Privacy Policy

1. Introduction

Welcome to the Dua Child and Social Welfare Trust ("NGO", "we", "our", "us"). We are committed to protecting the privacy and security of your personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, and other applicable laws. This Privacy Policy details how we collect, process, and protect your information when you visit our website, donate, or volunteer.

2. Information We Collect

We only collect data that is strictly necessary for our charitable operations and compliance. This includes:

• Identity Data: Full Name, Permanent Account Number (PAN) strictly for 80G tax exemption processing.
• Contact Data: Email address, Phone number, and Residential address.
• Financial Data: We do NOT store your credit/debit card numbers or UPI IDs. All payment processing is securely handled by our PCI-DSS compliant partner, Razorpay.
• Technical Data: IP address (logged temporarily to prevent fraud and rate-limit attacks).

3. How We Use Your Data

Your data is processed solely for the following lawful purposes:

• Issuing automated email receipts and official 80G tax exemption certificates.
• Filing Form 10BD with the Income Tax Department of India as mandated by law.
• Communicating updates about our campaigns and your impact.
• Preventing fraudulent transactions on our donation portal.

4. Data Sharing & Disclosure

We do not sell, rent, or lease your personal data to any third parties. We only share your information with:

• Government Authorities: The Income Tax Department for compliance filing (Form 10BD).
• Trusted Service Providers: Razorpay (for payment routing) and robust email delivery services, bound by strict confidentiality agreements.

5. Data Security

We implement bank-level security measures including SSL/TLS 256-bit encryption for all data transmissions. Our database infrastructure is geographically hosted within secure servers to ensure unauthorized access, alteration, or data leaks are prevented. Your PAN data is cryptographically protected and never exposed to Razorpay's note fields.

6. Your Rights

Under the DPDP Act 2023, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Withdraw your consent for marketing communications (note: withdrawal does not affect mandatory tax record retention).
• Request data erasure (subject to our legal obligation to retain financial transaction records for 8 years under IT Act and Income Tax Rules).