Template library

Website privacy policy

A notice-first privacy policy led by an itemised data–purpose–enablement table, with withdrawal, rights, grievance and Data Protection Board escalation paths and the 22-language option. The public notice every Indian website or app should publish.

An original template, drafted against the DPDP Act, 2023 and DPDP Rules, 2025. Not legal advice — review with counsel before use.

One of 14 DPDPA document templates, drafted in-house against the Act and the Rules. Free to generate as a Word file — no account needed for the preview.

Drafted against G.S.R. 846(E); citations open the gazette text inline.

About this document

What it covers

The placeholders this template asks you to fill in.

[Organisation Name][Website or App Name][Contact Person Name or Role][Contact Email][Data Items, e.g. name, mobile number, delivery address][Specified Purpose][Good, Service or Use Enabled][Further Data Items][Further Specified Purpose][Further Good, Service or Use Enabled][Ground: consent or the section 7 use relied on][Withdrawal Link or Control][Consent Manager Details, if offered][Rights Request Link][Nomination Link][Issued Identifier Types, e.g. your registered email or customer ID][Published Response Period][Grievance Officer Name][Grievance Officer Email][Grievance Link][Board Complaint Channel or Website][Processor Names or Categories][Recipient Fiduciary Names][Sharing Purpose][Retention Summary, e.g. account data until three years after your last login; order records for the period tax law requires][Language Request Channel][Notice Version][Effective Date][Version Archive Location]

The document