DPDP NavigatorAct 2023 · Rules 2025
All templates
Notices & ConsentSection 5

Website Cookie Consent Notice

A layered cookie/consent banner and detailed notice for websites that process personal data of visitors in India.

Template
WEBSITE COOKIE & TRACKING CONSENT NOTICE

Operated by: [Organization Name]
Website: [Website URL]
Effective Date: [Effective Date]

1. WHY YOU ARE SEEING THIS NOTICE
[Organization Name] ("we", "us") uses cookies, tags, pixels, SDKs, and similar technologies on this website to operate core features, remember your preferences, measure usage, and (where you consent) show relevant advertising. Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we must give you clear, itemised notice before we process your digital personal data and obtain your free, specific, informed, unconditional and unambiguous consent (Sections 5 and 6) unless the processing falls under a permitted legitimate use (Section 7).

2. CATEGORIES OF COOKIES USED
   a. Strictly Necessary Cookies — [e.g., session management, load balancing, security] — do not require consent as they are essential to deliver the service you requested.
   b. Functional Cookies — [e.g., language preference, saved cart] — used to enhance your experience.
   c. Analytics Cookies — [e.g., page-view and behaviour analytics via Google Analytics / [Tool Name]] — used to understand site usage.
   d. Advertising/Targeting Cookies — [e.g., retargeting pixels, ad-network identifiers] — used to personalise ads shown to you on this and other sites.

3. PERSONAL DATA COLLECTED VIA COOKIES
IP address, device identifiers, browser type, approximate location, pages visited, click-stream data, and [other categories]. This data is processed for the specific purpose(s) stated in Section 2 above and no other purpose, unless we notify you and obtain fresh consent.

4. YOUR CONSENT CHOICES
On your first visit, you will see a banner offering:
   - "Accept All" — consent to all categories above.
   - "Reject Non-Essential" — only Strictly Necessary Cookies will be set.
   - "Manage Preferences" — granular, category-wise consent toggles.
Your consent choice is recorded with a timestamp and consent version identifier and is stored for [retention period, e.g., 12 months] or until you change it.

5. WITHDRAWAL OF CONSENT
You may withdraw consent at any time with the same ease as giving it, by clicking "Cookie Preferences" in the website footer or by using your browser's cookie controls. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may cause parts of the website to function differently.

6. THIRD PARTIES WHO MAY RECEIVE DATA
[List of third-party processors/ad networks/analytics providers], each of whom processes data strictly under our instructions pursuant to a written contract as required under Section 8 of the DPDP Act.

7. RETENTION AND ERASURE
Cookie-derived personal data is retained only as long as necessary for the stated purpose or as required by law, after which it is erased or anonymised in line with our Data Retention Policy.

8. YOUR RIGHTS
You may exercise your rights to access, correction, erasure, grievance redressal, and nomination as described in our Privacy Policy. To exercise these rights, contact our Grievance Officer at [DPO/Grievance Officer Email].

9. CHANGES TO THIS NOTICE
We will notify you via a banner update and update the "Effective Date" above whenever we materially change our cookie practices.

Grievance Officer / Data Protection Officer: [Name]
Email: [Email Address] | Address: [Postal Address]

This template is a starting point, not legal advice. Have it reviewed by qualified counsel before use, and adapt bracketed placeholders to your organization's facts.