Questions Indian SMEs actually ask us
Straight answers about the DPDP Act and about BharathDPDP. Can't find yours? Ask us directly — we reply within one business day.
Applicability
Does the DPDP Act really apply to a small business like mine?
Yes — if you collect any personal data digitally (customer names, phone numbers, addresses, order history), you are a Data Fiduciary under the Act. There is no blanket exemption for SMEs, though the government may notify lighter obligations for certain startups.
I only sell on WhatsApp and Instagram. Am I covered?
Yes. Personal data collected through WhatsApp chats, Instagram DMs, or Google Forms is digital personal data under the Act. BharathDPDP includes consent flows designed for exactly these channels.
Does the Act apply to my employees' data too?
Yes. Payroll records, ID proofs, health information and attendance data of employees are personal data. Certain employment-related processing has a separate legal basis under the Act, and our data mapping module helps you classify it correctly.
Obligations
Do I need to hire a lawyer or a Data Protection Officer?
Most SMEs are not required to appoint a DPO — that duty applies to Significant Data Fiduciaries. You do need a grievance contact and working processes, which is exactly what BharathDPDP sets up for you. For complex situations you can always add legal review on top.
What languages do my consent notices need to be in?
The Act gives Data Principals the option to access notices in English or any of the 22 languages in the Eighth Schedule to the Constitution. BharathDPDP auto-translates your notices into 12 Indian languages, with more being added.
What happens if we have a data breach?
You must notify the Data Protection Board of India and each affected user. Failure to do so carries a penalty of up to ₹200 crore. Our breach response module walks your team through containment, assembles the Board notification, and prepares user notices in your customers' languages.
Product & pricing
How long does setup take?
Most customers complete the guided assessment and go live with consent notices within a week. The full data inventory usually takes two to three weeks depending on how many tools and vendors you use.
Where is my data stored?
All customer and consent data is hosted in data centres located in India, encrypted at rest and in transit.
Can I pay by UPI and get a GST invoice?
Yes. We accept UPI, credit/debit cards and netbanking, and every payment comes with a proper GST invoice so you can claim input credit.
What happens after the free trial?
You pick a plan and continue, or walk away — nothing is charged automatically and you can export everything you generated during the trial.
Still deciding? Try it free.
The 14-day trial answers most questions better than any FAQ.