DPDP Privacy Policy & Consent Notice Drafting

About this service

Section 5 of the DPDP Act requires a clear notice before or at the time you ask for consent: what personal data you collect, for what purpose, how a person can withdraw consent, exercise their rights and complain to the Data Protection Board of India. An advocate drafts a privacy policy and consent notice that fits how your business actually uses data, along with the consent checkbox wording and a withdrawal-of-consent process. Scope is for one business entity with one website or app; group companies and larger systems are quoted separately.

What you get

• Privacy policy written for the DPDP Act, 2023 and Rules, 2025
• Consent notice and checkbox wording for sign-up and forms
• Withdrawal-of-consent and grievance-redressal process
• Cookie notice wording
• Two rounds of revisions

How it works

1. 1

   Share details

   Tell us what data you collect and how you use it.

2. 2

   Drafting

   The advocate drafts the policy, consent notice and processes.

3. 3

   Revisions

   Two rounds of changes until it matches your business.

4. 4

   Final copy

   Ready-to-publish text for your website and app.

Documents you will need

• Business name, registered address and grievance contact
• Website or app link and sign-up / enquiry forms
• List of personal data you collect and why
• Vendors you share data with (payments, analytics, SMS, cloud)

Scans or clear photographs are fine. The lawyer handling your matter will tell you if anything else is needed once they have seen your papers.