Data Protection & Compliance

Privacy Notices, Consent and Safeguards, With Support to Put Them in Place

Under the Digital Personal Data Protection (DPDP) Act, 2023, people must be told clearly what data you collect and why, and your business needs safeguards and processes behind that promise. We prepare privacy notices, consent and breach management mechanisms, security safeguards and incident registers for how your business really works, and support your team while they put them in place, with privacy professionals and lawyers associated with Vectis Trust and Brain. Pricing starts from Rs. 75,000 + GST.

What you receive

  • Privacy notices for customers, staff and website visitors
  • Consent management mechanisms and consent wording for forms, WhatsApp, ads and offline registers
  • Opt-out and withdrawal process
  • Security safeguards suited to your data
  • Breach management mechanism and incident registers

and 4 more

  • PricingFrom Rs. 75,000 + GST, based on your requirement
  • Written forYour real tools and purposes
  • Prepared withPrivacy and legal professionals
  • Carried out byYour team, with our support

The problems we solve

Does this sound familiar?

These are the everyday challenges we help businesses solve.

  1. Your privacy policy was copied from another site

    It names tools you do not use and misses the ones you do.

  2. Nobody could understand the notice

    The law expects a clear notice, and pages of legal language do not help your customers.

  3. Marketing and service consent are mixed up

    One tick box cannot honestly cover service messages, offers and sharing with partners.

  4. There is no plan for a breach

    When something goes wrong, nobody knows who decides, who to tell or what to record.

Who this is for

Businesses with an old or copied privacy policy, those collecting consent informally on WhatsApp or paper, and companies that share customer data with agencies, software or AI tools. It works best after an initial assessment.

Why plain language matters

Under the Act, a notice has to be something a person can understand on its own. A short, honest notice in plain English or Malayalam serves your customers better than a long document nobody reads, and it is easier to keep true.

Your team does the work, with support

Actual implementation is carried out by your team, because they know your systems and will keep running them. We prepare what they need, guide them and review the results. If you do not have the technical people, our technical implementation service can build it for you. See all our DPDP compliance services.

This page is general information, not legal advice.

Pricing

From Rs. 75,000 + GST.

The price depends on how many processes, systems and teams are involved. This is a starting price. Once we understand your requirement, your written proposal gives one final price that includes everything agreed.

How the work runs

How implementation support runs.

We start from what you do, and only then write.

  1. Understand

    We use your initial assessment, or build a short one, so everything describes reality.

  2. Prepare

    Privacy and legal professionals prepare the documents and mechanisms in clear language.

  3. Review

    Your team checks that every statement is true of your business.

  4. Support

    Your team puts the changes in place, and we guide them and check the evidence that they work.

Included

What you receive

Your written proposal confirms exactly what is included for your scope.

  1. Privacy notices for customers, staff and website visitors

  2. Consent management mechanisms and consent wording for forms, WhatsApp, ads and offline registers

  3. Opt-out and withdrawal process

  4. Security safeguards suited to your data

  5. Breach management mechanism and incident registers

  6. Retention and deletion rules

  7. A process for access, correction, deletion and grievance requests

  8. Data protection terms for vendors and agencies

  9. Implementation support for your team, against agreed milestones

Questions

Questions about DPDP implementation support

Who actually carries out the changes?

Your own team does, with our guidance. If you want the changes built in your website, CRM, WhatsApp or automation for you, our technical team can do that through our technical implementation service.

How much does it cost?

Pricing starts from Rs. 75,000 + GST. Once we understand your requirement, your written proposal gives one final price that includes everything agreed.

What must a privacy notice under the DPDP Rules say?

In clear and plain language, it should describe the personal data you collect, the specific purposes, and how people can withdraw consent, exercise their rights and complain to the Data Protection Board. Your legal adviser will confirm the details for your case.

Can a notice be in Malayalam?

The Act gives people the option of reading a notice in English or in languages listed in the Constitution, which include Malayalam. For Kerala customers that matters. Ask us about Malayalam versions.

Is a pre-ticked box valid consent?

Consent has to be free, specific, informed, unconditional and unambiguous, given through a clear affirmative action. A pre-ticked box does not fit that.

Can we use one consent for everything?

Usually no. Consent is tied to specific purposes, and it should be possible to refuse marketing while still receiving the service.

Will documents alone make us DPDP-ready?

No. A notice that promises an opt-out needs a working opt-out. That is why this service includes support against agreed milestones while your team makes the changes.

Next step

Replace the copied policy with one that is true.

Message us on WhatsApp with a link to your current privacy policy. We reply with what needs to change and a starting quote.

  • Message or call
  • English or Malayalam
  • Clear next steps