UK B2B prospecting is a workflow — not a data dump
A list of names is not prospecting. Prospecting is the five-stage workflow that turns a Companies House query into a qualified, deliverable, legally compliant pipeline. PECR makes the UK one of the cleanest jurisdictions in Europe for B2B email — but only if you actually run the workflow.
Why workflow matters more than data
Most B2B prospecting failures look like data problems but are actually workflow problems. Bought lists with 30% bounce rates aren't bad data — they're missing the email verification step. Cold sequences with 0.1% reply rate aren't bad messaging — they're missing the segment-definition step. PECR violations aren't bad targeting — they're missing the corporate-subscriber-vs-individual-subscriber check.
This guide walks the five-stage UK prospecting workflow that, when run end-to-end, produces a list that converts. The legal layer (UK GDPR + PECR) is woven in where it materially constrains a step.
Free 1-day trialThe five-stage workflow
Define the segment STAGE 01
The single most underweighted stage. A segment is a tuple: SIC code(s), accounts category, geographic region, active-trading indicator. Decisions made here lock 70% of the eventual outcome — get the segment right, the rest of the workflow is mechanical.
Example: SIC 62012 (custom software development), accounts category small or medium, registered office postcode in Greater London or M-postcodes for Manchester, latest annual return filed within the last 18 months. That tuple defines maybe 1,800 companies — a workable population.
Extract from Companies House STAGE 02
The Companies House public REST API returns the legally accountable record. Director names, registered office, accounts category, SIC codes, officer history. AtlasForgeX queries the API with the segment definition from stage 01 and returns the candidate list with consistent field structure.
Layer the PSC (People with Significant Control) register on top. For owner-managed SMEs the PSC is usually the actual decision-maker, not the formally registered director (who may be a spouse, accountant or family-member proxy).
Enrich at the website STAGE 03
read the candidate's domain live. Target pages: About, Team or Leadership, Contact, Careers. Extract: named individuals with role titles, direct phone numbers, role-based and named email addresses, physical office address if different from registered office.
The Team page is the single most under-used UK B2B source. It is fresher than LinkedIn (the company updates it when they remember; LinkedIn updates when the individual remembers). For mid-market companies the Team page often lists the function head you actually need to email — not just the registered director.
Layer hiring signals STAGE 04
Companies actively hiring are companies actively spending. Cross-reference the candidate list against Reed, Indeed UK, Totaljobs, CV-Library and LinkedIn Jobs UK for active vacancies in the last 90 days. Tag each candidate with a hiring-signal flag.
Tier the list: hiring signal in your function category (e.g. you sell to Heads of Engineering and the company is hiring engineers) is tier-A; hiring signal in any adjacent function is tier-B; no recent hiring signal is tier-C. Sequence accordingly.
Verify and send STAGE 05
email verify every address before sending. Two layers: MX record check on the domain, then RCPT TO check against the mailbox. Skip the RCPT TO and your bounce rate will exceed the 2% threshold that triggers ISP-level reputation damage.
Sender hygiene before any send: SPF aligned, DKIM signed, DMARC published at policy none minimum (preferably quarantine or reject as the domain matures). Without these, even a perfectly verified list will land in spam.
UK legal context — PECR + UK GDPR
// Why the UK is unusually clean for B2B email
PECR (Privacy and Electronic Communications Regulations 2003) is the rule that actually governs unsolicited B2B email in the UK. It distinguishes between corporate subscribers (limited companies, PLCs, LLPs, Scottish partnerships, government bodies) and individual subscribers (sole traders, ordinary partnerships in England and Wales).
Corporate subscribers: no prior opt-in required for unsolicited electronic marketing. Required: identifiable sender, clear opt-out mechanism, accurate header information. This is materially simpler than the GDPR-derived consent regimes operating in several EU jurisdictions.
Individual subscribers (sole traders): soft opt-in — prior consent or an existing customer relationship is required.
UK GDPR Article 6(1)(f) provides the parallel lawful-basis layer for the underlying processing — legitimate interest is recognised by the ICO for B2B prospecting where the message is relevant to the recipient's professional role.
Role-based addresses (info@, sales@, enquiries@) are not personal data under Article 4 UK GDPR. They sit purely under PECR.
Realistic benchmarks for 2026
Industry-wide UK B2B benchmarks have settled into a fairly stable range. Use these as sanity checks against your own numbers.