Château D'amour
WhatsApp Communication — Privacy & Usage Policy
For Meta / WhatsApp reviewers
This page documents the consent, retention, and processor relationships for Château D'amour's WhatsApp Business communications. Messaging infrastructure is operated by XenithPulse under a data-processing contract; Château D'amour is the data controller.
1 · How we collect consent
We obtain explicit consent for WhatsApp messaging in two ways:
- In-office booking via POS: When clients visit our office, they personally enter their booking details into our secure, privately owned POS system installed on-site. The POS form includes their contact number and a clear consent checkbox for WhatsApp communication, which they must acknowledge before submission.
- Customer-initiated message: If a customer messages our official WhatsApp number first, that action constitutes explicit consent for follow-up communication related to their booking or inquiry.
We retain verifiable POS submissions and timestamps to meet Meta's consent-record requirements.
2 · What we collect & legal basis
Collected data
- Phone number (for WhatsApp messaging).
- Message content (text, media, locations) you share with us.
- Profile / display name from your WhatsApp account.
- Event files you upload (floor plans, menus).
- Booking metadata (timestamps, booking reference, consent checkbox state).
Legal basis
Consent (explicit opt-in via the POS form or by you sending us the first message) and performance of contract (processing necessary to manage and fulfil your booking).
3 · How we use the data
- Inquiry handlingRespond to questions about availability and pricing within Meta's 24-hour reply window.
- Transactional Send pre-approved templates for confirmations, reminders, and day-of updates.
- Onboarding Send a welcome message after you start a conversation or submit an inquiry.
4 · 24-hour rule, templates & opt-out
Transactional messages (booking confirmations, payment reminders, day-of updates) use WhatsApp pre-approved templates where applicable. We comply with WhatsApp's 24-hour reply window: free-form replies are only sent within 24 hours of your last message; outside that window we use pre-approved template messages only.
Opt-out
- Reply STOP or UNSUBSCRIBE to any WhatsApp message. Non-essential messages stop within 48 hours.
- Or email our Data Protection Contact at chateaudamour20@gmail.com to request immediate opt-out or deletion.
5 · Retention & deletion
Essential booking and contact details are retained in our secure CRM for 5 yearsafter the event for historical and legal purposes. Message content stored by Meta is subject to Meta's own retention rules.
How to request deletion
- Email chateaudamour20@gmail.com with subject: Data Deletion Request — Chateau.
- Include your name, the phone number used for booking, and any booking reference if available.
- We reply with a reference number and an estimated completion date.
We complete deletion within 30 days except where retaining specific records is required by law. If full deletion is not possible, we quarantine the data and tell you which records were retained and why.
6 · Sub-processors
We use the following sub-processors under contract. Each is bound to act only on our instructions.
- XenithPulse — provides the privately owned Banquet Hall POS messaging and contact-management platform. https://xenithpulse.com
- Meta Platforms, Inc. (WhatsApp) — platform provider; message delivery governed by Meta's own terms.
7 · Where data is stored & processed
Primary storage and processing take place on infrastructure operated in Pakistan and on AWS us-east-1 (used by our database and object-storage providers via XenithPulse). Cross-border processing occurs when routing or redundancy requires it.
Where personal data of users in jurisdictions with cross-border transfer rules is moved, transfers are made under Standard Contractual Clauses (SCCs) with each sub-processor.
8 · Contact & data-subject requests
For privacy requests (access, deletion, correction), contact our Data Protection Contact at chateaudamour20@gmail.com. We respond within 30 days. If we need more time we will tell you and provide a reasonable extension.
9 · Cookies, analytics & SDKs
This public policy page uses only essential cookies required for the page to function. We do not include analytics SDKs on this hosted policy page. Trackers used elsewhere on xenithpulse.com are disclosed in the main cookie settings.