Belize has no dedicated anti-spam statute, so compliance for Belizean senders comes from a mix of sources. The first is the country’s own privacy law. The second is its e-commerce law. The third, often the most demanding, is the law of the country where each subscriber lives. A Placencia dive shop, a Corozal wholesaler and an offshore trust company in Belize City can have very different obligations. This guide sorts them out.
This is general information, not legal advice. Check your own situation with a Belizean attorney.
Belize’s own rules at a glance
Data Protection Act, 2021
This is the main text (Act No. 45 of 2021). It sets GDPR-style principles for personal data, including lawfulness, fairness, purpose limitation and security. It defines consent as a freely given, specific, informed and unambiguous statement or clear affirmative action. Section 18 lets any person tell a business in writing to stop direct marketing to them, and the business must stop within 21 days. Oversight sits with a Data Protection Commissioner inside the ministry responsible for e-governance, and a Data Protection Tribunal hears appeals.
Two caveats. First, the Act commences by Ministerial order, possibly in stages, so confirm which provisions are currently in force. Second, businesses with turnover of BZ$3,000,000 or less are exempt unless they fall into listed categories such as health services, credit reporting or reporting entities under the anti-money-laundering law. Our page on whether email marketing is legal in Belize goes through the sections, exemptions and penalties.
Electronic Transactions Act, 2021
If you sell through electronic communications, section 49 requires you to show your legal name, geographic address and a way to contact you, plus clear information on price, payment, cancellation and refunds. Put this in your email footer and link to your terms.
SMS marketing
We found no Belize law written specifically for marketing texts. The Public Utilities Commission regulates telecommunications, and messages reach subscribers through the country’s two mobile networks, Digi and Smart. The Data Protection Act’s direct-marketing right applies “by whatever means”, so treat SMS the same as email: get opt-in, identify yourself and honour STOP replies. Our FAQ on SMS campaign laws and restrictions covers the general principles.
Foreign rules that follow your subscribers
Belize’s economy depends on visitors and on overseas clients, so many local lists are mostly foreign. The recipient’s law usually applies to the email you send them.
| Subscriber lives in | Main rule | What it means for you |
|---|---|---|
| Belize | Data Protection Act, 2021 | Lawful, fair processing; stop direct marketing on written request |
| United States | CAN-SPAM | Opt-out model, but honest headers, a postal address and a working unsubscribe are mandatory |
| Canada | CASL | Express or implied consent required before sending |
| EU or UK | GDPR and e-privacy rules | Opt-in consent for most marketing and full data-subject rights |
The simplest approach is to apply the strictest standard to everyone. Collect clear opt-in consent, keep proof of it, and make unsubscribing easy.
Common questions
Does the Act apply to a foreign company emailing people in Belize?
It can. Section 3 extends the Act to controllers outside Belize that process the data of people in Belize when offering them goods or services.
What can subscribers ask me for?
The Act gives individuals rights of access, rectification, erasure, restriction and data portability (sections 11 to 16), as well as the right to stop direct marketing (section 18). Keep your contact data in one system so you can answer these requests quickly.
Can I email my existing customers without asking again?
For Belizean contacts, if you collected their details fairly and told them you would send updates, marketing to them is generally defensible, as long as you stop when asked. For Canadian and European contacts, stricter consent rules apply. When in doubt, send a re-permission email.
How Mailpro supports compliance
- Consent capture: forms with unticked checkboxes and double opt-in that record when and how each person subscribed.
- Automatic opt-outs: every campaign carries an unsubscribe link, and unsubscribed contacts are excluded from future sends.
- Swiss hosting: data stays on Mailpro’s private infrastructure in Switzerland, outside US jurisdiction, encrypted in transit with TLS 1.3, and never sold or rented. The Act’s transfer rules in Part IV ask for adequate protection abroad, and Switzerland holds an EU adequacy decision. See why Switzerland.
- GDPR-native design: useful when your list includes European travellers. See Mailpro and the GDPR.
Next step: read how to get permission to email contacts in Belize and turn these rules into signup forms that work.