Notices, consent and grievance
Say what you do with data, ask properly, and answer complaints.
Notice, consent and grievance handling are the parts of the Act your customers actually see. We draft them in plain language, design the consent and withdrawal flows, and set up the grievance route and the process behind it.
No fee for the first conversation.
Why it matters
Consent has to be free, specific and clear, as easy to withdraw as to give, and you carry the burden of proving it was given. A vague notice or a pre-ticked box is the quickest way to make it invalid.
What we cover
Privacy notices
Plain-language notices for your website, app and forms, written from how you really use data.
Consent design
Wording, screens and a record of what each person agreed to and when, including how they withdraw.
Grievance route
A named contact, an intake channel, and a response process with timelines and templates.
Children's data
Where you handle children's data: how to obtain and record a parent's or guardian's consent, and what you must not do.
Supporting guidelines
Short internal guidelines so your team applies all of this the same way.
What you receive
- Notices in final wording, ready to publish
- Specifications for consent and withdrawal screens that your developers can build from
- A template for recording who consented to what, and when
- A grievance procedure with response templates
- A round of revisions after your team has reviewed the drafts
Typical timeline. About 3 to 4 weeks from the first call to a set that is ready to go live.
How it works
- 01
Map data uses
We document what you collect, why, and where it is used.
- 02
Draft
Notice, consent wording and grievance process written for your actual practices.
- 03
Design the flows
Consent, withdrawal and complaint journeys for web, app and paper forms.
- 04
Hand over
Your legal and development teams review it with us, and we help you launch.
Who it is for
- Anything with a sign-up form, an app or a customer database
- Teams that collect data through several channels: web, app and paper
- Organisations that handle children's data
What it does not include
- Building the screens or software behind them; we hand your developers the specification
- A legal opinion on a specific dispute
- Translation into other Indian languages, which is scoped separately. Tell us early if you need it
Questions
Will one notice work for our website and app?
We write one core notice and adapt it for each channel, so the wording stays consistent.
What if our business changes?
We write notices in sections, so you can update the part that changes without redrafting everything, and we show you how.
Can you review the consent flow we already have?
Yes. Reviewing an existing flow against the Act is a common starting point, and is often quicker than starting again.
Other DPDP services
- DPDP readiness reviewCheck the evidence behind your answers and turn the free score into a verified baseline, with owners and dates.
- Data mapping and retentionKnow what personal data you hold, where it flows, who else touches it, and when it gets deleted.
- Data principal rights and breach readinessA way to answer rights requests on time, and a breach plan with a real contact list that has been tried.
General advisory, not legal advice or a legal opinion. Where a point needs a lawyer’s view, we will say so. Last reviewed 6 October 2026.