Privacy Policy

At Mitansh Foundation, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you interact with our website (mitanshfoundation.com), donate to our causes, or engage with our programs.

1. Information We Collect

We collect information you voluntarily provide to us, including:

• Personal details: name, email, phone number, postal address — provided when you donate, volunteer, contact us, or register for a program.
• Donation information: donation amount, payment method, transaction ID, PAN (mandatory for donations of ₹2,000 or more under Indian tax law).
• Form submissions: volunteer applications, CSR enquiries, student registrations, contact messages.
• Technical data: IP address, browser type, device information, pages visited, and basic analytics — automatically collected when you visit our website.
• Cookies: small files stored on your device to remember session state and improve your experience.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To process donations and issue 80G tax-exempt receipts
• To send confirmation emails, receipts, and program updates
• To respond to your queries, volunteer applications, and CSR partnership requests
• To comply with our legal obligations under Indian tax law (12A, 80G), FCRA (where applicable), and the Digital Personal Data Protection Act, 2023
• To improve our website, programs, and donor experience
• To send occasional updates about our work (you can opt out anytime)

3. Payment Processing

Online donations are processed securely through Razorpay, a leading Indian payment gateway. We do not store your card details, CVV, or banking credentials on our servers. Razorpay's privacy practices are governed by their own privacy policy and they are RBI-regulated.

For UPI and bank transfer payments, we only store the transaction reference (UTR / payment ID) you share with us for receipt issuance.

4. Cookies & Tracking

We use minimal cookies — primarily for session management (keeping you logged in if you are an admin) and CSRF security tokens. We do not use third-party advertising cookies or behavioural tracking. Static assets (fonts, scripts) are loaded from CDNs (jsdelivr, unpkg, Google Fonts) which may log basic request data; please refer to their respective privacy policies.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only when:

• Required by law — e.g. Income Tax Department for 80G receipt verification, NGO Darpan reporting, FCRA compliance.
• With service providers — Razorpay (payments), our hosting provider (Hostinger), email delivery — under strict confidentiality.
• With your consent — for example, listing your name on our public donor wall (you can opt out).

6. Data Security

We use industry-standard security practices including HTTPS encryption, CSRF protection, rate limiting on forms and login, bcrypt-hashed admin passwords, and parameterised database queries to prevent SQL injection. While we strive to protect your information, no internet transmission is 100% secure — we encourage you to use a strong password and protect your own account.

7. Data Retention

We retain donor records permanently as required under Indian tax law (for 80G/12A audit purposes). Other personal data (volunteer applications, contact form submissions) is retained for as long as necessary for the purpose it was collected, then deleted on request.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India), you have the right to:

• Access the personal data we hold about you
• Request correction of any inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for marketing communications
• Lodge a complaint with the Data Protection Board of India

To exercise any of these rights, email us at mitanshfoundation@gmail.com with the subject "Data Request".

9. Children's Privacy

Our website is not directed to children under 18. We do not knowingly collect personal information from minors without parental consent. If we discover such data has been collected, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Please review it periodically.

11. Contact Us

For any privacy-related questions or concerns, please reach out to us: