# WhatsApp CRM in Turkey: KVKK, IYS and Meta Rules for B2B Teams

URL: https://jumpix.app/blog/whatsapp-crm-turkey-kvkk-iys-meta-rules-b2b
Published: 2026-11-12
Updated: 2026-11-12
Publisher: Jumpix

> A Turkey-focused WhatsApp CRM guide covering KVKK, the ETK and IYS consent rules, Meta's opt-in and template policies, and practical B2B workflows.

# WhatsApp CRM in Turkey: KVKK, IYS and Meta Rules for B2B Teams

In Turkey, WhatsApp is often the first place a business conversation happens. A procurement manager asks for a quote there, a distributor confirms an order there, and a prospect who filled in a Meta lead form expects a reply there. That is why more Turkish B2B teams want a **WhatsApp CRM** setup, meaning a system that ties WhatsApp conversations to leads, deals and follow-up. Running WhatsApp at company scale in Turkey is more than a technical choice, though. It sits at the intersection of three rulebooks: the Personal Data Protection Law (KVKK), the Electronic Commerce Law (ETK) with its Message Management System (IYS), and Meta's own WhatsApp Business Platform policies.

This guide covers that local layer: what applies in Turkey, where B2B teams usually make mistakes, and how to build a compliant workflow. It does not cover who needs a WhatsApp CRM, setup options or costs. For those, see our complete guide to WhatsApp CRM, setup options and real costs.

**Short answer:** To use a WhatsApp CRM legally in Turkey, run WhatsApp through Meta's official Business Platform, collect explicit opt-in, and message outside the 24-hour window only with approved templates. You also need to give KVKK privacy notices, handle the transfer of data abroad correctly, and follow the ETK consent rules for commercial electronic messages.

## Why Is WhatsApp CRM Different in Turkey?

WhatsApp is deeply embedded in Turkish business culture. Many SMEs, manufacturers and service firms already handle a large share of customer communication on personal phones. Three consequences follow for B2B teams:

- **Fragmented history:** Conversations live on individual salespeople's phones. When someone leaves, the customer history leaves with them.
- **Compliance gaps:** Personal data collected through informal WhatsApp chats rarely has a privacy notice or a documented legal basis under KVKK.
- **Expectation of speed:** Turkish buyers who write on WhatsApp generally expect a quick, conversational reply, often outside standard office hours.

A WhatsApp CRM addresses all three, but only if it is built on the correct legal and technical base.

## The Three Rulebooks You Must Follow

### 1. KVKK (Law No. 6698): Personal Data Protection

KVKK applies whenever you process personal data, and a phone number linked to a named person is personal data. Key obligations:

- **Information obligation (aydınlatma):** Tell the person who is processing their data, for what purpose, on what legal basis and to whom it may be transferred. Put a short notice plus a link to your full privacy notice on lead forms and in the first WhatsApp reply.
- **Legal basis:** Answering a quote request can usually rely on bases such as contract preparation or legitimate interest. Marketing messages generally need explicit consent.
- **Transfer abroad:** WhatsApp Business Platform data is processed on Meta's infrastructure outside Turkey. Since the amendment introduced by Law No. 7499 (effective June 1, 2024), Article 9 of KVKK allows transfers abroad on grounds such as adequacy decisions or appropriate safeguards like standard contracts. A signed standard contract must be notified to the KVKK Authority within five business days. Review how your CRM vendor and Meta are positioned in this structure with your legal advisor.

### 2. ETK (Law No. 6563) and IYS: Commercial Electronic Messages

The ETK and its regulation on commercial communication require prior consent before sending commercial electronic messages. Legal interpretation in Turkey generally treats promotional messages sent through instant messaging apps as falling within this scope. Points that matter for B2B:

- **Tradesmen and merchants exception:** Under the regulation, commercial electronic messages may be sent to tradesmen and merchants (esnaf ve tacir) without prior consent, but they have the right to refuse. Once they opt out, sending must stop. Whether an employee's personal mobile number counts under this exception is a grey area, so do not rely on it blindly.
- **IYS:** The Message Management System records consent and opt-outs for calls, SMS and email. Your WhatsApp consent records should be kept just as carefully, with time, source and wording, even where IYS registration is not technically the channel in question.
- **Opt-out:** Every marketing message should offer an easy way to unsubscribe, for example a reply keyword or button.

