GDPR & Compliance

WhatsApp Opt-In: How to Get and Record Customer Consent

By Resolvenyx··8 min read

Short answer

WhatsApp opt-in is a customer’s clear permission to receive messages from your business on WhatsApp. It should say what you will send, be collected before you message them, be recorded with proof, and be easy to withdraw. Business-initiated template messages should only go to customers who opted in.

Opt-in is where WhatsApp policy and data protection law meet. Getting it wrong risks blocked numbers, a damaged quality rating and possible regulatory trouble. This guide covers the practical side. It is not legal advice, so check requirements with your own counsel.

What good opt-in looks like

  • Informed: the customer knows the message is from your business, on WhatsApp, and what kind of messages to expect.
  • Specific: consent for order updates is not consent for promotions unless you say so.
  • Unbundled: not hidden inside terms and conditions.
  • Active: an unticked box or a clear action, not a pre-ticked box.
  • Withdrawable: stopping is as easy as starting.

Ways to collect opt-in

MethodHow it worksTip
Website form or checkoutA checkbox: “Send me order updates on WhatsApp”Keep it unticked and state the purpose
Customer messages you firstThey start the conversationKeeps you inside the 24-hour window; still ask before sending promotions
Click-to-chat link or QR codeCustomer taps or scans to start a chatAdd a line explaining what they will receive
In-store or in-personVerbal or written consent at point of saleRecord it at the time
Website chat widgetConsent notice before the chat startsResolvenyx’s widget includes a consent notice and opt-in

Recording proof

You should be able to show who opted in, when, how and to what. Store the timestamp, the source (form, QR, in-store) and the wording shown. In Resolvenyx, consent and data-request tracking are part of the GDPR tooling. Our GDPR guide covers retention and audit trails.

Handling opt-outs

  • Tell people how to stop in your marketing templates, for example “Reply STOP to unsubscribe.”
  • Act on opt-outs immediately and exclude those contacts from future campaigns.
  • Do not message someone who opted out just to confirm they opted out beyond a single acknowledgement.
  • Watch block and report rates. High rates harm your quality rating.

Common mistakes

  • Buying or scraping phone number lists.
  • Treating any past customer as opted in to marketing.
  • Sending promotional content under a utility template.
  • Having no record of consent.

For the campaign side, see the broadcast messages guide.

Frequently asked questions

Do I need opt-in to reply to a customer who messaged me first?

Replying inside the 24-hour window to someone who started the conversation is a different situation from sending them business-initiated marketing. For proactive messages outside the window, get opt-in.

Is a pre-ticked box valid opt-in?

Under GDPR-style standards, generally not. Use an unticked, clearly worded checkbox or another active action.

How long should I keep consent records?

Keep them as long as you rely on the consent, and follow your retention policy and legal advice. See our GDPR guide.

See it working on your own conversations

Resolvenyx puts WhatsApp, email, Instagram, Facebook and web chat in one inbox, with tickets and AI agents built in. 7-day free trial, no credit card required.

Written by the Resolvenyx team

We build a WhatsApp and omnichannel customer support platform, and write these guides from what we see support teams run into. Product details are checked against the current app. About Resolvenyx

Chat on WhatsApp