WEBSITE LEGAL COMPLIANCE CHECKLIST
Verify your business website meets Indian legal and disclosure requirements.
Core Legal Pages
- ☐ Privacy Policy published and accessible
- ☐ Terms & Conditions / Terms of Use published
- ☐ Refund / Return / Cancellation policy (for sales)
- ☐ Shipping / Delivery policy, if goods sold
- ☐ Disclaimer for professional / financial content
Data Protection
- ☐ Consent obtained before collecting personal data (DPDP Act)
- ☐ Purpose of data collection clearly stated
- ☐ Cookie consent banner with options
- ☐ Data retention and deletion approach disclosed
- ☐ Grievance / Data Protection contact published
Business Disclosures
- ☐ Legal entity name and registered address shown
- ☐ Contact email and phone available
- ☐ GSTIN displayed where required
- ☐ Pricing inclusive of taxes / clear tax breakup
IT Act & Intermediary
- ☐ Intermediary due-diligence rules addressed (if platform)
- ☐ Grievance Officer details published (if applicable)
- ☐ Prohibited content / acceptable-use policy stated
Technical Trust
- ☐ SSL / HTTPS enabled site-wide
- ☐ Secure payment gateway with PCI compliance
- ☐ Third-party licences / copyrights respected
- ☐ Accessibility basics addressed
Note: Keep policies dated and versioned; the DPDP Act tightens consent and grievance-handling obligations for businesses handling personal data.