🔒 Legal & Data Protection Policy

Privacy Policy

Last Updated: August 2026 | CIN: U88900RJ2025NPL104372 | Shriradheyshyam Nandi Gaushala Foundation

1. Introduction & Overview

श्रीराधेश्याम नन्दी गौशाला फाउण्डेशन (SHRIRADHEYSHYAM NANDI GAUSHALA FOUNDATION) ("Foundation", "NGO", "we", "us", or "our") is a registered non-profit organization incorporated under Section 8 of the Companies Act, 2013, with CIN U88900RJ2025NPL104372 and registered office at 5/29-A, Parasram Nagar, Dehar Ka Balaji, Jaipur-302039 (Rajasthan), India.

We are deeply committed to protecting the privacy, confidentiality, and security of all our donors, volunteers, devotees, beneficiaries, and website visitors. This Privacy Policy governs the manner in which we collect, use, maintain, and disclose information collected from users across our website (https://shriradheyshyamnandigaushalafoundation.org) and donation portals.

2. Information We Collect

We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, make an online or offline donation, register for seva/volunteering, subscribe to newsletters, or fill out a contact form:

Contact Information: Full Name, Email Address, Mobile Number, and City/Postal Address.
Tax Exemption Information (80G Compliance): Permanent Account Number (PAN) and Address, strictly as mandated by the Income Tax Department of India for issuing official 80G tax exemption certificates.
Transaction Details: Donation Amount, Purpose/Campaign Title, Date, Time, and Payment Gateway Reference ID. (Note: We do NOT store credit card details, debit card CVV, or net banking passwords. All financial transactions are securely processed through RBI-authorized payment gateways such as Razorpay and UPI.)
Sankalp / Seva Occasion Details: Family members' names, birthdates, anniversaries, or memorial notes provided voluntarily for special Gau Seva rituals.

3. How We Use Collected Information

The information collected from our donors and supporters is utilized solely for lawful and non-profit charitable purposes:

Issuing Official Receipts & 80G Certificates: To generate digital and physical donation receipts and submit annual donation returns to the Income Tax Department (Form 10BD).
Seva & Project Updates: To share visual reports, shelter construction progress, veterinary treatment updates, and fodder distribution photographs via WhatsApp or Email.
Customer Support: To promptly respond to inquiries, feedback, and technical support requests.
Legal & Regulatory Compliance: To comply with applicable Indian laws, statutory audits, and charity commissioner norms.

4. Data Protection & Security Measures

We adopt industry-standard security protocols, SSL encryption (HTTPS 256-bit), access control, and firewall protections to prevent unauthorized access, alteration, disclosure, or destruction of your personal information, donor data, and transaction records.

🛡️ 100% No-Sale & No-Spam Pledge:

We never sell, trade, rent, or commercialize our donor database or personal information to third-party telemarketers or commercial organizations.

5. Third-Party Payment Gateways & Data Residency

Our website integrates with certified third-party payment aggregators (e.g., Razorpay Software Pvt. Ltd. and Punjab National Bank UPI) that comply with Payment Card Industry Data Security Standards (PCI-DSS). While transacting, users are governed by the respective payment gateway's privacy and security protocols.

🇮🇳 Data Residency & Cross-Border Transfer Disclosure (DPDP Section 15 & 16):

All donor database records and operational systems are securely stored in cloud infrastructure within the territory of India (Asia-South Mumbai region). Payment processing is executed entirely within India through RBI-authorized payment entities. We strictly adhere to Central Government statutory frameworks regarding cross-border data transfers.

🇮🇳 DPDP Act 2023 & DPDP Rules 2025 Compliant Notice

Digital Personal Data Protection (DPDP) Act, 2023 & Rules, 2025 Notice

In compliance with the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) and the Digital Personal Data Protection Rules, 2025 (Notification G.S.R. 846(E), Ministry of Electronics & Information Technology), this statutory notice informs you of the specific personal data collected, lawful purpose of processing, your rights as a Data Principal, security safeguards, and the grievance redressal mechanism available to you.

