Do gyms need written consent to text members?

For marketing texts, yes. The TCPA requires prior express written consent before sending marketing messages, which in practice means a signed form, a checked box, or the person texting you first. A waiver signature or a phone number collected at signup is not marketing consent by itself.

What is A2P 10DLC and does my studio need to register?

A2P 10DLC is the US carrier system for business texting over regular 10-digit numbers. Any studio texting customers through software needs its brand and campaign registered with The Campaign Registry. Unregistered traffic gets filtered or blocked by carriers, so registration is about deliverability as much as compliance.

What happens if a member replies STOP?

All marketing texts to that number must stop. Under FCC rules effective April 11, 2025, opt-outs made by any reasonable means must be honored within at most 10 business days, and platforms like Helios apply them immediately and automatically exclude unsubscribed contacts from future sends.

What hours can a gym legally send marketing texts?

Follow the telemarketing window: 8 AM to 9 PM in the recipient's local time zone, and some states are stricter. In practice, fitness studios should send during studio hours anyway; a 6 AM blast is a fast way to earn opt-outs even when it is technically legal.

What are the penalties for TCPA violations?

Statutory damages run 500 to 1,500 dollars per message, per recipient, with no requirement to prove actual harm, and TCPA claims are frequently brought as class actions. A single non-compliant blast to a few hundred contacts can create six-figure exposure, which is why consent records matter.

SMS Compliance for Gyms: A2P 10DLC, Consent, and Opt-Outs in Plain English

Texting members is legal and effective, but it runs on permission. US rules come down to four things: get written consent before marketing texts (TCPA), register your number for A2P 10DLC, honor opt-outs fast under the FCC's 2025 rules, and send at reasonable hours. Here is each one in plain English, plus what your platform should handle for you.

One note before the details: this guide explains the rules as they apply to fitness businesses, but it is not legal advice. For your specific situation, especially outside the US, talk to counsel.

What is the TCPA and why should studio owners care?

The Telephone Consumer Protection Act (TCPA) is the US federal law governing calls and texts to consumers. The part that matters for your studio: marketing texts require prior express written consent from the recipient before you send them.

The penalties are what make this worth taking seriously. TCPA statutory damages are 500 to 1,500 dollars per violation, per message, with no requirement to prove actual injury, and claims are routinely brought as class actions. One promotional blast to 300 numbers you did not have proper consent for is not a small mistake.

What counts as valid consent for a gym?

Prior express written consent means the person agreed, in a recorded way, to receive marketing texts from your business specifically. For a fitness studio, the clean sources are:

A web form with a consent checkbox. Your lead form or intro offer signup includes unambiguous language like "I agree to receive text messages from Pulse Studio. Message and data rates may apply. Reply STOP to opt out," next to an unchecked box the person checks themselves.
A keyword or QR code opt-in. Someone who texts your number first, or scans a QR code to start a conversation, has opted in by their own action.
A point-of-sale agreement. Consent language captured digitally when they buy an intro offer or membership, stored with a timestamp.

What does not count:

A phone number on a paper waiver with no messaging language.
A list exported from your booking system, where members never agreed to marketing texts.
A purchased or scraped list. Never import these; beyond the legal exposure, carriers filter aggressively and it will get your number flagged.

Keep the receipts. The practical standard is being able to show, for any contact, when and how they consented. Good platforms make this automatic: for example, Helios forms capture consent at submission, and its import flow requires you to confirm you have explicit permission for everyone in the file.

One more distinction worth knowing: transactional messages (booking confirmations, waitlist notifications, schedule changes for a class someone booked) are not marketing and do not require marketing consent. The line is promotion: the moment a message sells something, it is marketing.

What changed with the FCC's 2025 opt-out rules?

The FCC's revocation rule, effective April 11, 2025, tightened how opt-outs must be handled:

Any reasonable means counts. STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, and UNSUBSCRIBE are all explicit revocations, and free-form messages like "please stop texting me" count too. You cannot require one specific keyword.
10 business days, maximum. Opt-outs must be honored as soon as practicable and no later than 10 business days after receipt, down from the previous 30 days.
One clarification message, tightly limited. After an opt-out you may send a single confirmation text, within 5 minutes, with no promotional content in it.

The safe operating posture is simpler than the rule: honor every opt-out immediately and automatically. In Helios, a STOP reply marks the contact unsubscribed on the spot, and blasts and flows skip unsubscribed contacts automatically, so there is no manual list-pruning to forget.

What is A2P 10DLC registration?

A2P 10DLC ("application-to-person, 10-digit long code") is the US carrier framework for business texting over standard local numbers. Every business that texts customers through software is required to register with The Campaign Registry: your brand (the legal business entity) and your campaign (what kind of messages you send, with sample content).

Why it matters even if you never think about it:

Unregistered traffic gets filtered. Carriers throttle or block messages from unregistered numbers, so registration is the difference between your blast arriving and silently dying.
Registration is per brand, which matters for franchises. Multi-location and franchise brands need their structure represented correctly, or individual locations end up filtered. If you operate many locations, this is worth doing deliberately; see how Helios handles A2P for enterprise and franchise brands.
Your sample content should match reality. Campaigns are registered with the message types you send. A studio registering "account notifications" and then blasting promos is setting up a future filtering problem.

If you use a platform like Helios, registration is handled with you during onboarding, but the brand information (legal name, EIN, website) has to come from you, so budget a little lead time before your first campaign.

What has to be in the message itself?

Three content rules cover most situations:

Identify your business. The recipient should always know who is texting. Lead with your studio name, especially on the first message.
Include opt-out language on marketing sends. Marketing messages should carry a "Reply STOP to opt out" style footer. Helios appends this automatically on blasts, with the character count reflecting it, so a promo can never go out without it.
Respect quiet hours. TCPA telemarketing rules set an 8 AM to 9 PM window in the recipient's local time, and several states are stricter. As a practical matter, send when your studio is open; deliverability rules aside, a 6 AM promo mostly earns opt-outs.

The studio owner's compliance checklist

Item	What good looks like
Consent capture	Every marketing contact has a recorded, timestamped opt-in
Imports	Only lists you can vouch for; confirmation required at import
A2P 10DLC	Brand and campaign registered before the first blast
Opt-out handling	STOP and free-form revocations honored automatically, immediately
Message content	Business name plus opt-out footer on every marketing send
Send windows	8 AM to 9 PM recipient local time, ideally studio hours
Transactional vs marketing	Booking confirmations flow freely; promos only to consented contacts

Most of this list should be your platform's job, not a human's memory. The compliance mechanics in Helios (automatic STOP/START processing, auto-appended opt-out language, unsubscribed contacts excluded from every send, consent confirmation on import) are built in precisely so the front desk never has to think about them mid-blast.

Compliance done right is not a tax on your marketing; consented, well-timed lists reply more and opt out less. For the playbook on what to send that list, start with the intro offer follow-up sequence.

Want to see the compliance guardrails in the product? Book a demo and send a test blast yourself.