Privacy Policy

Who we are

Panchmahals Adivasi Pragati Mandal (“PAPM”, “we”, “us”) is a public charitable trust registered under The Public Trust Act, 1950, registration number E-512. Our registered office is at 202, Jyoti Apartment, Godi Road, Dahod 389151, Gujarat, India. We are the data controller for personal information collected through this website.

For any question about this policy, or to exercise any of the rights described below, contact us at papmgujarat@gmail.com or +91 93134 51246.

Information we collect

When you make a donation

• Your name, email address and mobile number.
• Your postal address, city, state and PIN code, which we are required to record against a donation.
• A tax identification number such as a PAN, only if you choose to provide it. It is optional. Where provided, it is encrypted before being stored and is never displayed in full to our staff.
• A declaration that you are an Indian citizen or resident. PAPM is not registered under the Foreign Contribution (Regulation) Act, so we can accept donations from within India only.
• The amount, the purpose you selected, and the date and time of the donation.

What we never see or store

We do not collect or store your card number, CVV, UPI PIN, net-banking credentials or any other payment credential. Payments are processed entirely on the payment gateway’s own hosted checkout. We receive only a payment reference, the method used, the amount, and the outcome.

When you contact us or volunteer

If you submit an enquiry, a volunteer application or a partnership proposal, we collect the details you provide in that form together with your message.

Technical information

• A one-way hash of your IP address, retained for fraud prevention and rate limiting. We do not store the raw address alongside donation records.
• Your browser user-agent string.
• Aggregated, non-identifying analytics about which pages are visited. We do not send donation amounts, donor names, email addresses, phone numbers or tax identification numbers to any analytics service.

Why we use it

• To process your donation and issue you a receipt.
• To answer your enquiry or process your application.
• To meet our legal, accounting and audit obligations as a registered public trust, including maintaining records our auditors and the relevant authorities may require.
• To detect and prevent fraudulent or abusive use of the donation form.
• To send you occasional updates about our work, only if you have asked to receive them. Every such message includes a way to stop receiving them.

Beneficiary and children’s information

Much of our work involves children and other vulnerable people. We hold ourselves to a higher standard for their information than for our own convenience:

• We publish a photograph, name or story of a beneficiary only with documented written consent, and where the person is a minor, the consent of a parent or guardian.
• We support the use of a pseudonym instead of a real name.
• Consent records and any identifying material are held in restricted internal storage, separate from anything published on this website.
• Consent can be withdrawn at any time, and we will remove the material.

Who we share it with

We do not sell personal information, and we do not rent or trade mailing lists.

We share limited information only with:

• Our payment gateway, to process a donation you have initiated.
• Our email provider, to deliver your receipt and any message you have asked for.
• Our auditors and professional advisers, where required to prepare or audit our accounts.
• Government authorities, where we are legally obliged to report or produce records.

How long we keep it

• Donation, payment and receipt records are retained for as long as our accounting, audit and statutory obligations require.
• Enquiry, volunteer and partnership submissions are retained for up to three years, then deleted unless a continuing relationship requires otherwise.
• Newsletter subscriptions are retained until you unsubscribe.

How we protect it

• The entire website is served over HTTPS.
• Tax identification numbers are encrypted before storage, with the encryption key held separately from the database credentials.
• Administrative access is restricted by role, and access to donor records is limited to the staff who need it for finance work.
• Access to, and changes affecting, financial records are logged with the person responsible and the time.
• Databases are backed up, and backups are access-controlled.

No system can be guaranteed completely secure. If a breach occurs that affects your information, we will act to contain it and inform those affected.

Your choices

You may ask us to:

• confirm what personal information we hold about you, and give you a copy;
• correct information that is wrong or out of date;
• delete information, where we are not required to keep it for accounting, audit or other legal reasons;
• stop sending you updates;
• record your donation as anonymous, so your name is not used in any public acknowledgement.

Write to papmgujarat@gmail.com. We aim to respond within 30 days. We may need to verify your identity before acting on a request.

Cookies

We use only the cookies needed for the website and the donation process to function, for example to keep your session and to protect forms from automated abuse. We do not use advertising cookies and we do not track you across other websites. Where we use analytics, it is configured so that it does not receive your personal or payment details.

Children using this website

This website is not directed at children, and we do not knowingly collect personal information from a child through it. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date shown at the top of this page. Where a change materially affects how we handle your information, we will say so clearly.

Grievances

If you are unhappy with how we have handled your information, contact the Secretary, Yashraj Damor, at papmgujarat@gmail.com or by post at the registered office address above, and we will look into it.