Privacy Policy.

1. Information we collect

We may collect the following categories of personal information:

• Identity data: Full name, PAN card number (for 80G receipts only).
• Contact data: Email address, phone number, postal address.
• Transaction data: Donation amounts, payment method type (not card numbers — this website has no payment gateway and never receives them), pillar preference, and date of transaction.
• Volunteer data: Skill set, availability, language proficiency, prior experience — collected via the volunteer expression-of-interest form.
• Usage data: IP address, browser type, pages visited, and time on site — recorded automatically in the server logs kept by our web host. We do not run Google Analytics, or any other analytics or advertising product, on this site (see section 8).

We do not collect sensitive personal data (biometrics, health information, religious affiliation, caste) unless explicitly provided by you and required for programme delivery.

2. How we use your information

• To process donations and issue receipts (including Form 10BE once 80G is approved).
• To send monthly impact reports and our annual transparency newsletter — only if you have opted in.
• To contact you about your volunteer application or CSR partnership enquiry.
• To comply with Indian law — Income Tax Act 1961, Indian Trusts Act 1882, FCRA (when applicable), and applicable data protection regulations.
• To improve our website and programmes using aggregated, anonymised server-log data — we do not operate an analytics product (see section 8).

3. Legal basis for processing

We process your personal data on the following legal bases under applicable Indian law and, where applicable, GDPR for international donors:

• Consent: For marketing communications and optional newsletter — you may withdraw consent at any time.
• Contractual necessity: For processing your donation and fulfilling our obligations to you.
• Legal obligation: For maintaining donor records as required by income tax and trust law.
• Legitimate interests: For server-log review, fraud prevention, and programme improvement.

4. Data sharing and disclosure

We do not sell, rent, or trade your personal data. We may share data with:

• Formspree (Formspree, Inc. — United States): Every form on this website — the newsletter signup, the volunteer expression-of-interest form, and the donor-details form — is delivered to us through Formspree, a form-relay service whose servers are in the United States. Whatever you type into those forms (for example your name, email address, phone number, postal address, PAN and message, where you provide them) is transmitted to Formspree and passed on to us. This means your form data leaves India.
• Google Fonts (Google LLC — United States): The typefaces on this site are served by Google Fonts, so your browser requests them directly from Google and Google receives your IP address and browser details as part of that request. No other page content is loaded from a third party.
• Our bank and the UPI network: A donation moves from your own UPI app to the Trust's bank account. That transfer is handled by the UPI network and the banks involved, not by this website. Our bank statement shows us the amount, the date, the payer name your bank sends, and the UPI reference (UTR).
• Chartered Accountant: For annual audit purposes — under strict confidentiality.
• Income Tax authorities: As required by Indian tax law (e.g., Form 10BE issuance).
• Government regulators: If required by law (DARPAN, MCA, FCRA, etc.).

We will never share your personal data with third-party marketers or commercial entities.

5. Data retention

Donor records are retained for a minimum of 8 years as required by Indian income tax law. Volunteer data is retained for 3 years after your last interaction with SKF, or as required by law. Marketing opt-in data is deleted within 30 days of unsubscription.

6. Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption and access controls. Because donations reach us by UPI rather than through a gateway on this site, no card or banking credential is ever handled by this website. However, no internet transmission is completely secure — please contact us immediately if you suspect any breach.

7. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention obligations).
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, write to us at sanatani@sanatankutumb.com. We will respond within 30 days.

8. Cookies

Our website does not set any cookies at all. We do not use tracking cookies, advertising cookies, or third-party analytics cookies, and no cookie consent banner is required because no cookies are used.

Where the site offers an English / हिंदी language switch, your choice is remembered in your browser's own local storage, on your device. It is never transmitted to us and is not readable by anyone else.

9. Children's privacy

We do not knowingly collect personal data from children under 18. Beneficiary children in our programmes are identified only by anonymised codes — no names, addresses, or photos with identifiable information are published without parental consent, which we collect in writing.

10. Changes to this policy

We may update this policy from time to time. The "last revised" date at the top of this page reflects the most recent update. Significant changes will be announced in our monthly report.

11. Contact us

For any privacy-related questions, contact:
Sanatan Kutumb Foundation
Greater Noida, Uttar Pradesh, India
Email: sanatani@sanatankutumb.com
Phone: 96503 34156