Website Terms of Use & Privacy Policy Drafting

Why your website needs proper legal policies

Payment gateways, app stores and marketplaces require a privacy policy, terms of use and refund policy before they approve your account. More importantly, India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the IT Act and the Consumer Protection (E-Commerce) Rules place real obligations on businesses that collect personal data or sell online. Copied policies often promise things you do not do – or miss things the law requires.

Policies we draft

• Privacy policy – what data you collect, why, how long you keep it, who you share it with, and how users can exercise their rights under the DPDP Act.
• Terms of use / terms of service – rules for using your website or app, limitation of liability, IP and governing law.
• Refund and cancellation policy – required by payment gateways and consumer rules.
• Cookie policy and consent wording where needed.
• Shipping and delivery policy for e-commerce.
• Grievance officer details as required for e-commerce and intermediaries.

Policies by type of business

DPDP Act basics for your website

• Notice and consent – tell users clearly what personal data you collect and why, and get their consent where needed.
• Purpose limitation – use data only for the purposes you stated, and keep it only as long as needed.
• User rights – let users access, correct and erase their data, and withdraw consent.
• Grievance redress – give a contact for privacy complaints and respond within the time allowed.
• Security and breaches – protect data with reasonable safeguards, and report breaches as the rules require.

E-commerce rules

Under the consumer protection rules for e-commerce, online sellers and marketplaces must display seller details, a clear price and refund policy, and the name and contact details of a grievance officer, and must acknowledge and resolve complaints within set time limits.

Keep policies current

Update your policies when you add a new feature, start collecting new data, use a new payment or analytics tool, or start selling abroad. Outdated policies are a common reason payment gateways and app stores ask for changes.

Tailored to your business

SaaS products, marketplaces, D2C brands, edtech and healthtech platforms each have different risks. We draft for your actual model and data flows, so your policies are accurate and defensible.