One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.
Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.
TL;DR: Yes, your website's Terms of Use, Privacy Policy, and Refund Policy can be legally binding in India — but enforceability depends on proper acceptance by users. Footer links alone are weak. You need a clear "I agree" checkbox at minimum, and your refund policy must comply with RBI rules on recurring payments and the Consumer Protection Act, 2019. A well-drafted clickwrap agreement with express consent significantly strengthens your position.
A student-run subscription website in Jaipur was about to launch. The founder — let's call him Arjun Mehta — had drafted his own Terms of Use, Privacy Policy, and Refund Policy using online templates. He was worried: would these documents actually hold up in court? Arjun approached the Chamber of Advocate Sudhir Rao after a friend's similar business faced a consumer dispute. The friend had relied on footer-linked policies. It didn't end well. The office of Advocate Sudhir Rao reviewed the drafts thoroughly. Here's the thing. Indian contract law under the Indian Contract Act, 1872 requires offer, acceptance, and consideration. For a website, acceptance must be clear and unambiguous. Advocate Sudhir Rao and his office argued that mere footer links — without active user acknowledgement — create weak evidence of consent. The advice was direct: add an explicit "I agree to the Terms and Privacy Policy" checkbox at signup. It's that simple. Arjun implemented the change. A few months later, a subscriber tried to dispute a charge. Because the acceptance mechanism was clear and the refund policy complied with RBI's recurring payment guidelines, the matter was resolved quickly without litigation. And that's the takeaway. Get the acceptance mechanism right. Your policies are only as strong as the consent you collect.Key Facts of the Case
- The website offered monthly subscriptions via UPI Autopay with a free trial period.
- Terms of Use, Privacy Policy, and Refund Policy were initially linked only in the footer and at signup without any mandatory "I agree" checkbox.
- Under the Indian Contract Act, 1872, valid acceptance requires unequivocal consent — passive footer links are legally weak.
- The Refund Policy needed to align with RBI's mandate on recurring payment mandates and the Consumer Protection Act's right to withdrawal from services.
- Implementation of a clickwrap agreement with an express acceptance checkbox created enforceable contractual terms.
- One early subscriber challenged a recurring charge but the case was resolved at the notice stage itself.
- Advocate Sudhir Rao's domain-specific knowledge in digital contract law and consumer regulations ensured the outcome was in Arjun's favour.
The Direct Legal Answer
Do footer-linked terms and privacy policies create a binding contract under Indian law?
Generally, no. Under the Indian Contract Act, a contract requires a valid offer and acceptance. Simply placing links in the footer or even near a signup button — without requiring the user to actively acknowledge them — is considered a "browsewrap" agreement. Indian courts have shown that browsewrap agreements are harder to enforce. You need a "clickwrap" mechanism: a checkbox or button that says "I have read and agree to the Terms of Service and Privacy Policy." That creates clear evidence of acceptance.
What about the refund policy for a UPI Autopay subscription?
This is critical. The Reserve Bank of India (RBI) regulates recurring payments under its mandates on e-mandates. Your refund policy must clearly state the cancellation process, notice period, and whether refunds are pro-rated. The Consumer Protection Act, 2019 also gives users the right to withdraw from services within a cooling-off period in certain cases. A vague refund policy that contradicts RBI rules can land you in trouble with the ombudsman or consumer forum.
What's the minimum acceptance mechanism I need?
At minimum, include a mandatory "I agree to the Terms of Use and Privacy Policy" checkbox that the user must tick before completing signup or making a payment. For additional strength, consider requiring the user to scroll through the key terms (e.g., refund policy, auto-renewal, cancellation) before they can proceed. And keep time-stamped logs of exactly what version of the policy was shown and when the user clicked.
Advice in Such Cases
Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
Second, never rely on template documents drawn from foreign jurisdictions without localisation. Indian consumer law, data protection obligations under the Digital Personal Data Protection Act, 2023 (once fully notified), and RBI's recurring payment mandates have specific requirements that generic templates miss.
