Website forms collect personal data: names, phone numbers, emails. India’s Digital Personal Data Protection Act sets expectations for how businesses handle it.
This is general information, not legal advice. Check the current status of the Act and its rules.
Practical steps for forms
- Collect only what you need.
- Explain why you collect it, near the form.
- Separate, unticked consent for marketing. Read consent checkboxes.
- Link to a clear privacy policy; draft with our privacy policy generator.
Storage and access
- Store form data securely.
- Limit staff access.
- Delete data you no longer need.
- Know where data goes: email, CRM, sheets, third-party tools.
Rights requests
Provide a contact for people to access, correct or delete their data, and respond promptly.
Tracking
Explain analytics and ad tracking in your privacy policy and consider a cookie notice.
Read the DPDP Act for marketers.
Want the full picture? This article is part of Business websites: the complete guide, our in-depth guide with everything in one place.
