Get legal & compliant
Data privacy & the DPDP Act
Handle customer data legally under India's DPDP Act.
Do I actually need to worry about DPDP as a small D2C brand, or is this a big-company problem?
DPDP has no small-business carve-out, the moment you collect a customer's name, phone number, address, or payment detail to fulfil an order, you're...
What exactly counts as valid consent under DPDP for my checkout and signup forms?
A single 'I agree to Terms & Privacy Policy' checkbox at checkout doesn't cut it anymore, DPDP Section 6 requires consent to be granular and purpos...
What do I need to put in my privacy policy, and how do I actually draft one?
Skip the generic Shopify/WooCommerce boilerplate privacy policy, it won't map to DPDP's requirement that you itemise each data category (name, phon...
What tools should I use to get DPDP-compliant without hiring a lawyer for every step?
India-built consent management platforms like Digital Anumati plug into Shopify, WooCommerce, and WordPress with one-click installs and handle the ...
What actually happens to my brand if I don't comply, what are the real penalties?
The Data Protection Board can fine up to ₹250 crore for failing to implement reasonable security safeguards and up to ₹200 crore for failing to not...
I sell internationally, do I also need to worry about GDPR on top of DPDP?
Yes, if you have even one EU customer, GDPR applies extraterritorially regardless of where your business is registered, and DPDP compliance doesn't...
Related in Starting Up
Not D2C-specific, so it lives in our founder hub. Same engine, different corner.
Founder pay, personal finance and mixing personal and business money