From checkout to WhatsApp support — customer info is everywhere.
You added a WhatsApp chat button. Then a discount popup. Then Google Ads. Each tool quietly collected your customers' names, phone numbers, and buying habits. Most D2C founders only think about their main website. But data enters from 8 or more places — and you may not even know all of them. This is exactly where the new data law catches businesses off guard.
Say you sell skincare online. A customer visits your site. She fills a form for a discount. She buys and pays via Razorpay. She messages you on WhatsApp about delivery. She gets your email offer next week. She fills a return form. That is six different places her information was collected. Each place is a separate responsibility under the new data law. You must know what you collect, why you collect it, and how you protect it.
List every tool on your website that asks customers for information.
Check your WhatsApp Business and email tool — see what customer data is stored.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“Growth tools collect data faster than founders realise.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
