DPDP Compliance
You have your customers' names, numbers and addresses on a phone. That is now regulated.
India's Digital Personal Data Protection Act applies to businesses of every size — including yours. We make you compliant without turning your business into paperwork: consent done properly, data handled correctly, notices in the languages your customers read.
from ₹50,000 + GST
Demo
DPDP COMPLIANCE
13 MAY 2027 — POORI TARAH LAAGU. KOI CHHOOT NAHI.
JURMANA — kanoon mein likha hua
Aur yeh judte hain. Ek hi gadbad mein teen alag jurmane lag sakte hain — data na sambhalna, na batana, aur Board ko na batana. Teenon alag-alag.
PAR SEEDHI BAAT — aapke naap ka sach
Aap par ₹250 crore nahi lagega. Woh number badi companiyon ke liye hai, aur Board jurmana gadbad ke naap ke hisaab se tay karta hai.
Aapke saath jo hoga woh yeh hai: ek shikayat, ek jaanch, aur woh kagaz maange jaayenge jo aapke paas hain hi nahi. Us jaanch mein vakeel ka kharcha, waqt, aur naam — teenon jaate hain, jurmana lage ya na lage.
Aur doosri cheez usse pehle aayegi: badi companiyaan aur tender aapse yeh kagaz maangne lagenge. Woh May 2027 ka intezaar nahi karte.
Yeh zaroori kyun hai
Kanoon ki baat baad mein. Pehle yeh dekhiye ki hota kya hai.
Teen halat. Teenon aam hain. Har ek mein do raaste dikhte hain — taiyaar na hone par, aur taiyaar hone par.
Hum kya karte hain
Vakeel kagaz deta hai. Hum data ka raasta badalte hain.
Hum vakeel nahi hain, aur na hone ka daava karte hain. Kanooni raay chahiye toh vakeel hi chahiye — aur woh mod aane par hum khud bol denge. Hamara kaam alag hai: data aata kaise hai, rakha kaise jaata hai, aur mitta kaise hai.
Hum hi kyun
Kyunki jahan data aata hai, woh cheez hum banate hain.
Ijaazat wahin lagti hai jahan naam-number andar aata hai. Baad mein chipkane wali cheez nahi hai.
Zyadatar dhandhon mein data WhatsApp se aata hai. Vakeel us jagah tak pahunchta hi nahi.
Notice likhna aur uska asal mein lagna — do alag kaam hain. Do alag logon se karwane mein hi cheezein chhoot jaati hain.
Har hissa kab milega, likh ke. Der hui toh woh kaam free. Baaki jagah yeh kaam mahino kheenchta hai.
Saath mein yeh bhi chalta hai
Ijaazat lene ka kaam usi jagah ban jaata hai jahan grahak aata hai.
Baat karo → 72-Hour WebsiteForm, notice aur ijaazat — nayi site mein pehle din se sahi.
₹49,000 → E-commerce StoreJahan payment aur pata dono aate hain, wahan yeh sabse zaroori hai.
Baat karo →Ek baar ka kaam — mahine ka bill nahi
Does this sound familiar?
- Ten thousand customer numbers in a spreadsheet, on a laptop, in a shop, with no password on it.
- You send WhatsApp offers to everyone who ever bought from you. Nobody ever agreed to receive them.
- A corporate client sent you a data-protection questionnaire and you had no idea how to answer it.
- Your website form collects names and numbers and there is nothing on the page telling anyone what happens to them.
This is for you, if
- You collect names, numbers, addresses or health details — which is nearly every business.
- You run WhatsApp marketing, a customer database, or a website with a form.
- You work with larger companies who are starting to ask you compliance questions.
- You'd rather sort this quietly now than after a complaint.
This is not for you, if
- You want a privacy policy PDF to paste on your site and forget. That's not compliance, that's decoration.
- You're looking for a certificate to frame. There isn't one — this is about how you actually handle data.
How the work happens
- 1
We find out what data you actually hold
Phone contacts, spreadsheets, billing software, website forms, CCTV, WhatsApp. Most businesses are surprised by this list.
- 2
We fix the collection points
Consent taken properly where data enters — website, WhatsApp, in-store forms — in the languages your customers actually read.
- 3
We write the documents that fit you
Privacy notice, consent text, retention rules and a breach plan. Written for your business, not copied from a template.
- 4
We set up the ongoing bits
How to handle someone asking for their data or asking you to delete it, how long you keep things, and who in your team does what.
What you get in hand
- A clear picture of what personal data your business holds and where it sits.
- Consent collection fixed at every point data enters — website, WhatsApp, forms, in person.
- A privacy notice written for your business, in the languages your customers read.
- Retention and deletion rules, so you stop holding data you have no reason to keep.
- A simple process for handling data requests and complaints, so nobody panics when one arrives.
- A short written summary you can hand to any corporate client who asks how you handle data.
A template privacy policy vs actual compliance
Compliant, without becoming a paperwork business.
- You stop carrying an obvious risk that grows quietly with every customer you add.
- Corporate clients and tenders stop being blocked by questions you can't answer.
- Your WhatsApp marketing gets a proper consent basis, so it doesn't become a liability.
- You hold less data, which means less to lose and less to worry about.
- Customers see that you take their details seriously, which is itself worth something.
- It's proportionate — a shop is not treated like a bank, and you're not sold work you don't need.
Your questions
Does this really apply to a small business?
Yes. The DPDP Act applies based on whether you handle personal data, not on your turnover. Small businesses get some easier obligations, but not exemption. If you hold customer numbers, you're covered.
What are the penalties?
The Act provides for significant financial penalties, decided by the Data Protection Board based on the nature and seriousness of the breach. We won't quote a scary number at you — the practical risk for most small businesses is a customer complaint or a corporate client walking away.
Are you lawyers?
No, and we'll say that plainly. We do the practical implementation — data mapping, consent, notices, process, technical fixes. For a legal opinion on a specific dispute, you need a lawyer, and we'll tell you when you've reached that point.
Will this stop my WhatsApp marketing?
No, but it changes how consent is taken so it stands up. Marketing to people who genuinely opted in also performs better — you stop paying to annoy people who were never going to buy.
How long does it take?
Two to four weeks for most small businesses. Longer if you hold sensitive data — health records, children's data — where the requirements are stricter.
Is this a one-time thing?
The setup is one-time. If your business changes — new systems, new data, new services — it needs revisiting. We'll tell you when, rather than putting you on a monthly retainer for a job that's done.
The database on your phone is an asset until the day it becomes a liability.
Nothing announces that day. It arrives as one complaint, or one corporate client's questionnaire, or one lost laptop. Getting this right takes a few weeks and then stops being something you think about.
from ₹50,000 + GST