### 3. Meta's WhatsApp Business Platform Policies

Even where Turkish law allows a message, Meta's rules may not. Meta requires:

- **Opt-in:** The person must have agreed to receive messages from your business on WhatsApp. The B2B exception in Turkish law does not override this.
- **The 24-hour customer service window:** When a user messages you, you can reply freely for 24 hours. After that, you can only start a conversation with a **pre-approved template**.
- **Template categories:** Templates are classified as marketing, utility or authentication, and pricing differs by category and by the recipient's country code. Turkey has its own rate on Meta's official price list.
- **Quality and limits:** New numbers start with limits on business-initiated conversations. These rise with verification and good quality ratings. Blocks and reports lower your rating.

Unofficial tools that automate the regular WhatsApp app violate Meta's terms and can get the number banned. For a CRM setup, use the official API.

## A Compliant B2B Workflow: A Turkey Example

Consider an industrial supplier in Istanbul running Meta lead ads and attending trade fairs.

1. **Capture with consent:** The lead form includes a short KVKK notice and a separate, unticked checkbox for WhatsApp marketing messages. At trade fairs, the same consent is collected on a tablet form instead of informal business card swaps.
2. **Answer within the window:** When the lead writes on WhatsApp or the form is submitted, the first reply goes out within seconds, in Turkish, with a link to the privacy notice.
3. **Qualify:** Questions about product group, quantity, delivery city and timeline identify serious buyers. The answers are written into the lead record, not left in a chat.
4. **Follow up with templates:** If the prospect goes quiet, a utility template such as a quote reminder, or a marketing template only with consent, reopens the conversation. Email runs in parallel.
5. **Respect opt-outs:** A reply such as 'İPTAL' stops all marketing sequences and is logged.

Tools such as [Jumpix's WhatsApp marketing automation](/features/whatsapp-marketing-automation) work on your own number through Meta's official API: AI answers incoming messages in seconds, scores intent and runs WhatsApp and email steps until a meeting is booked. Other platforms with official API access can support a similar flow. What matters most is that the system enforces consent and template rules automatically.

## Local Details That Make a Difference

- **Turkish-language templates:** Write templates natively in Turkish and check characters such as ç, ğ, ı, ö, ş and ü. Clear, non-promotional wording speeds up utility template approval.
- **Number formatting:** Store mobile numbers in international format (+90 5XX XXX XX XX). Mixed formats cause duplicates and failed sends.
- **Working hours:** Many Turkish B2B companies work Saturday mornings. Set follow-up timing to match your buyers' week, and use automated first replies for evenings so the 24-hour window is not wasted.
- **Shared numbers, not personal phones:** Move the conversation to a company number connected to the CRM, so history stays with the business when staff change.
- **Pipeline visibility:** For teams that handle both inbound demand and outbound account lists, a single pipeline avoids duplicate contact. See how this works for [B2B teams handling inbound and target accounts](/use-cases/b2b).

## Conclusion

A WhatsApp CRM in Turkey succeeds when it is designed around compliance from day one. Use Meta's official platform, collect and record consent, respect the 24-hour window and templates, meet KVKK's notice and transfer-abroad duties, and handle the ETK's consent and opt-out rules carefully. Build those rules into the system rather than relying on salespeople's memory. Your team can then answer Turkish buyers as fast as they expect without putting the company or its number at risk.

*This article is general information and not legal advice. Consult a qualified legal advisor for your specific situation.*

## Frequently Asked Questions

### Do I need consent to message B2B leads on WhatsApp in Turkey?
Under the ETK regulation, commercial messages to tradesmen and merchants may be sent without prior consent, though they can opt out at any time. Meta's policy still requires opt-in for WhatsApp messages, regardless of Turkish law. In practice, collect explicit WhatsApp consent from every lead.

### Is using WhatsApp CRM compliant with KVKK?
It can be, if you give a privacy notice, have a valid legal basis for each purpose and handle the transfer of data abroad correctly. Since June 2024, Article 9 of KVKK allows transfers with safeguards such as standard contracts, which must be notified to the Authority within five business days. Review your setup with a legal advisor.

### Can I keep using the regular WhatsApp Business app instead of the API?
The app works for very small teams but is not designed for CRM integration, multiple users or automation. Third-party tools that automate the regular app breach Meta's terms and risk a ban. For a scalable WhatsApp CRM, the official Business Platform (API) is the right foundation.

### What happens after the 24-hour window closes?
You can no longer send free-form messages. To restart the conversation, you must use a template approved by Meta, charged according to its category and the recipient's country. When the customer replies, a new 24-hour window opens.
