A WhatsApp customer list is the set of people who have agreed to hear from your restaurant on WhatsApp, with their number, name and ideally what they ordered last. Built legally, it is the most valuable marketing asset a food business owns, because it is the one channel where a message reaches the customer directly and they can order back in the same chat. Built badly, from bought databases or numbers copied off aggregator slips, it gets your number reported and restricted within weeks.
This guide covers what "legally" means in practice, the nine sources that produce real consent, and how to keep the list clean so it stays useful.
What legal means for a WhatsApp list in India
Two sets of rules apply. The first is Meta's own policy: before you send a marketing template through the WhatsApp Business API, the customer must have opted in, the opt-in must make clear they are agreeing to messages on WhatsApp from your named business, and you should be able to show how it was collected. Meta enforces this through blocks and reports; too many and your messaging tier drops.
The second is India's Digital Personal Data Protection Act, 2023, with rules being brought into force in phases. A phone number is personal data. The Act expects you to have consent or another lawful basis, to tell the customer what you will use the number for, and to stop when they withdraw. For a restaurant, the practical standard is simple: the customer gave you the number themselves, knew it was for WhatsApp messages from you, and can opt out by replying. The detail is in WhatsApp marketing rules in India.
What fails both tests: buying a "restaurant customer database", scraping numbers from Zomato or Swiggy order slips, adding people from a wedding guest list, or pulling numbers from a WhatsApp group you were added to. Aggregators mask numbers for a reason, and using them for your own marketing breaks their terms as well.
Nine sources of customer numbers, ranked by consent quality
| Source | How consent happens | Consent quality | Effort |
|---|---|---|---|
| Orders placed on your WhatsApp number | Customer messaged you first; add an explicit yes to offers in the flow | Strongest | None once ordering is on WhatsApp |
| Store page checkout | Number entered at checkout with a clear offers checkbox | Strong | Low |
| QR code on tables and counter | Scan opens a WhatsApp chat with a pre-filled message | Strong | Print and place |
| wa.me link on Instagram and Google Business Profile | Tap opens a chat; first message is the opt-in | Strong | Low |
| Click-to-WhatsApp ads | Ad click opens a chat with your number | Strong, paid | Ad budget |
| Dine-in bill footer and feedback card | "Message us on WhatsApp for offers" with the number | Good | |
| Catering and event enquiries | Customer contacts you for a quote | Good, ask before adding to offers | Low |
| Referral from an existing customer | Friend messages you with the referrer's name | Good | Needs a referral offer |
| Paper sign-up sheet at the counter | Customer writes number and ticks a box | Weakest; handwriting errors, no record | Data entry |
The pattern is clear. Every strong source involves the customer messaging you, which is both the cleanest consent and the easiest to prove. That is why the fastest way to build a WhatsApp customer list is to make WhatsApp the way people order. The link and QR mechanics are in how to create a WhatsApp order link and WhatsApp QR codes for restaurants.
Four steps to build the list and keep it clean
Step 1: Put the number where customers already are
Most restaurants have a WhatsApp number and nowhere to find it. Fix that first. The number, with a reason to message it, goes on the menu card, the bill, the takeaway bag sticker, the Instagram bio, the Google Business Profile, the table standee and the shutter. "Order on WhatsApp, 20 minutes faster than the apps" is a reason. "Follow us" is not.
Give each placement a slightly different pre-filled message if you can, such as "Hi, I scanned the table QR" versus "Hi, I saw the bag sticker". A month later you will know which placements actually bring people in.
Step 2: Capture consent at the moment of the order
A customer who messages to order has opened a conversation, which satisfies the basic opt-in. For marketing, add one clear line and let them answer. In an ordering bot, this is a question after the order is confirmed: "Want to hear about weekend offers from Sharma Dhaba on WhatsApp? Reply YES." On a store page, it is an unticked checkbox at checkout with the same words. Record the answer with the date.
Do not pre-tick the box, do not bury it in terms and conditions, and do not treat silence as yes. The exact wording options are in WhatsApp opt-in without annoying customers.
