If they were using his business contacts, this seems like it would apply, as that data is collected from the business accounts which would fall under this agreement.

But does this apply when using personal account data? Does the business account agreement override the use of PII on a personal account to initiate business solicitations?

Definitely something to talk to a lawyer about.