Privacy Policy

Introduction

We, at SRATRC respect the privacy of the individual/visitor, volunteers, members, guests, donors, event attendees and all those associated with us and are committed to take reasonable precautions to protect information consisting of Personal information and “Sensitive Personal Data or Information” (SPDI) (“Information”) of visitors of this SRATRC website/App and comply with all legal, regulatory and/or contractual obligations related to privacy. SRATRC has adopted the “Privacy by Default” principles in its approach to data privacy i.e. privacy of data and information is upheld first by default.

This Policy covers the processing, storage and access to Information as required under lawful and/or contractual activities with SRATRC or otherwise required in the normal course of business. It describes SRATRC’s policies and procedures on the collection, usage and disclosure of Information provided/received by natural persons and meets the requirements established under:

• The Digital Personal Data Protection Act, 2023 (DPDP Act);
• The Information Technology Act, 2000 – Section 43A;
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011.
• Any amendments, rules, regulations, or guidelines issued thereunder.

1. Scope

This Policy applies to all visitors of this SRATRC’s website and App.

2. Information covered by this Policy

This Policy applies to Information collected and processed by SRATRC consisting of following:

2.1 Personal information

Personal information is information related to a visitor, or a combination of pieces of information that could reasonably allow him/her to be identified.

We collect the following types of personal information:

• Personal Identification Information: Name, email address, phone number, postal address, PAN card details and other similar details.
• Donation Information: Details related to your donations, including transaction history, amounts, and payment information.
• Booking and Service Information: Details relating to accommodation bookings, food bookings, transportation bookings, event registrations, attendance records, volunteer activities, and other services availed through the Website/App.
• Interaction Information: Data related to your interactions with our website, Mobile Application, emails, events, or any other communications.
• Non-Personal Information: We may automatically collect non-personal information when you visit our website/App, such as IP addresses, browser type, operating system, and usage data (e.g., pages visited, time spent on the site).

2.2 Sensitive Personal Data or Information (“SPDI”)

Sensitive Personal Data or Information (“SPDI”) is such personal information that is collected, received, stored, transmitted or processed by SRATRC, consisting of:

• Password;
• Financial information such as bank account or credit card or debit card or other payment instrument details;
• Biometric information;
• Any detail relating to the above personal information categories as provided to SRATRC for providing services; and
• Any of the information received under above personal information categories by SRATRC for processing, stored or processed under lawful contract or otherwise.

3. Purpose

SRATRC shall collect and use Information for legitimate purposes in order:

• To Provide Services: To enable us to facilitate seamless services to Mumukshu’s, Guest and Visitors with respect to Ashram Visit/ Stay and Meal services, Event registrations, arrangement of transportation, donations or community services or fund-raising campaign or any other information sharing activity as may be required while using the application/ website.
• To Communicate with You: To send updates regarding bookings, accommodation, food services, transportation services, donations, events, newsletters, security notifications, OTPs, reminders, and other communications relevant to our mission through email, SMS, WhatsApp, push notifications, or other communication channels .
• To Process Donations: To process financial contributions and provide receipts for donations.
• To Improve Our Website and Services: To analyse how users interact with our website and enhance your user experience.
• Legal and Regulatory Compliance: To comply with legal obligations, resolve disputes, and enforce agreements.

4. Collection of Information

Only minimum Information required to meet the purposes mentioned in this policy shall be collected from the visitor/s. Neither SRATRC nor its representatives shall be responsible for the authenticity of such Information provided by the visitor/s. As normal business practice, SRATRC may collect Information in order to enable the secure online authentication, interaction and transaction with natural persons. This may include the installation of cookies and the collection of other session data.

5. Access, Correction of Information and withdrawal of consent

Any modifications / corrections required to the Information can be carried out on the website. In the event the visitor is unable to do so due to lack of functionality in SRATRC’s website and / or the visitor wants to withdraw his / her consent to provide SPDI, he / she may contact the Grievance officer, the details whereof are provided in clause 8 of this policy.

6. Retention, Processing and storage of Information

6.1 SRATRC shall retain Information only for as long as reasonably necessary to fulfil the purposes described in this Policy, comply with legal and regulatory obligations, resolve disputes, enforce agreements, maintain accounting and audit records, or protect the legitimate interests of SRATRC.

