Ummeed NGO ("we", "us", or "our") is committed to protecting the privacy and personal data of every individual who interacts with us. This Privacy Policy outlines the principles and practices we follow for the collection, use, storage, and protection of personal information in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), and other applicable Indian laws and regulations.
We encourage you to read this policy carefully to understand how we handle your personal data and what rights you have in relation to it.
1. Scope and Applicability
This Privacy Policy applies to all individuals who:
- Visit or use our website or digital platforms
- Donate to Ummeed NGO
- Subscribe to our newsletters or updates
- Volunteer with us
- Participate in our programs, surveys, or events
- Engage with us through any offline or online means
This Policy is applicable to all personal data processed by Ummeed NGO, whether collected through electronic forms, paper documents, verbal communication, or other media.
2. Definitions
- Personal Data: Any data that relates to an identifiable individual, such as name, address, email ID, phone number, financial information, etc.
- Data Principal: The person whose personal information is being collected, stored, or processed; essentially, the individual who owns or is directly associated with the data.
- Data Fiduciary: Ummeed NGO, which determines the purpose and means of processing the personal data.
- Processing: Any operation performed on personal data, such as collection, storage, usage, sharing, or deletion.
3. Information We Collect
We collect a range of personal and non-personal information based on your interaction with us, including but not limited to:
a. Personal Data
- Full Name
- Contact Information (email address, phone number, postal address)
- Date of Birth
- Gender
- PAN card or Aadhaar number (for donation receipts or identity verification, when required)
- Bank account or payment card details (used for donation processing)
- Volunteering background, resume, or educational qualifications
- Photograph or video footage (in case of events or awareness campaigns)
b. Non-Personal Data
- IP address
- Browser type and version
- Device information
- Website usage patterns
- Location data (if enabled)
Non-personal data is typically used in aggregate form to analyze usage trends and improve our website performance.
4. Purpose of Data Collection
We collect personal data for specific, lawful, and clearly defined purposes, including:
- To process donations and issue tax exemption certificates
- To manage volunteering applications and engagement
- To send project updates, newsletters, and awareness campaigns
- To enhance the overall functionality of our website and provide a smoother, more engaging experience for our users
- To ensure transparency, compliance, and accountability in our operations
- To meet our legal, regulatory, and statutory obligations
We do not use your data for any purpose other than what is specified unless required by law.
5. Lawful Basis for Processing
The lawful basis for processing your personal data includes:
- Consent: Provided explicitly by you through online or offline forms
- Legal Obligation: To comply with applicable laws, such as issuing 80G receipts
- Legitimate Interest: In managing our relationship with donors, volunteers, and beneficiaries
You have the right to withdraw your consent at any time by contacting us, subject to applicable laws.
6. Data Sharing and Disclosure
We never disclose, distribute, or provide your personal information to third parties for advertising, marketing, or commercial gain.
We may, however, share your information with:
- Authorized Service Providers: Such as payment gateways, database management systems, or newsletter services that help us operate efficiently
- Auditors, Legal Advisors, or Regulators: Where disclosure is required by applicable law, government request, or judicial process
- Partners and Collaborators: Only where relevant and necessary for executing a joint project or event, and always under a data protection agreement
All such third parties are bound by strict confidentiality obligations and data protection commitments.
7. Data Storage and Retention
Your personal data is stored securely on our internal systems and with selected third-party service providers, who are compliant with global security standards.
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable laws (e.g., financial records retention under tax laws).
When data is no longer needed, we ensure its secure deletion or anonymization.
8. Security Measures
We take data protection and information security seriously. Some of the measures we adopt include:
- Encrypted storage of personal data
- We use Secure Socket Layer (SSL) technology to safeguard all transactions, ensuring that your data is encrypted and securely transmitted.
- Role-based access control for sensitive data
- Regular audits and security checks
- Staff training on data protection protocols
Although we take every reasonable measure to safeguard your personal data, it's important to understand that no security system can guarantee complete protection. You are encouraged to protect your credentials and report any suspicious activity.
9. Your Rights Under DPDPA, 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to Access your personal data
- Right to Correction of inaccurate or outdated information
- Right to Withdraw Consent
- Right to Erasure of personal data (subject to legal obligations)
- Right to Grievance Redressal
To exercise these rights, you may write to us using the contact details provided below.
10. Use of Cookies and Tracking Technologies
Our website may utilize cookies, web beacons, and similar technologies to improve your browsing experience. These tools help us understand website traffic patterns and tailor content to suit your preferences. If you prefer not to use cookies, you can manage or disable them through your browser settings.
11. Children’s Privacy
We do not knowingly collect personal data from individuals under 18 years of age without appropriate parental or guardian consent. If we discover that we have collected data from a minor without verification of parental consent, we will delete it promptly.
12. Links to Other Websites
Our website may include links to third-party websites for your convenience and informational use. However, we do not have control over, nor are we liable for, the content, security measures, or privacy practices of any external websites that are linked to from our site. These third-party websites operate independently and may have their own policies and practices regarding data collection and usage. We strongly encourage you to review the privacy policies of these external sites before providing any personal information or engaging with their content.
13. Policy Updates and Modifications
We may periodically revise this Privacy Policy to reflect changes in legal, operational, or technological requirements. Any updates or changes to our policies will be published on our website, along with the updated effective date for your reference.
Your continued use of our services after such modifications constitutes your acceptance of the revised terms.
14. Contact Us
If you have any questions, concerns, or grievances regarding this Privacy Policy or the handling of your personal data, please reach out to us at:
- Address: 3/388, Vishal Khand 3, Vishal Khand - 3, Vishal Khand, Gomti Nagar, Lucknow, Uttar Pradesh 226010
- Email: ummeedlko@gmail.com
- Phone: +91 8756321666