Legal Documents & Contracts
How to write a return and refund policy for your website?
The digital space of e-commerce is ever-evolving. However, the most important aspect of the success of any online business is the trust factor.
6 min read
Privacy Policy Drafting Services
The notice that tells your users what happens to their data. India now has a standalone data protection law, so a policy written against the old IT Rules alone is no longer enough.
- Written against the Digital Personal Data Protection Act, 2023
- GDPR and CCPA covered where you have users in the EU or California
- Every consent you rely on identified, and how you obtain it
+2 moreShow less
- Drafted after research into what your business actually collects
- A team of lawyers, chartered accountants and company secretaries behind it
Get started today
Close the formA few details, then secure checkout. Your expert takes it from there.
- Your details stay confidential
- Secure online payments
- Queries answered in 24 business hours
- 10,000+ Businesses served
- 100% Satisfaction Guarantee policy
- 4.7/5 Ratings On Google
Prefer to talk to someone first?
What a privacy policy is
A legal document telling users what data you collect about them, why, and what you do with it.
A privacy policy is a legal document, and it is mandatory for anyone providing services or information over the internet: software applications, mobile applications, e-commerce websites, social media and blogging platforms among them.
It provides a guideline to users about the extent to which their data is collected and used, or intended to be used, by the developer or owner. Unlike terms and conditions, it is not a legally binding agreement. It is a notice, and there is nothing in it for the user to accept.
India now has a standalone data protection statute. The Digital Personal Data Protection Act, 2023 sits alongside the Information Technology Act, 2000 and its 2011 rules, and it changes what a policy has to say: consent has to be free, specific, informed and unambiguous, the notice asking for it has to be in plain language, and users have rights of access, correction and erasure that the policy has to tell them how to use. Any policy written before 2023 needs revisiting.
- What it is
- A notice
- Not an agreement
- Required for
- Any online service
- Sites, apps, platforms
- India
- DPDP Act, 2023
- Being brought into force in stages
- And
- IT Act and 2011 Rules
- European Union
- GDPR
- If you have EU users
- California
- CCPA
- User accepts it
- No
- It informs rather than binds
Why businesses choose LegalWiz.in
- A team of experienced lawyers, chartered accountants and company secretaries
- Our team speaks to every client and takes their view before drafting anything
- Extensive research into your business activity before the policy is written
- A fully compliant privacy policy rather than a template with your name on it
- Thousands of businesses served across every state in India
What the policy has to cover
Six things at a minimum, and the first is the one small businesses leave out.
- Basic information about the business behind the website or app
- The details of the information collected from users
- The purpose for which it is collected
- How the information collected is stored
- The security measures protecting it
- Any third party that has access to it
Under the DPDP Act the policy also has to tell users how to exercise their rights of access, correction and erasure, and how to withdraw a consent they have given.
Which law reaches you
India
The Digital Personal Data Protection Act, 2023 is the standalone law, in force in stages. The Information Technology Act, 2000 and its 2011 rules on sensitive personal data continue to apply alongside it, and Article 21 of the Constitution carries the right to privacy behind both.
The European Union
Any organisation anywhere providing online services to EU countries has to comply with the General Data Protection Regulation. Where you are based makes no difference.
The United States
The California Consumer Privacy Act protects the personal data of California residents. If you collect it, you follow the CCPA whether or not you have any presence in America.
Why a privacy policy is worth getting right
It increases your credibility
When users see that safe practices are being followed, it increases their faith in the service, and they are likelier to recommend it. A fully compliant policy makes a user trust you more.
It makes you compliant
More than 120 countries have data privacy laws, and India now has its own. Non-compliance leads to heavy penalties and strict consequences.
Third parties ask for it
Investors, Google, Amazon and the other stakeholders in your business may want to see whether you are compliant before they work with you.
It helps avoid lawsuits
Users from anywhere can reach your platform, and protecting yourself from claims of unauthorised third-party access to their data is difficult without a policy that says what you do and do not do.
Privacy policy, terms and conditions, disclaimer
Three documents a site publishes, and only one of them is an agreement. Most sites publish all three under one heading and assume they do the same job.
| Attribute | Privacy policy | Terms and conditions | Website disclaimer |
|---|---|---|---|
| What each one does | |||
| The data you collectWhat personal information the site gathers, why, where it is kept, how it is protected and who else sees it. | The deal with the userHow the site may be used, what the owner promises, payment, the limits of liability and when access may be withdrawn. | The content you publishThat the information on the site is general, that it is not advice to be acted on, and that the owner does not accept responsibility for a reader who treats it as such. | |
| No, a noticeIt tells a user what happens to their data. There is nothing here for them to accept, and no obligation on them. | YesOnce the user clicks "I agree", or continues using a site that says continuing is acceptance, a written offer has been accepted and communicated, which are the three ingredients of a contract. | No, a limitationA statement of what the owner is not responsible for. It is usually written into the terms as well as published on its own. | |
| The user, mostlyIt is a transparency obligation. It protects the owner too, but only by demonstrating that the obligation was met. | The ownerThis is where intellectual property is claimed, misuse is defined, accounts are suspended and liability is capped. | The ownerIt is the answer to a reader who relied on something published on the site and lost money doing it. | |
| Writing one | |||
| Six or so headsWho the business is, what is collected, why, how it is stored, the security measures around it, and any third party that has access to it. | A dozen clausesOwner details, terms of use, payment terms, intellectual property, a description of the service, account rules, warranties, termination, governing law, limitation of liability, future changes, and returns and refunds. | A few paragraphsThe scope of the content, the limits on relying on it, the restrictions on reusing it, and any external links the site carries. | |
| On the sitePublished where a user can reach it, and linked from anywhere personal data is collected: a sign-up form, a checkout, a contact form. | Before acceptanceReachable before the user commits. Terms produced after the transaction are terms the user never agreed to. | ProminentlyDisplayed in a place a reader would be expected to see, rather than buried. A disclaimer nobody could reasonably have read is one nobody agreed to. | |
| Next step | Get started | Know more | Know more |
Swipe the table sideways, Privacy policy stays in view. Open any attribute to read the detail behind all 3 answers.
