Client policy·Hosted by XenithPulse

Château D'amour

WhatsApp Communication — Privacy & Usage Policy

Effective: November 9, 2025Last updated: April 24, 2026Hosted at: https://xenithpulse.com/clients/chateau-erp-usage-policy

For Meta / WhatsApp reviewers

This page documents the consent, retention, and processor relationships for Château D'amour's WhatsApp Business communications. Messaging infrastructure is operated by XenithPulse under a data-processing contract; Château D'amour is the data controller.

1 · How we collect consent

We obtain explicit consent for WhatsApp messaging in two ways:

  • In-office booking via POS: When clients visit our office, they personally enter their booking details into our secure, privately owned POS system installed on-site. The POS form includes their contact number and a clear consent checkbox for WhatsApp communication, which they must acknowledge before submission.
  • Customer-initiated message: If a customer messages our official WhatsApp number first, that action constitutes explicit consent for follow-up communication related to their booking or inquiry.

We retain verifiable POS submissions and timestamps to meet Meta's consent-record requirements.

2 · What we collect & legal basis

Collected data

  • Phone number (for WhatsApp messaging).
  • Message content (text, media, locations) you share with us.
  • Profile / display name from your WhatsApp account.
  • Event files you upload (floor plans, menus).
  • Booking metadata (timestamps, booking reference, consent checkbox state).

Legal basis

Consent (explicit opt-in via the POS form or by you sending us the first message) and performance of contract (processing necessary to manage and fulfil your booking).

3 · How we use the data

  • Inquiry handlingRespond to questions about availability and pricing within Meta's 24-hour reply window.
  • Transactional Send pre-approved templates for confirmations, reminders, and day-of updates.
  • Onboarding Send a welcome message after you start a conversation or submit an inquiry.
Private POS usage: With your explicit approval, we use our privately owned Banquet Hall POS (powered by XenithPulse) to send WhatsApp messages and manage the contacts you provide. We will not message or share contacts without your consent.

4 · 24-hour rule, templates & opt-out

Transactional messages (booking confirmations, payment reminders, day-of updates) use WhatsApp pre-approved templates where applicable. We comply with WhatsApp's 24-hour reply window: free-form replies are only sent within 24 hours of your last message; outside that window we use pre-approved template messages only.

Opt-out

  • Reply STOP or UNSUBSCRIBE to any WhatsApp message. Non-essential messages stop within 48 hours.
  • Or email our Data Protection Contact at chateaudamour20@gmail.com to request immediate opt-out or deletion.

5 · Retention & deletion

Essential booking and contact details are retained in our secure CRM for 5 yearsafter the event for historical and legal purposes. Message content stored by Meta is subject to Meta's own retention rules.

How to request deletion

  1. Email chateaudamour20@gmail.com with subject: Data Deletion Request — Chateau.
  2. Include your name, the phone number used for booking, and any booking reference if available.
  3. We reply with a reference number and an estimated completion date.

We complete deletion within 30 days except where retaining specific records is required by law. If full deletion is not possible, we quarantine the data and tell you which records were retained and why.

6 · Sub-processors

We use the following sub-processors under contract. Each is bound to act only on our instructions.

  • XenithPulse — provides the privately owned Banquet Hall POS messaging and contact-management platform. https://xenithpulse.com
  • Meta Platforms, Inc. (WhatsApp) — platform provider; message delivery governed by Meta's own terms.

7 · Where data is stored & processed

Primary storage and processing take place on infrastructure operated in Pakistan and on AWS us-east-1 (used by our database and object-storage providers via XenithPulse). Cross-border processing occurs when routing or redundancy requires it.

Where personal data of users in jurisdictions with cross-border transfer rules is moved, transfers are made under Standard Contractual Clauses (SCCs) with each sub-processor.

8 · Contact & data-subject requests

For privacy requests (access, deletion, correction), contact our Data Protection Contact at chateaudamour20@gmail.com. We respond within 30 days. If we need more time we will tell you and provide a reasonable extension.

9 · Cookies, analytics & SDKs

This public policy page uses only essential cookies required for the page to function. We do not include analytics SDKs on this hosted policy page. Trackers used elsewhere on xenithpulse.com are disclosed in the main cookie settings.

Official public policy for Château D'amourChâteau D'amour Booking Communication Service.

Hosted by XenithPulse · https://xenithpulse.com