Last Updated on May 21, 2026
Executive Summary
WhatsApp is the most-used messaging app in the UK, and an increasing number of small businesses are using it to talk to customers. But most are doing it wrong, either by using their personal WhatsApp account for business, sending marketing messages without proper consent, or not understanding the GDPR implications.
This page covers everything a UK small business needs to know about WhatsApp for Business in 2026: the different versions available, what they cost, how to stay compliant with UK GDPR and PECR, and whether it is actually worth the effort for your type of business.
Free
Business App
WhatsApp Business App costs nothing to download and use
£0.038
Per Marketing Msg
API cost per marketing template message in the UK
£17.5m
Max PECR Fine
Or 4% of global turnover for messaging compliance breaches
Key Takeaways
- There are three versions of WhatsApp for Business: the free Business App (for sole traders and micro businesses), the Business API (for businesses that need automation and scale), and the Cloud API (Meta-hosted version of the API). Most UK small businesses should start with the free app.
- The WhatsApp Business App is free. The API charges per message: roughly £0.038 per marketing message, £0.011 per utility message, and free for customer-initiated service replies within 24 hours.
- GDPR compliance is not optional. Using WhatsApp to message customers requires explicit opt-in consent, a clear privacy notice, and an easy way to unsubscribe. A customer giving you their phone number for a booking is not consent to send them marketing messages.
- The maximum PECR fine rose to £17.5 million or 4% of global turnover. This is not just a big-business problem. The ICO has investigated small businesses for messaging compliance.
- WhatsApp Business works best for businesses where customers already message you: trades, salons, restaurants, clinics, and professional services. If your customers do not naturally want to message you, forcing WhatsApp into your workflow will not help.
- The free WhatsApp Business App does not meet GDPR requirements for processing customer personal data at scale because it automatically uploads your contact list. For anything beyond basic 1-to-1 customer chat, you need the API with a proper Business Solution Provider.
Contents
The Three Versions Explained
This is where most businesses get confused. WhatsApp offers three products for business use, and they are very different in capability, cost, and compliance.
| Feature | WhatsApp Business App | WhatsApp Business API | WhatsApp Cloud API |
|---|---|---|---|
| Cost | Free | Per-message pricing | Per-message pricing |
| Users | 1 phone + up to 4 linked devices | Unlimited (via BSP platform) | Unlimited (via your setup) |
| Automation | Basic quick replies, away messages | Full chatbots, workflows, CRM integration | Full automation |
| Broadcast lists | Up to 256 contacts | Unlimited template messages | Unlimited template messages |
| GDPR suitability | Limited (auto contact upload) | Yes (with DPA from BSP) | Yes (with Meta DPA) |
| Best for | Sole traders, micro businesses | SMBs, multi-staff businesses | Businesses with technical capability |
The important distinction: The free WhatsApp Business App automatically uploads your phone’s contact list to WhatsApp servers. Under UK GDPR, this means you are sharing personal data (phone numbers and names) with Meta without the consent of those contacts. For casual 1-to-1 customer chat this is generally acceptable, but for systematic marketing or customer management, you need the API version with a proper Data Processing Agreement.
What It Actually Costs
As of July 2025, Meta switched from conversation-based pricing to per-message pricing for the API. Here is what UK businesses actually pay.
| Message Type | UK Cost Per Message | What It Covers |
|---|---|---|
| Marketing | £0.038 | Promotions, offers, product announcements, re-engagement |
| Utility | £0.011 | Order confirmations, delivery updates, appointment reminders |
| Authentication | £0.011 | One-time passwords, verification codes |
| Service (customer-initiated) | Free | Replies to customer messages within 24 hours |
Prices shown are Meta’s base rates. Business Solution Providers (BSPs) typically add £0.003-£0.010 per message on top. All prices exclude VAT.
What Does This Look Like in Practice?
| Scenario | Monthly Volume | Estimated Monthly Cost |
|---|---|---|
| Salon sending appointment reminders | 200 utility messages | £2.20 (messages) + BSP fee |
| Restaurant sending weekly specials | 500 marketing messages | £19 (messages) + BSP fee |
| Tradesperson confirming bookings | 100 utility messages | £1.10 (messages) + BSP fee |
| Retailer running monthly promotion | 1,000 marketing messages | £38 (messages) + BSP fee |
| Customer service replies | Any volume (within 24hr) | Free |
Business Solution Providers (the platforms you use to access the API, such as Twilio, 360dialog, or Respond.io) charge their own fees on top, typically a monthly subscription of £20-£100 plus their per-message markup.
Free window tip: When a customer contacts you from a click-to-WhatsApp ad or Facebook Page CTA button, all messages (including templates) are free for the following 72 hours. If you run Meta ads, this can significantly reduce your messaging costs.
GDPR and PECR Compliance (The Bit You Cannot Skip)
This is the section most WhatsApp Business guides gloss over, and it is the section that matters most for UK businesses. Get this wrong and you face fines of up to £17.5 million or 4% of global turnover.
The Rules You Must Follow
- You need explicit opt-in consent for marketing messages. A customer giving you their phone number to book an appointment is not consent to send them promotional messages. You need a separate, clear opt-in specifically for WhatsApp marketing. A checkbox on your booking form is the minimum.
- Every marketing message must include an unsubscribe option. Under PECR, recipients must be able to opt out easily. WhatsApp’s built-in “Stop promotions” button covers this if you use the API, but you need to honour opt-outs immediately.
- You must have a lawful basis for processing. For marketing messages, this is almost always consent. For transactional messages (order confirmations, appointment reminders), you can use “legitimate interest” or “contract performance” as your legal basis, but you still need to tell people you will message them via WhatsApp.
