⚖️ Legal
Drafting Legal Pages for Your Website (India)
The legal pages most Indian websites need, what each one should contain, and when to bring in a lawyer. Written in plain language, not legalese.
Why legal pages matter #
Legal pages are not just a formality. They tell your visitors how you handle their information, set the rules for using your site, and protect you if a customer disputes something later. Payment gateways in India (Razorpay, PayU, Cashfree and others) will usually check for a privacy policy, terms, and a refund policy before they activate your account, so getting these ready early keeps your launch on schedule.
⚠ Important: This guide is practical information, not legal advice. It helps you understand what your website usually needs and what each page should cover. For anything high risk (health data, children, finance, large customer databases), have a qualified lawyer review your final wording.
The pages most sites need #
Not every site needs all of these. A simple brochure site needs fewer than a full store. Here is the full list so you can pick what applies to you.
Privacy Policy
Almost always requiredExplains what personal data you collect, why, how you store it, who you share it with, and how visitors can contact you about it. You need this the moment your site has a contact form, newsletter signup, analytics, or any login.
Terms and Conditions
Strongly recommendedThe rules for using your site: acceptable use, your liability limits, intellectual property, and how disputes are handled. For a store, this is where your buying terms live.
Refund, Return and Cancellation Policy
Required for storesTells buyers what they can return, in what condition, within how many days, and how refunds are issued. Payment gateways often ask to see this before they approve your account.
Shipping and Delivery Policy
Required for physical goodsCovers where you ship, delivery timelines, charges, and what happens with delays or lost parcels.
Cookie Policy and consent
Lists the cookies and trackers your site uses (analytics, ads, chat widgets) and lets visitors accept or decline non essential ones. Needed if you serve visitors in regions that require consent.
Disclaimer
Useful for advice based sites (health, finance, legal, fitness). It makes clear that your content is general information and not professional advice for a specific person.
Privacy Policy: what to include #
This is the one almost every site needs. Cover these points in plain language:
- Who you are and how to contact you (business name, email, address if you have one).
- What data you collect: name, email, phone, address, payment details, and any analytics or device data.
- How you collect it: forms, cookies, account signup, checkout.
- Why you collect it: to fulfil orders, reply to enquiries, send updates you opted into, and improve the site.
- Who you share it with: payment processors, shipping partners, email tools, analytics providers. Name the categories.
- How long you keep it and how you protect it.
- The rights visitors have: to see, correct, or delete their data, and how to ask.
- How you handle cookies and third party tracking.
- A last updated date.
India now has the Digital Personal Data Protection Act, 2023 (the DPDP Act). It sets out how businesses should handle the personal data of people in India. The core ideas are simple: collect only what you need, tell people why, get clear consent, keep the data safe, and let people withdraw consent or ask for deletion. Your privacy policy should reflect these ideas and give people an easy way to reach you about their data.
Terms and Conditions #
Your terms set the rules of the road. For a store, they also form the contract for each sale. Cover who can use the site, what people may and may not do, who owns the content and logos, your liability limits, pricing and payment terms, and how disputes are resolved (usually the courts of your city). Keep the language clear so a normal customer can actually read it.
Refund, Return and Cancellation #
If you sell anything, be specific here. Vague refund policies cause disputes and chargebacks. State what can be returned, the condition it must be in, the time window (for example 7 days from delivery), how the refund is issued, and how long it takes to reach the customer. If some items are non returnable (perishables, personalised goods, digital downloads), say so clearly.
ℹ Note: Indian payment gateways commonly ask to see a refund or cancellation policy during onboarding. Having a clear one ready can speed up your gateway approval.
Shipping and Delivery #
For physical products, tell buyers where you ship, the expected delivery timelines, the charges, and what happens if a parcel is delayed or lost. If you ship only within India or only to certain states, state that up front so nobody is disappointed at checkout.
India specific requirements #
A few things are particular to India and worth getting right:
- DPDP Act, 2023: handle personal data with clear consent, collect only what you need, and give people a way to withdraw consent or request deletion.
- Consumer Protection (E-Commerce) Rules, 2020: online sellers should show clear seller details, total price, return and refund terms, and a way to raise complaints.
- Grievance contact: display a contact point (name or role, email) where customers can raise concerns, and respond within a reasonable time.
- GST and invoices: if you are GST registered, show the right tax details on invoices. Your accountant can confirm what your invoices must include.
ℹ Note: Cookie consent is not as strictly mandated in India as it is under EU law, but if any of your visitors are in the EU or UK, the stricter consent rules can apply to them. If in doubt, adding a simple consent banner is a safe default.
Template or lawyer? #
A solid template is fine when
Most small sitesYou run a normal small business site or store, collect standard data (name, email, order details), and use common tools (a payment gateway, analytics, an email list). A good, current template tailored to your business covers you well.
Get a lawyer when
Higher riskYou handle sensitive data (health, biometrics, financial records), market to children, operate in a regulated industry, process large volumes of customer data, or take significant liability. Here the cost of getting it wrong is far higher than a review fee.
How Uxory helps #
When we build your site we set up the pages, link them in your footer, wire up cookie consent if you need it, and connect your contact and grievance details. We can start from a tailored template based on your business, and we are happy to work alongside your lawyer if you have one. We do not act as your legal counsel, but we make sure the pages exist, are easy to find, and are wired in correctly.
Want us to set these up for you?
We can prepare and wire in your legal pages as part of your build, and work with your lawyer if you have one. Book a quick call and we will map out exactly what your site needs.
Talk to Uxory