Privacy Policy Generator

PRIVACY POLICY
[Organization Name]
Effective date: [Insert date]

This Privacy Policy explains how [Organization Name] ("we", "us", "our") collects, uses,
discloses, and protects personal data in connection with [website URL], in
accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act")
and the DPDP Rules, 2025.

1. PERSONAL DATA WE COLLECT
   - [Select data categories]

2. HOW WE USE YOUR PERSONAL DATA
   We process your personal data only on the basis of your consent under
   Section 6 of the DPDP Act, or where a legitimate use under Section 7
   applies (such as compliance with law or a medical emergency).

3. HOW WE SHARE YOUR PERSONAL DATA
   We may share personal data with the following categories of Data
   Processors, each engaged under a valid contract as required by
   Section 8(2) of the Act:
   - [Select processor categories]

4. INTERNATIONAL DATA TRANSFERS
   No
   Any such transfer is made consistent with Section 16 of the DPDP Act
   and any applicable Central Government notifications restricting
   transfer to specific countries or territories.

5. DATA RETENTION
   [retention approach]
   We erase personal data once its purpose is no longer served or consent
   is withdrawn, whichever is earlier, in line with Section 8(7).

6. CHILDREN'S DATA
   We do not knowingly collect or process personal data of children (individuals below 18 years of age). If we become aware that we have inadvertently done so, we will take steps to erase it.

7. SECURITY SAFEGUARDS
   We implement reasonable technical and organisational measures — including
   encryption, access controls, and monitoring — to protect your personal
   data, in accordance with Section 8(5) of the Act and the DPDP Rules.

8. YOUR RIGHTS
   Under Chapter III of the DPDP Act, you have the right to access a
   summary of your personal data, correct or erase it, seek grievance
   redressal, and nominate another individual to exercise these rights on
   your behalf in the event of your death or incapacity.

9. GRIEVANCE REDRESSAL
   Contact: [grievance email]
   We will respond within the timeframe prescribed under the DPDP Rules.
   If unresolved, you may approach the Data Protection Board of India
   after exhausting this mechanism.

10. CHANGES TO THIS POLICY
    We may update this Privacy Policy from time to time. Material changes
    will be notified through [website URL] or by direct communication.

---
Generated with the DPDP Navigator Privacy Policy Generator.
This draft is a starting point only — have it reviewed by qualified legal
counsel before publishing.