website — a simple form with an email field and an unticked box confirming the person wants to receive messages.
I recommend double opt-in: after signing up, you send a confirmation email the person has to click. That way you know the address is real, that the person actually owns it, and you hold clear proof of consent.
Other clean subscriber sources:
- At the end of an order or booking (with a separate checkbox).
- In person, at your location, with a QR code to the form.
- From your social media bio, linking to a sign-up page.
- On WhatsApp, if the person messages you first and agrees to stay in touch.
Growth is slow at the start. That's normal. Every subscriber is truly yours.
Step 3: write to them consistently, like people
A list you don't use dies. If someone left their email today and gets the first message six months later, they've forgotten you and mark you as spam.
Set a rhythm you can keep — once every two weeks or monthly is plenty. Send useful things, not just "buy now": a tip, a story from a project, an update. Every now and then, an offer.
If you want to start right from zero — a website with a form, a lead magnet and the confirmation flow set up — that's exactly what we build at MPO Web Studio. We work remotely, across the country, with transparent pricing, and we prepare a free demo of your site in advance so you can see the result before paying anything. If you'd like to talk, message us on WhatsApp — no pressure, just a conversation about what would actually help you.
Frequently asked questions
Can someone really fine me for emailing a bought list?+
Yes. In the EU, the data protection authority can impose GDPR fines, and recipients can file complaints. The liability falls on you, the sender, not on the company that sold you the list. The risk is real even for a small business.
Can I use company emails found publicly on websites (contact@)?+
It's a grey area. For generic business-to-business addresses you have slightly more freedom, but you still must offer transparency and an unsubscribe option, and the message must be relevant to their work. A contact@ is not an invitation to your newsletter. Consent is still the safest path.
Where do I start if I have absolutely no contacts?+
With a single useful lead magnet and a form on your site. Then you send people there: from social media, from existing customers, via a QR code at your location. Ten real subscribers who expect you are worth more than a bought list nobody opens.
What is double opt-in and do I really need it?+
It's the step where, after signing up, the person confirms by email that they want to receive messages. It's not legally required, but it cleans fake addresses off your list and gives you clear proof of consent. I always recommend it.
How fast does a properly built list grow?+
Slowly at first, and that's fine. Don't chase big numbers, chase the right subscribers. A small list of people who genuinely want to hear from you reads and buys, beating any database of tens of thousands of dead addresses.
7 mistakes that drive clients away from your website
Leave your email and get the guide right here, instantly. No spam.
Want to see what your business's website could look like?
Message us on WhatsApp and we'll prepare a FREE demo website with your business name. See it first — decide after.