DPDP Privacy Notice Template

PRIVACY NOTICE

[Effective Date: ___________]

1. WHO WE ARE

[Company Name] ("we", "us", "our") is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act").

Registered Address: [Full Address]
Contact Email: [Email Address]
Phone: [Phone Number]
Grievance Officer: [Name & Contact]

2. WHAT PERSONAL DATA WE COLLECT

We collect the following categories of personal data:

• Identity Information: Name, date of birth, government ID numbers
• Contact Information: Email address, phone number, address
• Financial Information: Payment details, transaction history
• [Add other categories specific to your business]

DPDP Reference: Section 6(2)(a)

3. PURPOSE OF PROCESSING

We process your personal data for the following purposes:

• To provide our products/services to you
• To process payments and maintain financial records
• To comply with legal obligations
• [Add specific purposes for your business]

DPDP Reference: Section 6(2)(b)

4. DATA RETENTION PERIOD

We retain your personal data for the following periods:
• Customer records: [X years] from last transaction
• Financial records: [X years] as per statutory requirements
• Marketing data: Until consent is withdrawn

DPDP Reference: Section 8(6)

5. YOUR RIGHTS AS A DATA PRINCIPAL

Under the DPDP Act, you have the following rights:

• Right to Access: Request a summary of your personal data
• Right to Correction: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Grievance Redressal: File complaints with our Grievance Officer

DPDP Reference: Sections 12-15

6. HOW TO EXERCISE YOUR RIGHTS

To exercise any of these rights, contact:
Email: [privacy@yourcompany.com]
Phone: [Contact Number]
Portal: [Link to self-service portal if available]

We will respond to your request within 30 days.

7. DATA SHARING

We may share your personal data with:
• Service providers (payment processors, logistics partners)
• Legal authorities when required by law
• [Other third parties with explicit consent]

DPDP Reference: Section 8(8)

8. CROSS-BORDER DATA TRANSFER

[If applicable] Your personal data may be transferred to and stored in countries outside India. We ensure adequate safeguards are in place as required under Section 16 of the DPDP Act.

DPDP Reference: Section 16

9. DATA SECURITY

We implement reasonable security safeguards including:
• Encryption of sensitive data
• Access controls and authentication
• Regular security audits
• Staff training on data protection

DPDP Reference: Section 8(5)

10. GRIEVANCE REDRESSAL

For any privacy-related concerns, contact our Grievance Officer:
Name: [Grievance Officer Name]
Email: [grievance@yourcompany.com]
Address: [Physical Address]

You also have the right to file a complaint with the Data Protection Board of India.

11. UPDATES TO THIS NOTICE

We may update this Privacy Notice from time to time. The "Effective Date" at the top indicates the last revision. Significant changes will be communicated via email or prominent notice on our website.

Last Updated: [Date]
Version: [1.0]