- You need a privacy notice that mentions WhatsApp. Your privacy policy must explain that you use WhatsApp for business communication, what data you collect, how long you keep it, and how people can request deletion.
- Data is transferred outside the UK. WhatsApp (Meta) processes data in the US. You need appropriate safeguards in place, which is covered if you use the API with a BSP that has a proper Data Processing Agreement with Meta.
- You must respond to data subject access requests. If a customer asks what data you hold about them, you must be able to retrieve and provide their WhatsApp conversation history within one month.
The common mistake: A customer books a haircut via WhatsApp. The salon then adds them to a broadcast list for weekly promotions. This is a PECR breach. The customer consented to booking communication, not marketing. This is exactly the kind of thing the ICO investigates.
Setting Up WhatsApp Business
Here is a practical step-by-step for getting started with the free WhatsApp Business App, which is where most UK small businesses should begin.
- Step 1: Get a separate business phone number. Do not use your personal number. A separate SIM or a VoIP number keeps your business and personal messages apart and makes things cleaner if you ever need to hand the account to staff.
- Step 2: Download WhatsApp Business (not regular WhatsApp). It is a separate app, available free on iOS and Android. You cannot run both regular WhatsApp and WhatsApp Business on the same number.
- Step 3: Complete your business profile. Add your business name, address, category, opening hours, website, and a short description. This appears when customers view your profile and builds trust.
- Step 4: Set up quick replies. Pre-written responses for common questions (pricing, opening hours, directions) save time and ensure consistent answers. You can store up to 50 quick replies.
- Step 5: Create a product or service catalogue. WhatsApp Business lets you list up to 500 products or services with images, descriptions, and prices. Customers can browse without leaving the app.
- Step 6: Set up away messages and greeting messages. Automated responses for when you are closed or when someone messages you for the first time. Set your business hours so away messages trigger at the right times.
- Step 7: Add a WhatsApp button to your website. A click-to-chat link on your website makes it easy for customers to reach you. The format is https://wa.me/44XXXXXXXXXX (your number without the leading zero).
Best Use Cases for UK Small Businesses
| Business Type | Best Use | Why It Works |
|---|---|---|
| Trades (plumber, electrician, builder) | Booking confirmations, quote follow-ups, sending photos of work | Customers already text tradespeople. WhatsApp is natural. |
| Salons and barbers | Appointment reminders, last-minute availability alerts | Reduces no-shows. Quick replies handle rebooking. |
| Restaurants and cafes | Reservation confirmations, daily specials, event notifications | High open rates. Customers see messages immediately. |
| Professional services | Document sharing, meeting confirmations, project updates | More personal than email. Better for ongoing client relationships. |
| Retail (small/independent) | New stock alerts, order tracking, VIP customer groups | Direct line to your best customers. Higher engagement than email. |
| Health and wellness | Appointment reminders, follow-up care instructions | Patients prefer messaging to phone calls. Reduces admin time. |
Common Mistakes That Get You in Trouble
- Adding customers to groups without consent. WhatsApp groups reveal everyone’s phone number to other members. This is a data protection breach. Use broadcast lists instead (numbers stay private), and only with consent.
- Using personal WhatsApp for business. No business profile, no automated replies, no catalogue, and your personal contacts get mixed with business ones. It also makes it impossible to hand the account over if you hire staff.
- Sending bulk messages from the Business App. The free app limits broadcast lists to 256 contacts, and messages only reach people who have your number saved. For anything beyond this, you need the API.
- No record of consent. If the ICO investigates, you need to prove that every person on your marketing list opted in. Keep records of when and how each person gave consent. A spreadsheet is fine.
- Ignoring the 24-hour service window. On the API, you can only send free-form messages within 24 hours of the customer’s last message. After that, you must use pre-approved templates (which cost money). Plan your response workflow around this.
- Not having a data retention policy. How long do you keep WhatsApp conversations? Under GDPR, you should not keep personal data longer than necessary. Set a policy (e.g., delete conversations after 12 months of inactivity) and stick to it.
When WhatsApp Business Is Not the Right Tool
- Your customers are other businesses (B2B). Most B2B communication happens via email and phone. WhatsApp can feel too informal for corporate clients unless they initiate it.
- You need a full CRM. WhatsApp Business App is not a CRM. It does not track sales pipelines, segment customers, or generate reports. If you need these features, you need the API integrated with a proper CRM platform.
- Your team is larger than 4 people. The free app supports 1 phone plus 4 linked devices. If more staff need access, you need the API version with a multi-agent platform.
- You want to send mass marketing campaigns. WhatsApp is not a replacement for email marketing. It is a relationship tool. Open rates are higher (98% vs 20% for email), but the expectation is personal, relevant communication, not mass blasts.
Methodology
This page is based on published guidance and data from multiple sources, including:
- Meta’s official WhatsApp Business documentation and pricing (2026)
- ICO guidance on direct marketing and PECR compliance
- UK GDPR requirements as enforced by the ICO
- WhatsApp Business Solution Provider pricing data (Twilio, 360dialog, SleekFlow)
- Published compliance guides from UK data protection specialists
All figures are in GBP and reflect UK pricing as of Q1 2026. API pricing may vary based on your BSP and message volume.
About Whito
Whito helps UK businesses figure out what is working and what is not in their marketing. We do not sell WhatsApp services or receive commissions from BSP providers.
We publish independent research, tools, and audits designed to give business owners the information they need to make better decisions.
Learn more at whito.co.uk
Want to know which channels work best for your business?
Get a free Growth Report that shows where your customers are and how to reach them.
Get Your Free Growth Report