DPDP Ready terms of service
Version 1 · Last updated: 2026-11-08
These terms apply when you order DPDP Ready from Rotomal. They sit alongside our general terms, privacy policy and refund policy; where they differ, these product terms apply to DPDP Ready.
Who provides the service
DPDP Ready is provided by Rotomal, Israel ("we"). Contact: hello@rotomal.com.
The service
One-time preparation of DPDP documents for a business in India: a data map, a Rule 3 notice and consent wording, plus, on the Business plan, a breach plan, security checklist and vendor list. Each is written for your business, checked by a person and delivered as editable files.
What is included
- Data check of one website (₹499, credited in full against Starter or Business if you order within 30 days), with a reply within 2 business days.
- Starter: one website or app and up to 5 collection points, with data map, Rule 3 notice, consent wording for up to 5 forms or flows, privacy contact text and rights-request reply templates.
- Business: up to 20 collection points online and offline, everything in Starter, plus a breach plan with the 72-hour Board report, a Rule 6 security checklist, a vendor list with contract notes, a children's data review and a 30-minute walk-through call.
- Editable files and where to put each one, within 7 business days of the completed questionnaire.
- One round of changes.
Plans and prices
| Plan | Price | Covers |
|---|---|---|
| Data check | ₹499 one-time | What your website collects today |
| Starter | ₹2,999 one-time | One website or app, up to 5 collection points |
| Business | ₹7,999 one-time | Website, offline records and vendors |
The data check costs ₹499 and is credited in full against Starter or Business if you order within 30 days. Starter and Business are one-time prices in Indian rupees, paid once, with one round of changes included. We prepare documents and checklists; putting them on your site and running the processes stays with you. We are not a law firm and this is not legal advice, and Significant Data Fiduciaries and complex cross-border processing need a lawyer. Founding customer pricing applies to early-access orders.
Prices are founding-customer prices for early-access orders. Taxes are added where the law requires.
Limits and extra use
The data check covers one website. Starter covers one website or app and up to 5 collection points. Business covers up to 20 collection points, online and offline. Starter and Business each include one round of changes. Extra collection points, websites or rounds of changes are quoted by email before we start and are never charged without your written OK. One purchase covers one business.
How an order starts
Submitting a request does not create a contract or a charge. A contract starts only when we confirm your order by email and payment has been agreed. We start within 2 business days of that confirmation.
Billing, cancellation and refunds
This is a one-time service, paid once after we confirm the scope by email. There is no subscription and nothing renews. If we cannot deliver what was agreed, you are refunded in full.
Refunds and cancellations also follow our refund policy. rotomal.com/refund-policy/
What is not included
- We are not a law firm and this is not legal advice.
- We do not put the documents on your website or forms, and we do not run your consent records, rights requests or breach response.
- Significant Data Fiduciaries and complex cross-border processing are not covered; they need a lawyer.
- We do not report breaches or deal with the Data Protection Board on your behalf.
- We do not ask for or review individual customer or patient records.
Your responsibilities
- Answer the questionnaire accurately and completely, including offline records, vendors and any children's data.
- Check the documents, or have your lawyer check them, before you publish or rely on them.
- Publish the notice and consent wording, and run the processes: keep consent records, answer rights requests and report breaches on time.
- Update the documents when the data you collect, your vendors or the Rules change.
- Do not send us customer or patient records; the data map lists types of data, not people.
- Have the right to share the information and files you send us.
- You use the service only for lawful purposes and keep your account details safe.
Regulatory status
DPDP Ready is an independent document service that applies the published DPDP Act and Rules. We are not a law firm and do not give legal advice. You decide what to publish, put the documents in place and remain responsible, as Data Fiduciary, to the people whose data you process and to the Data Protection Board. The Board's and courts' decisions are final and outside our control. The Rules' dates may change; documents reflect the text in force when we prepared them.
Outside services
- Website platforms and form tools (Shopify, WooCommerce, WordPress, Wix, Squarespace, Google Forms): where consent wording can be placed depends on the platform. If it changes its forms or checkout, you may need to move or adjust the wording.
- Your vendors, such as payment gateways, CRMs, email, SMS and WhatsApp Business: their processing and contracts are theirs. We note the contract terms the Act and Rules expect, but we do not negotiate or sign contracts with them.
The service relies on systems run by others. We are not responsible for their availability, changes or decisions; when one of them changes, we adapt the service as soon as we reasonably can.
Your data
Data and files you send stay yours. We process them only to provide DPDP Ready, as described in our privacy policy, keep them no longer than the service needs, and delete them on request when the service ends.
Early access and errors
DPDP Ready is an early-access service, provided as is and as available. We work carefully, but output can contain errors. If you show us an error in our output, we correct it and redo the affected work at no charge; this is your main remedy for errors.
No professional advice
DPDP Ready is a software and data service. It is not legal, tax, customs, accounting, insurance or other professional advice. Confirm decisions that depend on such advice with a qualified professional.
Liability
- Our total liability for all claims about DPDP Ready is limited to the fees you paid us for DPDP Ready in the 12 months before the claim.
- We are not liable for indirect or consequential loss, lost profit or revenue, or for fines, penalties, duties, taxes, surcharges, interest or chargebacks imposed on you by an authority, carrier, marketplace, bank or other third party, even where our output was used.
- Nothing in these terms limits liability that the law does not allow to be limited, including for fraud, intent or gross negligence, death or personal injury, or the mandatory rights of consumers.
Suspension and ending the service
We may suspend the service if it is used unlawfully or against these terms. We may also stop offering DPDP Ready; if we do, we give paying customers at least 30 days' notice by email and refund any prepaid period not used.
Changes to these terms
We may update these terms. For existing customers, changes take effect 30 days after we email them and never change a price we have already confirmed to you. The date at the top shows the current version.
Law and disputes
These terms are governed by the laws of the State of Israel, and disputes go to the competent courts in Israel. If you are a consumer, you keep the protection of the mandatory laws of the country where you live and may also bring a claim there.
Contact
Questions about these terms: hello@rotomal.com.