Template library

Website privacy policy

A notice-first privacy policy led by an itemised data–purpose–enablement table, with withdrawal, rights, grievance and Data Protection Board escalation paths and the 22-language option. The public notice every Indian website or app should publish.

An original template, drafted against the DPDP Act, 2023 and DPDP Rules, 2025. Not legal advice — review with counsel before use.

One of 14 DPDPA document templates, drafted in-house against the Act and the Rules. Free to read and generate after a free sign-in. The first clauses are open below.

Drafted against G.S.R. 846(E); citations open the gazette text inline.

About this document

What it covers

The placeholders this template asks you to fill in.

[Organisation Name][Website or App Name][Contact Person Name or Role][Contact Email][Data Items, e.g. name, mobile number, delivery address][Specified Purpose][Good, Service or Use Enabled][Further Data Items][Further Specified Purpose][Further Good, Service or Use Enabled][Ground: consent or the section 7 use relied on][Withdrawal Link or Control][Consent Manager Details, if offered][Rights Request Link][Nomination Link][Issued Identifier Types, e.g. your registered email or customer ID][Published Response Period][Grievance Officer Name][Grievance Officer Email][Grievance Link][Board Complaint Channel or Website][Processor Names or Categories][Recipient Fiduciary Names][Sharing Purpose][Retention Summary, e.g. account data until three years after your last login; order records for the period tax law requires][Language Request Channel][Notice Version][Effective Date][Version Archive Location]

The document

The opening clauses — open to everyone

Who we are and how to reach us

[Organisation Name] runs [Website or App Name]. The person who can answer your questions about how we handle your personal data is [Contact Person Name or Role], at [Contact Email]. This document is written to be understandable on its own — you do not need to read anything else to know what we do with your data.

The data we take, why, and what it enables

This table is the core of this notice. Each row names the exact items we collect, the purpose we collect them for, and the good, service or use that purpose switches on. We list items, not vague categories.

Personal data items

Purpose

What it enables for you

[Data Items, e.g. name, mobile number, delivery address]

[Specified Purpose]

[Good, Service or Use Enabled]

[Further Data Items]

[Further Specified Purpose]

[Further Good, Service or Use Enabled]

Indian law gives us exactly two grounds to process your data: your consent, or one of the specific uses listed in section 7 of the DPDP Act, 2023 — such as something you volunteered data for, or a legal duty on us…