Free tool

Free privacy policy generator for Indian websites

Answer a few questions and get a clear privacy policy written for India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

Works in your browser. What you type is never sent to us or stored.

01 Your business
02 What does your website collect?
03 Tools on your website
04 A few more details

Your privacy policy

Fill in your business name and email to generate your policy.

Before you publish: this is a starting template based on India’s Digital Personal Data Protection Act, 2023 and the IT Act, 2000, generated by Social Dealers. It isn’t legal advice.

  • Have it checked by a lawyer (and your CA for any tax or payment points).
  • Make sure every line matches what your business really does.

Need the rest of the legal pages too? Our websites come with privacy, terms, refund and cookie pages that match how your site really works, plus a proper cookie banner.

Talk to us →

Does my website need a privacy policy?

If your website collects any personal data, such as a name and phone number from an enquiry form, then yes. India’s Digital Personal Data Protection Act, 2023 (DPDP Act) requires businesses to tell people what data they collect, why, and how to exercise their rights. The older Information Technology Act rules also expect a published privacy policy. Payment gateways (Razorpay, Cashfree, Stripe and others), Google Ads and Meta ads all ask for one too.

What the DPDP Act expects from a small business

  • A clear notice: what personal data you collect, and why, in plain language.
  • Consent that is free, specific and easy to withdraw, or another lawful reason (a “legitimate use”).
  • Only what you need: collect and keep only the data your purpose needs, then delete it.
  • Reasonable security, and telling people and the Data Protection Board if a breach affects them.
  • People’s rights: access, correction, erasure, withdrawal of consent, grievance redress and nomination.
  • A contact for complaints (this tool names a Grievance Officer).
  • Extra care for children: parental consent for anyone under 18, and no tracking or targeted ads aimed at them.

The DPDP Rules were notified in November 2025, and most duties take effect in phases after that. Getting a clear policy in place now puts you ahead.

How to use your policy

  1. Fill in the form. The preview updates as you type.
  2. Read it carefully and make sure every line is true for your business. Remove anything you don’t do and add anything special you do.
  3. Copy it to a page called “Privacy Policy” on your website, and link to it from the footer of every page and next to your forms.
  4. Update it whenever you add a new tool (such as a new analytics or payment provider), and change the “Last updated” date.

A privacy policy only helps if your website really works the way it says. For example, if it says you ask before using analytics cookies, your website needs a working cookie banner that does exactly that.

FAQ

Common questions

Is this policy legally enough for my business?
It’s a solid starting template that covers what the DPDP Act and IT Act expect from a typical small business website. It isn’t legal advice. Every business is different, so check that it matches what you really do, and get professional advice if you handle sensitive data such as health or financial records.
Do I need a cookie banner as well?
If you use analytics, advertising or recording tools that aren’t strictly needed for the website to work, it’s good practice under the DPDP Act to ask for consent first. Your banner and your policy should match.
Is it free to use commercially?
Yes. The policy you generate is yours to use on your own website, free of charge.
Do you see what I type?
No. The policy is built in your browser. Your business details are never sent to our servers.
Who should be the Grievance Officer?
For a small business, usually the owner or a partner or director, someone who can actually act on a complaint. Use a contact email that is checked regularly.

Got something to grow?

Let’s make
it bigger.