Database Reactivation in Canada: How to Stay CASL-Compliant

Somewhere in your CRM right now sits a list of people who already said yes to you once. They bought from you, signed a contract, or asked for a quote and then went quiet. That list is worth more than any lead you could buy or scrape off a broker's file, and in Canada there is a specific, legal way to work it without turning your business number into a spam complaint.

Here is how a database reactivation campaign actually works: what it is, why it beats chasing new leads dollar for dollar, the exact rule in Canada's anti-spam law that makes it legal, and the campaign structure worth running once you know the rule.

What a database reactivation campaign actually is

A database reactivation campaign is a structured, time-boxed effort to re-engage people already sitting in your CRM: past customers, old sales inquiries, quotes that went cold, appointments that never got booked. It is not a new list. It is not a purchased list. It is the pipeline you already paid to build, sitting untouched because nobody circled back.

Most businesses have more of this than they think. A dealership has finance applications from people who did not buy that week and never got a follow-up call. A roofing or HVAC company has a folder of quotes that went out and never came back. A clinic or service business has a list of people who called once, asked a question, and were never added to anything. Every one of those records is a person who already raised their hand.

We built our database reactivation service around exactly this problem: pull the stale records out of a CRM, sort them by how recent and how warm they are, and run them through a sequence instead of letting them sit in a pipeline stage nobody opens.

Why a reactivated lead is worth more than a new one

You already paid for these leads once. The ad spend, the time a rep spent on the phone, the hour spent building a quote: all of that is sunk cost whether the deal happened or not. Reactivating that person costs a fraction of what it costs to generate and qualify a brand new lead from scratch, because you skip the part where a stranger decides whether to trust you.

The math is not complicated. If a lead costs fifty or a hundred dollars to generate through ads and takes a rep twenty minutes to qualify, a list of three hundred old inquiries represents real money someone already spent. It is sitting in a stage nobody looks at, or it was never moved out of a form submission log at all. A short, well-timed sequence to that list is close to the cheapest lead source a business has, because the acquisition cost already happened months ago.

The catch is that "old CRM contact" and "safe to text or email" are not automatically the same thing in Canada. That is where the legal side comes in, and it is worth getting right before a single message goes out.

The Canadian rule that makes this legal

Canada's anti-spam law, known as CASL, governs any commercial electronic message. That includes email, and it includes text messages. The law defines an electronic message as one sent by any means of telecommunication, "including a text, sound, voice or image message," so an SMS carries the same obligations as an email. You cannot dodge CASL by switching channels.

CASL requires consent before you send a commercial message, and it recognizes two kinds: express consent, where someone explicitly opted in, and implied consent, which is what a reactivation campaign runs on. The category that applies here is called an existing business relationship, and the federal guidance on getting consent sets out two clocks:

Two years from a purchase, lease, or a written contract that is in force, or that expired within that two-year period.
Six months from an inquiry, when the person contacted you but never bought or signed anything.

Inside those windows, you have implied consent to reach that contact with a commercial message, no separate opt-in required. Outside those windows, the implied consent lapses. A customer from three years ago and an inquiry from eight months ago are not covered anymore. Treat both as cold: pull them out of the automatic sequence, and either secure fresh express consent or leave them alone. We hold that line hard in our own work. A stale contact does not get quietly folded into the same sequence as a customer from four months ago just because both sit in the same CRM view.

Being inside the consent window is not the only requirement. Every message, on every channel, has to carry sender identity and a working way to unsubscribe: who is sending it, how to reach you, and a one-step way to say stop. When someone unsubscribes, that request has to be honoured without delay, and no later than 10 business days, across every list and every channel that person is on, not just the thread they replied on.

Three federal bodies share enforcement of CASL: the CRTC, the Competition Bureau, and the Office of the Privacy Commissioner of Canada. The maximum administrative penalty under the act is $1,000,000 for an individual and $10,000,000 for any other person, though most real cases never approach that ceiling. This is general information, not legal advice. If anything about your list is unusual, get a specific answer from a lawyer before you build it.

How to structure a campaign that actually works

Once you know who is actually reachable, the sequence itself is straightforward. Here is the structure worth running:

Segment by relationship age first. Split the list into three buckets before writing a single message: recent (well inside the two-year or six-month window), aging (inside the window but close to the edge), and lapsed (outside it, pulled from any automatic send). This is a CRM job, not a guess, and it is why real CRM automation earns its keep here: the segmentation has to run off the actual dates on the record, not memory.
Build a short sequence across SMS and email, not one blast. Three or four touches over one to two weeks beats a single message every time. Reference the actual thing that connects you: "you got a quote from us in March" lands completely differently than a generic check-in line, and it also happens to be the honest version of what happened.
Handle replies inside minutes, not days. A reactivated lead who replies is behaving exactly like a brand new hot lead, and deserves the same urgency. It is the same discipline as speed-to-lead on a fresh inquiry: the first business that answers wins the deal, even when the deal is three years old.
Book the ready ones without an extra step. Some replies come back as a phone call instead of a text. If that call lands after hours or during a busy shift and goes unanswered, the same automatic text-back that recovers a missed call on a fresh lead recovers it here too, so a reactivated customer does not go cold a second time because nobody picked up.
Suppress opt-outs everywhere, immediately. The moment someone says stop, that has to clear them from every list and every channel, not just the thread they replied on. A person who opts out of texts but keeps getting emails from the same campaign is still a complaint waiting to happen.

What never to do

A database reactivation campaign only works because it is built on real consent from real history with real customers. A few habits will break that, fast:

Never load a bought or scraped list into this lane. A purchased "leads database" or a list pulled off a directory is not an existing business relationship, no matter how it is labeled. Running it through the same sequence as your real customer list turns a compliant campaign into a spam complaint with your business name on it.
Never text a number you scraped or found published online. Publicly listed does not mean consented to receive texts from you. The narrow lane that covers reaching people you have no relationship with does not include SMS.
Never treat silence as permission to keep going indefinitely. The two-year and six-month clocks run whether or not someone replies. A customer who bought three years ago and has not bought since fell outside the two-year window a year ago, however many messages you sent in between.
Never bury or slow-walk the opt-out. One tap or one reply, honoured fast, on every message, every time.

Common questions about database reactivation in Canada

Is database reactivation the same as cold outreach?

No. Cold outreach targets people you have no relationship with. Database reactivation targets people already in your CRM, inside the legal consent window CASL grants for an existing business relationship. Same law, very different starting point.

Can I text past customers, or only email them?

Both are covered by the same rules. CASL treats a text message as an electronic message the same way it treats an email, so the two-year and six-month windows, the sender identity requirement, and the unsubscribe requirement all apply to SMS exactly as they apply to email.

What do I do with contacts older than the consent window?

Pull them out of the automatic sequence. You can still reach them, but you need a fresh, explicit opt-in first rather than relying on implied consent that has already lapsed. Most businesses find it is not worth chasing that group through the same channel at all.

Do I need a lawyer to run one of these?

For a straightforward campaign against your own CRM, most businesses do not, as long as the consent windows, sender identity, and unsubscribe rules above are followed exactly. This article is general information, not legal advice. If your list includes anything unusual, an inherited customer list from an acquisition, for example, get a specific answer before you send anything.

If your CRM has more dead pipeline than active pipeline, that is usually the fastest thing to fix before spending another dollar on new leads. Book a consultation and we will tell you honestly whether reactivation is worth running before we build anything.