Guides
Practical DPDP guides, written to be used
No fluff, no fear-selling. Checklists and how-tos for the people who actually have to do the work, kept current as the Rules roll out.
- Guides8 min read
How long can you keep customer data? DPDP retention, the Third Schedule, and the RBI conflict
DPDP says erase when the purpose is served. RBI says keep KYC for years. The Companies Act wants invoices for eight. Here is how retention actually works when the laws point in opposite directions.
For anyone who has ever wondered if they can delete that old spreadsheet - a defensible retention position - what to keep, how long, under which law, and why
Jul 21, 2026
- Explainers6 min read
Consent Manager vs consent banner: which one does the DPDP Act require?
The most confused question in DPDP compliance. Short answer: valid consent behaviour on your website is YOUR duty; a registered Consent Manager is optional infrastructure most businesses will never need.
For founders deciding what to buy before may 2027 - know exactly which of the two you need - and what each costs you
Jul 19, 2026
- Guides7 min read
What a DPDP consent banner must actually do (most get this wrong)
A banner that shows a notice but fires trackers anyway fails Section 6. The five behaviours a compliant banner needs, what GDPR-template banners get wrong in India, and how to test yours in a minute.
For anyone who owns a website with analytics or ads - a five-point behaviour test you can run on your own banner today
Jul 19, 2026
- Templates7 min read
The processor agreement: what to sign with every vendor
Couriers, payment gateways, CRMs, email tools - each one processes your customers' data on your behalf, and the DPDP Act makes YOU answerable for them. The starter checklist to get signatures on.
For owners and ops leads who sign vendor contracts - a clause-by-clause starter you can send to vendors today
Jul 15, 2026
- Ecommerce7 min read
The DPDP checklist for ecommerce stores
Names, phones, addresses, payments - an online store touches more personal data than almost any other small business. Here is the checklist, in the order that matters.
For store owners and ops teams - a six-step checklist you can finish in a sprint
Jul 10, 2026
- Small business6 min read
The 30-minute DPDP guide for small business owners
You run a shop, a clinic, a salon, a sweet shop with a website. No legal team, no time. Here is what the DPDP Act actually asks of you, in half an hour.
For owners without a legal team - the whole law, mapped to 30 minutes of your time
Jul 3, 2026
- Consent6 min read
Consent under DPDP: what your forms must change
Pre-ticked boxes, bundled agreements, and walls of text all fail the DPDP Act's consent test. What valid consent looks like on a real signup and checkout form.
For whoever owns your forms - six form patterns fixed, with the section behind each
Jun 24, 2026
- Engineering8 min read
Personal data in your database: masking and encryption for DPDP
The website is where data enters; the database is where it lives. A practical guide to finding personal data in your schema and deciding what to encrypt, mask, and delete.
For developers and db admins - a column-level plan: encrypt, mask, hash, delete
Jun 12, 2026