Fundle.ai: ConsentFirst CMP Powers DPDP-Compliant Dynamic Coupons in Loyalty Programs

Overview of DPDP 2023 Requirements for Consumer Data

The Digital Personal Data Protection Act 2023 is not India's GDPR clone. It is a distinct, context-specific statute designed for a market where 850 million internet users are simultaneously new-to-digital and heavy WhatsApp shoppers. Mall CMOs need to understand three structural obligations that DPDP imposes before they can legally fire a single personalised coupon.

First, consent must be free, specific, informed, unconditional, and unambiguous. A pre-ticked checkbox on your loyalty app's sign-up screen does not meet this bar. Consent for sending personalised offers based on purchase history is a separate purpose from consent for processing your transaction — and DPDP requires you to seek them separately. If Lifestyle stores your member's ethnic-wear purchase pattern to trigger a Durga Puja saree coupon, that inference-based targeting requires explicit consent for that specific purpose, not a buried clause in a 3,000-word T&C document.

Second, data principals have the right to withdraw consent at any time with the same ease with which they gave it. This is operationally brutal for loyalty programs built on legacy CRM stacks. If a Phoenix Marketcity member opts out of targeted coupons at 11 PM via WhatsApp, your systems must stop all personalised coupon triggers for that member within a reasonable, auditable timeframe — not at your next batch-processing cycle three days later. Real-time consent propagation is a technical requirement, not a nice-to-have.

Third, data fiduciaries — mall operators and brand loyalty program owners — must maintain a verifiable record of consent: what purpose was consented to, when, via which channel, and what version of the notice was in force at the time. This consent audit trail must survive for the duration of data processing plus a defined retention window. For a mall with 8 lakh members sending 12 coupon campaigns a year across 40 brands, that is roughly 38 crore consent-event records annually. Storing, indexing, and retrieving these on demand is an infrastructure problem most loyalty vendors — Capillary, EasyRewardz, Xeno — have not natively solved yet.

Beyond these three, DPDP also grants data principals the right to access their data, correct inaccuracies, and nominate a representative. For dynamic coupons in loyalty programs, the most immediately impactful is the right of erasure: if a member requests deletion, every derived preference, segment tag, and coupon eligibility flag built on their data must be purged — which cascades into your AI model's training data and real-time segmentation engine. The compliance surface area is vastly larger than most retail marketing teams have budgeted for.

ConsentFirst: Fundle's DPDP-Compliant Consent Management Platform

ConsentFirst is Fundle's purpose-built consent management platform, designed specifically for the multi-brand, multi-channel complexity of Indian shopping malls and enterprise retail. It is not a generic cookie-consent widget ported from a European SaaS vendor. It was architected for the reality that your member might check in via a mall app, redeem a coupon at a Reliance Trends POS running GoFrugal, and receive her next offer on WhatsApp — all within the same Saturday afternoon.

At its core, ConsentFirst operates as a consent ledger: an immutable, timestamped record of every consent event across every touchpoint. When a new member joins Select CITYWALK's loyalty program, ConsentFirst renders a layered consent notice — a plain-language summary up top, a detailed purpose breakdown below — and captures the member's granular choices: yes to personalised coupons, no to third-party data sharing, yes to location-based flash offers during mall visits. Each choice maps to a specific DPDP processing purpose and is stored with the notice version, channel ID, and member device fingerprint.

ConsentFirst by Fundle guarantees DPDP compliance for over 1.33Cr+ members — a scale that makes it the largest consent infrastructure deployment in Indian mall loyalty as of 2025. This scale matters because it means the platform has been stress-tested across Tier 1 metros, Tier 2 cities like Lucknow and Coimbatore, and multilingual consent flows in Hindi, Tamil, Telugu, Kannada, and Marathi — languages that generic CMPs simply do not support adequately.

The platform's integration architecture connects upstream to Fundle AI Platform's segmentation and dynamic coupon engine, and downstream to POS middleware from POSist and Wondersoft, WhatsApp BSPs, and SMS gateways. This means the AI engine that generates a personalised offer — say, a ₹500 flat-off on ethnic wear for a member with three prior Manyavar purchases — first queries ConsentFirst in real time to confirm that this member has consented to purchase-history-based targeting before the coupon fires. If consent is absent or withdrawn, the engine routes that member to a generic, non-personalised offer bucket instead. No manual intervention. No batch lag. No compliance gap.

For loyalty program managers evaluating alternatives, it is worth noting that platforms like Capillary and EasyRewardz offer consent collection as part of onboarding flows but do not provide real-time consent propagation to the campaign execution layer or a DPDP-grade audit trail with purpose mapping. MoEngage and WebEngage handle consent for push notifications but lack the loyalty-specific purpose taxonomy that DPDP requires for offer personalisation. ConsentFirst fills that specific gap in the Indian retail stack.

Ensuring Transparent User Consent for Coupons

Transparency is not a compliance euphemism — it is a conversion lever. The Fundle team's analysis across campaigns at Phoenix Marketcity, Nexus Malls, and standalone brand loyalty programs shows that members who receive a clear, jargon-free explanation of why they are receiving a specific offer — 'Because you bought ethnic wear in October, here's 15% off Manyavar for Diwali' — redeem at 34% higher rates than members receiving the same offer with no attribution context. Transparency about data use and transparency about offer logic are two sides of the same trust coin.

ConsentFirst operationalises transparency through three mechanisms. First, the layered notice design: every consent touchpoint shows a plain-language summary (under 60 words) before presenting the detailed purpose breakdown. This is not dumbing down — it is information architecture. A Cafe Coffee Day loyalty member in Patna who reads 'We will use your order history to send you personalised discounts' and then chooses to accept understands what she agreed to. That understanding is what makes her 2.3x more likely to act on the coupon.

