WhatsApp and consent policy — draft

Draft for legal review — updated 26 October 2026. Do not publish as final legal wording until details and implementation have been reviewed.

WhatsApp messages require a separate, recorded user choice. Do not enrol numbers collected from groups or send cold WhatsApp outreach. Record consent wording, time, source and language, and offer another channel.

Permission for operational updates is separate from marketing permission. Obtain marketing consent separately under applicable law, including review of section 30A of the Communications Law, and provide easy withdrawal. Do not hide consent within acceptance of terms or preselect a checkbox.

Before connecting the bot, disclose data sent to Meta and messaging providers, processing countries and retention. Provide stopping methods in messages and settings and update notification preferences. Sensitive information requires authentication and permissions; WhatsApp is not an emergency service.