Third, this area — digital contracts and compliance — has procedural and evidentiary nuances that a general practitioner often overlooks. An advocate who regularly handles tech-related matters will understand how to evidence consent, draft enforceable terms, and navigate consumer forum complaints effectively.
Applicable Sections of Law
This is a civil and regulatory matter governed by the Indian Contract Act, 1872. Specifically, Sections 2(a) to 2(e) define proposal, acceptance, and promise. Section 10 makes agreements contracts if made by free consent of parties competent to contract, for a lawful consideration, with a lawful object. The Consumer Protection Act, 2019 applies to subscription services — it provides for unfair trade practices and deficiency in service (Section 2(47) and Section 2(11)). RBI's Master Direction on issuance and operation of Prepaid Payment Instruments (2017) and its mandate on recurring e-mandates (circular dated 4 September 2024) are directly relevant to UPI Autopay. The Information Technology Act, 2000 (Sections 10A and 12) validates electronic contracts.
Limitation Period
For claims under the Consumer Protection Act, 2019, the limitation period for filing a complaint is two years from the date on which the cause of action arises (Section 69). For breach of contract claims in civil court, the Limitation Act, 1963 provides three years from when the contract is broken. In subscription disputes, the clock typically starts when the user is denied a refund or charged without proper authorisation. If the limitation period is missed, you may still file a petition for condonation of delay, but that's not guaranteed to succeed.
Interim Reliefs Available
In a consumer forum or civil court dispute over a subscription contract, interim reliefs may include a temporary injunction under Order 39 of the Code of Civil Procedure, 1908 to restrain the service provider from continuing the alleged unfair practice. A status quo order can also be sought. For instance, if a customer files a complaint about an unauthorised recurring charge, the consumer forum may direct the business to maintain the status quo — i.e., not continue debiting the customer — pending resolution. These interim orders are critical because they prevent escalation before the final hearing.
If You Are the Victim
- Gather and preserve all evidence: email confirmations, payment receipts, screenshots of the signup page showing what terms were displayed, and transaction logs.
- Send a formal notice to the website or business demanding a refund or correction, referencing your rights under the Consumer Protection Act, 2019.
- If no response or unsatisfactory response, file a complaint with your bank or the National Payments Corporation of India (NPCI) routing the UPI payment.
- Alternatively, file a consumer complaint before the District Consumer Disputes Redressal Commission having jurisdiction over where you reside or where the business is located.
- Do not ignore the issue — small amounts add up, and timely action preserves your legal rights.
Documents You Must Keep Ready
- Identity proof: Aadhaar card, PAN card, or driving licence.
- Proof of subscription: welcome emails, signup confirmation, payment acknowledgment.
- Bank statements showing the debits or UPI Autopay mandates.
- Screenshots of the website's signup page, Terms of Use, Privacy Policy, and Refund Policy at the time of joining.
- Any communication with the website owner or customer support — emails, chat logs, or call recordings.
- Copy of the RBI circular or mandate reference for the UPI Autopay transaction.
- Any notices or complaints previously sent to the business.
What Evidence Is Required?
- Primary evidence: the electronic contract itself — a screenshot of the signup form with the "I agree" checkbox enabled, plus the version of terms displayed.
- Secondary evidence: server logs or database records showing the user's acceptance timestamp and IP address.
- Payment evidence: bank statements or UPI mandate confirmation from the payment gateway.
- Correspondence: emails or messages exchanged post-dispute.
- Consumer complaint evidence: proof of notice, receipt of complaint, and response (or lack thereof).
- Compliance evidence: the business's own records showing they followed RBI's recurring payment guidelines.
How Courts Typically Approach Such Cases
Indian consumer forums and civil courts have become increasingly tech-savvy. They examine two things closely: whether the user gave informed consent, and whether the terms were unconscionable or one-sided. If the acceptance mechanism was weak — like footer links without a checkbox — courts are likely to find that the user did not consent to the terms. If the refund policy is buried or unfair, courts may set it aside as an unfair trade practice under the Consumer Protection Act. Courts generally lean in favour of the consumer where there is any ambiguity. The business bears the burden of proving valid acceptance.