📋 मुख्य गोपनीयता नीति सारांश (हिंदी में / Hindi Summary)

सहमति (Consent): आपका व्यक्तिगत डेटा (नाम, मोबाइल, पैन कार्ड) केवल 80G आयकर छूट रसीद और गौसेवा सूचनाओं के लिए ही आपकी स्पष्ट सहमति से लिया जाता है।
डेटा सुरक्षा (Security): आपकी कोई भी जानकारी किसी तीसरे पक्ष को बेची, किराए पर या अनधिकृत रूप से साझा नहीं की जाती। डेटा 256-बिट एन्क्रिप्शन से सुरक्षित है।
डेटा अधिकार (Data Rights): आप किसी भी समय अपनी जानकारी देखने, उसमें सुधार करने या उसे पूरी तरह मिटाने (Right to Erasure) का कानूनी अनुरोध कर सकते हैं।
शिकायत निवारण (Grievance Redressal): किसी भी प्रश्न या शिकायत के लिए हमारे नियुक्त शिकायत निवारण अधिकारी से सीधे संपर्क कर सकते हैं (48 घंटे में पावती, 30 दिन में समाधान)।

6. Cookies, Analytics & Consent Management

Our website adheres to a strict, privacy-by-design cookie policy. We categorize cookies into:

Strictly Necessary: Essential for secure navigation, session security, CSRF protection, and processing donations via RBI-compliant payment gateways. These cannot be disabled.
Analytics & Performance: Anonymous traffic insights (e.g., page views, loading times) to help us improve user experience. Requires your voluntary consent.
Marketing & Seva Communications: Used to share festive Gau Seva campaign updates and social media integration. Requires your opt-in consent.

Your Control: You can review, modify, or withdraw your cookie preferences at any time by clicking the "Cookie Preferences" link located in the website footer.

🕒 DPDP Act 2023 — Section 8(5) Compliant

6A. Data Retention & Erasure Policy

In accordance with Section 8(5) of the DPDP Act 2023, personal data collected shall be retained only for the period necessary to fulfill the stated purpose or as required by Indian law. Upon expiry of the retention period or upon withdrawal of consent, personal data shall be erased.

Data Category	Retention Period	Legal Basis
Donor Personal Data (Name, Contact, PAN)	8 years from the financial year of donation	Income Tax Act, 1961 — Section 80G, Form 10BD audit requirements
Transaction Records (Payment ID, Amount, Date)	8 years from transaction date	Companies Act 2013, Income Tax Act statutory audit period
Contact Form Inquiries (Name, Phone, Email, Message)	1 year from submission date	Legitimate interest — inquiry resolution and follow-up
Newsletter Email IDs	Until unsubscription or consent withdrawal	Consent-based — erasure upon withdrawal
Volunteer Registration Data	2 years from registration date	Legitimate interest — volunteer coordination
Cookie & Analytics Data	90 days (rolling)	Consent-based — anonymized aggregation only
Audit & Consent Logs	90 days (with backup before purge)	DPDP Act 2023 — Section 8(3) audit trail

🔒 Personal Data Breach Intimation (Section 8(6) & DPDP Rules 2025 — Rule 7): In the unlikely event of any personal data breach, the Foundation shall, to the best of its knowledge, intimate each affected Data Principal without delay through their registered email/phone with a description of the breach, mitigation measures, and safety steps. Furthermore, formal intimation shall be submitted to the Data Protection Board of India within seventy-two (72) hours of becoming aware of such breach, in strict adherence to Rule 7(2).

7. Data Principal Rights (Under DPDP Act 2023)

As a Data Principal under Indian law, you are entitled to exercise the following legal rights regarding your personal data:

Right to Access & Summary: Request a summary of the personal data we hold and processing activities carried out.
Right to Correction & Erasure: Request the correction of inaccurate data or the erasure of personal data that is no longer required for statutory purposes (such as 80G tax audit compliance).
Right of Grievance Redressal: Avail of an expeditious, transparent grievance redressal mechanism provided by our Foundation before escalating to the Data Protection Board of India.
Right to Nominate: Nominate another individual to exercise your data rights in the event of death or incapacity.
Right to Withdraw Consent: Withdraw previously granted consent at any time without retroactive penalty.

✅ Digital Self-Service Portal (DPDP Act 2023 & DPDP Rules 2025 — Rule 14)

Online Data Rights & Erasure Request Portal (डेटा अधिकार एवं मिटाव अनुरोध)

Exercise your rights under the Digital Personal Data Protection Act 2023 and DPDP Rules 2025. Submit your request directly to our Data Protection & Grievance Officer.

