Every business in your Pack is near your office and passes every check. Every finding opens to the record it came from, with the date and the fix ready to paste. You get the call sheet for every one and the first emails for those you can email. You ring, and you send from your own mailbox. Within 72 hours of payment. Yours to keep.
Rather talk first? Ring 0113 490 0521, weekdays 9am to 5pm UK time. At any other time, book a call and we ring you back.
Our word on the Pack. Every finding is dated and was checked in the last 30 days. If one's wrong when you look, we replace it two for one, and if fewer than 100 pass our checks you get your money back in full. How a refund works.
A 30-day head start. A business in your pack goes to no other firm for 30 days after your pack is made. We never sell areas, so another firm near you can buy a pack too, but not with your businesses in it during those 30 days. The same issue at a business never goes to two firms within 90 days.
| # | Business | Miles | Finding | Number from |
|---|---|---|---|---|
| 1 | A haulage firm | 1.5 | No DMARC policy | contact page |
| 2 | An accountancy | 0.9 | DMARC monitor only | home page |
| 3 | A letting agent | 3.1 | Certificate, 11 days | contact page |
| 4 | A joinery | 4.2 | No SPF record | footer |
| 5 | A recruiter | 0.6 | No DMARC policy | contact page |
| 6 | A print works | 2.6 | No redirect to https:// | a directory |
The businesses are invented. In your pack every row is a real business near your office, and every number says where it came from.
One folder. Open START-HERE.html and it walks you through the rest.
Not every business gets an email. A first email is written only for a limited company, an LLP or a public body with a mailbox of its own; every other business comes with the number it publishes and the line to open the call. How many of each depends on your area, and often most are to ring. Your own order page shows the count before you pay, or says the count is not finished yet.
Sell phones and VoIP, not IT support? The same Pack, with the phone rows first.
And a link to your do-not-contact list, kept up to date for every channel.
The same business, as it appears in the four places the pack shows it. The business is invented and shown as example.com. In your pack every entry is real, and every record opens to its source.
Start at p=none, which changes nothing about delivery and starts the reports arriving, then move to p=quarantine once 4 to 8 weeks of reports show every legitimate sender passing SPF or DKIM. Where a business already publishes a record, the fix is that record with only its policy changed: where its reports go, and every other tag, stay as they are.
Each line names the record, where and when it was read, and a hash of the exact text it quotes, so the finding you quote can be matched to what was read, on the date it says.
Hello,
I'm Your name at Your firm, an IT support firm in Leeds. We look after IT and email for small companies.
On 29 October 2026 we read what example.com publishes to anyone who asks: its DNS records. This is what stood out.
Nothing tells receiving servers what to do with mail forging your domain.
What to do about it is below, written for your domain. It's yours to use whether or not we ever speak: no charge, no catch.
_dmarc.example.com. IN TXT "v=DMARC1; p=none; rua=mailto:[email protected]"
About 10 minutes to publish, and 4 to 8 weeks of reading the reports before it is safe to enforce.
If you'd like us to make the change, or to talk it through, reply to this email. If somebody else looks after your IT, forwarding this to them is the quickest way to get it done.
Your name
Your firm, Your postal address
Shortened here from the first email a Pack writes: the full one also says why the finding matters and how to move from p=none to enforcement. Every message names you, carries your postal address, and gives the fix whether or not they reply. Nothing in it implies a breach, because nothing was breached.
| # | Business | Miles | Finding | Number from | Read |
|---|---|---|---|---|---|
| 1 | A haulage firm | 1.5 | No DMARC policy | contact page | 29 Oct |
Ring the top forty first: the call sheet comes first because a call is where a conversation starts.
A business that fails any of these is not in the pack, and is not counted toward the hundred.
Who gets a first email is a narrower rule than who is in the pack: the mail merge carries only limited companies, LLPs and public bodies, the corporate subscribers PECR lets you write to. A business we could tie to no company registration can still be on the call sheet as a number to ring. Its row says the number could be a sole trader's or a partner's own.
Before it goes, by code that shares nothing with the code that chose the businesses. A Pack that fails one is held back for us to look at, and nothing is sent.
One domain at a time, you could, and the commands on this page are there so you can check our work. What the pack saves you is everything around the checks.
Within 72 hours of payment. Your week goes on the phone instead of in a spreadsheet.
Five steps. The three calls are counted from the day your Pack is delivered.
Check your details on your order page, accept the Services Agreement and the Data Processing Agreement with one tick, and pay by card, Apple Pay or Google Pay on Stripe's secure page, or by invoice if you ask. Rather talk first? The call comes before any of that, and nothing is charged until you pay.
One folder, by a download link. Your own sending domain is checked before anything else is opened.
How many are out, what came back, and what to change in the next batch.
Replies, meetings, and what you would change.
What has come of the pack two months on, and whether your area is worth another.
We do not promise replies or meetings, at this price or any other. We promise the pack.
You are the sender. Your name is in the From line, your postal address is in the footer, and every message goes from your own mailbox, so a reply asking you to stop reaches you. Tell us when somebody asks you to stop, and by the next weekday morning, UK time, they are on the do-not-contact list for every channel and out of every later pack. Under PECR a limited company, an LLP or a public body can be written to without consent on those terms. Sole traders and partnerships are individuals under PECR, so the pack writes first emails only for businesses tied to a company registration. A business with none can still be on the call sheet as a number to ring, and its row says so.
That is a reading of the rules, set out with the rules quoted, not legal advice. The full position is on the compliance page.
Check your details on your order page, accept the Services Agreement and the Data Processing Agreement with one tick, and pay by card, Apple Pay or Google Pay on Stripe's secure page, or by invoice if you ask. Within 72 hours of payment.
Pay by card and the page you see straight after paying takes the websites of your own clients, so we keep them out of your Pack.
For an IT firm in a city we have read, the order page counts the businesses near your office as you press Pay, and says so before any money if your area cannot fill a Pack. If yours is not read yet, you pay now and we read the businesses near your office first: your Pack always comes within 72 hours.