Privacy Policy

This template is a starting point, not legal advice. Have it reviewed by a lawyer familiar with India's Digital Personal Data Protection Act (DPDP Act, 2023) and the IT Act, 2000 before publishing, and fill in every [bracketed] placeholder.

1. Information we collect

We collect information in a few ways:

Information you give us directly — your name, email, phone number, and message when you use our contact form; billing and contact details when you donate; and your details when you apply to volunteer.
Information collected automatically — basic technical data such as browser type, device type, pages visited, and approximate location, gathered through standard web server logs and, if enabled, analytics tools.
Information from third parties — if you donate through a payment gateway, that provider shares limited transaction details with us (e.g. amount, status, a reference ID) but not your full card or bank details.

2. How we use it

To respond to enquiries submitted through this website.
To process donations and issue receipts or tax-exemption certificates (e.g. under Section 80G) where applicable.
To keep donors, volunteers, and partners informed about our programmes, subject to your consent where required.
To maintain internal records for accounting, audit, and regulatory compliance as a registered society.
To improve this website and understand how it is used.

4. Donations & payments

Online donations are processed by a third-party payment gateway. We do not store your full card, UPI, or net-banking credentials on our servers — these are handled directly by the payment provider under their own security standards (such as PCI-DSS). We receive only the information needed to confirm your donation and issue a receipt.

5. Cookies

This website may use a small number of cookies or similar technologies to remember your preferences and understand aggregate traffic patterns. You can control or disable cookies through your browser settings; doing so may affect some features of the site.

6. Data security

We take reasonable technical and organisational measures to protect the information we hold, including restricted access and secure transmission (HTTPS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

We keep personal information only as long as necessary for the purposes described in this policy, or as required by applicable accounting, tax, or regulatory rules governing registered societies in India — after which it is securely deleted or anonymised.

8. Your rights

Depending on applicable law, you may have the right to access, correct, or request deletion of your personal information, and to withdraw consent for communications at any time. To exercise any of these rights, contact us using the details below.

9. Children's data

Some of our programmes support children, but this website itself is intended for use by adults acting on their own behalf (donors, volunteers, guardians, and partners). Where we handle information relating to a child beneficiary as part of a programme, we do so with appropriate consent from a parent or guardian and with additional care, limited to what is necessary to deliver that programme.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect the most recent revision. Continued use of this website after changes are posted constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this policy or how your information is handled, write to us at contact@sahyog.org.in or [Registered Office Address].