At SHUDDHI NGO we are committed to protecting your privacy and safeguarding your personal information. This policy explains how we collect, use, disclose and protect the information you provide when using shuddhi.org, our apps and our services. SHUDDHI is the Data Fiduciary for this information under India's Digital Personal Data Protection Act, 2023 (DPDP Act). We never sell your data.
1. Information we collect
- Donors: name, email, mobile number, postal address, PAN (for 80G receipts) and donation details. Card and bank details are entered on Razorpay's secure checkout; we never see or store full card numbers or CVVs.
- Account holders, fundraisers, volunteers and members: account details and referral activity; for payouts, identity documents (Aadhaar or other government ID, PAN), bank account and IFSC.
- Partner NGOs and CSR partners: registration details, PAN, 12A/80G certificates, bank details and contact-person details.
- Website use: pages visited, device and browser type, approximate location and how you reached us, collected through cookies (see section 7).
2. How we use your information
- To process and complete donations, send receipts and report eligible donations to the Income Tax Department (Form 10BD).
- To provide tools that help you manage and track your contributions, fundraisers and wallet.
- To verify fundraisers and partner NGOs (KYC) and pay funds to the correct, verified bank account.
- To send confirmations, payment notices and, if you have an account, newsletters and updates. You can opt out of newsletters at any time; transactional messages such as receipts are still sent.
- To prevent fraud, duplicate accounts and misuse.
- To understand and improve our website and appeals, through Google Analytics and Google Ads measurement, if you allow these cookies.
3. When we share information
- Campaign beneficiaries: unless you choose to donate anonymously, the organiser or partner NGO of the campaign you support may see your name, email and donation details. If you donate anonymously, we share only the amount.
- Payment processing: Razorpay and the banks involved, only to complete your transaction.
- Service providers that run our systems for us (email and hosting), under confidentiality obligations.
- Authorities where required by law, such as the Income Tax Department for 80G reporting, or in response to a court order or other legal process.
We do not share your personal information, email address or donation history with anyone else without your explicit consent.
4. Security of your information
All payment and transaction data is encrypted in transit using SSL. Identity and partner documents can be viewed only by the person who uploaded them and authorised SHUDDHI administrators, and Aadhaar numbers are masked in our systems. Administrative access is password-protected and logged. We cannot be responsible for information you choose to share with other users or external websites.
5. How long we keep information
Donation and accounting records are kept for as long as Indian tax and accounting laws require. KYC documents are kept while you have an active account with payouts, and afterwards for the period the law requires. Other information is deleted or anonymised when no longer needed.
6. Your rights
You can update most of your information yourself by signing in to your account. Under the DPDP Act you may also ask us to give you a summary of your data, correct or erase it (unless we must keep it by law), withdraw consent, or nominate someone to act for you. Write to us and we will respond within 30 days.
7. Cookies
Essential cookies keep you signed in and protect your session. With your permission we also use Google Analytics and Google Ads cookies to measure visits and the reach of our appeals. Choose “Essential only” in the cookie banner to switch these off; you can change your choice by clearing this site's data in your browser.
8. Children's privacy
Our services are meant for adults. We do not knowingly collect personal information from anyone under 18 without verifiable consent from a parent or lawful guardian. If we learn that such information was collected, we will promptly delete it and restrict that account.
9. Links to external websites
Our website may link to websites of partner NGOs and other organisations. SHUDDHI is not responsible for their privacy practices or content; please read their privacy policies before sharing information with them.
10. Updates to this policy
We may update this policy from time to time. Changes are posted on this page with a new “last updated” date, and important changes are announced on our website.
11. Contact and grievance officer
Grievance Officer (Online Privacy Coordinator), SHUDDHI NGO
HQ: New Delhi, India
Email info@shuddhi.org · Phone +91-9654815105
If you are not satisfied with our response, you may approach the Data Protection Board of India.