Privacy Policy Template

Website privacy policy is a statement or a legal document that discloses some or all of the ways a party (the website) gathers, uses, discloses and manages a customer or client's data. In India, the Information Technology Rules require a body corporate to provide a privacy policy for handling of or dealing in personal information, making the privacy policy a must-have for all websites.

Download Privacy Policy Template format

You can also download the Privacy Policy Template format in the following formats.

Live Edit

Download Word

Download PDF

Displaying Website Privacy Policy

This website privacy policy can be used by any website or blog or e-commerce store that collects limited customer or user information. Website Privacy Policy can be displayed on the website in a prominent place at the footer of the website along with the date the privacy policy was last updated. It indicates to all users the confidence they can have that any information they have provided to the owners of the website will not under any circumstances be disclosed to others, as provided for in the particulars described in the privacy policy.

Sensitive Information as per Information Technology Rules

According to the Information Technology Rules, the following types of data are considered sensitive personal data to which the rules of Information Technology Act apply:

Password
Financial information such as Bank account or credit card or debit card or other payment instrument details
Physical, physiological and mental health condition
Sexual orientation
Medical records and history
Biometric information

However, any information that is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other law for the time being in force cannot be considered sensitive personal data.

Requirement for Privacy Policy

According to the Information Technology Rules, any body corporate or person who collects, receives, possess, stores, deals or handle information should provide a privacy policy. Further, the privacy policy should be published on website of the body corporate or person with the following details:

Clear and easily accessible statements of its practices and policies
Type of personal or sensitive personal data or information collected
Purpose of collection and usage of such information
Disclosure of information including sensitive personal data or information
Reasonable security practices and procedures adopted

Privacy Policy Grievance Officer

The Information Technology Rules require for all body corporates to address any discrepancies and grievances of the provider of information with respect to processing of information in a time bound manner. For this purpose, the body corporate is required to designate a Grievance Officer and publish his name and contact details on its website. The Grievance Officer would then be responsible for addressing the grievances of information providers in an expeditiously manner within one month from the date of receipt of grievance.

Back to Learn

Frequently Asked Questions

Common questions about Privacy Policy Template for Indian Websites.

A website privacy policy is a legal document that explains how a website collects, uses, discloses, and manages the personal information of its users or customers. It outlines the practices and policies regarding the handling of data, providing transparency and assurance to the users.

In India, the Information Technology Rules mandate that any body corporate or person collecting, receiving, or handling personal information must provide a privacy policy. This makes having a privacy policy a legal requirement for all websites operating in India.

According to the Information Technology Rules, sensitive personal data includes passwords, financial information, physical or mental health conditions, sexual orientation, medical records, and biometric information. This type of data is subject to stricter regulations and requires additional safeguards.

The privacy policy should be prominently displayed on the website, typically in the footer section, and easily accessible to all users. It is also recommended to include the date when the privacy policy was last updated to ensure transparency.

A comprehensive privacy policy should clearly outline the types of personal or sensitive personal data collected, the purpose of collection and usage, disclosure practices, security measures implemented, and the contact details of the designated Grievance Officer responsible for addressing user concerns or grievances.

A privacy policy benefits website users by providing transparency about how their personal information is handled. It assures them that their data will not be disclosed or misused, building trust and confidence in the website's practices.

Yes, the Information Technology Rules require body corporates to designate a Grievance Officer whose name and contact details must be published on the website. The Grievance Officer is responsible for addressing any grievances or discrepancies related to the processing of personal information within a specified timeframe.

No, according to the Information Technology Rules, any information that is freely available or accessible in the public domain, or furnished under the Right to Information Act or other applicable laws, cannot be considered sensitive personal data.

Yes, the privacy policy template provided in the article can be customized and adapted to suit the specific needs and practices of different types of websites, such as blogs, e-commerce stores, or online services that collect user information.

It is recommended to review and update a website's privacy policy periodically, especially when there are changes to data collection practices, legal requirements, or industry standards. Maintaining an up-to-date privacy policy demonstrates transparency and compliance with applicable regulations.