6.2 SRATRC has implemented required security practices and standards in line with the global standards and have a comprehensive documented information security program and policy in place, which contains managerial, technical, operational and physical security control measures that commensurate with the information assets being protected with SRATRC’s nature of business. It is being reviewed periodically to keep pace with business, technology and regulatory changes.

7. Disclosure of Information

SRATRC shall not use or disclose Information for purposes other than as mentioned in this policy, except with the consent of visitor providing such Information or as required by law. However, we may share your information in the following cases:

• With Service Providers: We may share your information with trusted third-party service providers who assist in conducting our operations, such as payment processors, event organizers, for Community Service or fund-raising campaign by - Smilestones or email marketing services.

Certain service providers engaged by SRATRC may process or store information on servers located outside India. In such cases, SRATRC shall take reasonable steps to ensure that appropriate security safeguards and contractual protections are implemented in accordance with applicable laws.

When collecting or transferring sensitive information such as credit card/ debit card/UPI payments information we use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use, or disclosure. The personal information you provide us is stored on computer systems located in controlled facilities which have limited access. When we transmit highly confidential information (such as credit card number or password) over the internet, we protect it through the use of encryption, such as the Secure Socket Layer (SSL) protocol.

Credit card/ debit card/ UPI payments numbers/ IDs are used only for processing payments through Payment collecting Gateways and are not used for other purposes. Payment transactions are processed through authorized third-party payment gateways. SRATRC does not store complete credit card numbers, CVV details, net banking passwords, UPI PINs, or similar authentication credentials on its systems.

8. Your Choices and Rights

You have the right to:

• Access Your Information: You can request a copy of the personal information we hold about you.
• Correct or Update Your Information: If any of your personal information is inaccurate or incomplete, you may request to correct it.
• Delete Your Information: You can request the deletion of your personal data, subject to applicable laws and regulations.
• Withdraw Consent: Where processing is based on consent, you may withdraw such consent at any time, subject to legal or contractual requirements.
• Grievance Redressal: You may raise concerns regarding the processing of your personal data by contacting SRATRC using the details provided in this Policy.
• Request Information: Subject to applicable laws, you may request information regarding the categories of personal data processed by SRATRC and the purposes for which such data is used.
• Opt-out of Communications: You may unsubscribe from our newsletters or other marketing communications at any time by following the opt-out instructions in the email or contacting us directly.

9. How We Protect Your Information

We implement a variety of security measures to maintain the safety of your personal information when you donate or enter personal data. These security measures include encryption, access controls, and secure servers. However, no method of transmission over the internet or electronic storage is 100% secure, so while we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

10. External Links

You hereby acknowledge and agree that when you use the Website/App, there may be certain links which may direct you to other websites or applications not maintained by SRATRC (the “Third Party Website”). The manner in which your Customer Data is collected, received, stored, processed, disclosed, transferred, dealt with, and handled by such Third-Party Websites is governed by the terms and conditions and privacy policy of the respective Third-Party Website. You hereby further acknowledge and agree that the SRATRC has no control over the Customer Data in such an event.

SRATRC urges you to acquaint yourself with the terms and conditions and privacy policy of every such Third-Party Website and in this regard, SRATRC hereby expressly disclaims all liabilities with respect to the manner in which the Third-Party Website collects and/or uses the Customer Data.

11. Children’s Privacy

Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children. If we learn that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information. We encourage parents and guardians to take an active role in their children’s online activities and interests. SRATRC, however, takes no liability or responsibility for any mishap or untoward incident of any nature whatsoever that may arise inter alia from the use / activities and interests of children below the age of 13 years.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website with the effective date. We encourage you to review this policy periodically for any updates.

13. Redressal of Grievances

If at any time you have questions or concerns with respect to this Privacy Policy, please feel free to e-mail us at tech@vitraagvigyaan.org. If at any time you have grievances or complaints with regard to the collection, receipt, storage, processing, disclosure, transfer, dealing with and handling of Customer Data in any manner, you may contact us at the below-mentioned email ID and designated person shall redress your grievance/complaint within one (1) month from the date of receipt of the grievance/complaint. While registering a grievance/complaint, you are kindly requested to quote your personal details for our reference to enable us to effectively resolve your grievance/complaint.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or wish to exercise any of your rights, please contact us at: