PRIVACY & DATA PROTECTION POLICY
PRIVACY & DATA PROTECTION POLICY
Effective Date: March 17, 2026
Entity: DEVI DHAAM LAUA SEWA FOUNDATION (A Section 8 Non-Profit Company)
DEVI DHAAM LAUA SEWA FOUNDATION ("Foundation", "we", "us", or "our") is committed to protecting the privacy and integrity of the personal data of our donors, volunteers, and stakeholders. This policy outlines our strict protocols for data collection, storage, and legal compliance.
1. LEGAL CONSENT & BINDING AGREEMENT
By accessing our website (devidhamtrust.org) or contributing a donation, you hereby provide your explicit consent to the collection and processing of your personal data as described in this policy. This agreement is legally binding under the Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023.
2. DATA WE COLLECT (STATUTORY REQUIREMENTS)
To maintain transparency and fulfill Ministry of Corporate Affairs (MCA) and Income Tax mandates, we collect:
- Identity Data: Full Name, Permanent Address, and Nationality.
- Government Identifiers: PAN Card Number (Mandatory for Section 80G tax-exempt receipts).
- Contact Data: Verified Email ID and Mobile Number.
- Financial Metadata: Transaction ID, Date of Donation, and Amount. (Note: We do not store Credit/Debit card numbers or CVV/PINs).
- Technical Data: IP Address and Browser metadata for security auditing.
3. PURPOSE OF DATA PROCESSING
Your data is processed strictly for the following "Lawful Purposes":
- Tax Compliance: Issuance of donation receipts and Form 10BE filings with the Income Tax Department.
- Audit Trails: Maintaining statutory registers as required for Section 8 Companies.
- Communications: Sending newsletters, annual reports, and project updates.
- Security: Prevention of fraudulent transactions and cyber-attacks.
4. DATA SECURITY & ENCRYPTION
- SSL Encryption: All data transmitted via our website is protected using 256-bit SSL (Secure Sockets Layer) encryption.
- Restricted Access: Access to donor records is restricted to authorized personnel (Managing Director and Statutory Auditors) only.
- Secure Storage: Personal data is stored on encrypted servers with multi-factor authentication.
5. NON-DISCLOSURE & THIRD-PARTY SHARING
- No Commercial Sale: We strictly DO NOT sell, rent, trade, or lease your personal information to any third-party marketing agencies.
- Regulatory Disclosure: Data may be shared with Government Authorities (Income Tax, MCA, Law Enforcement) only when required by law or a valid court order.
- Trusted Partners: Information is shared with our authorized Payment Gateways and Auditors solely for transaction processing and compliance.
6. DONOR RIGHTS (DPDP ACT COMPLIANCE)
Under the DPDP Act 2023, you hold the following rights:
- Right to Correction: Request updates to any inaccurate or outdated information.
- Right to Erasure: Request the deletion of your data once the legal retention period (as per Tax/Audit laws) has expired.
- Right to Grievance Redressal: Lodge a complaint regarding any data handling concerns.
7. LIMITATION OF LIABILITY
While we employ industry-standard security measures, the Foundation shall not be held liable for data breaches resulting from "Force Majeure" events, including but not limited to cyber-terrorism, hacking, or failure of third-party telecommunication networks.
8. GOVERNING LAW & JURISDICTION
This Privacy Policy shall be governed by the laws of the Republic of India. Any legal disputes shall be subject to the exclusive jurisdiction of the courts in Sidhi, Madhya Pradesh.
9. GRIEVANCE OFFICER CONTACT
In compliance with the Information Technology Act, for any privacy-related concerns, please contact our designated Grievance Officer:
- Attn: Managing Director / Grievance Officer
- Address: Gram - Bandaila, Post - Laua, Thana - Bahri, District - Sidhi, M.P. - 486661
- Email: devidhamtrust@gmail.com
- Official Phone: +91 7900880063