Back to Blog
Legal Template

WhatsApp Business Privacy Policy Template India 2026 (DPDP Act Compliant)

July 13, 2026 10 min read

Running WhatsApp marketing in India requires a DPDP Act-compliant privacy policy. Use this free template to protect your business from fines up to ₹250 crore. Customize, publish, and stay legal in 2026.

Legal Disclaimer

This template is for informational purposes only and does not constitute legal advice. Consult a lawyer to ensure your privacy policy complies with DPDP Act 2023, IT Act 2000, and other applicable Indian laws.

Why You Need a WhatsApp Privacy Policy (DPDP Act 2023)

The Digital Personal Data Protection (DPDP) Act 2023 requires all businesses in India that collect or process personal data — including WhatsApp phone numbers, names, and order history — to have a privacy policy.

Penalties for Non-Compliance

  • No privacy policy: Up to ₹200 crore fine
  • No valid consent: Up to ₹250 crore fine
  • Data breach + no disclosure: Up to ₹200 crore fine
  • Not honoring opt-out requests: Up to ₹50 crore fine

What Your WhatsApp Privacy Policy Must Include

A DPDP Act-compliant WhatsApp privacy policy must clearly state:

Data collected: Phone number, name, order history, payment info, chat logs
Purpose of collection: Order confirmations, marketing, support, analytics
Legal basis for processing: Explicit consent, contract performance, or legitimate interest
Data retention period: How long you keep phone numbers and messages
Data security measures: How you protect customer data from breaches
User rights: How to access, correct, delete data, and opt out of marketing
Third-party sharing: If you share data with WhatsApp API providers, CRM, or analytics tools
Contact details: Email and address for privacy-related inquiries

WhatsApp Privacy Policy Template (Copy & Customize)

Replace text in [BRACKETS] with your business details. This template covers DPDP Act requirements for Indian businesses using WhatsApp marketing.

WhatsApp Marketing Privacy Policy

Last Updated: [DATE]

[YOUR COMPANY NAME] ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you communicate with us via WhatsApp.

1. Information We Collect

When you interact with us on WhatsApp, we collect:

  • • Phone number (provided by you when you contact us)
  • • Name (if provided)
  • • Order details (product names, order IDs, payment amounts)
  • • Chat history and message content
  • • Delivery address (if applicable)

2. How We Use Your Data

We use your WhatsApp data to:

  • • Send order confirmations, shipping updates, and delivery notifications
  • • Provide customer support and answer your queries
  • • Send marketing messages, promotional offers, and product updates (only if you opted in)
  • • Improve our products and services
  • • Comply with legal obligations under Indian law

3. Legal Basis for Processing (DPDP Act 2023)

We process your personal data under the following legal bases:

  • Consent: You explicitly opted in to receive WhatsApp marketing messages from us
  • Contract performance: Processing is necessary to fulfill your order or provide services you requested
  • Legitimate interest: We have a legitimate business interest in improving customer experience and preventing fraud

4. Data Retention

We retain your WhatsApp data for:

  • Active customers: As long as you remain subscribed to our WhatsApp updates
  • Inactive customers: Up to [24 MONTHS] after your last interaction with us
  • Order data: [5 YEARS] for tax and accounting compliance under Indian law

You can request deletion of your data at any time by contacting us (see Section 8).

5. Data Security

We implement industry-standard security measures to protect your data from unauthorized access, loss, or misuse. Your WhatsApp data is:

  • • Encrypted during transmission (TLS 1.2+)
  • • Stored on secure servers with restricted access
  • • Protected by firewalls and access controls
  • • Subject to regular security audits

6. Sharing Your Data with Third Parties

We may share your WhatsApp data with:

  • WhatsApp Business API providers: [PROVIDER NAME, e.g., WhatSender, WAHA] for message delivery
  • Payment processors: [e.g., Razorpay, Paytm] for order fulfillment
  • Logistics partners: [e.g., Delhivery, BlueDart] for delivery
  • Analytics tools: [e.g., Google Analytics] for campaign performance tracking (anonymized data only)

We do NOT sell your data to third parties for advertising.

