Privacy Policy
- Who we are
- Information we collect
- How we collect information
- How we use your information
- Legal basis for processing
- Who we share data with
- Cookies & tracking
- Data storage & security
- How long we keep your data
- Your rights
- Children's privacy
- Third-party links
- Changes to this policy
- Grievance officer & contact
Who we are
This Privacy Policy is published by NetSecure Foundation, a registered non-profit organisation under Section 8 of the Companies Act, 2013.
- Legal name: NetSecure Foundation
- CIN: U88900RJ2025NPL099499
- Registered office: S-3, 104, Gopi Residency, Manyawas, Kiran Vihar, Mansarovar, Jaipur, Rajasthan – 302020
- Email: support@netsecurefdn.org
- Phone: +91-7851006262
- Website: netsecurefdn.org
For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), NetSecure Foundation is the Data Fiduciary for personal data collected through this Website and our programmes.
Information we collect
We collect only the minimum personal information necessary to operate our programmes and respond to your enquiries. The categories of data we may collect are:
| Category | Examples | Why we collect it |
|---|---|---|
| Identity data | First name, last name | To address you correctly in communications |
| Contact data | Email address, phone number | To respond to your enquiry or send receipts |
| Organisation data | School / college / company name, city | To coordinate session requests and partnerships |
| Financial data | Donation amount, payment reference (not card details) | To issue receipts, 80G certificates, and maintain accounts |
| Tax data | PAN number (only if requested for 80G) | To issue 80G tax exemption certificates |
| Programme data | Volunteer role preference, internship domain, session feedback | To manage volunteer and internship programmes |
| Technical data | IP address, browser type, pages visited (via analytics) | To maintain Website security and improve user experience |
| Visual data | Photographs and videos from sessions (with consent) | For documentation, social media, and awareness content |
How we collect information
We collect personal information through the following channels:
- Contact forms — when you submit a session request, general enquiry, or partnership request through our Website
- Volunteer and internship application forms — when you apply through Google Forms or our Website
- Donation transactions — when you make a donation through our payment gateway (Razorpay / Instamojo / PayU)
- Email and phone communications — when you contact us directly by email or phone
- Session attendance — when you attend or host one of our awareness sessions, your name, organisation, and feedback may be recorded
- Social media interactions — if you interact with us on Instagram, Facebook, LinkedIn, or YouTube
- Website analytics — automatically collected technical data through cookies and analytics tools (see Section 7)
How we use your information
We use your personal information only for the following purposes:
| Purpose | Data used |
|---|---|
| Responding to your enquiry or session request | Name, email, phone, organisation |
| Processing and acknowledging donations | Name, email, donation amount, payment reference |
| Issuing 80G tax exemption certificates | Name, email, PAN number, donation details |
| Managing volunteer and internship programmes | Name, email, phone, skills, preferences |
| Coordinating and scheduling sessions | Name, organisation, city, contact details |
| Sending programme updates and impact reports | Email (only to those who have opted in or engaged with us) |
| Documenting campaign impact for reports and social media | Photos / videos from sessions (with prior consent) |
| Improving our Website and user experience | Technical / analytics data (anonymised) |
| Complying with legal and regulatory obligations | Financial records, donation data (as required by Indian law) |
Legal basis for processing
Under India's Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful grounds:
- Consent — when you submit a form, make a donation, apply as a volunteer, or attend a session, you provide consent for us to process the data submitted
- Legitimate interests — to operate our programmes, maintain records, and send relevant updates to people who have engaged with us
- Legal obligation — to maintain financial records, issue donation receipts, and comply with requirements under the Companies Act, Income Tax Act, and other applicable Indian laws
- Contractual necessity — to fulfil any written agreement or MoU entered into with partner organisations or CSR contributors
Who we share your data with
We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:
- Payment gateways — Razorpay, Instamojo, or PayU process donation transactions. Your financial data is governed by their respective privacy policies. We receive only transaction confirmation and reference details
- Google Workspace / Forms — volunteer and internship applications submitted via Google Forms are stored on Google's servers, subject to Google's privacy policy
- Website hosting and analytics — our website is hosted on servers that may process technical data. We use analytics tools (such as Google Analytics) to understand website usage. Analytics data is anonymised and aggregated
- Legal authorities — if required by Indian law, court order, or government directive, we may disclose personal data to law enforcement or regulatory authorities
- Partner organisations — only with your explicit consent, and only the minimum information necessary to coordinate a session at your school or organisation
Cookies & tracking technologies
Our Website uses cookies and similar tracking technologies to improve your experience. Cookies are small text files stored on your device when you visit our Website.
