DPDP compliance for small businesses and simple websites
Every website that collects personal data from people in India needs a DPDP consent notice. That includes one-page sites, portfolios, small SaaS and service businesses. Get yours live before 13 November 2026, well ahead of full enforcement in May 2027.
Start on our Free Forever plan. No credit card, no trial timer. We set up your account for you.
The short answer
Yes, the DPDP Act 2023 applies to small websites. If your site has a contact form, newsletter, booking form, login or analytics, you must show a clear notice and get consent before processing personal data. ConsentPlix gives you a DPDP consent banner with signed consent records for free, on one website, with 1,000 consent events a month.
DPDP Act Statutory Compliance Countdown Clocks
The Digital Personal Data Protection Rules operate on phased statutory deadlines. Prepare your consent mechanisms and rights infrastructure before regulatory enforcement begins.
November 13, 2026
Consent Manager Framework & Section 5/6 Notice Enforcement
May 13, 2027
Complete DPDP Substantive Obligations & Schedule 1 Penalties Active
Deploy the ConsentPlix SDK today to automate 22-language notices and cryptographic Merkle receipts before November 13.
Built for small teams, not enterprises
Small SaaS
Signup forms, trials and product analytics all collect personal data. Add a consent notice before tracking starts.
Freelancers & consultants
A contact form or newsletter on your portfolio site is enough to make you a Data Fiduciary under DPDP.
Service businesses
Clinics, coaches, salons, agencies, tutors. If people book or enquire online, you collect personal data.
One-page & simple sites
Landing pages with Google Analytics, Meta Pixel or a WhatsApp form need consent before those scripts fire.
What a small website needs for DPDP
You do not need a legal team. You need these six things, and ConsentPlix covers the consent parts out of the box.
See the full DPDP checklist →Read: DPDP for small websites, step by step →- ✓A clear notice saying what data you collect and why
- ✓Consent asked before analytics or ad scripts run
- ✓An easy way to withdraw consent, as easy as giving it
- ✓A record of who consented, to what, and when
- ✓A contact person for privacy questions and complaints
- ✓Notice available in English and Indian languages
Three simple steps
Request your free account
Tell us your website. We set up your account and email you a link to set your password. No credit card.
Paste one script tag
Works on WordPress, Shopify, Wix, Webflow, Framer, Next.js or plain HTML.
Consent is recorded
Every accept or reject gets a signed receipt, so you can show proof if anyone asks.
<script src="https://cdn.consentplix.com/cp.min.js" data-site-token="YOUR_SITE_TOKEN"></script>Free forever. Upgrade only when you grow.
No credit card to start. No trial that runs out.
₹0
forever · no credit card
- ✓ 1 website or domain
- ✓ 1,000 consent events per month
- ✓ DPDP consent banner and notice
- ✓ English and Hindi
- ✓ Signed audit trail for every consent
- ✓ 30-day consent ledger retention
₹399/mo
₹299/mo billed annually
- ✓ 10,000 consent events per month
- ✓ All 22 official Indian languages
- ✓ Custom banner design and REST API
- ✓ Data Principal rights portal
- ✓ 180-day ledger retention
- ✓ Email support
Small business DPDP questions
Does the DPDP Act apply to small businesses and simple websites?
Yes. The DPDP Act 2023 applies to anyone who processes digital personal data of people in India, whatever their size. A contact form, newsletter signup, booking form or analytics script on your website all count. There is no small-business exemption for consent and notice.
What happens on 13 November 2026?
The DPDP Rules phase in over time. 13 November 2026 is when the Consent Manager provisions start. Full obligations and penalties apply from 13 May 2027. Getting your consent banner live before November gives you months of clean consent records before enforcement begins.
Is the ConsentPlix free plan really free forever?
Yes. The Free Forever plan costs ₹0, has no time limit and needs no credit card. It covers 1 website and 1,000 consent events per month. Upgrade to Starter at ₹399 per month only when you need more.
Do I need a developer to install it?
No. You paste one script tag into your site header. On WordPress, Shopify, Wix and Webflow this is a settings field. Once your account is ready, most sites are live in under 10 minutes.
Will a consent banner slow down my website?
The ConsentPlix script is under 12KB gzipped with no external dependencies, so it has very little effect on page speed.
What are the penalties for not complying?
Penalties under the DPDP Act go up to ₹250 crore for failing to take reasonable security safeguards, and up to ₹50 crore for other breaches of the Act. The Data Protection Board decides the amount based on the nature and seriousness of the breach.
Be DPDP consent ready before 13 November
Free forever for one website. No credit card. We set up your account and email you the details.