WhatsApp Opt-in: How to Collect Subscribers the GDPR-Compliant Way

Three things have to be true at the same time. Miss one and the list is unusable — not only legally, but practically, because people who never asked to hear from you block and report, and that costs you the channel.

Explicit. The customer actively agrees to receive WhatsApp messages from you for marketing, and that agreement is separate from placing an order. A single checkbox bundling "I accept the terms and want WhatsApp offers" is not explicit consent.

Documented. For each contact you can show when they agreed, where they agreed and what wording they saw. If you cannot produce that record, you do not have consent — you have a phone number.

Revocable. Opting out is as easy as opting in, and it takes effect immediately. Every marketing message carries an obvious way out.

The rule of thumb: if you cannot name the moment a contact said yes, do not message them. Ask first.

Opt-ins come from moments where the customer already has a reason to hand over their number. These are the places worth using, roughly in order of yield:

• Phone field at checkout — the largest single source, because it sits in the most engaged moment of the whole journey. Set it to encouraged rather than required.
• Post-purchase opt-in — catches customers whose number was not in the checkout, while intent is still high.
• Order-confirmation opt-in — the one message every customer opens.
• Subscriber pop-up on your storefront — usually paired with a first-order incentive.
• Page widget — a chat button for customers who would rather start the conversation themselves.
• QR codes — packaging inserts, retail, events. Slow but free.
• Link in bio and referrals — small volumes, high intent.
• Click-to-WhatsApp ads — Meta ads that open a chat instead of a landing page, at 3–4× the conversion rate of a standard ad.

If you already run an email tool, two more open up: a permanent WhatsApp opt-in link in the footer of every email you send, and a one-off invitation to your existing list. Both convert email reach into WhatsApp reach without buying a single click.

Every Shopify store has a back catalogue: customers who bought once, twice or a dozen times, years ago, and were never asked about WhatsApp. You cannot simply start messaging them. You can ask them once.

That is what Smart Activation does: a single re-permission message to customers who ordered more than 12 months ago, asking them to opt in. It is deliberately throttled to two runs per year.

Two things are worth understanding about it. Asking is not marketing — the message requests consent, it does not sell, and that distinction is the entire point. And the throttle is protective rather than technical: repeatedly working a dormant list is how stores get reported.

For shops with an email tool connected, this is where the numbers move most. The share of an existing email list that can also be reached on WhatsApp typically starts at 15–30% and gets to 50–70%. One re-permission run often unlocks more reachable contacts than the next 90 days of new orders combined.

Six steps, in this order. The first two do most of the work.

1. Turn on the phone field in your Shopify checkout and set it to encouraged. One setting, largest effect.
2. Put a welcome message live. It confirms the opt-in on WhatsApp itself — which is your consent record — and it starts a relationship instead of leaving a number sitting cold.
3. Add one active capture point: the pop-up or the post-purchase opt-in. One, not all of them — otherwise you cannot tell what worked.
4. Switch on the passive ones: page widget, QR codes on packaging, link in bio, email footer. They cost nothing per month and they compound.
5. Run Smart Activation on the back catalogue. Once, then measure — you only get two runs a year.
6. Watch one number: the share of your last-12-months customers you can reach on WhatsApp. If it is not moving, the capture point you added is not working.

None of this replaces your email programme. WhatsApp reaches the customers email loses and lifts conversion on the ones it already reaches — from 2.1% to 4.5% on a shared audience, or roughly 1.5×. We cover that split in our comparison of WhatsApp and email marketing, and the wider setup in the complete WhatsApp marketing guide for Shopify.

Is WhatsApp marketing allowed in Germany?

Yes, with an explicit, documented and revocable opt-in for marketing messages. Without one, no. This is a summary rather than legal advice — have your own counsel review your consent wording.

Can I message the phone numbers I already have from Shopify orders?

No. A number given for delivery is not consent to receive marketing. Ask those customers first — that is exactly what re-permissioning is for.

Do I need a double opt-in for WhatsApp?

The safe position is that you should be able to prove consent with a record the customer created themselves. A confirmation exchange on WhatsApp produces exactly that, which is why a welcome message goes live during onboarding. Whether a formal double opt-in is required in your specific setup is a question for your lawyer, not a blog post.

How quickly does a WhatsApp list actually build?

Most Shopify shops start able to reach 35–55% of their last-12-months customers and pass 85% within about 60 days. Most of that comes from the checkout field plus one re-permission run — not from a clever pop-up.