DPDP isn't only an online problem. Physical retail collects personal data constantly — phone numbers at billing, loyalty sign-ups, CCTV, in-store Wi-Fi and feedback. The DPDP Act applies in the store, not just on the website.
The 'number for the bill' habit
Asking for a phone number at checkout is collecting personal data. Tell customers why, make it optional, and don't quietly enrol them in marketing — that needs separate consent.
Loyalty, CCTV and Wi-Fi
In-store loyalty, CCTV and guest Wi-Fi all process personal data — notices, minimisation, security and retention apply to each.
POS and vendors
POS, billing and CRM providers are processors — contract with them and know where data sits.
A retail checklist
- Optional, explained phone/email capture at billing
- Separate marketing consent; easy opt-out
- Notices for loyalty, CCTV and Wi-Fi
- POS/CRM processor contracts; retention limits
How DPDP Bridge helps
DPDP Bridge helps retailers handle in-store data — billing capture, loyalty, CCTV and Wi-Fi — with consent, notices and security. Take the free assessment to see exactly where you stand and what to do next.
This article is general information about the DPDP Act and is not legal advice. For guidance specific to your organisation, take the free assessment or speak to our team.