It is easy to forget how sensitive a WhatsApp order actually is. "Saman Rajarathnam, No 56 Main Road, Kegalle, 0756565656" is a full identity and a home address in one line.
The shop is responsible for that information. A tool that processes it does so on the shop’s behalf — which means the shop should know what the tool does with it.
Sensible practice for a small shop
- Collect only what shipping the order requires. There is no reason to ask for a national ID number to send a shirt.
- Keep order records somewhere with a login, not in a shared spreadsheet or a group chat.
- Do not forward customer details to anyone who does not need them.
- Be able to delete a customer’s data if they ask. Being unable to is the part that turns a request into a complaint.
- Never reuse an order list as a marketing list without asking. That is also the fastest way to get a WhatsApp number restricted.
Questions worth asking any tool you use
- 1Where is the data stored, and who can see it?
- 2Can one shop’s data ever be visible to another shop using the same tool?
- 3Is the conversation content used to train AI models?
- 4How do I delete a customer’s data, and how long does it take?
- 5What happens to everything if I stop paying?
The second question matters more than it sounds for any shared tool. Separation between customers should be enforced by the system itself, not by the software remembering to filter correctly — and a vendor should be able to say plainly how that works.
Being straight with customers
A customer who asks what happens to their address deserves a real answer. "It goes on the parcel and stays in our order list until you ask us to remove it" is honest, short, and better than a policy nobody reads.