Privacy Policy

1. Preamble & Scope

At PASHUPATINATH MAHADEV GOSHALA CHARITABLE TRUST (“Trust”, “we”, “our”, or “us”), we hold the sacred trust of our donors and patrons in the highest esteem. This Privacy Policy details our practices concerning the collection, processing, storage, and protection of digital personal data when you interact with https://ppngaushala.org.

This policy adheres strictly to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Categories of Personal Data Collected

In accordance with the statutory principle of Data Minimization, we only solicit and process personal data strictly necessary to fulfill our charitable mandate, comply with Indian tax statutes, and communicate with you:

Note: We do NOT store debit/credit card numbers, CVV codes, or net banking passwords. All payment transactions are executed securely via encrypted NPCI UPI rails or PCI-DSS certified aggregators.

3. Purpose of Processing (Lawful Grounds)

Under the DPDP Act 2023, data is processed based on your explicit, affirmative consent and for statutory legal obligations:

• 80G Tax Compliance: Reporting donations to the Income Tax Department of India via mandatory electronic filing of Form 10BD and subsequent generation of your Form 10BE Certificate of Donation.
• Receipt & Acknowledgement: Generating and transmitting official donation receipts via SMS, WhatsApp, or Email.
• Seva Fulfillment: Confirming Gau Grass feeding, personalized Gau Pooja sankalp, and medical progress updates for adopted cows.
• Public Trust Audits: Submitting audited annual charity returns to the Charity Commissioner, Thane Region under the Mumbai Public Trust Act, 1950.

4. Data Retention & Storage Safeguards

Storage Security: Donor records are stored in secure cloud environments (Google Cloud / Firebase Enterprise) utilizing industry-standard AES-256 encryption at rest and TLS 1.3 in transit. Access is restricted strictly to authorized trust administrative personnel authenticated via multi-factor authentication.

Retention Period: Tax donation records are retained for a minimum of 8 financial years as mandated by the Indian Income Tax Act, 1961. Non-statutory inquiries and temporary session telemetry are purged periodically.

5. Donor Rights as a Data Principal (DPDP Act, 2023)

As a Data Principal under Indian law, you possess enforceable rights:

• Right to Access & Information: You may request a summary of the personal data we hold about you and the processing activities undertaken.
• Right to Correction & Updating: You may request immediate correction of inaccurate or outdated contact or PAN details.
• Right to Erasure: You may request deletion of your personal data, subject to statutory retention obligations under tax and public trust laws.
• Right to Withdraw Consent: You may withdraw consent for promotional communication or newsletter updates at any time by contacting our desk.
• Right to Grievance Redressal: You have the right to register a formal grievance with our designated Grievance Officer and escalate to the Data Protection Board of India if unresolved.

6. Non-Disclosure & Third-Party Sharing

We adhere to a strict policy of zero commercial monetization of donor data:

We never sell, rent, trade, or commercially lease your personal data to third-party advertisers, telemarketers, or commercial brokers. Data is shared only with:

• Government bodies (Income Tax Department, Charity Commissioner) when legally mandatory.
• Certified technical service providers (Google Cloud / Firebase, transactional WhatsApp/SMS API gateways) bound by non-disclosure and data privacy agreements.

7. Cookies & Local Storage

Our portal uses strictly necessary cookies and browser local storage to maintain session security, prevent spam, and retain your cookie consent preferences. We do not use intrusive cross-site behavioral tracking cookies. You may manage your cookie preferences at any time via our Cookie Banner.

8. Grievance Officer & Contact Information

In compliance with Section 8 of the DPDP Act, 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021, the designated Grievance Officer for data protection matters is: