PRIVACY POLICY
1. Introduction
We are committed to protecting the privacy and personal information of our donors, beneficiaries, volunteers, members, employees, visitors, supporters and users of our website.
This Privacy Policy explains how we collect, use, process, store, disclose and protect personal information when you visit our website, communicate with us, make a donation, volunteer with us, participate in our programmes or otherwise interact with our organization.
We endeavor to handle personal data in accordance with applicable laws of India, including the **Digital Personal Data Protection Act, 2023**, applicable rules made thereunder and other applicable Indian laws and regulations, as amended from time to time.
2. Information We May Collect
Depending upon your interaction with us, we may collect information such as:
* Full name
* Postal address
* Email address
* Mobile/telephone number
* Date of birth or age, where required
* Donation and transaction details
* PAN and other information required for donation receipts, taxation or statutory compliance
* Volunteer, membership or programme registration information
* Communications, enquiries, complaints and feedback
* Photographs, videos or testimonials where appropriately collected
* IP address, browser/device information and website usage information
* Any other information voluntarily provided by you or required for a lawful and specified purpose
Where identification, banking, tax or other information is required by law, we may collect such information only to the extent necessary for the applicable purpose.
3. Purpose of Collecting and Using Information
We may process personal information for purposes including:
* Processing and acknowledging donations
* Issuing donation receipts and certificates
* Communicating with donors, volunteers, beneficiaries and supporters
* Managing NGO programmes, charitable activities and events
* Registering and coordinating volunteers
* Responding to enquiries, grievances and requests
* Maintaining statutory, financial and administrative records
* Meeting tax, accounting, audit and other legal or regulatory requirements
* Sending newsletters, programme updates or fundraising communications where permitted
* Improving our website, programmes and services
* Preventing fraud, misuse and security incidents
* Protecting the rights, safety and property of the NGO and persons associated with it
* Complying with lawful requests from competent government or regulatory authorities
We will endeavour not to use personal data for a purpose inconsistent with the purpose for which it was collected, except where permitted by applicable law.
4. Consent
Where consent is the applicable basis for processing personal data, we will seek consent that is free, specific, informed, unconditional and unambiguous through a clear affirmative action.
You may withdraw your consent for future processing where processing is based on consent. Withdrawal will not affect processing lawfully carried out before withdrawal.
You may contact us at **[Privacy/Grievance Email]** to withdraw consent or exercise applicable rights.
Certain information may nevertheless need to be retained or processed where required by law or where another lawful ground permits such processing.
5. Donations and Payment Information
When you make an online donation, payment information may be processed through banks, payment gateways or other authorised payment service providers.
We may receive transaction-related information necessary to confirm your donation, issue receipts, maintain accounts and comply with applicable legal requirements.
We do not intend to store complete debit card, credit card, UPI PIN, CVV or internet banking credentials on our own systems.
The processing of payment information by a third-party payment provider may also be governed by that provider's privacy policy and terms.
6. Information Sharing and Disclosure
We do **not sell or rent personal information** to third parties.
We may disclose personal information, where reasonably necessary and legally permitted, to:
* Banks and payment service providers
* Accountants and auditors
* Technology, hosting, email, communication and IT service providers
* Professional advisers
* Government departments, courts, law-enforcement agencies or regulatory authorities where required by law
* Other service providers acting for legitimate organisational purposes
We endeavour to share only information reasonably necessary for the relevant purpose and to require appropriate handling of such information.
7. Data Security
We take reasonable technical and organisational measures appropriate to the nature of the information handled by us to protect personal data against unauthorised access, disclosure, alteration, misuse, loss or destruction.
Measures may include, where appropriate:
* Restricted access to personal information
* Password and access controls
* Secure servers and hosting environments
* Encryption and secure transmission technologies
* Backups and security monitoring
* Appropriate contractual requirements for service providers
* Periodic review of data-access permissions and security practices
However, no electronic transmission or storage system can be guaranteed to be completely secure.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or for a longer period where required under applicable tax, accounting, regulatory, contractual or other legal requirements.
