B2B Email Marketing

An Owned List Against a Rented Audience

Email marketing is the practice of sending commercial or editorial messages to a list of addresses you hold, under a lawful basis you can document, from infrastructure you control. That last clause separates it from every other channel: a social following, a search ranking and an advertising audience are all rented, and your access to them is revocable without notice.

Three things are routinely confused with it. Marketing automation is software that sends email, not a decision about what to send. Cold outbound prospecting — sequenced messages to people who have never heard of you — is a sales activity with a different legal analysis, and running it from your marketing domain is how companies damage their own deliverability. Transactional mail is a third category, treated differently again.

The asset is not the address count. It is the number of addresses belonging to people in your target market who still read what you send.

Why This Channel Carries So Much B2B Weight

Business purchase cycles are long, and most companies you want as customers are not currently buying. That is the argument behind the 95-5 heuristic, proposed by John Dawes of the Ehrenberg-Bass Institute in May 2021 with the LinkedIn B2B Institute and derived from interpurchase intervals rather than a survey. Dawes explicitly calls 95% a heuristic, not a precise rule — the real share depends on your category's cycle. The point survives the caveat: most of your market is not ready, and you need a way to stay present.

Email is the cheapest way of staying present that does not depend on a platform's willingness to show you, and it handles the committee problem: a message reaching one person can be forwarded to the others who decide.

In the Content Marketing Institute's 2026 B2B research — 1,229 respondents, 1,015 of them B2B marketers, fielded June to August 2025 — email newsletters ranked second at 54% among the most effective thought-leadership channels, behind LinkedIn at 76%. Self-reported, with a disclosed sample.

Segment by Buying Stage, Not by Industry

Most b2b email marketing segmentation is firmographic, because that is what the CRM holds. Industry, company size and job title tell you who someone is, not what they need to read this week — which is the only question a send has to answer.

The more useful axis is the buying job in progress. Gartner's six buying jobs give the structure: problem identification, solution exploration, requirements building, supplier selection, validation and consensus creation. Someone identifying a problem needs a diagnostic; someone building requirements needs a specification framework; someone creating consensus needs something they can forward to a finance director. Because buyers loop back through these jobs, stage should be inferred from recent behaviour and re-inferred often.

One finding should temper enthusiasm for individual-level personalisation. In its 7 May 2025 release covering 632 B2B buyers, Gartner reported that group-level relevance improved consensus by 20% while individual-level relevance reduced it by 59%. Given a choice between personalising a first name and writing something the whole committee can use, write for the committee.

Authentication and Deliverability: the Hygiene Floor

Deliverability is not a marketing problem until it is, at which point it is the only problem. The consumer mailbox providers set the baseline.

Google defines a bulk sender as one sending close to 5,000 messages or more to personal Gmail accounts in 24 hours, counted across all subdomains of the primary domain; the classification is permanent once crossed. Requirements:

• SPF and DKIM — both, not one — plus a DMARC record with a policy of at least p=none.
• Alignment: the From header's organisational domain matching either the SPF or the DKIM organisational domain.
• One-click unsubscribe on marketing mail via List-Unsubscribe and List-Unsubscribe-Post (RFC 8058), due 1 June 2024, requests processed within 48 hours, with a visible link still expected in the body.
• User-reported spam in Postmaster Tools below 0.10%, never reaching 0.30%; from June 2024, senders above 0.30% are ineligible for mitigation support.

Google also documents reverse DNS, TLS in transit and RFC 5322 formatting. The rules took effect in February 2024; from November 2025 Google escalated to rejections. Yahoo matched the package on the same timeline.

Microsoft announced on 4 April 2025 and enforced from 5 May 2025: senders of more than 5,000 messages a day to outlook.com, hotmail.com and live.com must pass SPF and DKIM and publish DMARC at least p=none, aligned to SPF or DKIM. It first said non-compliant mail would be junked, then on 2 May 2025 said it would be rejected (550 5.7.15).

The correction that matters in B2B: all of that governs consumer mailboxes. Neither set governs delivery into Google Workspace or Microsoft 365 business tenants, where most B2B mail lands. They set the industry floor for authentication, not the rules for corporate inboxes.

Purchased Lists: Provenance, Not Illegality

The claim that purchased email lists are illegal under the GDPR is wrong as stated. The problem is provenance and lawful basis.

The UK Information Commissioner's Office is the clearest regulator source:

• PECR separates corporate subscribers — companies, LLPs, Scottish partnerships — from individual subscribers, which include sole traders and most partnerships and have greater protection.
• The PECR rule on direct marketing by electronic mail does not apply to corporate subscribers, so no consent is needed under PECR.
• A work address is still personal data under the UK GDPR, so you need a lawful basis; the ICO indicates legitimate interests is often appropriate where PECR does not require consent, subject to the three-part test of interest, necessity and balance.
• You owe transparency information — for data not collected from the person, normally at first contact, including its source — and the right to object is absolute.
• Processing must be fair taking into account the source of the data, and data in the public domain is not thereby available for direct marketing.

Member-state ePrivacy rules differ: several EU countries, Germany and Austria the usual examples, are stricter on B2B email than the UK, so the carve-out does not generalise. CAN-SPAM in the United States is an opt-out regime: no consent required, but accurate headers, non-deceptive subject lines, identification as an advertisement, a valid postal address, and opt-outs honoured within 10 business days. The FTC states penalties up to $53,088 per email, inflation-adjusted, read on 30 July 2026. Canada's CASL is a consent regime, and California's B2B contact-data exemption expired on 1 January 2023.

Most commercially sold lists cannot evidence lawful provenance. Avoid them as risk assessment, not illegality.

BIMI, and What It Does Not Do

Brand Indicators for Message Identification lets a sending domain publish a logo in DNS that mailbox providers can display beside authenticated messages. It is a display standard layered on email authentication: it does not authenticate anything, and calling it a deliverability improvement misstates it.

The prerequisites:

• DMARC at enforcement — p=quarantine or p=reject. A policy of p=none is not sufficient.
• A clean, square SVG Tiny PS logo with no external resources, scripts or embedded rasters.
• A Verified Mark Certificate, requiring a registered trademark, or a Common Mark Certificate for logos without one — issued by approved Mark Verifying Authorities for an annual fee.
• A BIMI DNS TXT record at default._bimi pointing to the logo and the certificate.

The BIMI Group lists Apple, Fastmail, Gmail, Yahoo and Zoho Mail among providers that display indicators. The benefits are brand presence and the forcing function of reaching DMARC enforcement. Claims that BIMI itself lifts open rates come from vendor studies that do not separate the effect of that enforcement change.

What to Measure, What to Fix First, and When Not to Send

Open rate stopped being a metric. It depends on a tracking pixel loading, and mailbox providers and privacy features now pre-fetch and proxy images, so a recorded open may mean a machine fetched a file. Opens became inflated and uneven between providers, which makes historical comparison unsafe.

Report clicks and click-to-delivered; replies, often the highest-value response in B2B and usually untracked; complaint and unsubscribe rates against Google's 0.10% and 0.30% thresholds; delivery and bounce rates by recipient domain, since a problem at one tenant hides in a blended figure; and pipeline influenced by cohort.

Fix things in this order. Authenticate: SPF and DKIM, then DMARC at p=none with alignment confirmed, reading the reports before tightening. Separate message types onto distinct subdomains. Warm new infrastructure gradually. Suppress non-engagers. Then work on segmentation and content.

Do not start at all with no list and no lawful way to build one, and do not run a newsletter with nothing to say.

Frequently Asked Questions