Write the notice
Write the heading, body, buttons and links of a consent form, and add what a notice shown in India must carry.
Write the words visitors read on the banner. Do this for each new form, and again when what you ask changes.
Write the wording#
- Open Consent forms and select the form.
- In the Wording panel, enter a Form name. Only the console shows it.
- Enter the Heading and the Body. Use clear, plain language.
- Check the Accept button, Reject button and Preferences link.
- Enter the Privacy policy label and Privacy policy URL.
- For visitors in India, enter the Complaint link text and Complaint link URL.
- On the Settings tab, under Expiry and notice, choose How long a decision stays valid.
- Choose Save draft.
The Live preview on the right redraws as you type. Visitors see nothing until you publish.
What each part does:
- The accept button accepts every purpose.
- The reject button refuses everything that is not strictly necessary.
- The preferences link opens the preferences dialog.
- The complaint link tells visitors in India how to complain to the Data Protection Board of India.
The wording you type here is in the form's default language. To offer more, see Add a language.
Set how long a decision lasts#
How long a decision stays valid sets when visitors are asked again. Choose 90 days, 6 months, 12 months or 24 months. A new form starts at 12 months, and several regulators expect 12 months at most. A purpose with a shorter life of its own expires sooner.
Link a privacy notice
Under Expiry and notice, Privacy notice links one of the notices kept under Project settings, then Policies. The notice's hash is stored with each published version. When the notice changes, see Update the privacy policy.
What a notice for India needs#
A form counts as shown in India when a region rule with the law DPDP is turned on for it. The console then refuses to publish until the notice is complete, and lists what is missing. For a form that is already published, it also refuses to add or turn on such a rule while the notice is incomplete.
| What is checked | Where to fix it |
|---|---|
| Every purpose based on consent lists its Data used. | The purpose, under Project settings, then Purposes. |
| Every purpose based on consent has a Description. | The purpose. |
| No purpose based on consent is Always on. | The purpose. |
| Every other purpose names its Legitimate use relied on in India (DPDP Act section 7). | The purpose. |
| The form has a Complaint link URL. | The form's Wording panel. |
| The project has a Privacy contact email. | Project settings, under Identity. |
The rule itself must be opt-in, so nothing optional runs before the person chooses.
Visitors in India then see more than visitors elsewhere:
- each purpose on the banner, with its description and data
- the complaint link and a link to exercise their rights
- your privacy contact email
- a language chooser, when the form is published in more than one language