DPDPOne — DPDP Compliance Platform

Important: Legal Review Required Before Publication

This tool generates a starting-point template for a DPDP Act privacy notice based on the information you provide. It does not constitute legal advice and is not a substitute for review by a qualified legal professional who understands your specific business practices, data flows, and applicable regulatory obligations.

Before publishing this notice, you must: (1) have it reviewed by a lawyer or data protection professional; (2) verify that it accurately reflects all personal data you collect, all purposes of processing, your actual retention schedules, and your appointed Grievance Officer's correct contact details; and (3) ensure it covers any sector-specific requirements that may apply to your organisation.

DPDPOne and Mahadev Consultancy are technology service providers, not legal advisors. We are not responsible for any regulatory, legal, or business consequences arising from publishing a notice that has not been independently reviewed and validated.

I understand that this generated notice is a template only, requires legal review before publication, and does not constitute legal advice. I accept full responsibility for verifying its accuracy and suitability for my organisation.

Organisation Details

Basic information about your organisation that will appear in the notice.

Organisation Name*

0/200

Registered Address*

0/500

Contact Email*

0/254

Website URL

0/253

Effective Date

Sector *

Data Retention Approach

How does your organisation determine how long to keep personal data?

Until the purpose is fulfilled

Data is kept only as long as needed and deleted once the purpose is met.

As required by law or regulation

Data is retained for the period mandated by applicable law.

For a specific period

State the specific duration after which data is deleted.

Grievance Officer Contact

The person or team who handles data rights requests and complaints from individuals.

Grievance Officer Name*

0/100

Grievance Officer Email*

0/254

PhoneOptional — Indian mobile or landline

0/15

Organisation contact email is the same as the grievance officer email above

Legal Basis for Processing

Select the DPDPA ground(s) on which your organisation processes personal data.

Consent (Section 6)

Legitimate use — state functions (Section 7(a))

Legitimate use — compliance with legal obligations (Section 7(b))

Legitimate use — medical emergency (Section 7(c))

Legitimate use — epidemic or public health (Section 7(d))

Legitimate use — employment or labour law (Section 7(e))

Legitimate use — vital interests (Section 7(f))

Data Sharing & International Transfers

Disclose whether you share data with third parties or transfer it outside India.

Does your organisation share personal data with third parties?

Does your organisation transfer personal data outside India?

Cookies & Tracking

Indicate whether your website or app uses cookies or similar tracking technologies.

Does your website or app use cookies or similar tracking technologies?

Important: Legal Review Required Before Publication

Organisation Details

Basic information about your organisation that will appear in the notice.

Organisation Name*

0/200

Registered Address*

0/500

Contact Email*

0/254

Website URL

0/253

Effective Date

Sector *

Data Retention Approach

How does your organisation determine how long to keep personal data?

Until the purpose is fulfilled

Data is kept only as long as needed and deleted once the purpose is met.

As required by law or regulation

Data is retained for the period mandated by applicable law.

For a specific period

State the specific duration after which data is deleted.

Grievance Officer Contact

The person or team who handles data rights requests and complaints from individuals.

Grievance Officer Name*

0/100

Grievance Officer Email*

0/254

PhoneOptional — Indian mobile or landline

0/15

Organisation contact email is the same as the grievance officer email above

Legal Basis for Processing

Select the DPDPA ground(s) on which your organisation processes personal data.

Consent (Section 6)

Legitimate use — state functions (Section 7(a))

Legitimate use — compliance with legal obligations (Section 7(b))

Legitimate use — medical emergency (Section 7(c))

Legitimate use — epidemic or public health (Section 7(d))

Legitimate use — employment or labour law (Section 7(e))

Legitimate use — vital interests (Section 7(f))

Data Sharing & International Transfers

Disclose whether you share data with third parties or transfer it outside India.

Does your organisation share personal data with third parties?

Does your organisation transfer personal data outside India?

Cookies & Tracking

Indicate whether your website or app uses cookies or similar tracking technologies.

Does your website or app use cookies or similar tracking technologies?

Privacy Notice Generator

Important: Legal Review Required Before Publication

Organisation Details

Personal Data You Collect

Purpose of Collection

Data Retention Approach

Grievance Officer Contact

Legal Basis for Processing

Data Sharing & International Transfers

Cookies & Tracking

Privacy Notice Generator

Important: Legal Review Required Before Publication

Organisation Details

Personal Data You Collect

Purpose of Collection

Data Retention Approach

Grievance Officer Contact

Legal Basis for Processing

Data Sharing & International Transfers

Cookies & Tracking