WhatsApp Opt-in at Shopify Checkout: Consent Setup + Copy That Converts (2026)
Setting up a WhatsApp opt-in at Shopify checkout the right way is the difference between a channel that converts and a compliance headache. In 2026, Meta policy and GDPR-style rules demand consent that is explicit, informed, freely given, and auditable — and a delivery phone number is not consent. This guide walks through the exact Shopify settings, the checkbox copy that converts, and the consent records you should keep. The Tech Pad stores your opt-in and consent fields, routes STOP handling, and suppresses sends to anyone who hasn't opted in — free to start, with no monthly SaaS fee for the plugins.
Why a compliant WhatsApp opt-in matters in 2026
The reward for doing this properly is big: WhatsApp messages get a 98% open rate against roughly 20% for email, which makes an opted-in WhatsApp list one of the most valuable assets a Shopify store can own. The risk for doing it sloppily is bigger: send promotional messages to a phone number you only collected for delivery, and you've violated Meta's policy, broken GDPR-style consent rules, and put your number's messaging quality at risk.
The standard has four parts, and every one of them is enforceable:
- Explicit — the customer takes a clear action; no pre-ticked boxes, no consent buried inside your terms of service.
- Informed — the wording names the channel (WhatsApp), the sender (your store), the message type, and the frequency.
- Freely given — opting out is never punished, and opting in is never bundled with something the customer can't avoid.
- Auditable — you can prove consent later: timestamp, source, wording, and channel.
Here's the customer-behaviour angle: shoppers happily opt in when the promise is specific ("order and delivery updates") and resent it when the promise is vague ("marketing updates"). A checkbox that says exactly what arrives next converts better and keeps you compliant. That's the whole trick of this post — the copy and the compliance are the same thing.
What you need before you start
- A clear decision on the first messages. Order updates only, or marketing too? The consent wording must match the first real use case — never ask for more than you'll actually send.
- Shopify admin access. You'll be in Settings → Checkout → Marketing options.
- Consent wording that names the channel, the sender, and the message type (examples below).
- A place to store consent metadata. The Tech Pad's [contacts](/features/contacts/) keep the audit trail: timestamp, source, wording, opt-out status.
- An approved template for the first message. The order confirmation, category UTILITY, so it approves quickly and costs the lowest rate.
- A plan for STOP handling. Every opt-in needs a working opt-out path.
How to set up WhatsApp opt-in at checkout (step by step)
Step 1 — Decide what the first messages will be. This is a decision, not a formality. If you're only going to send order confirmations and shipping updates, your checkbox should say exactly that. If you also run campaigns, the wording must include offers — and marketing sends have their own pacing rules under Meta policy. The wording and the first real use case must match.
Step 2 — Enable and relabel the opt-in checkbox. In Shopify admin: Settings → Checkout → Marketing options → enable the marketing-consent checkbox, then relabel it for WhatsApp. Shopify supports marketing-consent checkboxes natively, so this is a relabel, not a hack:
"Send me order and delivery updates from {store} on WhatsApp."
Never pre-tick it. A checked-by-default box is not freely given consent, and it's the fastest way to fail an audit.
Step 3 — Collect transactional consent where it belongs. If you're on Shopify Plus, you can collect transactional consent right at checkout with a checkout extension or app block. On non-Plus plans, the standard pattern is a consent block on the thank-you page and order-status page (the Klaviyo-style app block) — order confirmations and delivery updates live there, separate from marketing. In 2026 Shopify also added native WhatsApp marketing-consent management in customer profiles — turn it on so consent follows the customer record instead of living only in checkout logs.
Step 4 — Store the consent metadata. Every opt-in should record: phone number with country code, Shopify customer ID, order/checkout ID, opt-in source (checkout, popup, form), the exact consent wording shown, timestamp, and opt-out status. This is what proves consent if it's ever questioned.
Step 5 — Send the first message within 24 hours. The first message should prove the opt-in was useful: the order confirmation. It's transactional (UTILITY category), it arrives while the purchase is still top-of-mind, and it shows the customer exactly what they signed up for. It should not be a discount blast — that's how you burn a freshly-given opt-in on day one.