Customer reviews
What our clients say
- Rated 5 out of 5
Had a great experience with LegalWiz for my trademark registration. The service was smooth, and the after sales support was excellent. Although the filing took around 3 days, the team stayed connected throughout, provided clear updates, and there were no communication issues. Overall, a very professional and reliable experience.
Vishvam PGJune 2026 - Rated 5 out of 5
Had a wonderful experience. The team was very supportive, responsive and completed everything on time. Thank you for the excellent support.
Ujwala ShettyJune 2026 - Rated 5 out of 5
Jignesh was very helpful and amazing while filling the compliance form for my business. Will take your service again.
Sumit YadavApril 2026 - Rated 5 out of 5
Good support team. No hindrance in executions. Go for it.
Upkar ChaurasiyaApril 2026 - Rated 5 out of 5
JIGNESH BHAI, I wanted to take some time to sincerely thank you for your incredible support with my MSME registration through LegalWiz. From start to finish, Jignesh Bhai, your guidance, patience, and professionalism made what could have been a stressful and confusing process feel completely smooth and manageable. You took the time to explain every step clearly, answered all my questions patiently, and ensured that nothing was left uncertain. Your attention to detail and dedication truly stood out, and it gave me a lot of confidence throughout the process. I really appreciate the effort, care, and commitment you put into helping me. Jignesh Bhai, your service has been exceptional, and I couldn’t have asked for a better experience. Heartfelt thanks once again!
Rahul SharmaApril 2026 - Rated 5 out of 5
Highly recommend services from Legalwiz. Got my LLP conversion process faster. Helpful staff.
Sharad PatelJanuary 2026 - Rated 5 out of 5
Limited Liability PartnershipHad a great experience working with the team! They handled my LLP registration smoothly, guided me clearly through every step, and were always quick to respond. Really appreciate their professionalism and support. Highly recommended!
Rishi KhannaJanuary 2026 - Rated 5 out of 5
They are so quick and highly professional and experienced in the industry to carry out the requirement. Loved their services.
SHASHANK S PANDEYJanuary 2026 - Rated 5 out of 5
Trademark RegistrationVery fast & timely service. The team was very helpful and helped me find out if the brand name was available or not over the call itself without any extra cost or charge. Brilliant service, very clear communication, timely delivery & transperant pricing. Cheers!
Naman PiparaOctober 2025 - Rated 5 out of 5
Trademark RegistrationSatisfied with your unit service and fee grateful to connect with you service providers staff thanks regards Shivlal
SHIVLAL MALVIYAOctober 2025 - Rated 5 out of 5
File INC-20AI am very much satisfied with their service for INC 20 A. i will recommend them and definitely will keep in mind for any other service.
MANINDER KaurMarch 2025 - Rated 5 out of 5
Close a Private Limited Companyexcellent, i appreciate accountability and transparency in the process
Aditya BansalMarch 2025 - Rated 5 out of 5
Private Limited CompanyLegalwiz is doing its best to give good service to clients.
Sunil ChauhanMarch 2025 - Rated 5 out of 5
Trademark RegistrationRecently got Trade Mark registered
Devendra DklMarch 2025 - Rated 5 out of 5
Trademark RegistrationIt was an amazing experience from the support team. Thank you...
Aswin MMarch 2025 - Rated 5 out of 5
GST RegistrationHad a Seamless Experience in registering for GST. Been associated with them for 5 yrs now, and have done several LLP and GST registrations. Happy with their service, so i keep coming back.
Mr KarthikFebruary 2025
Your growth
Supported by our partners
Leverage best deals offered by the industry leaders and experience mutual growth.
Have questions? Find answers here
Still have a question? Our team is happy to help, at no charge and with no obligation to buy anything.
Which laws apply to my privacy policy in India?
The Digital Personal Data Protection Act, 2023 is India’s standalone data protection law, being brought into force in stages. It sits alongside the Information Technology Act, 2000 and the 2011 rules on reasonable security practices and sensitive personal data.
A policy drafted before 2023 was written for the second of those alone and will not carry the consent, notice and user-rights obligations the DPDP Act adds.
Is it mandatory to have one for an e-commerce website?
Yes. All e-commerce platforms must have a set of privacy policies to ensure the data protection of their users.
My business is registered in India. Do I still have to comply with the GDPR?
If you collect the information of citizens of any EU member state, yes, regardless of your place of business.
The reason is that the GDPR gives EU citizens governance over websites anywhere in the world that handle their data.
What happens if I do not have one?
More than 120 countries oblige online service providers to comply with norms based on their data privacy laws, and India is now one of them. A hefty penalty is the direct risk; being unable to satisfy an investor or a platform partner is the more common one.
From the blog
Related articles
Legal Documents & ContractsWhat Is A Website Disclaimer: All About The Disclaimer Policy
The dictionary definition of a Disclaimer is a statement that denies something, in most cases a responsibility.
4 min read
Legal Documents & ContractsWhat are Terms and Conditions for online businesses?
With the introduction of artificial intelligence and metaverse, innovation knows no bounds.
5 min read
Get your privacy policy drafted
Researched against your business, and written for the law as it now stands.
Get started- Secure payment
- Prompt support
- Fully online
- No hidden fees