Website Terms, Privacy Policy & Cookie Policy
Under the IT Act, 2000, and the Digital Personal Data Protection Act, 2023, any website or app collecting user data must have a Privacy Policy and Terms of Use. Non-compliance exposes you to regulatory action and user claims.
What is Website Terms, Privacy Policy & Cookie Policy?
Website policies are legally required documents that govern the relationship between a website/app and its users. In India, these are mandated by the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act). The DPDP Act introduces new obligations for websites: lawful basis for processing, data principal rights, data fiduciary obligations, and breach notification requirements. Generic templates are inadequate — policies must be tailored to your specific data practices and business model.
What you get
- Privacy Policy compliant with DPDP Act, 2023
- Terms and Conditions / Terms of Use
- Cookie Policy (if applicable)
- Data retention and deletion policy
- User rights and grievance redressal mechanism
- Refund and cancellation policy (for e-commerce)
- Disclaimer (for advisory or informational websites)
- Word + PDF format
Documents required
- Website / app URL and business description
- Types of personal data collected (name, email, phone, payment data, etc.)
- How data is used and stored
- Third-party services integrated (payment gateways, analytics, advertising)
- Whether users are minors / whether age verification is in place
- Countries where data is transferred (for cross-border processing)
- Grievance officer details
How it works
Describe Your Data Practices
Tell us about your website, what data you collect, how you use it, and any third-party integrations.
Lawyer Drafts
We draft DPDP-compliant policies tailored to your specific data practices, business model, and user base.
Review & Approve
Review the draft policies and confirm they accurately reflect your practices. We incorporate any corrections.
Publish & Display
Publish on your website with prominent links in the footer and at data collection points (signup forms, checkout). We advise on consent mechanism requirements.
Pricing on Request
Every situation is different — get a custom quote tailored to your exact needs.
Frequently asked questions
What is the Digital Personal Data Protection Act, 2023?
The DPDP Act is India's first comprehensive data protection legislation, enacted in August 2023. It requires businesses (called "data fiduciaries") to collect personal data only for lawful purposes, obtain valid consent, implement security safeguards, and provide users (data principals) rights to access, correct, and erase their data. Rules under the Act are being notified progressively.
Do I need a Privacy Policy if my website only has a contact form?
Yes. Any collection of personal data — including a name and email address through a contact form — creates obligations under the IT Rules, 2011, and the DPDP Act. A Privacy Policy is mandatory and must be accessible to users before they submit data.
Is a generic template from the internet sufficient?
No. Generic templates are often drafted for GDPR (European law) or US law and do not comply with Indian requirements — particularly the IT Rules, 2011, and the DPDP Act. Indian law has specific requirements on grievance officer appointment, data localisation considerations, and breach notification.
What is a Grievance Officer and is it mandatory?
Under the IT Rules, 2011, every intermediary (which includes most websites and apps) must designate a Grievance Officer to receive and resolve complaints. The officer's name and contact details must be published on the website. Non-compliance can attract penalties.
Do I need a Cookie Policy separately?
A Cookie Policy is recommended (and in some interpretations required) if your website uses tracking cookies for analytics or advertising. It should explain what cookies are used, their purpose, duration, and how users can manage or opt out of them. We include this as part of the privacy policy package or as a standalone document.
Ready to get started with Website Terms, Privacy Policy & Cookie Policy?
Get expert help within 24 hours. Free consultation — no commitment required.