SMS privacy policy best practices

This information is intended solely for educational and informational purposes and should not be construed as legal advice. The content provided is general in nature and may not reflect the most up-to-date information. Umbrella strongly advises consulting with a qualified legal counsel to ensure your compliance with applicable laws and regulations in connection with your use of our services.

Before beginning with SMS marketing, you must update your privacy policy to include key information on SMS sending. As a best practice, your privacy policy should include an accurate description of your program and how you will handle data in connection with that program. We also recommend including information regarding what you do with the phone numbers you collect, how you use them, who you share them with, etc.

Example language
“The website uses cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminder messages via SMS.”

Third-party data sharing
Express consent is required for SMS; therefore, sharing data is prohibited. Privacy policies must specify that this data sharing excludes SMS opt-in data and consent. Privacy policies can be updated (or draft versions provided) where the practice of sharing personal data to third parties is expressly omitted from the short code program.

Example language
“The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.”

Comments are closed