Step 6 — Handle STOP immediately. When a customer replies STOP, suppress all future sends. Not "queue it for review" — suppress it. Opt-out status should be stored with the contact record and checked before every campaign and flow rule.
Consent patterns, compared
| Consent pattern | Best for | Example promise |
|---|---|---|
| Order updates only | Every store on day one | "Order confirmations and delivery updates — nothing else" |
| Updates + post-purchase | Stores with care or check-in messages | "Order updates plus one post-purchase check-in" |
| Updates + marketing | Stores running campaigns | "Order updates and occasional offers — reply STOP anytime" |
Message templates that work
Consent copy and first messages that convert — all use the {{1}} brand placeholder (and real order data where noted):
"Send me order and delivery updates from {{1}} on WhatsApp. I can reply STOP anytime."
"Thanks for opting in, {{1}}! Your order {{2}} is confirmed ✅ We'll only message you about orders and the occasional offer — reply STOP to opt out anytime."
"{{1}} here 👋 Your order {{2}} shipped with tracking [link]. Enjoy!"
Notice what all three have in common: the channel, the sender, and the message type are named out loud. That's what makes consent valid — a generic "marketing updates" checkbox does not qualify.
Best practices — and when NOT to collect an opt-in
- Double opt-in is best practice. Add a "Reply YES to confirm" step for marketing consent. It costs a few conversions and saves you from every disputed-consent argument.
- Abandoned-checkout reminders need their own consent logic. A customer who abandoned a cart hasn't opted into WhatsApp reminders — that's a separate, specific opt-in (and a separate promise).
- Never silently relabel the SMS checkbox. If you change an existing SMS marketing checkbox to WhatsApp, the channel must be named clearly. "Updates" without a channel is not informed consent.
- Match wording to reality, keep the audit trail, and respect quiet hours. If you promised "occasional", don't send daily.
When NOT to collect an opt-in: if you have nothing to send, don't collect it — a checkbox you never use is just audit risk. If you only have a phone number from shipping, that's not consent for anything beyond fulfilment. And never bundle the opt-in with terms acceptance; consent must be freely given, not a condition of purchase.
FAQ
Q: Can Shopify stores collect WhatsApp opt-ins at checkout?
A: Yes. Shopify supports marketing-consent checkboxes at checkout (and native WhatsApp consent management in customer profiles). The checkbox must be explicit, name WhatsApp specifically, say what messages the customer will receive, and never be pre-ticked.
Q: What should the WhatsApp opt-in checkbox say?
A: Keep it short and specific: 'Send me order updates and offers from [Store] on WhatsApp. Reply STOP anytime.' Naming the channel (WhatsApp), the sender, and the message type is what makes consent valid — a generic 'marketing updates' checkbox does not qualify.
Q: Does a delivery phone number count as WhatsApp consent?
A: No. A phone number given for shipping is used for fulfilment, not marketing. Sending promotional WhatsApp messages to it without an explicit opt-in violates Meta's policy and GDPR-style consent rules.
Q: What should I store when someone opts in?
A: At minimum: phone number with country code, Shopify customer ID, order/checkout ID, opt-in source (checkout, popup, form), the exact consent wording shown, timestamp, and opt-out status. This audit trail is what proves consent if it's ever questioned.
Send order updates on WhatsApp today
The Tech Pad stores your opt-in and consent fields, routes STOP handling, and suppresses non-consented sends automatically — so the compliance side is handled while you focus on the copy and the offers. It's free to start, runs on the official WhatsApp Cloud API, and there's no monthly SaaS fee for the plugins: you pay only Meta's per-message rate, roughly ₹0.10–0.30 per UTILITY message in India, with no per-message markup from us. See how [contacts and consent](/features/contacts/) work, brush up on [WhatsApp message templates](/blog/whatsapp-business-message-templates-guide/), or start on the [WhatsApp Business API](/wa/) — your first opted-in customer could get their order confirmation on WhatsApp today.