1. Mobile messaging
This section explains how Acme Trading LLC ("we", "us") collects and uses personal data when we communicate with you by SMS and WhatsApp. It forms part of our Privacy Policy.
2. What we collect
- your mobile number and, if you give it, your name
- a record of your consent or opt-out: date and time, where and how it was given, the wording shown and, for online forms, technical data such as IP address
- the messages we send you and your replies, including keywords such as STOP or HELP
- delivery data such as timestamps, delivery status and the mobile network
- your WhatsApp profile name and WhatsApp ID, and read receipts where WhatsApp provides them
3. How we use it
Where the law requires a legal basis, we rely on your consent for marketing messages, on our contract with you for service messages, on our legal obligations, and on our legitimate interest in running a secure service.
- to send the service messages you need about your orders, bookings or account (to perform our contract with you, or as permitted by law)
- to send verification codes that protect your account and prevent fraud
- to send marketing messages, only if you have opted in, and until you opt out
- to keep a record of consents and opt-outs, so that we can respect your choices and show that we follow the law
- to check delivery, fix problems and protect our messaging service from fraud and abuse
4. Marketing consent and opting out
We send marketing messages by SMS and WhatsApp only to people who have opted in. Opting in is never a condition of buying from us. You can opt out at any time, free of charge:
We act on opt-outs promptly and within any time limit the law sets. We may send one message to confirm the opt-out. We keep your number on a suppression list so that we do not message you again unless you opt in again.
- reply STOP to any SMS or RCS message
- reply STOP or tap the opt-out button in a WhatsApp message
- contact us at privacy@acme.example
5. Who we share it with
We share messaging data only with service providers that help us send messages, under contracts that limit their use of the data to that purpose, and with:
We do not sell your mobile number. We do not share mobile numbers or opt-in consent data with third parties or affiliates for their own marketing purposes.
- our messaging provider, which sends and routes our messages
- mobile network operators and messaging aggregators, which deliver messages to your phone
- WhatsApp and Meta, which process WhatsApp messages under their own terms as part of the WhatsApp Business Platform
- public authorities, where the law requires us to
6. International transfers
Some of our providers process data outside [country]. When that happens, we transfer data only as the applicable law allows and use the safeguards it requires, for example a decision that the destination offers adequate protection, standard contractual clauses or another approved mechanism.
For personal data covered by the GDPR, transfers outside the European Economic Area follow Chapter V of the GDPR, for example an adequacy decision or the European Commission's standard contractual clauses.
7. How long we keep it
- message content and delivery records: up to 12 months, unless the law requires longer
- consent records: while your consent is active and for 3 years after it ends, to show that we had consent
- opt-out (suppression) records: for as long as needed to make sure we do not message you again
8. Security
We protect messaging data with access controls, encryption in transit and contracts with our providers. WhatsApp messages are encrypted in transit, but the WhatsApp Business Platform and the providers we use to send them process message content to deliver them. SMS is not end-to-end encrypted, so we do not ask for sensitive information such as passwords by SMS.
9. Your rights
Depending on where you live, you may have the right:
To use these rights, contact privacy@acme.example. We may need to confirm your identity first.
- to be told how we use your personal data
- to access the personal data we hold about you and get a copy
- to have inaccurate or incomplete data corrected
- to ask us to delete your data, subject to legal exceptions
- to ask us to restrict processing
- to object to processing, including at any time to direct marketing
- to receive your data in a portable format
- to withdraw your consent at any time, without affecting earlier processing
- to complain to the data protection authority
10. Information for specific countries
European Economic Area: we process personal data under the General Data Protection Regulation (GDPR) and national rules on electronic marketing. You may object to direct marketing at any time, and complain to the data protection authority where you live or work.
11. Children
Our messaging programs are not intended for anyone under 18.
12. Contact
Acme Trading LLC · privacy@acme.example
