WhatsApp messages and consent

1. How messages work in Mutrafa

• Mutrafa prepares the "Tomorrow's messages" and "Today's clients" lists with written texts. When you tap, WhatsApp opens the chat with the message ready, and the center sends it itself from its own WhatsApp Business. Mutrafa does not send any message on the center's behalf.
• The center is the sender and the controller of its clients' data. Obtaining the client's consent remains the center's responsibility.

2. What the center must do before any message

1. Booking, confirmation, and reminder messages about an appointment the client booked herself: these follow up an existing relationship and are sent in the center's name.
2. Review and survey messages: obtaining the client's consent is recommended, together with a way to opt out.
3. Promotional messages (offers): require the client's prior consent, separate from the booking, with an easy opt-out that takes effect immediately (Articles 25 and 26 of the Personal Data Protection Law and Articles 28 and 29 of its Implementing Regulation).
4. Keep proof of consent (when and how it was given).
5. Do not send health information over WhatsApp, and do not ask for card numbers or IDs.

3. The center's client policies are ready in its account

Mutrafa automatically creates each center's basic client policies: the privacy notice, the booking and cancellation policy (and deposit, once enabled), WhatsApp message consent, and how data subject requests are handled. They appear on the center's booking page, the client acknowledges them with every booking, her acknowledgment is recorded with the booking, and her rights requests arrive in the center's account. The center can add its own clauses without removing the basic ones. Below is the template consent text:

By confirming the booking, {center name} uses your name, number, and appointment to manage the booking and to send its confirmation and reminders over WhatsApp.

☐ (Optional) I agree to receive a message asking me to review the service. I can stop it by writing "Stop".

☐ (Optional) I agree to receive offers and news from {center name} over WhatsApp. I can stop them by writing "Stop offers".

• The consent boxes are not pre-ticked, and declining them does not prevent booking.
• Reviews, names, and photos are not published without separate, explicit consent.

4. Template privacy notice the center shows its clients (created automatically with the center's details)

{center name} is responsible for your data, and uses the Mutrafa platform (Khuwarizm Technology) to manage bookings on its behalf. We collect your name, mobile number, appointments, booked services, and payment status, and your notes if you agree, to manage, confirm, and remind you of your booking. We do not sell your data. You have the rights to be informed, to access, to obtain a copy, to correct, to have data destroyed, and to withdraw consent, and you can exercise them by messaging the center at {contact channel}. If your complaint is not resolved, you may file it with the Saudi Data and Artificial Intelligence Authority.

5. Opting out

When a client asks to stop messages, the center stops immediately and records it. WhatsApp may restrict the center's number if there are many complaints or policy violations. See the Acceptable use policy.