Privacy Policy & Data Protection

ANUDIPTI FUTURE FOUNDATION ("ANUDIPTI FUTURE FOUNDATION", "we", "us", or "our"), incorporated as a non-profit apex Section 8 institution (CIN: U88100BR2026NPL087948, Licence No: 191677), is committed to safeguarding the privacy, confidentiality, and security of our website visitors, donors, registered members, volunteers, and welfare beneficiaries.

This Privacy Policy applies to our website (https://anudiptingo.org or authorized domain aliases), donor portals, membership verification systems, and event registration applications.

We collect only the minimum necessary information to provide transparent social welfare services, process donations, and issue statutory tax certificates:

• Donor Information: Full legal name, email address, telephone/mobile number, mailing address, Permanent Account Number (PAN) (mandatory under Section 80G / CBDT Form 10BD guidelines), and bank/gateway transaction reference identifiers.
• Member & Volunteer Information: Name, parentage, date of birth, blood group, educational qualifications, ID proof, address, and profile photo for issuance of official digital Member Cards.
• Technical & Log Data: Internet Protocol (IP) address, browser type, device information, access timestamps, and page request headers collected automatically for cyber-security and fraud prevention under IT Act 2000.

We process collected information strictly for lawful, non-commercial purposes including:

• Processing voluntary donations and generating instant Section 80G tax exemption receipts and annual Form 10BD certificates.
• Issuing verifiable digital Membership & Volunteer Identity Cards with encrypted QR validation.
• Publishing public donor gratitude mentions on our "Donor Wall of Honor" (only with explicit donor consent).
• Communicating periodic program progress reports, annual impact summaries, and CSR compliance filings.
• Complying with regulatory obligations under the Ministry of Corporate Affairs (MCA), Income Tax Department, and NITI Aayog.

We do not sell, rent, trade, or commercialize any personal or financial data to third-party marketing entities under any circumstances.

Data is shared only in the following strictly controlled scenarios:

• Statutory Authorities: Income Tax Department (Form 10BD electronic filings for 80G claims), Ministry of Corporate Affairs, and law enforcement agencies when mandated by applicable law.
• Payment Gateways: RBI-authorized payment aggregators (e.g. Razorpay, Cashfree, UPI QR) for processing encrypted payment requests. We never store raw credit card numbers, CVVs, or bank net-banking passwords on our servers.
• Auditors & Legal Counsel: Chartered Accountants and statutory auditors for mandatory annual financial audits and CSR utilization reporting.

We implement enterprise-grade technical, administrative, and physical security measures:

• 256-bit SSL Encryption: All data transmissions between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3).
• Database Security: Multi-layer firewall protection, parameterized queries preventing SQL injection, and hashed administrative passwords.
• Role-Based Access Control: Only authorized administrative coordinators with signed non-disclosure agreements have access to member and donor databases.

Under the Digital Personal Data Protection (DPDP) Act 2023, you hold the following rights:

• Right to Access: You may request a copy of your personal data held in our records.
• Right to Correction: You may request updating or rectification of inaccurate contact details.
• Right to Erasure / Anonymization: You may request removal of your profile, subject to statutory retention mandates (Income Tax laws require donation records and PAN details to be preserved for 7 financial years).
• Right to Opt-Out: You can unsubscribe from non-statutory email updates and newsletters at any time.

We may update this Privacy Policy periodically to reflect evolving legal requirements or institutional improvements. Any modifications will be posted on this page with an updated revision date. Continued engagement with our digital services constitutes acceptance of the revised terms.