Consent and Opt-In for WhatsApp, SMS and Email Marketing in the UAE

Messaging customers on WhatsApp, SMS and email can bring excellent results, but only when people have agreed to hear from you. Permission, often called opt-in or consent, is both a legal and a practical matter. Without it you risk complaints, blocked numbers, lower quality ratings, lost sender reputation and regulatory problems.

This guide gives practical advice. It is general information, not legal advice. Rules in the UAE can differ by emirate, sector and channel and may change, so confirm the current requirements with your legal adviser and the relevant authorities, such as the telecommunications and data protection regulators.

Why consent matters

• It respects people's privacy and builds trust.
• Platforms such as WhatsApp require opt-in for business-initiated messages, and violations can limit or suspend your account.
• Email providers penalise senders who get spam complaints.
• SMS routes and sender IDs may be restricted for unsolicited messages.
• Data protection laws may require a lawful basis and transparency for processing personal data.
• People who chose to hear from you respond better.

What counts as good consent

• Freely given: not forced or hidden as a condition for something unrelated.
• Specific: clear about what messages the person will receive and on which channel.
• Informed: explains who you are, what you will send, how often and how to stop.
• Unambiguous: an active choice, such as ticking a box, tapping a button or sending a message to start the conversation.
• Recorded: you can show when, how and what the person agreed to.

Common ways to collect opt-in

Website forms

A form with an unticked checkbox and clear text, such as 'I agree to receive offers and updates from [Business] on WhatsApp.' Link to your privacy policy.

Click-to-WhatsApp and customer-initiated chats

When a customer messages you first, they open a conversation window in which you can reply. For later marketing messages outside that window, make sure they have agreed to receive them, for example by asking inside the chat.

In-store and at events

Paper or tablet forms, QR codes that open a WhatsApp chat with a prefilled opt-in message, or staff asking customers to confirm their preferences.

At checkout or booking

An optional checkbox to receive updates and offers. Keep transactional messages, such as order confirmations, separate from marketing.

Social media and ads

Lead forms and ads that clearly state what people are signing up for. Do not add people to lists simply because they commented or followed you.

Wording examples

• WhatsApp: 'Yes, send me offers and news from [Business] on WhatsApp. I can unsubscribe at any time by replying STOP.'
• SMS: 'I agree to receive promotional SMS from [Business]. Reply STOP to opt out.'
• Email: 'Send me tips and offers by email. You can unsubscribe at any time.'

Offer these in Arabic and English, written clearly by a native speaker.

Keep records

• Name and contact details.
• The channel consented to.
• Date and time of consent.
• The source, such as the form, QR code or chat.
• The exact wording shown to the person.
• Any opt-out and the date.

Good records help you answer questions from customers, platforms or regulators.

Make opting out easy

• Include a clear opt-out instruction in marketing messages, such as 'Reply STOP'.
• Honour opt-outs quickly, and remove or flag the contact in all systems.
• Provide an unsubscribe link in every marketing email.
• Do not make people jump through hoops to leave.
• Do not re-add people who opted out.

Transactional versus marketing

Messages that deliver something the customer requested, such as a booking confirmation or delivery update, are generally treated differently from promotions. However, do not disguise marketing as service messages. Platforms review content and categories, and regulations may treat them differently. Our WhatsApp templates guide explains categories.

Rules specific to each channel

• WhatsApp: business-initiated messages outside the customer service window use approved templates and require opt-in under the platform's policies.
• SMS: telecom rules may require registered sender IDs, opt-out options and restrictions on promotional messaging times or content. Our SMS marketing guide covers practical points.
• Email: use authenticated domains, honest subject lines, a physical address and an unsubscribe link, in line with provider and legal requirements.

Buying or renting lists

Do not message purchased or scraped lists. People on them have not agreed to hear from you, and using them is likely to breach platform rules and may create legal risks.

Children and sensitive data

• Be extra careful with minors, and follow the rules that apply to them.
• Avoid collecting sensitive data, such as health information, unless you have a clear need and the right safeguards.
• If your business is regulated, such as healthcare or finance, check sector-specific rules on marketing messages.

Practical checklist

1. List every channel you use for marketing messages.
2. For each, define how you collect opt-in and where you record it.
3. Check your forms, QR codes and chat flows for clear wording.
4. Add opt-out instructions to every marketing message.
5. Train staff not to add numbers to lists without consent.
6. Review your lists and remove people who have not agreed.
7. Check current rules with your legal adviser and update your process yearly.

Common mistakes

• Pre-ticked boxes.
• Assuming that a phone number given for delivery means consent for marketing.
• Adding everyone from a business card or event list.
• No record of consent.
• Hard-to-find opt-out.
• Sending marketing under the cover of service messages.

Frequently asked questions

Can I message someone who contacted me first?

You can reply within the allowed window. For later promotions, make sure they agreed to receive them.

Do I need separate consent for each channel?

It is good practice to be specific about each channel and to record it.

How long does consent last?

Refresh your lists regularly and respect changes in preferences. Consider re-confirming long-inactive contacts.

WhatsApp Template Guidelines and Categories

Every message template used outside the open 24-hour customer service window must be classified as marketing, utility, or authentication. Choosing the correct category avoids delivery friction and platform penalties.

• Marketing templates cover promotions, awareness campaigns, retargeting, and mixed or unclear content.
• Utility templates must be strictly non-promotional and directly tied to an ongoing customer account, order, or transaction.
• Authentication templates are restricted exclusively to one-time passcodes and must use an authentication template with a one-time password button without any URLs, media, or emojis.
• Utility templates that Meta judges to be promotional are approved as marketing by default, and repeatedly submitting marketing content as utility leads to escalating enforcement.

Template Quality and Enforcement Stages

Meta monitors template quality based on direct customer feedback and engagement metrics such as read rates.

• Low-quality templates risk being paused or disabled, and recurring negative feedback can permanently disable a template.
• Businesses can request a category review or appeal within 60 days directly in WhatsApp Manager, with automatic reviews taking up to 24 hours.
• Policy enforcement follows a staged approach starting with warnings, progressing to short blocks on templates and adding numbers, then longer messaging blocks, and finally an indefinite lock or permanent ban for severe violations.
• You must honour all opt-out and block requests promptly across all systems to avoid heavy negative feedback and volume restrictions.

Managing Messaging Limits and Portfolio Scaling

Messaging limits dictate how many unique customers a business can message outside an open 24-hour customer service window over a rolling 24-hour period.

• Since October 2025, limits are set per business portfolio and shared across all phone numbers registered within it, meaning a single high-volume number can exhaust the entire portfolio allowance.
• New portfolios start at a messaging limit of 250 and can scale automatically or through business verification and high-quality campaign delivery.
• A new portfolio can register up to two phone numbers initially, which increases upon business verification or reaching higher tier limits.
• Portfolio pacing delivers large template campaigns in batches to collect user feedback and protect sender reputation.

Vibbly and our messaging team help UAE businesses build opt-in flows, templates and records for WhatsApp, SMS and email. Message us on WhatsApp or book a free 30-minute call.