--- title: "Website visitor tracking under India's DPDP Act" canonical: https://visitorcompanyfinder.com/use-cases/dpdp-act-visitor-tracking-india last_modified: 2026-11-01 publisher: Surge Software Solutions Private Limited --- # Website visitor tracking under India's DPDP Act > Track B2B website visitors in India under the DPDP Act. Use strict mode, consent records, and data-subject requests. No legal advice. [Home](https://visitorcompanyfinder.com/) / [Use cases](https://visitorcompanyfinder.com/use-cases) # Website visitor tracking under India's DPDP Act Last updated 2026-11-01 · by Venu Gopal Reddy Muvva, founder VisitorCompanyFinder supports India's DPDP Act through strict consent modes and data-subject request tools. It identifies companies by IP without tracking individuals who did not opt in. Indian company data is not available yet. ## Steps - **Enable strict mode.** Select strict mode when adding your site. This stores nothing on the visitor's device before they consent to tracking. - **Add consent banner.** Show your own consent banner and pass the visitor's choice to the pixel. Before they agree, nothing is stored on their device. - **Handle data requests.** Use the app or API to process access, withdraw, and erase requests from visitors who ask to manage their data. - **Connect Zoho CRM.** Paste your Zoho CRM API token to sync hot accounts. This works with the .in data centre for Indian teams. Privacy and consent settings (demo data). ## Strict consent mode Strict mode is the setting for Indian visitors under the DPDP Act. Before a visitor consents, the pixel stores nothing on their device: no cookie, no local storage. Visits are still counted at company level, linked only by a salted hash of the IP address that changes every day, and the raw IP is never stored. You show your own consent banner and pass the visitor's choice to the pixel. People are only recorded when they tick a consent box on a form or chat. ## Data-subject requests The DPDP Act requires you to handle requests from people who want to see, withdraw, or erase their data. VisitorCompanyFinder includes tools in the app and API to process these requests. You can grant access to stored data, withdraw consent, or erase records. This ensures you can respond to visitors quickly and maintain compliance. The system tracks consent records so you know exactly what data you hold for each visitor. ## Indian company data status Indian company data from MCA records is not available yet. Company identification today also runs on demo IP data: real visitors are counted, but most show as unattributed until a licensed IP-to-company dataset is connected. You still get visit behaviour, pages and the match-rate meter for all traffic, and accounts appear as soon as a visit can be tied to a company. ## Zoho CRM integration You can connect Zoho CRM by pasting your API token. This works with the .in data centre, which is useful for teams based in India. The integration pushes hot accounts directly to your CRM. This helps your sales team follow up on companies that show buying intent. Note that one-click OAuth connection is not available yet, so you must use the pasted token method for now. ## When VisitorCompanyFinder is not the right tool VisitorCompanyFinder is not legal advice. It is a tracking tool, not a compliance consultant. If you need legal guidance on the DPDP Act, consult a lawyer. It is also not the right tool if you need person-level identification of anonymous visitors, as this is not offered by design. For Indian company data specifically, wait for the MCA records feature to launch. ## Questions ### Does VisitorCompanyFinder identify individual people in India? No. It works at the company level only. It never identifies individual visitors who did not opt in. This design choice helps you comply with privacy laws like the DPDP Act. ### Is Indian company data available now? No. Indian company data from MCA records is not available yet, and company names come from demo IP data until licensed data is connected. Expect most real visits to show as unattributed for now. ### How do I handle data-subject requests? Use the built-in tools in the app or API. You can process requests to access, withdraw consent, or erase data. The system keeps records of consent so you can verify what data you hold. ### Can I connect to Zoho CRM? Yes. You can connect to Zoho CRM by pasting your API token. This works with the .in data centre. One-click OAuth connection is not available yet, so you must use the token method. ## Related - [GDPR-compliant website visitor identification](https://visitorcompanyfinder.com/use-cases/gdpr-compliant-visitor-identification) - [Website visitor companies in Zoho CRM](https://visitorcompanyfinder.com/use-cases/zoho-crm-website-visitor-tracking) - [VisitorCompanyFinder vs RB2B](https://visitorcompanyfinder.com/compare/rb2b) - [Pricing: 3 months free, then at cost](https://visitorcompanyfinder.com/pricing) [Start free — 3 months on us](https://visitorcompanyfinder.com/signup) No card needed. Questions? Ask our assistant (bottom right).