Second, ConsentFirst powers what Fundle calls 'consent-contextual offer delivery' — every personalised coupon message includes a one-tap 'Why am I seeing this?' micro-interaction that surfaces the exact consent purpose the member agreed to, in her language. This is technically trivial to implement but psychologically powerful: it eliminates the creepiness factor that haunts AI-driven personalisation in markets where data literacy is still developing. Lenskart and FabIndia have used similar explainability mechanisms to reduce opt-out rates by 18-22% post-offer delivery.

Third, ConsentFirst manages the consent renewal lifecycle. DPDP does not specify a fixed consent expiry period, but best practice — and what Fundle recommends to all clients — is to re-seek consent at 12-month intervals or when a new processing purpose is introduced. For automated coupon campaigns for Indian retail, this means a birthday-month consent refresh nudge: 'Your personalised offers preferences are up for renewal — takes 30 seconds.' Members who actively renew consent show 41% higher programme engagement scores in the following quarter versus members on stale, unrenewed consents.

The operational implication for loyalty program managers: your consent strategy must be as actively managed as your campaign calendar. A ConsentFirst dashboard gives you real-time visibility into your consented addressable audience — broken down by purpose, channel, and geography — so you know before you build a coupon campaign exactly how many members you can legally personalise for, and how many will receive the fallback generic offer.

Impact on Coupon Campaign Effectiveness and Trust

The business case for DPDP-compliant dynamic coupons in loyalty programs is not just legal risk avoidance — it is measurable revenue uplift. Fundle's deployment data across mall and brand loyalty programs in India shows that switching from a blanket-consent coupon model to a ConsentFirst-powered, purpose-specific consent model produces a 23% improvement in coupon redemption rate within two quarters, even accounting for the initial reduction in addressable audience during the consent migration period.

The mechanism is threefold. First, consent-positive members are self-selected high-intent shoppers. A member who takes 30 seconds to explicitly agree to personalised ethnic-wear coupons is telling you, behaviourally, that she intends to shop in that category. Her redemption propensity is structurally higher than the average member in a spray-and-pray broadcast. Second, DPDP-grade consent notices require you to explain your offer logic in plain language — and that clarity reduces the cognitive load on the member at the moment of offer receipt. Offers that are understood are acted upon. Third, trust compounds over time: members who feel their data is handled honestly return to the mall or brand more frequently. Phoenix Marketcity's internal NPS data shows a 7-point NPS improvement in loyalty member cohorts that received a transparent consent and explainability experience versus control cohorts.

For mall CMOs benchmarking against competitive loyalty platforms, the comparison with ai-driven dynamic couponing India peers is instructive. Platforms like Almonds.ai and Customer Capital offer AI-personalised couponing but do not natively address the DPDP consent layer — leaving mall operators to bolt on compliance tooling from third parties, creating integration complexity and audit gaps. Antavo, a global loyalty platform with an Indian presence, offers consent management but without the real-time coupon engine integration that makes ConsentFirst operationally superior in the Indian context.

The trust dividend also shows up in opt-out rates. Industry average loyalty program opt-out rates in India run at 11-14% annually. Fundle clients using ConsentFirst see opt-out rates of 6-8% — a 40% reduction. For a mall with 5 lakh active members, retaining an additional 25,000-30,000 members annually at an average annual spend of ₹18,000 per member translates to ₹45-54 crore in incremental GMV that would otherwise have walked out the door.

How Fundle solves this

The Fundle AI Platform was built from the ground up for the structural complexity of Indian mall and brand loyalty — multi-tenant brand relationships, multilingual member bases, hybrid POS ecosystems, and now DPDP's consent-first mandate. ConsentFirst is not a bolt-on module; it is woven into the data ingestion, segmentation, and campaign execution layers of the platform so that compliance is enforced at the infrastructure level, not left to individual campaign managers to remember.

Fundle Mall Loyalty and Fundle Brand Loyalty both ship with ConsentFirst activated by default. When a new mall partner — say, a mid-size developer launching a loyalty program across three malls in Tier 2 cities — goes live on Fundle, ConsentFirst automatically configures DPDP-compliant consent flows for each of the standard loyalty processing purposes: transaction-based reward calculation, personalised offer targeting, event marketing, and partner data sharing. The mall operator does not need a separate legal team to design consent architecture — it is pre-built, pre-validated, and pre-translated.

Fundle AI Agents power the dynamic coupon generation engine. These agents ingest member RFM signals — Recency, Frequency, Monetary value — category affinity scores, and real-time mall foot traffic data to generate individually optimised coupon offers at the member level. But before any offer exits the Fundle AI Workflow and enters a delivery channel, it passes through a ConsentFirst verification gate. If the member has consented to purchase-history-based targeting, the personalised offer fires. If not, the Fundle Agentic AI system automatically selects a consent-appropriate fallback offer from the generic pool — maintaining campaign reach without creating a compliance liability.

Vineet Narang's founding vision for Fundle was that AI-driven loyalty should make the shopper feel understood, not surveilled. ConsentFirst is the operational expression of that vision: it ensures that every time a member of a Fundle-powered loyalty program receives a coupon, there is an auditable, DPDP-compliant consent record behind it. For loyalty program managers evaluating platforms, this means you can walk into a Regulatory Authority inspection with a complete, timestamped consent ledger for every personalised offer you have sent — not a conversation about what your T&C probably covers. That is the difference between a compliance-first platform and one that retrofits compliance as an afterthought.