Why Consent Matters

Consent is permission. It is the difference between welcome communication and unwanted intrusion.
Imagine someone knocking on your door at midnight. Even if they have something you want, the timing and method make it unwelcome. Now imagine they knock at a reasonable hour, after you invited them. Completely different experience.
WhatsApp is personal. It is where people talk to family and closest friends. Entering that space without permission is disrespectful. It is also against the rules and, in many places, against the law.

What Consent Means

Valid consent requires four elements:
1. Clear and Informed
The customer must understand what they are agreeing to. Not buried in fine print. Not assumed from a purchase. Explicitly stated.
Poor consent:
“By buying from us, you agree to receive marketing messages.”
Good consent:
“Would you like to receive updates about new products and special offers via WhatsApp? Reply YES to subscribe or NO to decline.”
2. Freely Given
Consent cannot be forced. It cannot be the condition for receiving a service unless that service is the messaging itself.
Poor consent:
“You must subscribe to our WhatsApp messages to complete your purchase.”
Good consent:
“Your order is complete! Would you also like order updates and exclusive offers on WhatsApp? (Optional)”
3. Specific
Consent for one purpose does not mean consent for all purposes. Separate marketing messages from transactional updates.
Poor consent:
“You agreed to receive messages. We will send you everything.”
Good consent:
“You are subscribed to:
  • Order updates and shipping notifications ✓
  • Marketing and promotional offers ✓ Reply STOP MARKETING to unsubscribe from promotions while keeping order updates.”
4. Documented
You must be able to prove consent was obtained. If challenged, you need records.
Documentation includes:
  • Timestamp of consent
  • Method of consent (website form, verbal, checkbox, reply)
  • The exact wording that the customer agreed to
  • IP address or device identifier (where applicable)

Methods of Obtaining Consent

Website Opt-In Forms
Add a checkbox or form on your website where visitors can subscribe to WhatsApp updates.
Best practices:
  • Checkbox is unchecked by default (customer must actively select)
  • Clear explanation of what they will receive
  • Frequency expectation (e.g., “1-2 messages per week”)
  • Easy unsubscribe information
  • Confirmation message sent to WhatsApp after signing up
In-Store or Physical Signup
For brick-and-mortar businesses, customers can sign up on paper or a tablet.
Best practices:
  • Clear written explanation
  • Signature or digital confirmation
  • Copy provided to customer
  • Entry into the system within 24 hours
Verbal Consent
Obtained during phone calls or in-person conversations.
Best practices:
  • Clearly state the purpose and frequency
  • Record the call or note confirmation
  • Send an immediate follow-up message confirming the subscription
  • Provide an easy opt-out in the first message
QR Code Scan
Customer scans the code and confirms the subscription.
Best practices:
  • QR code leads to a clear subscription page
  • Explains what they will receive
  • Requires active confirmation (not automatic subscription)
  • First message confirms subscription and provides opt-out

Managing Consent Records

What to record:
  • Customer phone number
  • Date and time of consent
  • Method of consent
  • Specific wording agreed to
  • Categories subscribed to (marketing, utility, etc.)
How to store:
  • Secure database with access controls
  • Encrypted storage for sensitive information
  • Backup systems to prevent loss
  • Retention policy (keep for legal requirement period, typically 2-7 years)
When to review:
  • Quarterly audit of consent records
  • Before any major campaign
  • When regulations change
  • If the customer disputes consent