Privacy Policy

1. Who we are

GiveBharat Foundation ("GiveBharat", "we", "us") is a public charitable trust registered in India, with its registered office at 2nd Floor, Shanti Complex, Near Hamidia Hospital Road, Shahjahanabad, Bhopal 462001. We are the data fiduciary for the personal data described in this policy.

2. What we collect

When you donate: your name, email address, mobile number and, optionally, your city. We also record the amount, the campaign you chose and a payment reference from our gateway. We do not ask for your PAN, because we do not issue tax-exemption certificates.

When you volunteer or make a CSR enquiry: the contact and background details you enter in the relevant form.

When you browse: standard server logs (IP address, user agent, pages requested) and, if you accept them, analytics and advertising cookies described in section 6.

What we never collect: your card number, CVV, UPI PIN or net banking credentials. Those are entered on Razorpay's PCI-DSS Level 1 certified systems and are never transmitted to or stored by us.

3. Why we use it

• To process your donation and email you a receipt.
• To keep the accounting records required of a registered public charitable trust.
• To respond to your enquiry, application or message.
• To send you the quarterly impact report, if you asked for it.
• To measure which campaigns and advertisements actually bring in support, so we spend less donor money on ineffective outreach.

4. Legal basis

We process donation data to perform the transaction you initiated and to comply with statutory tax obligations. We process marketing and analytics data on the basis of your consent, which you can withdraw at any time.

5. Who we share it with

• Razorpay Software Private Limited — payment processing.
• Our statutory auditor — and any authority we are legally compelled to disclose to.
• Email and analytics providers acting as processors under contract.

We do not sell, rent or trade your personal data. We do not share donor lists with other non-profits.

6. Cookies and advertising

Our site uses cookies for three purposes: keeping the site working, understanding aggregate traffic, and measuring advertising performance. Where we run advertising, we may send hashed identifiers (email and phone, irreversibly hashed with SHA-256 before transmission) to Meta's Conversions API so a donation can be attributed to the advertisement that produced it. Meta cannot reverse the hash to obtain your email address. You can opt out by declining non-essential cookies or by using your browser's tracking protection.

7. How long we keep it

Donation records are retained for eight financial years, as required of a registered trust under Indian law. Volunteer and CSR enquiry records are kept for three years from last contact. Newsletter subscriptions are kept until you unsubscribe. Server logs are kept for 90 days.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you may request access to your data, correction of inaccurate data, erasure where we are not legally required to retain it, and withdrawal of consent for marketing. Write to hello@givebharat.org and we will respond within 30 days. Where we cannot delete a record — donation data subject to statutory retention, for example — we will tell you why.

9. Security

Data is transmitted over TLS and stored on access-controlled infrastructure. Admin access to donor data is restricted to named staff, protected by individual accounts, and logged. In the event of a personal data breach we will notify affected individuals and the Data Protection Board as required by law.

10. Children

We do not knowingly collect personal data from anyone under 18 through this website. Photographs of children in our programmes are published only with the written consent of a parent or guardian, and we remove any image on request without asking for a reason.

11. Changes

We will post any change to this policy on this page with a new "last updated" date. Material changes affecting how we use donor data will additionally be emailed to donors.