UdyamOSUdyamOS
dashboardOverviewauto_awesomeAI Copilottask_altMy Work4account_treeProjectsverified_userApprovals3event_availableHR & Leave
starQuotationsstarItem catalogstarMSME ODR & RecoverystarGovt schemes
trending_upGrowth Centerperson_searchLeads Registerfilter_altSales Pipelineevent_repeatFollow-upsrequest_quoteTenders
edit_noteFounder Ghostwriterquery_statsMeasure Resultscalendar_monthWeekly Plannerview_carouselCarousel CreatorlightbulbB2B Hook Library
hubCRM & LeadsgroupCustomersinventory_2Catalogrequest_quoteQuotationsreceipt_longInvoices4paymentsCollections2autorenewSubscriptionsmenu_bookDigital Khatalocal_shippingPurchasing1receipt_longExpenses & ITCprecision_manufacturingFixed Assets
gavelLegal Templates
balanceMSME ODR & Recovery
account_balanceMyMSME Portalmanage_searchNIC Code Finderassured_workloadGovt Schemespublished_with_changesAI RecommercehandymanBusiness Toolsmanage_accountsTeam & RolessettingsSettings
PO
Demo userBrowser demo
WorkspaceLegal document
search⌘ K
Back to Legal Templates

IP, WEBSITE & DATA

Privacy Policy (DPDP Act aligned)

Publish this on your website or app if you collect any personal data online, such as names, phone numbers, addresses or payment details. Adjust the lists of data and purposes so they match what you actually collect and why.

Saved letters

Nothing saved yet

Use Save to keep a named copy of this letter, for example one per employee.

Fill in the details

4 of 8 required fields filled

4 required fields still empty — shown highlighted in the letter.

Laws this relies on

  • Digital Personal Data Protection Act, 2023 · Sections 5–6Notice before collection; consent must be free, specific, informed, unconditional, unambiguous and as easy to withdraw as to give.
  • Digital Personal Data Protection Act, 2023 · Section 8Security safeguards, breach intimation, erasure when the purpose is served, and a grievance contact.
  • Digital Personal Data Protection Act, 2023 · Sections 9, 11–14Children's data needs verifiable parental consent; rights of access, correction, erasure, grievance redressal and nomination.
  • Information Technology Act, 2000 · Section 43AWith the SPDI Rules, 2011, governs reasonable security practices until the DPDP obligations commence.

How to execute

Sign on your letterhead and send. No stamp paper needed.

Publish on your website and app and link it at every point where personal data is collected (sign-up, checkout, enquiry forms). The DPDP Rules, 2025 were notified in November 2025 with phased commencement; most substantive obligations apply after an 18-month transition. Until they apply, Section 43A of the IT Act, 2000 and the SPDI Rules, 2011 continue to govern — check the current commencement status before publishing.

Click anywhere in the letter to edit it. Changes to the form keep flowing in.

This is a general template, not legal advice. Laws, stamp duty and procedures vary by state and change over time — have a qualified advocate review it for your facts before signing or sending.