WhatsApp chatbot in the UK (2026): AI replies, UK GDPR and PECR, what it costs in pounds, and where it works best

This guide is for UK trades, clinics, salons and lettings agents who get WhatsApp enquiries at all hours and want them answered without breaking the ICO's rules. You get the rules in plain English, the line between customer service and marketing, Meta's GBP rates, and the use cases where an AI agent pays off.

By Ritchie, ReplyKit · Published 15 October 2026 · 8 min read

What does UK GDPR mean for a WhatsApp chatbot?

UK GDPR applies because a chatbot handles personal data: phone numbers, names, and whatever customers tell you. The good news is that answering enquiries has a clear lawful basis.

The ICO's guidance on the contract basis says it applies where a person has asked you to do something as a first step, such as provide a quote, and that this "applies even if they don't actually go on to enter into a contract with you". It does not cover steps you take on your own initiative. So when a customer messages asking for a price and the agent collects their postcode to give one, you are on solid ground; when you later add them to a promotions list, you need a different basis.

• Be transparent. Say in your greeting that an AI assistant replies and a person can take over, and link your privacy notice.
• Collect only what you need to quote, book or qualify.
• Check your providers. Where chats are processed, how long they are kept, and whether they are used to train AI. Our GDPR checklist for AI agents lists the questions.

Does PECR apply to WhatsApp?

For marketing, assume yes. PECR's rules on "electronic mail" are technology-neutral. The ICO describes the term as having "an intentionally broad meaning that includes new forms of messaging", and its guidance lists in-app messages and social media direct messages alongside email and texts. WhatsApp is not named, but a marketing message on WhatsApp should be treated like a marketing text.

For individuals (including sole traders), the ICO says you can only send electronic mail marketing if they have specifically consented, or under the soft opt-in: they are an existing customer who bought or negotiated to buy a similar product or service from you, and you gave them a simple way to opt out when you collected their details and in every message since. The soft opt-in does not cover prospects or bought-in lists.

Two updates worth knowing. The ICO notes that the Data (Use and Access) Act added the definition of direct marketing into PECR, and it says its PECR guidance is under review because of the Act, so check the current pages before a big campaign.

Why is answering an enquiry different from marketing?

Because the customer asked. The ICO says electronic mail marketing is solicited when someone specifically asks you to send a particular message or type of information; everything else is unsolicited, and most PECR restrictions apply only to unsolicited marketing. Its own example: if a person asks for your summer brochure, sending it is solicited; a follow-up email they did not ask for is unsolicited.

Routine service messages are not marketing at all, the ICO says, as long as they carry no promotional elements. A logo or general branding is fine. A "while you're here, 20% off" line turns a service message into marketing.

This is why we built ReplyKit to reply only, with no broadcasts or cold outreach. Its one optional follow-up nudge, on Growth and Pro, is a single gentle message when a lead goes quiet; keep it factual ("Did you still want that quote?") rather than promotional, or switch it off if you are unsure. More in how follow-up nudges work and our opt-out and consent rules. This is general guidance, not legal advice.

How much does a WhatsApp chatbot cost in the UK?

On the official API you pay a provider plus Meta. Since 1 October 2026 Meta charges for service messages (your replies) after 1,000 free per business number each month. Meta's GBP list rates for UK numbers:

Which UK businesses get the most from a WhatsApp chatbot?

Businesses where enquiries arrive when you cannot answer and each one is worth real money. Four stand out:

• Trades. A plumber on a job cannot type. The agent answers call-out charges and areas covered, asks for a photo of the problem, books a visit, and flags anything urgent (a leak, no heating) to you at once. See AI agents for plumbers and electricians.
• Private clinics. Dental, physio and aesthetics clinics get the same price and availability questions all evening. The agent answers from your price list, books consultations, and hands anything clinical to staff; it should never give medical advice. See AI agents for clinics.
• Salons and barbers. Booking is the whole job: real open slots, a reminder the day before, rebooking when someone cancels. See AI agents for salons and spas.
• Lettings agents. Portal leads want to know if a flat is still available, whether pets are allowed and when they can view. The agent answers from your listings, qualifies on budget and move date, and books viewings. See AI agents for property.

Is WhatsApp the right channel at all in the UK? For most consumer-facing small businesses, yes; our piece on how adoption differs in the US, UK and Europe, linked below, covers the regional picture.

Should you care whether a tool bills in GBP or USD?

A little. Many UK-focused tools bill in pounds; ReplyKit bills in US dollars only ($29, $49 or $99 a month), so your bank converts the charge and the pound amount moves with the exchange rate. Some cards add a foreign transaction fee. Compare tools on the all-in monthly figure: plan, AI add-on, Meta charges and any currency fee, not the headline price.

Official API or QR pairing: which suits a UK business?

Use the official API if you send campaigns, need a verified badge, or send codes and order updates at volume. A QR-paired agent is faster to set up and has no Meta fees, but Meta does not sanction it, and WhatsApp's help center warns that linking unofficial apps may result in a temporary or permanent ban. Our guide to whether WhatsApp will ban your number sets out the trade-off.

Where ReplyKit fits for UK businesses

We make ReplyKit, so weigh this accordingly. It is an AI agent for WhatsApp and website chat that answers from your own website, price lists and PDFs, says "I am not sure" and escalates rather than guessing, books into real open slots with double-booking protection and a reminder about 24 hours before, and scores leads hot, warm or cold with CSV export. You can take over any chat in one click.

It connects through Quick Connect, a QR scan of about two minutes. That route is unofficial: not the WhatsApp Business API, not sanctioned by Meta, and a number can be restricted, so read the risk and use a dedicated number. Because it only replies to people who message you and sends no broadcasts, nearly everything it does sits on the customer service side of the PECR line; the optional follow-up nudge is the one part to keep factual.

Not the right choice if you need marketing campaigns, a green tick, GBP invoicing, or missed-call text back for phone enquiries. If you want to test it on your own enquiries, start a 7-day free trial.

Frequently asked questions

ReplyKit is an independent product and is not affiliated with or endorsed by Meta or WhatsApp. Meta's rates are list rates, exclude VAT and provider charges, and were checked in October 2026; third-party prices may change. This article is general guidance for UK businesses, not legal advice.