Does the CCPA apply to small businesses that track emails?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 11, 2026.
Not automatically. The CCPA covers for-profit businesses that do business in California, collect personal information of California residents or have it collected for them, decide why and how it is processed, and meet at least one of its thresholds. Being small does not on its own exempt a business, and some duties also reach service providers.
Are email tracking pixels a CIPA wiretap or pen register risk in California?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 11, 2026.
In California there have been lawsuits over various tracking technologies under the California Invasion of Privacy Act (CIPA), as wiretapping or as a “pen register”. The outcome depends on the technology used, the legal basis of the claim and the specific circumstances; HawkOpen makes no claim about how CIPA applies to you.
Is it legal to collect email addresses from a directory or use email finder tools?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 11, 2026.
HawkOpen does not find or sell email addresses, and its legal documents do not assess how addresses are collected. In the EU, a work address assigned to a person can be personal data, and being published online does not make it free to use for marketing.
How are CCPA access and deletion requests handled for HawkOpen tracking data?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 11, 2026.
HawkOpen offers the same tools wherever people live: a recipient enters on the HawkOpen privacy page a one-time code sent to their address, which confirms only access to that mailbox, and can then download the tracking data about that address or request erasure, and the account owner can export or delete account data. Whether these tools meet the CCPA’s requirements in your case is not assessed here.
Whether the CCPA applies depends among other things on doing business in California, your role in collecting the data and the law’s thresholds; a small business is not automatically outside it. Ask a US adviser, or check the California Privacy Protection Agency’s guidance.
Related questions: Does the CCPA apply to small businesses that track emails? · How can a recipient see the tracking data about them or have it erased?
Does CAN-SPAM apply to B2B and cold emails?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 13, 2026.
Yes. According to the US Federal Trade Commission, CAN-SPAM covers commercial email, including business-to-business email. Among other things it requires accurate header information and subject lines, a valid physical postal address and a working way to opt out that is honoured promptly. Purely transactional or relationship messages are treated differently.
HawkOpen’s terms do not allow unsolicited bulk messaging. Every email HawkOpen sends or prepares ends with a “Do not send me messages” link, and the emails it sends from your connected mailbox carry one-click unsubscribe headers, but that alone does not meet CAN-SPAM: HawkOpen does not add your postal address and does not check your headers or subject lines.
CAN-SPAM is not a global standard: Canada and Australia, for example, have their own consent rules. Sending an email and tracking it are separate questions.
Related questions: What are the CAN-SPAM Act requirements? · Is cold emailing legal?
Does CAN-SPAM say anything about open tracking?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 11, 2026.
CAN-SPAM, as the US Federal Trade Commission describes it, deals with the content of commercial email, opting out and identifying the sender; it does not settle tracking pixels. Other US federal and state laws may apply to tracking, and HawkOpen’s legal documents do not analyse them.
In California, for example, disputes have concerned various tracking technologies, and the outcome depends on the technology, the legal basis and the circumstances. Every email tracked by HawkOpen carries a notice and a link to turn tracking off, in the US too, but the notice does not settle any of these questions.
Where rules that require consent apply, tracking may start only after that consent has been obtained. The link in the message lets the recipient withdraw consent later.
Related questions: Are email tracking pixels a CIPA wiretap or pen register risk in California? · Does CAN-SPAM apply to B2B and cold emails?
What are the CAN-SPAM Act requirements?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 13, 2026.
The US Federal Trade Commission’s guide lists, among others: no false or misleading header information, no deceptive subject lines, identifying the message as an ad where required, a valid physical postal address, a clear way to opt out and honouring opt-outs within 10 business days. Some of these rules apply to commercial messages only; transactional or relationship messages have narrower requirements.
HawkOpen adds a “Do not send me messages” link to every email and one-click unsubscribe headers to the emails it sends from your connected mailbox; after an opt-out, further emails to that address through HawkOpen are refused straight away. HawkOpen does not add your postal address and does not check your headers, subject lines or ad labelling, so a button alone does not meet these rules.
Opting out of messages is a different choice from turning off tracking.
Related questions: Do HawkOpen campaigns add the physical postal address that CAN-SPAM asks for? · Does CAN-SPAM apply to B2B and cold emails?
Do HawkOpen campaigns add the physical postal address that CAN-SPAM asks for?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 13, 2026.
No. The only line HawkOpen adds for opting out carries the “Do not send me messages” link and no address. Add your company’s valid physical postal address to the text of your email or campaign yourself; HawkOpen does not check that it is there.
What CAN-SPAM requires for commercial emails is described in the US Federal Trade Commission’s guide. Send yourself a test of your template to see exactly what the recipient receives.
Related questions: What are the CAN-SPAM Act requirements?
Can I use HawkOpen with health data or student records?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 11, 2026.
Do not use HawkOpen for health information or protected student records for now. HawkOpen makes no claim under US health privacy law or FERPA, and it offers no special contract terms for such data.
Whether those laws apply to tracking pixels in your emails depends on who you are and what you send; ask a US adviser. HawkOpen’s legal documents do not analyse US law.
Related questions: Does HawkOpen have security certifications? · Can I track emails sent to children or students?
Do US recipients also see the tracking notice, and in which language?
Yes. HawkOpen adds the same notice to every tracked email, wherever the recipient is, and tracks a recipient only when your company has recorded their consent. Its language follows the text of the email, so an English email gets the English notice.
The notice is available in English, Polish, German, Spanish, French, Italian and Portuguese; when HawkOpen is unsure, it uses English. Its link “Do not track my activity” opens a page where US recipients, like everyone else, can refuse tracking by your company; from there they can also reach the privacy page to download their data or request erasure.
Where rules that require consent apply, tracking may start only after that consent has been obtained. The link in the message lets the recipient withdraw consent later.
Related questions: What does the HawkOpen tracking notice at the bottom of an email say? · Are email tracking pixels a CIPA wiretap or pen register risk in California?
Is cold emailing a company alias like sales@ different from emailing a named person?
This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 11, 2026.
It can make a difference, because an address assigned to a person can be personal data even when it is a work address, while a generic alias may not identify anyone. The rules depend on the country, and HawkOpen’s legal documents do not assess this, so this answer gives only general information.
Finding an address online does not by itself allow any use of it for marketing. HawkOpen does not filter or classify addresses, and its terms require that you have the authority to contact your recipients.
Related questions: Is it legal to collect email addresses from a directory or use email finder tools? · Does CAN-SPAM apply to B2B and cold emails?