For law firms and privacy consultantsYou advise on the DPDP Act. We implement it on the website.
DPDPWeb is a DPDP implementation partner for legal and privacy advisers. Your client gets your advice built into the live website: banner, tag gating, forms and notices, tested and with evidence.
Written by Shuruthi Sellamuthu. Last reviewed .
What does DPDPWeb do alongside a legal or privacy adviser?
You decide the legal basis, approve the notice wording and run the company-wide programme. We do the website part: the cookie banner, tag gating in Google Tag Manager, form consent and the privacy and cookie policy drafts. Then we test the live site and give your client a report with before and after evidence.
See the full implementationThe split of work
A clean line between advice and implementation, so nobody works outside their role.
How a joint engagement runs
Setup takes about two weeks for a typical site. Sign-off on the notice and policy text follows your timetable.
See prices and timelines- IntroductionYou or your client brings us in. We sign an NDA before we receive any access.
- ScanWe test the website the way a visitor sees it and record what loads before consent.
- Your decisionsYou set the legal basis and approve the notice wording. We draft from what the scan found.
- BuildWe set up the banner, the tag gating and the form consent. We need access to Google Tag Manager, the consent platform and the website CMS. We never need the CRM.
- Test and hand overWe test every choice on the live site and hand your client the test report.
The evidence your client receives
At handover your client has documents that show what the website did before and what it does now.
- A test report with before and after screenshots
- The banner configuration and the tag gating in Google Tag Manager
- The form consent pattern applied to every form
- A draft privacy policy and cookie policy, with a cookie table
- A configuration document
- 30 days of support after launch
Why this is useful to an adviser
Advice on paper does not change what a website does. Tags keep firing until someone changes the tag setup. That is the part we do. Our reading of the Act and Rules, with the source for every rule, is in the website guide to the DPDP Act.
- Your advice gets implemented on the live site, not left in a memo.
- It is tested in the browser. If we say a tag waits for consent, we have watched it wait.
- You approve wording that is drafted from what the site really collects.
- Your client gets one clear record of before and after.
What we never do
- Legal opinions. Those are yours.
- Data Protection Officer services.
- Company-wide DPDP programmes.
- Work inside the CRM or internal systems.
- Promises that a website is fully compliant.
When a website client of ours needs any of these, we point them to a privacy or legal adviser.
Referral terms
Two-way referrals, no fee
- We refer legal work to you. When a website client of ours needs legal advice, we point them to you.
- You refer website implementation to us. We do that work ourselves and refer it to nobody else.
- No referral fee is paid in either direction, so advice stays independent.
Our scope
DPDPWeb works on websites only: cookie banners, form consent, and privacy and cookie policy pages. We are not a DPO service and not a law firm. Nothing on this site is legal advice.
Meet the team behind DPDPWebPartner questions
Something else? Write to us.
Do you give legal advice to our clients?
No. We are not a law firm and nothing we provide is legal advice. We draft, and you or the client's legal contact approve.
Who writes the notice and the policies?
We draft the privacy policy and cookie policy from what the website really collects. You approve the final wording before anything is published.
What access do you need?
Google Tag Manager, the consent platform and the website CMS. We never need the CRM. We sign an NDA before we receive any access.
How long does the website part take?
Setup takes 7 to 10 working days on the Starter plan and 2 to 3 weeks on Growth. Policy sign-off is outside these timelines and usually takes two to four weeks.
Which consent platform do you use?
We are not tied to one. We usually set up CookieYes, and we work with the platform the client already has if it can block tags properly. The account is in the client's name and the client pays the licence directly.
Do you act as a Data Protection Officer?
No. We work on websites only. A DPO, a legal team or a privacy consultant handles the rest, and we work alongside them.
Can we see how you test before we introduce a client?
Yes. Our testing method is published on the audit page, and we are happy to walk you through it on a call.
Your advice, implemented and tested on the website
Tell us about your practice and the kind of clients you advise. We reply within one working day.
Book a free call- Websites only
- We draft, you approve
- NDA before any access