Step 3: Store the few fields that matter
A useful restaurant list has six fields: name, number, opt-in status with date, last order date, what they usually order, and delivery area. That is enough to send a dosa offer to south Indian regulars in Koramangala and a win-back message to anyone quiet for 60 days. Do not store card details, do not keep a copy on a personal phone that leaves with a staff member, and do not share the list with anyone outside the business.
Step 4: Keep it clean
A list decays. Numbers change, customers move cities, people stop liking paneer. Every month:
- Remove anyone who replied STOP, blocked you or reported a message. Meta tells you about blocks through your quality rating; act on it.
- Tag customers with no order in 90 days as lapsed and move them to a lower-frequency segment.
- Check that opt-in dates exist for everyone in the marketing segment.
- Delete numbers that have bounced as invalid.
A 1,500-person list that is clean and recent will outperform a 6,000-person list that is half dead, and it will cost a quarter as much to message. The broader strategy for using that list is in our complete guide to WhatsApp marketing for restaurants.
What a realistic first 90 days looks like
This is an illustrative timeline, not a promise. A mid-sized restaurant doing 40 orders a day with half of them on WhatsApp adds roughly 20 new numbers a day from orders alone, which is around 600 a month before QR scans and Instagram taps. By day 90 that is a list of 1,500 to 2,000 customers, every one of whom has ordered at least once and said yes to offers. That is a list worth sending to, and it cost nothing to build beyond putting the number in front of people.
What this looks like on Tezzu
On Tezzu, the list builds itself from orders. Every customer who orders through the WhatsApp bot on your own number, or on your free store page at tezzu.in/store/your-name, lands in the live dashboard with their number, name and order history. The dashboard's customer insights show you who orders often and who has gone quiet, which is the segmentation above without a spreadsheet.
Because customers message your number to order, the conversation they opened is the opt-in Meta looks for, and campaigns sent from the prepaid wallet go to people who already know you. QR codes for tables and the counter, a wa.me link for Instagram, and Click-to-WhatsApp ads on the Growth plan all feed the same number and the same list. Your number stays yours; Tezzu connects it to the WhatsApp Business API through Meta's embedded signup in about 30 minutes.
If you want the list and the ordering set up in one go, setting up WhatsApp ordering with Tezzu covers the first afternoon.
Set up the number, the QR and the store page in one sitting
The setup playbook walks through connecting your WhatsApp number, building the menu and placing the QR codes that grow your list.
Read the setup playbookFrequently asked questions
Is it legal to collect customer phone numbers for WhatsApp marketing in India?
Yes, when the customer gives the number themselves and agrees to receive WhatsApp messages from your named business. Meta's policy requires that opt-in before marketing templates are sent through the API, and the DPDP Act expects consent, a stated purpose and an easy way to withdraw. Buying lists or taking numbers from aggregator order slips does not meet either standard.
How do restaurants collect customer numbers?
The strongest sources are orders placed on the restaurant's WhatsApp number, store page checkouts, QR codes on tables and bills, wa.me links on Instagram and Google Business Profile, and Click-to-WhatsApp ads. All of these involve the customer messaging the restaurant first, which creates the opt-in and the record at the same time. Paper sign-up sheets work but are error-prone and hard to prove.
Can I use Zomato or Swiggy customer numbers for my own WhatsApp list?
No. Aggregators mask customer numbers and their terms prohibit using order data to market outside their platform. Customers who ordered through an app also did not consent to hear from you on WhatsApp. The lawful route is to invite app customers to order direct next time, through a card in the bag or a QR on the packaging, so that they message you themselves.
How many customers should be on a restaurant WhatsApp list before campaigns are worth it?
There is no minimum; a list of 200 recent customers who ordered this month is worth a weekly message. What matters more than size is recency and consent. A clean list of a few hundred people who ordered recently will produce more orders per message than a stale list of thousands, and it keeps your quality rating healthy so your messaging limit grows.