WhatsApp marketing rules in United Kingdom, in plain language.
PECR governs electronic marketing specifically, and the ICO publishes its enforcement actions. Fines for unsolicited marketing messages are routine and public.
Is WhatsApp marketing legal in United Kingdom?
Yes, provided you have consent that meets the standard set by UK GDPR and you identify your business clearly in every message. ICO is the regulator. The opt-out deadline is immediate, and the published maximum penalty is up to £17.5 million or 4% of global turnover.
Key takeaways
- Consent standard: Explicit GDPR-standard consent.
- Regulator: ICO.
- Opt-out within immediate — ConvoHut does it immediately.
- Maximum penalty: Up to £17.5 million or 4% of global turnover.
At a glance
| Governing law | UK GDPR, PECR 2003 |
| Regulator | ICO |
| Risk level | HIGH RISK |
| Consent standard | Explicit GDPR-standard consent. The soft opt-in applies only to existing customers, for similar products, where an opt-out was offered at the point of collection. |
| Opt-out deadline | Immediate (ConvoHut suppresses immediately) |
| Maximum penalty | Up to £17.5 million or 4% of global turnover |
| Business detail we collect | ICO Registration Number |
| Local currency | GBP (£) |
| Quiet hours timezone | Europe/London |
| ConvoHut status | Planned Phase 4 — Q4 2026 |
What United Kingdom actually requires
The five things that decide whether a campaign is compliant. None of them are about the wording of your message.
Explicit, unbundled consent
Freely given, specific, informed and unambiguous. Silence and inactivity do not count.
Soft opt-in is narrower than people think
Existing customers only, similar products only, and an opt-out must have been offered when the details were collected.
ICO registration
Most organisations processing personal data must register and pay the data protection fee.
Immediate opt-out
And it must be free to use.
Right of access and erasure
Customers can ask what you hold and demand deletion.
What messages cost here
Meta charges per template message delivered, priced by category and by the recipient's country. These are the rates configured in the ConvoHut platform for United Kingdom.
Marketing
$0.0929
per message
Utility
$0.0350
per message
Service replies
Free
inside the 24-hour window
Rates shown in USD. Meta revises its rate card quarterly and prices by the recipient's country, so treat these as indicative and check Meta's current card before budgeting. Model your own volume.
How ConvoHut will handle United Kingdom
Phase 4 — Q4 2026. When this market is live, activating it in your account will switch on the UK GDPR rule set: the consent standard above is enforced at import, the opt-out deadline is honoured immediately, quiet hours run in Europe/London, and every campaign is checked against these rules before the send button becomes available.
We collect your ICO Registration Number during onboarding because the sender identification requirement in this market depends on it.
Questions this raises
Is WhatsApp marketing legal in United Kingdom?
Yes, with consent meeting the UK GDPR standard and clear sender identification. ICO enforces it.
What is the penalty for getting it wrong in United Kingdom?
The published maximum is up to £17.5 million or 4% of global turnover. Typical outcomes are lower, but penalties generally scale with the number of messages, which means list size is a risk multiplier.
How quickly must I honour an opt-out in United Kingdom?
The legal deadline is immediate. ConvoHut suppresses the contact immediately instead, because the grace period exists for postal-era systems and there is no good reason to use it.
Can I message customers who bought from me but never opted in?
Explicit GDPR-standard consent. The soft opt-in applies only to existing customers, for similar products, where an opt-out was offered at the point of collection.
What business details do I need to provide for United Kingdom?
Your ICO Registration Number. This supports the sender identification requirement, and ConvoHut asks for it during onboarding when you activate this market.
Is this legal advice?
No. We are a software company. This page is written to help you brief your own adviser properly. Compliance in your market remains your responsibility as the sender.
Compliance by market
Each market has its own law, its own regulator, its own consent standard and its own penalty. Read the one you sell into.
Selling into United Kingdom?
Join the waitlist and tell us which markets you operate in. We are prioritising by where early customers actually sell, not by market size.