| Cookie type | Purpose | Can you opt out? |
|---|---|---|
| Essential cookies | Required for the Website to function correctly (login sessions, form submissions) | No — required for basic functionality |
| Analytics cookies | Google Analytics — helps us understand how visitors use our Website (page views, traffic sources). Data is anonymised | Yes — via cookie consent banner or browser settings |
| Preference cookies | Remember your settings and preferences on the Website | Yes — via cookie consent banner |
| Third-party cookies | Embedded content from YouTube, Google Maps, or social media may set their own cookies | Yes — via browser settings or cookie consent |
You can manage or disable cookies through your browser settings at any time. Disabling essential cookies may affect Website functionality. For more information, refer to your browser's help documentation.
Data storage & security
We take the security of your personal data seriously and implement reasonable technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction.
- Our Website is secured with HTTPS (SSL/TLS encryption) for all data transmission
- Donation payments are processed through PCI-DSS compliant payment gateways — we never store card or bank account details on our servers
- Access to personal data within our organisation is restricted to team members who need it to perform their duties
- Data collected through Google Forms is stored on Google's secured infrastructure with access restricted to authorised team members
- We conduct periodic reviews of our data handling practices
All data collected by NetSecure Foundation is stored and processed in India.
How long we keep your data
| Data type | Retention period | Reason |
|---|---|---|
| Contact form submissions | 2 years from last interaction | To respond to follow-up enquiries |
| Donation records and receipts | 8 years | Required under the Income Tax Act and Companies Act |
| 80G certificates and PAN data | 8 years | Required for tax compliance and audit purposes |
| Volunteer / intern records | 3 years from end of engagement | To issue certificates and letters of recommendation |
| Session attendance records | 3 years | For impact reporting and programme evaluation |
| Session photographs and videos | Indefinitely (with consent) | For awareness documentation and social media |
| Website analytics data | 26 months (Google Analytics default) | To analyse website traffic trends |
After the applicable retention period, personal data is securely deleted or anonymised. You may request earlier deletion of your data — see Section 10 for your rights.
Your rights
Under India's Digital Personal Data Protection Act, 2023, and applicable privacy law, you have the following rights regarding your personal data:
To exercise any of these rights, email us at support@netsecurefdn.org with the subject line "Privacy Request – [Your Name]". We will acknowledge your request within 3 working days and respond within 30 days.
Children's privacy
NetSecure Foundation conducts cyber awareness sessions for students, including children below the age of 18. We are committed to protecting children's privacy in accordance with the DPDP Act, 2023.
- We do not knowingly collect personal data directly from children under the age of 18 through our Website
- Session-related data for student participants (such as names for certificates) is collected through the host school or institution, which is responsible for obtaining necessary parental or guardian consent
- Photographs taken at school sessions are used only for documentation and awareness purposes. Schools are responsible for obtaining parental consent before our sessions are conducted
- If we become aware that we have inadvertently collected personal data from a child under 18 without appropriate consent, we will delete it promptly
- Parents or guardians may contact us at support@netsecurefdn.org to request deletion of their child's data
Third-party links
Our Website may contain links to external websites including payment gateways, government portals (cybercrime.gov.in, mca.gov.in), social media platforms, and partner organisations. This Privacy Policy applies only to information collected by NetSecure Foundation.
We are not responsible for the privacy practices of any third-party website. We strongly encourage you to review the privacy policy of any external site you visit through a link on our Website.
Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or organisational structure. When we do, we will:
- Update the "Last updated" date at the top of this page
- Post a notice on our Website homepage for significant changes
- Where possible, notify registered volunteers and active donors via email
Your continued use of our Website or participation in our programmes after a policy update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.
Grievance officer & contact
As required under the Digital Personal Data Protection Act, 2023, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, NetSecure Foundation has designated a Grievance Officer:
- Name: Mohit Sharma
- Designation: Director & President, NetSecure Foundation
- Email: support@netsecurefdn.org
- Phone: +91-7851006262
- Address: S-3, 104, Gopi Residency, Manyawas, Kiran Vihar, Mansarovar, Jaipur, Rajasthan – 302020
- Response time: Acknowledgement within 3 working days, resolution within 30 days
For general privacy questions, data access requests, or to withdraw consent, email us at support@netsecurefdn.org with the subject line "Privacy Request – [Your Name]".
This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts of Jaipur, Rajasthan.