This Privacy Policy explains how the Foundation collects, uses, stores, shares and protects personal data relating to donors and persons who use the donation facility on the Foundation’s website. It applies to individual donors and to personal data supplied by representatives, authorised signatories, employees or other contacts of companies, institutions and organisations.
The Foundation will process personal data only for lawful purposes and in accordance with applicable data-protection requirements. Depending on the circumstances, processing may be necessary for the Donor’s request or transaction, for compliance with a legal obligation, for legitimate organisational purposes permitted by law, or on the basis of consent where consent is required.
The Foundation is adopting this Policy to be aligned with India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, to the extent applicable and as the relevant provisions come into force.
Where processing is based on consent, consent may be withdrawn in the manner provided by the Foundation. Withdrawal will not affect processing already lawfully undertaken before withdrawal and may not be possible where the Foundation is required to retain or process information under law.
The Foundation may share relevant personal data with payment gateways, banks, technology and hosting providers, auditors, accountants, professional advisers, statutory authorities, regulators, law-enforcement agencies and other service providers where necessary for the purposes described in this Policy or where required or permitted by law.
The Foundation does not sell donor personal data. It will not disclose donor information to unrelated third parties for their independent marketing purposes except where the Donor has specifically consented or such disclosure is otherwise lawful.
Online payments may be processed by third-party payment service providers. Such providers may collect and process payment credentials in accordance with their own terms and privacy policies. The Foundation generally receives transaction status and limited payment information rather than full payment credentials.
The website may use necessary cookies and, where applicable, analytics or preference technologies to operate, secure and improve the website. Where consent is required for non-essential cookies or similar technologies, the Foundation will provide an appropriate choice mechanism.
Personal data will be retained only for as long as reasonably necessary for the purposes for which it was collected, including statutory, tax, accounting, audit, dispute-resolution, fraud-prevention and record-keeping requirements. Different categories of records may therefore have different retention periods.
The Foundation will implement reasonable technical and organisational safeguards appropriate to the nature of the personal data and the risks involved. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Subject to applicable law and the date on which relevant statutory provisions become operative, individuals may have rights concerning access to information about processing, correction or update of inaccurate data, withdrawal of consent where applicable, grievance redressal and other rights prescribed by law.
Requests may be sent to email@pdalfoundation.org. The Foundation may require reasonable verification of identity before acting on a request and may retain information where required by law.
The donation facility is not intended to knowingly collect personal data from children except where permitted by applicable law and with appropriate consent or authorisation. Where a donation is made on behalf of a minor, the donor or guardian is responsible for providing information lawfully.
Some service providers may process data outside India. Where personal data is transferred or made accessible across borders, the Foundation will do so subject to applicable Indian law, contractual safeguards and any restrictions notified by the competent authority.
If a personal-data breach occurs, the Foundation will take reasonable steps to contain, assess, remediate and notify affected persons or authorities where required by applicable law.
For donation, privacy or data-related questions, contact:
The Foundation may update this Policy from time to time. Material changes will be reflected on the website with an updated effective date. Donors are encouraged to review the Policy periodically.
Nothing in this Policy guarantees that a donation will qualify for a tax deduction, CSR recognition, FCRA treatment or any other statutory benefit. Eligibility depends on the Foundation’s status, approvals, the nature and mode of the donation, the Donor’s status and the law applicable to the relevant transaction and financial year. Donors are encouraged to review and confirm required information at the time of donation.
The terms that apply to donations are set out in our Donation Terms and Conditions
