# POL-043 — Print, QR and point-of-sale calls to action need a typeable policy URL

> A printed, QR or point-of-sale call to action must show a spelled-out, typeable URL for the terms and the privacy policy.

- **Rule ID:** POL-043
- **Layer:** Policy pages (`POLICY_PAGE`)
- **Checks:** `printed CTA artifact or POS screen`
- **Severity:** BLOCKING — Breaking this rule gets the submission rejected outright.
- **When it bites:** Gates approval — get this wrong and registration is refused
- **How it is detected:** AI vision over a consent artifact (screenshot, scan, MMS media)
- **Fix type:** Produce a document that does not exist yet
- **Required by:** CTIA, Postscript, Aerialink
- **Applies:** Applies when consent was collected by paper form, QR code and point of sale.
- **Canonical URL:** https://ekas.io/rules/10dlc/policy-page/pol-043/

## Why this rule exists

A hyperlink does not exist on paper. The consumer standing at a counter or holding a flyer can only type what they can read, so a URL rendered as "click here", hidden behind a QR code, or shortened past recognition leaves them with no way to reach the terms at all — and the reviewer with nothing to follow either.

## How to fix it

Print both addresses in full and legibly beside the call to action, short enough to type. Done when someone reading the printed piece can type the policy address without a phone.

## Example of a compliant value

```text
Terms: acmecoffee.com/sms-terms · Privacy: acmecoffee.com/privacy
```

## Common mistakes

- Aerialink accepts the inline non-sharing statement printed instead of the privacy URL, but only that specific substitution — the terms address is still required.

## Provider rejection codes

| Provider | Code | Resubmission allowed |
| --- | --- | --- |
| Bandwidth/DCA | `805` | yes |

## Notes

VISION because it is a question about the artifact as printed: whether the address is legible and typeable cannot be answered from a text transcript of it.