WhatsApp and Pet Owners: Consent Rules for Vet Clinics

Most pet owners use WhatsApp, and clinics want to send appointment, vaccination and discharge information there. But every message a clinic sends involves personal data, and if it carries a promotion it may count as a commercial electronic message. This article covers consent, content and record keeping for WhatsApp communication under Turkish rules, whether or not your clinic software handles notifications and contact permissions. It is not legal advice; consult your adviser about your clinic's situation.

First, a distinction: notice or marketing?

Split the messages your clinic sends into two groups:

• Service notice: appointment confirmation, vaccine dose date, aftercare instructions, a note that results are ready.
• Commercial message: promotions, discounts, new product or service announcements, food and accessory offers.

The two have different legal bases and consent requirements. Commercial electronic messages require the recipient's approval and records in the Message Management System (İYS). For service notices, the conditions for processing personal data and the duty to inform the owner come to the front. Settle with your adviser once which of your messages fall into which group, and separate your templates accordingly.

Message	Usually	Watch for
Reminder for tomorrow's appointment	Service notice	State date and time clearly
Vaccine dose date information	Service notice	Pet name and vaccine name are enough
"10% off pet food this month"	Commercial message	Needs approval and an İYS record
Birthday greeting plus a promotion	Commercial message	If content is mixed, treat it as commercial

The table is general orientation; for borderline cases, get your adviser's view.

Two ways to use WhatsApp

• Personal or WhatsApp Business app: typed by hand from a phone. Enough for a small clinic, but record keeping and access control are weak; if the phone is lost or an employee leaves, the conversation history goes with them.
• WhatsApp Business Platform (API): sent through a provider with approved message templates. Bulk and automated sending happens here; the provider contract, template approval and pricing are evaluated separately.

Whichever you choose, the recipient is the pet owner and responsibility for consent stays with the clinic.

How to keep consent records

• Record which channel the owner gave permission for. WhatsApp, SMS and e-mail can be tracked separately.
• Record the date and the source (registration form, verbal, written). A note saying "has consent" is useless without when and how it was obtained.
• Owners must be able to withdraw consent; when they do, stop messaging and write that into the same record.
• Write only the necessary information to the owner. Do not embed sensitive details such as payments or health specifics in a message; call or discuss them in the clinic.
• Decide who maintains the records, so the consent log does not turn into a spreadsheet anyone can edit.

How to ask for consent on the registration form

Consent can be collected in one sentence when a new owner is registered, but the sentence must be clear. "I may receive promotions" and "I may receive appointment and vaccine information" do not belong in the same box. A simple routine works:

1. Show the privacy notice at registration so the owner can read which data is processed and why. For the broader framework see the KVKK guide.
2. Ask about the service-notice channel: "How would you like to receive appointment and vaccine reminders?"
3. Ask for commercial message approval as a separate, unticked option.
4. Write the answer on the owner's record with the date.

Practical rules for message content

• Put the clinic name and the purpose of the message in the first line.
• Write the date and time explicitly; give the day and hour instead of "tomorrow".
• If you do not expect a reply, say so, so the owner does not feel they must answer.
• Do not mix promotions and service notices in the same template.
• Use the pet's name, but do not write diagnosis or treatment details.
• Keep sending hours reasonable; avoid reminders late at night.

Example service notice: "Hello, Pamuk has a vaccination appointment tomorrow at 2:30 pm. If you cannot come, please let the clinic know." Send a commercial message only to owners who gave approval, with the İYS record in place.

Common mistakes

• Mass messaging from a personal number and adding owners to groups: numbers can become visible to each other.
• Adding a promotion to the end of every appointment message: a service notice can take on a commercial character.
• Treating consent as "given once, valid forever": there must be a way to process a withdrawal request.
• Sharing photos and lab results over chat: this is health data; do not send it without verifying the channel and recipient.
• Losing conversation history when a staff member leaves.

Where VetBis stands

In VetBis the owner record holds contact permissions and KVKK consent, and reminder rules can be defined. Sending through WhatsApp, SMS, e-mail and İYS needs a connection to an external provider and is in preparation; in other words, VetBis does not send WhatsApp messages today. The status is labelled on the notifications page. Keeping consent records tidy now means you are ready when a channel is connected; until then you can run reminders with the clinic's own method, for example by phone or from the reception line.

Frequently asked questions

Is separate approval needed for appointment reminders? Service notices and commercial messages are assessed differently. Ask your adviser about your clinic's practice, and still ask for the contact preference clearly on the registration form.

What if an owner says "do not message me"? Stop messaging, write the request with its date on the owner record, and make sure everyone on the team can see it.

Is writing from my own phone a problem? It is not forbidden in itself, but it is weak on records, access control and data security. A clinic-owned line and a written rule are safer.

Is it appropriate to send patient results on WhatsApp? Health data is sensitive. Verify the recipient before sending, remove unnecessary detail and put your clinic's data security rule in writing.

Checklist

• Service and commercial messages separated
• Channel permission recorded per owner
• Consent date and source written down
• Withdrawal path is clear
• Message templates written
• Sensitive information stays out of messages
• It is clear who maintains the records

Conclusion

WhatsApp is a channel; the real work is consent, records and the right content. For reminder routines see the vaccination schedule article, for the appointment side the appointment article, and for the legal framework the KVKK guide.