SMS Opt-In Forms, Privacy Policy and Terms That Pass A2P Review (With Templates)

Most A2P 10DLC rejections trace back to three pages on your website: the opt-in form, the privacy policy and the terms of service. Reviewers check that they exist, that they match each other and that they say specific things. This guide gives you template language for each one. Adapt it to your business and have your legal adviser review it; this is general guidance, not legal advice.

Part 1: the opt-in form

Your opt-in is the moment a person agrees to receive texts. Reviewers look for five elements, sometimes summarised as who, what, how often, cost and how to stop.

Checklist

• Your business name

• The type of messages (for example appointment reminders, order updates or promotions)

• Message frequency ("frequency varies" or a number per week)

• "Message and data rates may apply"

• HELP and STOP instructions

• Links to your privacy policy and terms

• An unchecked checkbox that is not required to submit the form

Template: transactional messages

[ ] I agree to receive appointment reminders and service updates by text from [Business Name]. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to opt out. See our Privacy Policy and Terms.

Template: marketing messages

[ ] I agree to receive recurring marketing texts, including offers and promotions, from [Business Name] at the number provided. Consent is not a condition of purchase. Up to [4] messages per month. Message and data rates may apply. Reply HELP for help or STOP to opt out. See our Privacy Policy and Terms.

Use two separate checkboxes if you send both types. Bundling marketing consent into a required checkbox is one of the fastest ways to get rejected.

Part 2: the privacy policy SMS clause

A common rejection reason is a privacy policy that allows sharing data with "partners" or "affiliates" without excluding mobile information. Add a dedicated section:

SMS and mobile information
We collect your mobile number when you opt in to receive text messages. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Information may be shared with service providers who help us deliver messages, such as our messaging platform, solely to provide the service.

Make sure there is only one privacy policy on your site, and that it is linked from your opt-in forms and footer.

Part 3: the terms of service SMS section

SMS terms
1. Program: [Business Name] sends [appointment reminders / order updates / promotional offers] to customers who opt in.
2. Frequency: Message frequency varies.
3. Costs: Message and data rates may apply.
4. Opt out: Reply STOP to any message to unsubscribe. You will receive one confirmation message.
5. Help: Reply HELP or contact [support@yourdomain.com] or [phone].
6. Carriers are not liable for delayed or undelivered messages.
7. Privacy: See our Privacy Policy at [URL].

Want us to check your forms and policies before you submit? Book a free audit call.

Part 4: HELP and STOP auto-replies

• HELP: "[Business Name]: For help, email support@yourdomain.com or call (555) 010-2030. Msg frequency varies. Msg & data rates may apply. Reply STOP to opt out."

• STOP: "[Business Name]: You have been unsubscribed and will receive no further messages. Reply START to resubscribe."

Use a support email on your own domain rather than a free email address.

Part 5: other opt-in methods

• Keyword opt-in: "Text JOIN to (555) 010-2030" with the same disclosures on the poster or web page, and an automatic confirmation reply.

• Verbal opt-in: a script staff read on calls, plus a note on the contact record with date and time.

• Paper forms: keep scanned copies and describe the form in your campaign message flow.

Where these go in GoHighLevel

Add the consent checkbox to every GoHighLevel form and survey that collects phone numbers, link your policies in the form footer and set the HELP and STOP replies to match your registered messages. Store the consent date and source in custom fields for an audit trail.

Frequently asked questions

Do I need a privacy policy to send texts? In practice yes. Carrier vetting expects one, and some platforms reject campaigns without a working URL.

Can the SMS checkbox be pre-checked? No. It should be unchecked and optional.

Does my terms page need an SMS section if I only send reminders? Yes. Reviewers expect the program description, frequency, rates and HELP and STOP instructions.

Can I use one checkbox for email and SMS? Separate consent for SMS is clearer and more likely to pass review.

Launch with compliant pages

Calari Solutions builds A2P-ready forms, policies and GoHighLevel consent tracking so your campaigns get approved quickly. Schedule a free audit call to review your website before you submit.