Hong Kong

WhatsApp Automation for Hong Kong Businesses

Hong Kong PDPO direct-marketing rules require an explicit opt-in and an easy opt-out — built into the workflow from the first template, not retrofitted after a PCPD complaint.

Serving Hong Kong businesses remotely from Kuala Lumpur; no local Hong Kong office.

Last updated: July 2026

Quick answer: Hong Kong PDPO direct-marketing rules require explicit opt-in captured before the first marketing message, a clear no-charge opt-out on every message, and suppression honoured across channels. We build WhatsApp workflows on the official Business API with PDPO / PCPD compliance wired into every template — never an unofficial blasting tool, and never compliance treated as an afterthought.

Most "WhatsApp Business API" searches in Hong Kong turn up software — a licence and a dashboard you configure yourself. We build and manage the actual workflow: qualification flows, approved message templates, no-show follow-up, compliant broadcast — the Business Solution Provider platform is one line item inside a system we build and maintain, not the whole deliverable. Everything runs on the official WhatsApp Business API, never an unofficial blasting tool that risks the number getting banned.

Hong Kong's compliance layer is the Personal Data (Privacy) Ordinance (PDPO) and the direct-marketing rules the Privacy Commissioner for Personal Data (PCPD) enforces: a business must have the recipient's explicit, informed consent to use their personal data for direct marketing, and every message must include a straightforward opt-out that is honoured within a defined window. Non-compliance is a criminal offence under the PDPO's direct-marketing provisions, not just a civil matter. We build every Hong Kong workflow with PDPO consent capture and opt-out handling wired into the first template, not added after a complaint forces the issue.

This is also the natural handoff point for Click-to-WhatsApp Ads run through our Hong Kong Meta Ads programme — the ad drives the click, this service handles the qualification conversation and feeds the booked-and-attended outcome back as an offline conversion, so ad spend optimises toward what actually happened.

What's included

  • Official WhatsApp Business API, provisioned through an approved Business Solution Provider. Never an unofficial blasting tool that risks a number ban and takes every existing customer conversation with it.
  • PDPO-compliant consent capture. Marketing consent captured as an explicit, separate opt-in from a general enquiry, with wording aligned to PCPD guidance and records kept so consent can be evidenced under a PDPO audit.
  • Opt-out handling built into every marketing template. A clear opt-out on every direct-marketing message, honoured on receipt, with the suppression list treated as a system record — not an inbox note.
  • Lead qualification flows. A structured conversation that pre-screens an enquiry before it reaches your team, built around your actual Hong Kong funnel.
  • Booking and appointment follow-up. Reminder and confirmation flows scoped to the correct transactional-vs-marketing classification so a reminder to an existing customer is not treated the same as a promotional broadcast.
  • Ad-platform handoff. Booked-and-attended outcomes fed back to Meta as offline conversions when paired with Click-to-WhatsApp campaigns.
  • Transparent three-line-item billing. Our management fee, the Business Solution Provider's platform fee and Meta's per-template conversation charges quoted separately, never bundled.

Hong Kong benchmarks (HKD)

MetricTypical range
Business Solution Provider platform fee (indicative)Set by the provider, billed in the provider's own currency
Meta per-template conversation chargesBilled directly by Meta, varies by category (marketing, utility, authentication, service)

Platform and Meta charges are set by third parties and vary by provider and message category; our management fee is quoted separately during scoping. — full data in our MY, SG & AU ad benchmarks.

How we run it

  • Funnel mapped before a template is written. Your actual Hong Kong enquiry-to-outcome journey comes first — qualification flow and templates are built around it, not a generic default.
  • PDPO wired into the workflow itself. Consent capture, opt-out handling and suppression-list hygiene are structural, not a checkbox added after the flow is built. The PCPD guidance on direct marketing is the reference, not a boilerplate template from another market.
  • Official API only. Provisioned through a Meta-approved Business Solution Provider, protecting the number and every existing customer conversation on it.
  • Connected to the rest of the stack. Booked outcomes feed back into Meta Ads and Google Ads as offline conversions and into your CRM, so the qualification work compounds instead of sitting in an isolated inbox.
  • Traditional Chinese and English handled together. Templates approved in both languages where the audience mix requires it, not one bolted onto the other after launch.

PDPO Direct Marketing, Transactional vs Marketing, and Opt-out Windows

PDPO direct-marketing rules. Under the Personal Data (Privacy) Ordinance, using personal data for direct marketing requires an explicit, informed opt-in captured before the first marketing message. The consent request must state the classes of marketing subjects and the classes of persons to whom the data may be transferred, and the recipient must be given a no-charge means to opt out. Non-compliance is a criminal offence, not only a civil matter. This is why we do not implement any Hong Kong workflow that implies unsolicited outbound messaging to a purchased or scraped list is compliant — it is not, regardless of what a competing vendor may offer.

Transactional vs marketing. A transactional message to an existing customer — order confirmation, appointment reminder, service update — sits outside the PDPO direct-marketing regime the same way a transactional message sits outside DNC-style regimes in other markets, but the classification has to be correct at the template level. We categorise every template at build time rather than leaving the boundary ambiguous.

Opt-out handling. Once a recipient opts out, the suppression must be honoured across every channel that uses the same personal data, not just the WhatsApp workflow that received the opt-out. We build the suppression list as a system record connected to the CRM, not a manual note in an inbox.

Frequently Asked Questions

Need WhatsApp Automation that performs in Hong Kong?

Book a free strategy call

LET'S START
THE CONVO.