Last Updated: 1st June 2026 | Version: 1.0

1. 1. Who We Are

   Sri Badrika Ashram is a Charitable Trust registered under the Himachal Pradesh Societies Registration Act, 2006, bearing Registration No. HPCD-4095.

   For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Sri Badrika Ashram acts as a Data Fiduciary and is responsible for determining the purpose and means of processing personal data collected from donors, supporters, beneficiaries, volunteers, and other stakeholders.

2. 2. Personal Data We Collect

   We collect the following categories of personal data for the purposes stated below:

   • Identity Data: Full name, date of birth
   • Contact Data: Mobile number, email address, postal address
   • Financial Identity: PAN number (for 80G certificates, as required by Income Tax Act)
   • Government ID: Aadhaar (last 4 digits only, for FCRA/PMLA compliance)
   • Travel ID: Passport number (for international donors, as required by FCRA)
   • Financial Data: Bank account details (for transfer/refund purposes only)
3. 3. Purpose of Collection and Processing

   We collect and process personal data for the following purposes:

   • Processing donations and issuing 80G tax exemption certificates under the Income Tax Act, 1961.
   • Compliance with reporting and record-keeping requirements under the Foreign Contribution (Regulation) Act, 2010 (FCRA).
   • Conducting anti-money laundering and related compliance checks under the Prevention of Money Laundering Act, 2002 (PMLA).
   • Communicating programme updates, event information, and organizational activities where consent has been provided.
   • Maintaining records for statutory audits, accounting, and regulatory reporting obligations.
   • Managing donor relationships and responding to enquiries or requests.
4. 4. Legal Basis for Processing

   We process personal data on one or more of the following grounds under the DPDP Act:

   • Legitimate Uses under Section 7 of the DPDP Act where processing is necessary to comply with legal obligations imposed by Indian law.
   • Consent, where required, including for communications and updates that are not otherwise mandated by law.

   Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal.

5. 5. Data Retention

   We retain personal data only for as long as necessary to fulfil the purposes described above or to comply with legal obligations.

   Category of Data	Retention Period
   PAN and donation records	7 years from the end of the relevant financial year
   FCRA-related records	6 years from the date of receipt
   Contact information	Duration of the relationship plus 12 months
   Masked Aadhaar information	Retained in accordance with the applicable record retention requirement above

   Upon expiry of the applicable retention period, personal data will be securely deleted, anonymized, or destroyed in accordance with applicable law.

6. 6. Security of Personal Data

   We implement reasonable technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse. Access to personal data is restricted to authorized personnel who require such access for legitimate purposes.

7. 7. Consequences of Not Providing Personal Data

   Certain personal data is required for processing donations, issuing tax certificates, and complying with legal obligations. Failure to provide required information may prevent us from accepting donations or providing associated statutory benefits.

8. 8. Children's Personal Data

   We do not knowingly collect personal data from children except where necessary for lawful charitable activities and with consent from a parent or lawful guardian, as required under applicable law.

9. 9. Your Rights Under the DPDP Act, 2023

   Subject to applicable legal limitations, you have the right to:

   • Access information relating to your personal data.
   • Request correction or updating of inaccurate personal data.
   • Request erasure of personal data where retention is no longer necessary or legally required.
   • Withdraw consent previously provided.
   • Nominate another individual to exercise your rights in accordance with the DPDP Act.
   • Submit grievances regarding the processing of your personal data.

   Requests may be submitted to the Grievance Officer whose details are provided below.

10. 10. Grievance Officer

    Name: Prannoy Suryawanshi

    Designation: Accountant

    Email: sribadrika.acc@gmail.com

    Phone: +91 8628838088

    Sri Badrika Ashram will acknowledge and respond to grievances within 30 days of receipt, or within such period as may be prescribed under applicable law.

11. 11. Changes to this Privacy Notice

    We may update this Privacy Notice from time to time to reflect changes in legal requirements or our processing practices. The latest version will be made available on our website and will indicate the date of revision.