Yes. All outreach follows GDPR principles, with legitimate interest and clear opt-outs.