Timeline of Legal Process
- Pre-litigation notice: 30–45 days — send a legal notice to the business demanding resolution.
- Filing consumer complaint: 1–2 days — file before the appropriate consumer forum (District, State, or National based on claim value).
- Admission and notice to opposite party: 2–3 weeks — the forum admits the complaint and issues notice.
- Written statement: 30–45 days — the business files its defence.
- Evidence and arguments: 3–6 months — parties submit evidence and final arguments.
- Judgment: 2–3 months from final arguments.
- Appeal: 3–6 months if either party appeals to the State or National Commission.
- Execution: 2–4 months if the order requires enforcement.
Understanding the Costs
The total cost of a matter like this varies significantly from one case to the next — it depends on the complexity of the dispute, the forum involved, the number of hearings, and the specific facts of your situation. There is no single fixed figure that applies to everyone.
A professional advocate can give you an accurate estimate only after reviewing all your facts and documents in a consultation.
Can the Matter Be Settled Out of Court?
Yes, most subscription disputes can be settled before litigation or even after filing a complaint. Mediation centres affiliated with consumer fora now actively encourage settlement. You can also approach a Lok Adalat — even for pre-litigation matters — where the dispute can be resolved in a single day with a binding order. For the business, offering a refund and cancelling the mandate quickly often avoids litigation. For the consumer, agreeing to a refund and dropping the complaint saves time and costs. Settlement is particularly advisable when the legal costs are disproportionate to the disputed amount.
Common Mistakes People Make
- Relying on browsewrap acceptance — footer links or small-print links — without any active "I agree" click. That's the biggest, and most common, error.
- Copying terms from foreign websites without adapting them to Indian contract law, consumer protection rules, and RBI mandates on recurring payments.
- Not keeping version-controlled copies of what the user saw at the time of signup. If you can't prove what terms were displayed, you can't enforce them.
- Engaging an advocate who does not regularly handle digital contracts or consumer forum cases. This area requires specific knowledge of Section 10A of the Information Technology Act, RBI circulars, and emerging consumer case law — general practice advocates often miss these nuances.
- Ignoring pre-litigation notice. Filing directly in court without sending a formal notice can prejudice your case, especially for a consumer complaint.
- Delaying action — the limitation period for consumer complaints is only two years. Waiting too long can extinguish your right entirely.
FAQs People Normally Have
Can I enforce my Terms of Use against a user who didn't tick any checkbox?
It's difficult but not impossible. If you can prove the user had actual notice — for example, links were prominently displayed at every signup page and you have server logs showing they visited that page — a court may still find acceptance. But the safest route is always a mandatory checkbox.
Do I need a lawyer to draft a Privacy Policy?
Strictly speaking, no — you can draft one yourself. But if your business collects sensitive personal data or handles recurring payments, getting a lawyer who understands the Digital Personal Data Protection Act (once notified) and RBI compliance is strongly recommended. Mistakes can lead to penalties or consumer complaints.
What if a user claims they never saw my Refund Policy?
That's a factual dispute. Your evidence of acceptance — logs, timestamps, screenshots — will determine the outcome. If your acceptance mechanism was robust, you have a strong case. If it was just a footer link, you'll face an uphill battle.
Is there a cooling-off period under Indian law for online subscriptions?
The Consumer Protection Act, 2019 includes rules on withdrawal by the consumer in certain services, but it's not as straightforward as the EU's 14-day cooling-off period. Each case turns on the nature of the service and the terms offered. A well-drafted policy should explicitly state a cooling-off period for free trials to avoid ambiguity.
This article is general legal information, not legal advice. Consult a qualified advocate about your specific situation.
Advocate Sudhir Rao, Supreme Court of India