WhatsApp opt-in best practices: collecting consent that holds up

Before your business sends someone a template message on WhatsApp, that person needs to have agreed to hear from you there. WhatsApp's business policies require it, and so do privacy laws such as India's Digital Personal Data Protection Act, 2023 and the GDPR. Opt-in is also practical: people who chose to receive your messages are less likely to block or report them.

This guide covers what valid opt-in looks like, where to collect it, and how to keep it valid over time. It's practical guidance rather than legal advice, so check the details with your own counsel.

What counts as valid opt-in

A valid opt-in is an active, informed choice. In practice, that means:

• The customer takes an action. They tick an empty checkbox, tap a button or send a message. Pre-ticked boxes and consent buried in general terms don't count.
• It mentions WhatsApp. Agreeing to “receive updates” is too vague if those updates will arrive on WhatsApp. Say so explicitly.
• It names your business, so the customer knows who will be messaging them.
• It describes what they'll receive. Order updates and promotional offers are different things, so let customers choose one or both.
• It comes first. Consent collected after a marketing message has gone out doesn't cover that message.

A customer who messages you first has opened a 24-hour window in which you can reply. That doesn't automatically mean they've agreed to receive marketing broadcasts later, so ask separately.

Where to collect opt-in

At checkout

Checkout is the natural place, since the customer is already entering a phone number. Add an unticked checkbox for WhatsApp order updates, and a second one for offers if you plan to send marketing messages.

Forms and sign-up pages

Lead forms, account registration and newsletter sign-ups can all carry a WhatsApp consent line. Place it right next to the phone number field so the connection is obvious.

Your website chat widget

A website chat widget moves visitors into a WhatsApp conversation they start themselves. Once they're chatting, ask whether they'd also like updates or offers, using quick-reply buttons for yes and no.

Click-to-WhatsApp ads

When someone taps a Click-to-WhatsApp ad and messages you, they've started a conversation, not subscribed to your marketing. Use that conversation to ask for opt-in before you add them to future campaigns.

QR codes and links

QR codes on packaging, receipts, shop counters and menus can open a WhatsApp chat with a pre-filled message such as “Hi, I'd like order updates on WhatsApp.” You can create the link with our WhatsApp link generator. Make sure the pre-filled text describes what the customer is signing up for.

Wording that works

Clear beats clever. A good opt-in line states the channel, the business, the type of messages and how to stop. For example:

Send me order updates and occasional offers from [Your business] on WhatsApp. I can opt out at any time by replying STOP.

If you only plan to send transactional updates, leave out the offers. If you decide to add marketing later, ask again rather than stretching the original consent.

Keep records you can rely on

If a customer, Meta or a regulator asks how you obtained consent, you should be able to answer within minutes. For every opt-in, store:

• The phone number and the date and time of consent
• The source, such as checkout, a specific form, a widget conversation or an ad campaign
• The exact wording shown, with a version number whenever you change it
• Which types of message the customer agreed to
• Any later opt-out, with its date and channel

Honour opt-outs quickly

Make leaving easy. Include an opt-out option in marketing templates, such as a quick-reply button, and recognise common keywords like STOP or UNSUBSCRIBE in every language you operate in. When someone opts out, remove them from marketing audiences straight away and confirm it in one short reply. Keep sending the transactional updates they still need, such as delivery notices for an order in progress, unless they ask you to stop those too.

Sync opt-outs across every tool that can message customers. An opt-out recorded in one system and ignored by another is one of the most common ways businesses end up messaging people who asked them to stop.

Why this protects your quality rating

Each phone number on the WhatsApp Business Platform has a quality rating based on how recipients respond to your messages, especially blocks and reports. A falling rating can hold back your messaging limits, which cap how many people you can reach with business-initiated messages, and repeated problems can lead to restrictions on your number. Meta adjusts how ratings and limits work, so check its current documentation for the details.