Meta requires that people opt in before a business sends them marketing messages on WhatsApp. India's Digital Personal Data Protection (DPDP) Act adds its own expectations: consent should be free, specific, informed and easy to withdraw.
What good consent looks like
A tick box on your checkout or lead form that says plainly what you will send (offers, order updates) and that it is over WhatsApp. A pre-ticked box, or a phone number collected for something else, is weak consent.
Keep a record: who agreed, when, where (form, QR code, ad, store checkout) and the wording they saw. If Meta or a customer ever asks, you can answer in one minute.
Honour STOP instantly
Customers who reply STOP must not receive more marketing. baseNode records the opt-out the moment it arrives, blocks marketing sends to that number, and keeps the proof in the consent ledger you can export as a CSV.
Let people ask for their data
Under DPDP people can ask what you hold and ask you to erase it. Contacts in baseNode have a one-click data export and an erase action, and erased numbers cannot be re-imported by accident.
This is general guidance, not legal advice. Ask a lawyer to review your consent wording.