When personal information is no longer required and retention is not legally necessary, we will endeavour to delete, anonymise or securely dispose of it in accordance with applicable law and our record-retention practices.
9. Rights of Individuals
Subject to applicable law and the commencement and applicability of relevant statutory provisions, you may have rights concerning your personal data, including rights to:
* Obtain information about your personal data being processed
* Seek correction, completion or updating of inaccurate or incomplete personal data
* Request erasure of personal data where applicable
* Withdraw consent where processing is based on consent
* Raise a grievance concerning the processing of your personal data
* Nominate another individual to exercise applicable rights in circumstances provided under law
Requests may be submitted to **[Privacy/Grievance Email]**.
We may request reasonable information necessary to verify your identity before acting upon a request.
10. Children's Personal Data
Our charitable activities may involve children. Where we process personal data of a child, we will endeavour to comply with applicable legal requirements concerning children's personal data, including obtaining verifiable consent of the parent or lawful guardian where required.
We will not knowingly process children's personal data in a manner prohibited by applicable law.
Photographs, videos, testimonials or identifying information relating to children will be handled with particular care and in accordance with applicable consent and safeguarding requirements.
11. Photographs, Videos and Success Stories
During charitable programmes, events and community initiatives, we may take photographs or videos or document beneficiary/volunteer experiences for programme documentation, reporting, awareness and communication purposes.
Where consent is legally required for such use, we will seek appropriate consent before using identifiable personal information.
We will endeavour to exercise additional care where children or vulnerable beneficiaries are involved.
12. Cookies and Website Technologies
Our website may use cookies and similar technologies for essential website functionality, security, analytics and improving user experience.
Where required by applicable law, non-essential cookies or similar technologies will be used subject to appropriate notice or consent.
You may be able to restrict or delete cookies through your browser settings, although some website functions may then not operate correctly.
13. Third-Party Websites
Our website may contain links to government portals, payment gateways, social media platforms or other third-party websites.
We are not responsible for the privacy practices, security or content of third-party websites. We encourage users to review the privacy policy of any external website they visit.
14. Communications and Updates
Where permitted by law, we may use your contact information to communicate with you regarding donations, programmes, campaigns, events, volunteering opportunities, newsletters and organisational updates.
Where such communication is based on your consent, you may withdraw that consent or unsubscribe using the mechanism provided in the communication or by contacting us at **[Email Address]**.
15. Data Breach and Security Incidents
If a personal data breach occurs, we will take reasonable steps to contain, investigate and remediate the incident and will provide notifications to affected individuals and/or the appropriate authority where and when required under applicable law.
16. Grievance Redressal / Privacy Contact
If you have any questions, complaints or requests regarding this Privacy Policy or the processing of your personal information, please contact:
**Grievance / Privacy Contact Person:** [Name / Designation]
**NGO/Trust:** [Full Registered Name]
**Registered Address:** [Complete Address]
**Email:** [Email Address]
**Phone:** [Phone Number]
We will endeavour to acknowledge and resolve privacy grievances within the period prescribed under applicable law.
17. Legal and Regulatory Compliance
We may process, preserve or disclose information where necessary to comply with applicable laws, court orders, statutory obligations or lawful directions from competent authorities.
Depending upon the NGO's registration, activities and sources of funding, other laws and regulatory requirements may also apply to specific records or transactions.
18. Changes to This Privacy Policy
We may revise this Privacy Policy periodically to reflect changes in our activities, technology, legal requirements or regulatory guidance.
The revised Privacy Policy will be published on our website with an updated **“Last Updated”** date. Material changes may also be communicated through other appropriate means where required.
19. Governing Law
This Privacy Policy shall be governed by the applicable laws of India.
Any dispute relating to this Privacy Policy shall be subject to applicable law and the jurisdiction of competent courts and authorities in **[City, State, India]**, without limiting any statutory right available to an individual under applicable data-protection law.
Demo Content