Kushtet e Komunikimit në WhatsApp

Barber, Coiffeur and Bellezza include WhatsApp integration. SMS and WhatsApp-free packages are not offered. The salon is controller for appointment/customer data; CBBDigital processes them on documented instructions. CBBDigital separately controls merchant accounts, billing, support and security. Meta/WhatsApp roles follow their applicable service and data-processing terms. Due to demand, new installations start 14 days after order acceptance; actual channel activation also requires completed technical and legal prerequisites. The documented 13 stop commands below match the webhook.

Before business-initiated messages, recipients provide their number and valid opt-in naming the salon. A requested authentication OTP verifies current channel access only, not identity, exclusive ownership or general consent. Notification choice is separate from appointment service terms and can be withdrawn without cancelling the appointment. Public booking does not collect marketing consent. Only the relevant approved authentication/utility templates and valid messaging windows are used. STOP, İPTAL, IPTAL, DURDUR, RET, UNSUBSCRIBE, ABMELDEN, STOPZETTEN, AFMELDEN, ARRET, ARRÊT, DESABONNER, DÉSABONNER are the documented exact, case/space-normalised stop words; suppression disables notifications without an automatic confirmation-message promise.

Outgoing template variables, queued text, message identifiers and delivery states may be processed. Incoming text is checked transiently in memory for stop words, not stored in webhook logs; sender, identifier, event and timestamp can be retained. Do not send health data, identity documents or card details. The platform does not claim a fully staffed inbox or absolute end-to-end encryption for every Cloud API processing step. Sender registration, Meta approval, access permissions, quotas and recipient preferences remain necessary; subscription purchase does not bypass them. wa_id identifies the channel sender, not legal identity or general consent.

The displayed subscription price includes integration access.. Meta messaging/usage charges are not included and remain the business’s responsibility under the agreed provider/billing arrangement. No universally free messaging or guaranteed Meta approval is promised. See https://www.whatsapp.com/legal/business-policy and https://www.whatsapp.com/legal/business-data-processing-terms .

Applicable EU GDPR, UK GDPR, UK Data Protection Act 2018, UK Addendum and Swiss FADP are addressed by actual roles and processing. The UK supervisory authority is the Information Commissioner’s Office (ICO). The privacy, provider and deletion notices explain hosting in Helsinki, global processing, valid transfer instruments, retention and rights. Contact info@cbbdigital.us or the relevant salon. Regulator/representative obligations are assessed separately, not waived by this policy.

Hosting is through Hetzner Online GmbH on the selected Helsinki, Finland server; Cloudflare, Inc. provides CDN/network security; Google LLC Workspace provides business email. Applicable provider data-processing terms have been accepted through the relevant account processes and retained in a restricted archive. Public provider/DPA links, purposes and roles appear in the provider directory. Stripe has processor and independent-controller roles depending on payment, fraud prevention and statutory functions. Meta/WhatsApp and optional Calendar connections follow their own applicable terms.

Access controls, protected secrets, TLS and audit trails support proportionate security. Contract IP/User-Agent metadata has a separate 90-day expiry/cleanup process. Completed operational message, webhook, provider-call and Calendar logs follow the configured operational retention policy (default 90 days); this does not automatically delete appointment, staff, consent, billing or contract evidence. Records are retained for their actual purposes and applicable statutory periods, then reviewed for deletion or return. Restricted backups are treated separately; no immediate per-record backup erasure or fixed expiry schedule is promised. Operational log retention is configurable within 7–3650 days; the default is 90 days.