7. Your Rights Under DPDP Act 2023

You have the following rights:

  • Right to access: Request a copy of your personal data we hold
  • Right to correction: Update incorrect or incomplete data
  • Right to deletion: Request deletion of your data (subject to legal retention requirements)
  • Right to opt-out: Unsubscribe from marketing messages at any time
  • Right to data portability: Receive your data in a machine-readable format
  • Right to withdraw consent: Withdraw consent for data processing at any time

To exercise these rights, contact us at [PRIVACY EMAIL, e.g., privacy@yourcompany.com].

8. How to Opt Out of WhatsApp Marketing

You can opt out of WhatsApp marketing messages by:

  • • Replying "STOP" or "UNSUBSCRIBE" to any marketing message
  • • Clicking the "Opt Out" link in our messages
  • • Emailing [PRIVACY EMAIL] with your phone number
  • • Calling us at [CUSTOMER SUPPORT NUMBER]

We will process your opt-out request within 48 hours. You will continue to receive transactional messages (order updates, delivery notifications) unless you delete your account.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via WhatsApp or email. The "Last Updated" date at the top of this policy reflects the most recent version.

10. Contact Us

For privacy-related questions or requests, contact us:

  • • Email: [PRIVACY EMAIL]
  • • Phone: [CUSTOMER SUPPORT NUMBER]
  • • Address: [REGISTERED BUSINESS ADDRESS]

This Privacy Policy complies with the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000 (as amended).

Where to Display Your WhatsApp Privacy Policy

Once you've customized the template, publish it and link to it from:

Website footer: Add a "WhatsApp Privacy Policy" or "Privacy Policy" link
WhatsApp opt-in forms: Checkbox: "I agree to the Privacy Policy"
Checkout pages: "By placing this order, you agree to our Privacy Policy"
First WhatsApp message: "Read our Privacy Policy: [LINK]" in welcome message
WhatsApp Business profile: Add policy link to your Business profile description

Sample Opt-In Consent Text (DPDP Compliant)

Use this language on signup forms, checkout pages, or WhatsApp landing pages to collect valid consent:

Yes, send me WhatsApp updates!

I consent to receive promotional offers, order updates, and other marketing messages from [YOUR COMPANY] via WhatsApp. I understand I can opt out at any time by replying "STOP". Read our Privacy Policy.

DPDP Consent Requirements: Consent must be freely given (no pre-checked boxes), specific (clear what they're opting into), informed (link to privacy policy), and revocable (easy opt-out).

5 Common Privacy Policy Mistakes to Avoid

1. No Opt-Out Instructions

You must clearly explain HOW users can opt out (reply "STOP", click link, email you). Without opt-out instructions, you violate DPDP Act and risk fines.

2. Vague Data Collection Language

Saying "we collect data you provide" is too vague. Specify: phone number, name, order history, chat logs, delivery address.

3. Missing Third-Party Disclosures

If you use WhatSender, Razorpay, Google Analytics, or any tool that processes WhatsApp data, you MUST disclose it in the policy.

4. No Contact Information

You must provide an email, phone, and address for privacy inquiries. A generic "Contact Us" form is not enough under DPDP Act.

5. Not Updating the Policy

If you change how you use WhatsApp data (e.g., add a new tool or start sharing data with a partner), update the policy immediately and notify users.

Conclusion

A DPDP Act-compliant WhatsApp privacy policy protects your business from fines up to ₹250 crore. Use this template as a starting point, customize it with your business details, and publish it on your website and opt-in forms.

Remember: valid consent + clear opt-out instructions + transparent data practices = legal WhatsApp marketing in India 2026.

Start Compliant WhatsApp Marketing Today

WhatSender includes built-in opt-out management and compliance tools. Forever free plan with 50 messages/day. No credit card needed.

Try WhatSender Free

Related Articles