That lead form on your website? It could get you in trouble.
You run a sale. You collect phone numbers. You send WhatsApp messages to hundreds of people. Sounds normal, right? But under the new data law, doing this without proper permission is not allowed. Many small business owners do not know this. If you run ads, collect leads, or send bulk messages — this applies to you. Today.
Say you run a clothing shop. You collect customer numbers during billing. Then you add them to a WhatsApp broadcast list. Under the new law, you must first ask permission. You must say why you are saving their number. Same for email lists, lead forms, and festive sale campaigns. If you hired an agency to run your ads, you are still responsible for how they collect data. Your customer's trust is your responsibility — not the agency's.
Add a simple permission checkbox to every lead form you use.
Ask your marketing agency how they collect and store customer data.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Good marketing gets attention. Good data practice keeps trust.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.