[ A2P ] Step 4: Create or Update Privacy Policy
Important: For a complete overview of all steps and best practices involved in the A2P 10DLC registration process, please refer to the main article: "A2P 10DLC Campaign Approval Best Practices."
Privacy Policy
Click here to view sample Privacy Policy. This is just a sample page that includes the required language for an A2P registration. Please note that this is not comprehensive and you should therefore always consult with your own legal counsel before publishing to ensure they meet the needs of your business and jurisdiction.
You can create a privacy policy by using a free online generator or by contacting an attorney who can create a privacy policy for your business.
An A2P compliant "Privacy Policy" needs to:
- Show your company name for branding in header.
- Include the following statements:
- No mobile information will be shared with third parties or affiliates for marketing/promotional purposes.
- Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the Text Message services.
- If your policy mentions sharing personal information, add this disclaimer: All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.
- Must not include terms like "share," "sell," "affiliate," or "third-party" when they imply selling or sharing the leads' information with a third party, unless explicitly allowed.
- Must not mention sharing of personal information with any third parties/affiliates/nonaffiliates. If it does mention this, you may need to add a disclaimer, such as:
How do we share your information section of the privacy policy:
"All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services."
Very Important:
An A2P complaint privacy policy must state:
"No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties."
Note: Ensure that all contact information in the Privacy Policy match what was submitted in your Brand Registration.
All examples, templates, and suggested language should be thoroughly reviewed and modified to accurately reflect your specific business operations before implementation.
Registration requirements, fees, and compliance standards may change over time, and it is your responsibility to ensure ongoing compliance.
The creators of this guide are not lawyers and do not claim to provide legal advice. The ultimate responsibility for compliance, regarding SMS and A2P 10DLC registration, rests with your business. We strongly recommend consulting with a qualified legal professional to ensure your messaging practices adhere to all applicable laws and regulations.