8. Grievance Redressal Mechanism & Statutory SLA Matrix (DPDP Act Section 13)

In accordance with Section 13 of the Digital Personal Data Protection Act, 2023 and Rule 14 of the DPDP Rules 2025, Shriradheyshyam Nandi Gaushala Foundation provides an expedited, transparent, and multi-tier grievance redressal framework for all Data Principals.

Grievance Tier	Designated Authority & Contact	Statutory SLA (Time Limit)	Scope of Redressal
Tier 1 • Level 1 Official Acknowledgment	Data Protection & Grievance Officer ✉️ contactus@shriradheyshyamnandigaushalafoundation.org 📞 +91 6350300161 / +91 8769086030	Within 24 to 48 Hours Unique tracking ticket issued via email	Immediate registration of data request, consent inquiry, or privacy dispute.
Tier 2 • Resolution Final Redressal & Action	Shri Naveen Sharma Trustee & Compliance Authority 📍 5/29-A, Parasram Nagar, Dahar Ka Balaji, Jaipur - 302039	15 to 30 Calendar Days (Well within statutory ceiling)	Complete correction, erasure confirmation, consent revoking, or certified data export dossier.
Tier 3 • Appellate Government Appellate	Data Protection Board of India (DPBI) Ministry of Electronics & IT (MeitY), Govt. of India 🌐 Statutory Central Regulatory Portal	Statutory Period If unresolved after 30 days	Direct escalation to the Central Government Board under DPDP Act 2023 Section 13(3).

🏢 Foundation & Office Credentials:

Legal Entity: श्रीराधेश्याम नन्दी गौशाला फाउण्डेशन (SHRIRADHEYSHYAM NANDI GAUSHALA FOUNDATION)

Government Registration: Section 8 Non-Profit • CIN: U01409RJ2024NPL093766 • 80G & 12A Certified

Registered Address: 5/29-A, Parasram Nagar, Dehar Ka Balaji, Sikar Road, Jaipur, Rajasthan - 302039, India

🙏 Support Gau Seva / दान करें

Loading page, please wait...

Shriradheyshyam Nandi Gaushala Foundation

Data Category

Retention Period

Legal Basis

Donor Personal Data (Name, Contact, PAN)

8 years from the financial year of donation

Income Tax Act, 1961 — Section 80G, Form 10BD audit requirements

Transaction Records (Payment ID, Amount, Date)

8 years from transaction date

Companies Act 2013, Income Tax Act statutory audit period

Contact Form Inquiries (Name, Phone, Email, Message)

1 year from submission date

Legitimate interest — inquiry resolution and follow-up

Newsletter Email IDs

Until unsubscription or consent withdrawal

Consent-based — erasure upon withdrawal

Volunteer Registration Data

2 years from registration date

Legitimate interest — volunteer coordination

Cookie & Analytics Data

90 days (rolling)

Consent-based — anonymized aggregation only

Audit & Consent Logs

90 days (with backup before purge)

DPDP Act 2023 — Section 8(3) audit trail

Grievance Tier

Designated Authority & Contact

Statutory SLA (Time Limit)

Scope of Redressal

Tier 1 • Level 1

Official Acknowledgment

Data Protection & Grievance Officer

✉️ contactus@shriradheyshyamnandigaushalafoundation.org

📞 +91 6350300161 / +91 8769086030

Within 24 to 48 Hours

Unique tracking ticket issued via email

Immediate registration of data request, consent inquiry, or privacy dispute.

Tier 2 • Resolution

Final Redressal & Action

Shri Naveen Sharma

Trustee & Compliance Authority

📍 5/29-A, Parasram Nagar, Dahar Ka Balaji, Jaipur - 302039

15 to 30 Calendar Days

(Well within statutory ceiling)

Complete correction, erasure confirmation, consent revoking, or certified data export dossier.

Tier 3 • Appellate

Government Appellate

Data Protection Board of India (DPBI)

Ministry of Electronics & IT (MeitY), Govt. of India

🌐 Statutory Central Regulatory Portal

Statutory Period

If unresolved after 30 days

Direct escalation to the Central Government Board under DPDP Act 2023 Section 13(3).