Customer Onboarding Consent Notice

CUSTOMER ONBOARDING CONSENT NOTICE

Service Provider: [Organization Name]
Product/Service: [Product Name]
Effective Date: [Effective Date]

1. BEFORE YOU PROCEED
As required under Section 5 of the DPDP Act, 2023, we are providing you this itemised notice before we collect your personal data to set up your account and deliver [Product Name] to you.

2. DATA WE WILL COLLECT AT ONBOARDING
   - Identity data: full name, date of birth, government-issued ID number (for KYC purposes, where applicable)
   - Contact data: email, mobile number, billing/shipping address
   - Financial data: payment instrument details (processed by our PCI-DSS compliant payment partner [Vendor Name]; we do not store full card numbers)
   - Preference data: product preferences, communication preferences

3. PURPOSE OF EACH DATA CATEGORY
   - Identity/KYC data: fraud prevention and regulatory compliance (legitimate use under Section 7, where mandated by law)
   - Contact data: account creation, service delivery, transactional communication (order confirmations, invoices, service alerts)
   - Financial data: payment processing and refunds
   - Preference data: personalising your experience (processed only with your consent below)

4. CONSENT
   [ ] I consent to [Organization Name] processing my identity, contact, and financial data to create my account and deliver the service, as described above.
   [ ] I additionally consent to my preference data being used to personalise recommendations shown to me within the product.
   [ ] I additionally consent to receiving promotional communications (see our separate Marketing Communications Consent Notice for details and opt-out).
Consent for account creation and service delivery is necessary to use [Product Name]; the additional boxes are optional and can be left unchecked without affecting your ability to sign up.

5. FREE, SPECIFIC, AND WITHDRAWABLE CONSENT
Your consent is entirely voluntary and unconditional. You may withdraw any of the optional consents at any time from Account Settings > Privacy, with the same ease as you gave it, without needing to contact support.

6. DATA SHARING
We share data strictly on a need-to-know basis with: payment gateway [Vendor Name], logistics partner [Vendor Name], and cloud hosting provider [Vendor Name], each bound by a written data processing agreement.

7. SECURITY
Your data is encrypted in transit and at rest, and access is restricted to authorised personnel with logs retained as prescribed under the DPDP Rules, 2025.

8. YOUR RIGHTS
You can access, correct, or request erasure of your data (Sections 11-12), nominate a representative (Section 14), and raise grievances with our Grievance Officer (Section 13) before approaching the Data Protection Board of India.

9. CONTACT
Grievance Officer / DPO: [Name]
Email: [Email Address] | Phone: [Phone Number]

By clicking "Create Account", you confirm you have read this notice and provided the consents you have checked above.