The Personal Data Protection Law for small businesses: what actually concerns you
Not a legal lecture — five practical questions a shop owner asks about customers’ numbers, and how to answer them with tools that exist.
A shop owner does not need to read the whole law; they need to answer five practical questions. If your answers are ready, you are in the right place.
1 — On what basis do I have this person's number?
You collected it because they are your customer and left it, or you bought it on a list. The first is lawful; the second is not. The tool that makes the answer exist: the source stored with every number in the directory — storefront sticker, employee card, import, manual entry — so a year later you know where it came from.
2 — Did they agree to marketing messages?
Consent is not "did not object". It is an act: a "yes" reply, a box they chose themselves (not pre-ticked), or a yes said to your face that you recorded with your name and the time. AurCard's consent record keeps this per number, and a campaign checks it before every send and excludes anyone without a record.
3 — What if they say "stop messaging me"?
Everything must stop at once, for good, whatever list they are in. The word STOP on WhatsApp does that automatically and beats any earlier consent. You may be asked: "This person opted out last month — why did they get a message?" The answer must be in the record, not in an employee's memory.
4 — Who inside my business sees these numbers?
Only the employee who needs them for their work. A branch manager sees their branch; a salesperson sees what they collected. The day they leave, their access ends at that moment — and the numbers stay with the business, not on their phone. Permissions in AurCard are set by role, and shut-off is one click.
5 — What if a customer asks to delete their data?
You delete it, and you can prove you did. The permanent erasure path in the directory is separate from ordinary deletion (which can be undone) and records who performed it and when.
A frank word
Using a tool does not make your business "compliant" by itself; compliance is a decision and a habit: do not buy lists, do not message people who did not agree, honour STOP, and delete when asked. The tool makes all of that easy and documented — which is the difference between a business that answers in a second and one that searches its employees' phones.
Read next
Digital Coupons and Offers for Shops
A digital offer expires on its own date and can be measured, unlike a poster in the window. Here is how to build one and know whether it worked.
Collecting Leads Systematically
Most leads vanish into notebooks, scraps of paper and scattered chats. Here is how to capture them systematically and follow up without nagging.
How to Reduce Printing Costs in Your Business
The real cost of printing is not one batch but that batch multiplied by every change. Here is how to calculate it and what to convert first.