In this article
On September 10, 2026, Shopify announced that merchants can collect WhatsApp marketing consent at checkout. Check how that choice is recorded separately from email consent and order-contact details. That signal must be distinguished from contact details needed for an order and consent given for other channels. Official source.
A practical check
Check the text shown to shoppers, evidence of their choice, the customer-record status, and the unsubscribe path. Test one checkout with opt-in and one without.
At checkout, a buyer accepts WhatsApp but declines email. The customer record should preserve two separate states. An email campaign must not borrow WhatsApp consent, or vice versa.
What the evidence supports
A phone number supplied for delivery is not by itself marketing permission. Review applicable rules before sending a campaign. Date the check and retain the source documentation so that later changes can be verified.
A consent checkbox is not a campaign
Shopify now lets merchants collect WhatsApp marketing opt-ins at checkout. That collection alone does not define which messages may be sent, how often, or how consent will be proved. The merchant should describe an understandable use before enabling it, such as store news and offers, distinct from messages needed to fulfill an order.
Check the whole journey
Place a test order, read the exact checkbox wording, and make sure it is not confused with a transactional notice. Check that the date, channel, and customer's choice are recorded. Test refusal as well. In the sending tool, verify that a customer who did not agree is excluded and that an opt out takes effect before the next campaign.
A simple list rule
Do not automatically reuse a phone number supplied for delivery as a marketing contact. Keep evidence of the choice and a retention policy consistent with the stated use. If several tools sync the list, identify which one governs withdrawals. A smaller traceable list is more useful than a large database whose consent history cannot be explained.
Consent questions
Can the box be preselected? Check the actual setup and applicable rule before launch; consent should reflect a real, recorded choice.
Is a delivery message marketing? A notice needed to fulfill an order and a commercial promotion serve different purposes. Keep their journeys and lists separate.
What happens after withdrawal? Test opt out in Shopify and the sending tool. If systems sync with delay, ensure no campaign reaches that person in the meantime.
