WordPress sites collect data through comments, contact forms, analytics plugins, and e-commerce plugins like WooCommerce. WordPress itself stores commenter IP addresses by default. The vast plugin ecosystem means data collection can vary dramatically — each plugin may set cookies, collect user data, or send data to third-party services. Your privacy policy must reflect the actual plugins installed on your site. India's Digital Personal Data Protection Act (DPDPA) 2023 is India's first comprehensive data protection law.
No signup required Download as HTML Ready in 2 minutes
All sections are included and pre-filled for WordPress Site businesses
Refund Policy Overview
Included in all documents
Refund Eligibility
Included in all documents
Non-Refundable Items
Included in all documents
Digital Products and Downloads
Included in all documents
Subscription Cancellations
Included in all documents
How to Request a Refund
Included in all documents
Exchanges
Included in all documents
Contact Us
Included in all documents
India's Digital Personal Data Protection Act (DPDPA) 2023 is India's first comprehensive data protection law. It applies to processing of digital personal data within India and to processing outside India if it involves offering goods or services to individuals in India. Significant Data Fiduciaries face enhanced obligations, and the Data Protection Board can impose fines up to ₹250 crore.
WordPress sites collect data through comments, contact forms, analytics plugins, and e-commerce plugins like WooCommerce. WordPress itself stores commenter IP addresses by default. The vast plugin ecosystem means data collection can vary dramatically — each plugin may set cookies, collect user data, or send data to third-party services. Your privacy policy must reflect the actual plugins installed on your site.
Data typically collected by WordPress Site businesses: commenter name, email and IP address, contact form submissions, analytics data, WooCommerce customer and order data, login account data, plugin-specific collected data
Under DPDPA, consumer protection laws may require you to disclose your refund terms clearly before purchase. Even where not strictly required, a transparent Refund Policy reduces chargebacks, builds customer trust, and protects you from disputes.
A Refund Policy for WordPress Site should specify: the refund window, eligible and non-eligible items, the process for requesting a refund, how refunds are processed, and any restocking fees. For digital products, be explicit about access-based non-refundability.
Under DPDPA, digital products can be non-refundable once they have been accessed or downloaded, provided users were clearly informed of this before purchase. You must obtain explicit consent acknowledging the non-refundability of digital goods.