Privacy Policy

Sri Badrika Ashram is a Charitable Trust registered under the Himachal Pradesh Societies Registration Act, 2006, bearing Registration No. HPCD-4095.

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Sri Badrika Ashram acts as a Data Fiduciary and is responsible for determining the purpose and means of processing personal data collected from donors, supporters, beneficiaries, volunteers, and other stakeholders.

We collect the following categories of personal data for the purposes stated below:

• Identity Data: Full name, date of birth
• Contact Data: Mobile number, email address, postal address
• Financial Identity: PAN number (for 80G certificates, as required by Income Tax Act)
• Government ID: Aadhaar (last 4 digits only, for FCRA/PMLA compliance)
• Travel ID: Passport number (for international donors, as required by FCRA)
• Financial Data: Bank account details (for transfer/refund purposes only)

We collect and process personal data for the following purposes:

• Processing donations and issuing 80G tax exemption certificates under the Income Tax Act, 1961.
• Compliance with reporting and record-keeping requirements under the Foreign Contribution (Regulation) Act, 2010 (FCRA).
• Conducting anti-money laundering and related compliance checks under the Prevention of Money Laundering Act, 2002 (PMLA).
• Communicating programme updates, event information, and organizational activities where consent has been provided.
• Maintaining records for statutory audits, accounting, and regulatory reporting obligations.
• Managing donor relationships and responding to enquiries or requests.

We process personal data on one or more of the following grounds under the DPDP Act:

• Legitimate Uses under Section 7 of the DPDP Act where processing is necessary to comply with legal obligations imposed by Indian law.
• Consent, where required, including for communications and updates that are not otherwise mandated by law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal.

We retain personal data only for as long as necessary to fulfil the purposes described above or to comply with legal obligations.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymized, or destroyed in accordance with applicable law.

We implement reasonable technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse. Access to personal data is restricted to authorized personnel who require such access for legitimate purposes.

Certain personal data is required for processing donations, issuing tax certificates, and complying with legal obligations. Failure to provide required information may prevent us from accepting donations or providing associated statutory benefits.

We do not knowingly collect personal data from children except where necessary for lawful charitable activities and with consent from a parent or lawful guardian, as required under applicable law.

Subject to applicable legal limitations, you have the right to:

• Access information relating to your personal data.
• Request correction or updating of inaccurate personal data.
• Request erasure of personal data where retention is no longer necessary or legally required.
• Withdraw consent previously provided.
• Nominate another individual to exercise your rights in accordance with the DPDP Act.
• Submit grievances regarding the processing of your personal data.

Requests may be submitted to the Grievance Officer whose details are provided below.

We may update this Privacy Notice from time to time to reflect changes in legal requirements or our processing practices. The latest version will be made available on our website and will indicate the date of revision.