CONSENT AND COMPLIANCE
WhatsApp and RCS Opt-in Best Practices for Indian Businesses
Good opt-ins keep your messages welcome, your WhatsApp number healthy and your business on the right side of consent rules. Here is how to collect them well.
QUICK ANSWER
An opt-in is a clear, recorded permission from a person to receive your messages on a specific channel. For WhatsApp, Meta requires that people opt in before you send them business-initiated messages, and that the opt-in names your business and the channel. Collect it at natural points such as forms and enquiries, store when and how it was given, and honour opt-outs quickly.
01
Healthier sender reputation
People who chose to hear from you are less likely to block or report, which protects your WhatsApp quality rating.
02
Better response rates
Opted-in contacts expect your messages, so they read and reply more than a cold, unknown audience.
03
Clear consent records
Storing how and when someone opted in helps you answer complaints and meet data protection expectations.
What a good opt-in looks like
An opt-in is a person's clear permission to receive messages from your business on a particular channel. Meta's WhatsApp Business policy requires businesses to get opt-in before sending business-initiated messages, and to make clear that the person is agreeing to receive messages from your business on WhatsApp. The same spirit applies to RCS and SMS: message people who expect to hear from you.
A good opt-in has four parts:
- Clear: the person knows they are agreeing to messages, not just submitting a form.
- Specific: it names your business and the channel, such as WhatsApp, RCS or SMS.
- Active: the person takes an action, like ticking a box or sending a message, rather than consent being assumed.
- Recorded: you can show when, where and how it was given.
India's Digital Personal Data Protection Act also sets expectations around consent and purpose for personal data. Get advice on how it applies to your business, as the rules are being rolled out in phases.
Where to collect opt-ins
- Website forms: add a line such as "I agree to receive updates from Greenfield Academy on WhatsApp and SMS" with an unticked checkbox.
- Enquiry and admission forms: both paper and online forms can include a consent line and checkbox.
- Click-to-WhatsApp ads: when someone taps your ad and messages you first, they have started the conversation. Confirm what updates they want before adding them to broadcasts.
- Missed calls and IVR: a key press such as "Press 2 to get details on WhatsApp" is a clear, active request.
- In-person: at a reception desk or open day, a QR code that opens a WhatsApp chat with a pre-filled message works well.
- Meta lead forms: include a custom consent question in the form.
What to say in the opt-in
Keep it simple and honest. Examples:
- "Yes, send me course details and admission updates from Sunrise Academy on WhatsApp."
- "I agree to receive appointment reminders and health tips from City Care Clinic by WhatsApp, RCS and SMS."
Avoid burying consent inside long terms and conditions, and avoid pre-ticked boxes. If you plan to send promotions as well as updates, say so.
How to record opt-ins
For each contact, store at least:
- Phone number and name
- Date and time of opt-in
- Source, such as website form, IVR press 2 or walk-in QR
- Channels agreed to
- Any later opt-out and its date
A shared Google Sheet or CRM works fine. If forms post directly to your sheet or CRM through a webhook, the timestamp and source are captured automatically.
How it works for opt-outs
Opting out must be as easy as opting in. Good practice:
- Add a "Stop updates" quick reply button to marketing templates.
- Recognise replies like STOP, UNSUBSCRIBE or "don't message" and act on them automatically.
- Remove opted-out numbers from every channel they opted out of, not just one.
- Keep a suppression list so a re-uploaded file does not add them back by mistake.
Smart Growth AI handles unsubscribe and opt-out management across voice, SMS, WhatsApp and RCS, so a person who opts out on one channel can be suppressed everywhere you choose.
Common opt-in mistakes
- Uploading a purchased list and messaging everyone on WhatsApp
- Using one old consent to justify every kind of message forever
- Not naming the business, so people do not recognise who is messaging
- Ignoring "stop" replies because they are not exact keywords
Refreshing old consent
Consent does not last forever in practice. A parent who enquired three years ago may no longer have a child in that age group. Before messaging an old list, send a short, low-pressure message asking whether they still want updates, and remove those who do not respond or say no. For SMS, check that your DLT consent templates match how consent was collected. This keeps your list smaller but far more responsive.
Opt-in for RCS specifically
RCS messages arrive in the default messaging app with your verified brand name, so people can see exactly who is messaging them. That helps trust, but it does not replace consent. Apply the same rules as WhatsApp: tell people which channels you will use, and give an easy way to stop.
Opt-ins in a multi-channel campaign
Consent and relevance go together. In the Smart Growth AI Campaign, richer WhatsApp and RCS follow-ups go only to people who showed interest on the voice call, and people who press 2 explicitly ask for details on WhatsApp. That means fewer unwanted messages and a healthier number. Pair this with clean consent records and an easy opt-out, and your channels stay effective season after season.
Need help setting up consent capture on your forms? See our custom form API or book a call with our team.
FAQ
Questions people ask
Is opt-in mandatory for WhatsApp Business API messages?
Yes. Meta's WhatsApp Business policy requires businesses to obtain opt-in before sending business-initiated messages. The opt-in should make clear that the person is agreeing to receive messages from your business on WhatsApp.
Can I use a pre-ticked checkbox for opt-in?
It is best not to. A pre-ticked box does not show an active choice by the person. Use an unticked checkbox or a clear action, such as sending a WhatsApp message or pressing a key, so consent is genuine and easy to prove.
Does a Click-to-WhatsApp ad count as an opt-in?
When someone taps your ad and messages you, they have started the conversation and you can reply. Before adding them to ongoing promotional broadcasts, it is good practice to confirm what updates they want to receive and record that choice.
How should I store opt-in records?
Keep the phone number, name, date and time, source of the opt-in and the channels agreed to, plus any later opt-out. A Google Sheet or CRM works well, especially when forms post data automatically through a webhook.
What should happen when someone replies STOP?
Remove them from future marketing on that channel right away, and ideally on all channels they asked to stop. Add the number to a suppression list so it is not re-added when you upload a new file.
TALK TO A REAL PERSON