PRIVACY POLICY & TERMS OF USE

Firdaus Begum Foundation Website

(Compliant with Indian Law — Information Technology Act, 2000, IT Rules, 2011 & DPDP Act, 2023)

PART 1: PRIVACY POLICY

Effective Date: Mar 01, 2026
Last Updated : Aug 25, 2026

1.  Introduction

Firdaus Begum Foundation (“we,” “us,” “our,” or “the Foundation”), having its registered office at [Insert Address], is committed to protecting the privacy and security of our website visitors, donors, volunteers, beneficiaries, and partners. This Privacy Policy governs the collection, storage, use, and disclosure of personal information in accordance with:

  • The Information Technology Act, 2000
  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
  • The Digital Personal Data Protection (DPDP) Act, 2023
  • Other applicable laws and regulations in India

By accessing or using our website, you consent to the collection, use, and processing of your personal information as described in this Privacy Policy.

2.  Definitions
  • “Personal Data”: Any data about an individual who is identifiable by or in relation to such data.
  • “Data Fiduciary”: The Firdaus Begum Foundation, which determines the purpose and means of processing personal data.
  • “Data Principal”: The individual to whom the personal data relates (you).
  • “Consent”: Any freely given, specific, informed, and unambiguous indication of your wishes through which you signify agreement to the processing of your personal data.
3.  Information We Collect

a) Personal Data You Provide Voluntarily:

  • Full name (as per valid identity proof, where required)
  • Email address
  • Phone number
  • Mailing/Residential address
  • Date of birth (for beneficiary registration)
  • PAN/Aadhaar details (only where required for tax exemption certificates under Section 80G of the Income Tax Act)
  • Bank account details (only for payment/refund purposes, where necessary)
  • Photographs (with your explicit consent, for programs/events)
  • Any other information you choose to share through forms or correspondence

b) Sensitive Personal Data (as per IT Rules, 2011):
We may collect the following sensitive personal data only with your explicit consent and where strictly required:

  • Passwords and authentication data
  • Financial information (bank account/card details)
  • Physical, physiological, and mental health condition (for beneficiary support programs)

c) Automatically Collected Information:

  • IP address
  • Browser type and version
  • Device and operating system information
  • Pages visited, time spent, and referral sources

Cookies and similar technologies (see Section 5)

4. Purpose of Collection & Use
We collect and process your personal data for the following lawful purposes:
  • To process and acknowledge donations and issue tax receipts (Section 80G certificates)
  • To provide services and support to beneficiaries
  • To respond to inquiries and communications
  • To send newsletters and program updates (only with your consent)
  • To organize events, campaigns, and volunteer activities
  • To improve our website, content, and services
  • To comply with legal, regulatory, and statutory obligations
  • To maintain records required under Indian laws
To prevent fraud and ensure security of our systems
5. Lawful Basis for Processing (Under DPDP Act, 2023)
In accordance with the DPDP Act, 2023, we process your personal data based on the following grounds:
  • Consent: You have provided specific, informed, and unambiguous consent
  • Legal Obligation: Processing is necessary for compliance with Indian law
  • Performance of Contract: Processing is necessary to fulfill an agreement with you
  • Public Interest: Processing serves legitimate charitable and public interest objectives
Withdrawal of Consent: You may withdraw your consent at any time by contacting us. Withdrawal of consent shall not affect the lawfulness of processing undertaken before such withdrawal.
6. Collection & Consent Mechanism
  • Personal data is collected only for lawful purposes connected with a function or activity of the Foundation
  • We provide a clear notice at the time of collection, describing the purpose of collection and intended usage
  • We obtain your consent (through checkboxes, explicit agreements, or other lawful mechanisms) before collecting or using your data
  • For website users below 18 years of age, we will obtain verifiable consent from their parent or legal guardian
  • You may decline to provide personal data, though this may restrict your ability to use certain features (such as making donations or registering as a beneficiary)
7. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device.

Types of cookies we may use:

  • Essential Cookies: Required for website functionality
  • Analytics Cookies: To understand visitor behavior and improve the site
  • Preference Cookies: To remember your choices
  • Marketing Cookies: To deliver relevant content (only where permitted)

You may control or disable cookies through your browser settings. Disabling essential cookies may affect website functionality.

8. Disclosure & Sharing of Information

We do not sell, rent, or trade your personal data to any third party. We may share your information only in the following limited circumstances:

  • Service Providers: With trusted vendors who assist in website operation, payment processing, email delivery, or technical support (bound by strict confidentiality agreements and compliant with Indian data protection laws)
  • Legal Requirements: When required by Indian law, court order, or governmental/regulatory authority
  • Protection of Rights: To protect the rights, property, or safety of the Foundation, its users, or the public
  • With Your Explicit Consent: Where you have authorized specific sharing
  • Government Agencies: For grant/fund utilization reporting as mandated by law

Transfer of Data Outside India: To the extent permitted under the DPDP Act, 2023 and applicable rules, we may transfer personal data to service providers located outside India only with your consent and subject to adequate safeguards. Any such transfer shall comply with Indian law.

9. Security Safeguards
In compliance with the IT Rules, 2011, we implement reasonable security practices and procedures based on the Information Technology Act, including:
  • SSL/TLS encryption for data transmission
  • Access controls and authentication protocols for authorized personnel only
  • Secure, access-restricted storage systems
  • Regular security audits and vulnerability assessments
  • Data breach response procedures in line with provisions of the DPDP Act, 2023
  • Training of staff on data protection and confidentiality obligations
Data Breach Notification: In the event of a personal data breach that is likely to result in risk to your rights, we will notify the Data Protection Board of India and affected individuals in accordance with the DPDP Act, 2023 and applicable rules.
10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or for a period required by Indian law (including statutory record-keeping requirements under the Income Tax Act, 1961). Thereafter, your data shall be securely deleted or anonymized.

11. Your Rights as a Data Principal
Under the DPDP Act, 2023, you have the following rights:
  • Right to Access: Obtain a summary of your personal data and details of processing
  • Right to Correction: Request correction or updating of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
  • Right to Grievance Redressal: File a grievance with our Grievance Officer regarding handling of your data
  • Right to Withdraw Consent: Withdraw consent at any time
Right to Nominate: Nominate an individual to exercise your rights in the event of your death or incapacity.
12. Contact Us & Grievance Officer

In compliance with the IT Rules, 2011 and DPDP Act, 2023, the Foundation has appointed a Grievance Officer to address your concerns regarding data protection and privacy.

Grievance Officer Contact Details:

  • Name: Mr. Grievance
  • Designation: Grievance Officer / Data Protection Officer
  • Email: office@fbftrust.org
  • Phone: 9876541230
  • Address: Mujaulia Kumma, Sursand,
    Sitamarhi, Bihar -8809609883

Grievance Redressal Process:

  • Complaints regarding the handling of your personal data may be submitted in writing or via email to the Grievance Officer
  • We shall acknowledge your grievance within 24 hours and resolve it within 15 business days as required under applicable Indian law
  • If you are not satisfied with the resolution, you may appeal to the Data Protection Board of India established under the DPDP Act, 2023

Foundation Contact:

  • Email: office@fbftrust.org
  • Phone: 9876541230

Registered Office: Mujaulia Kumma, Sursand,Sitamarhi, Bihar -8809609883

13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in Indian law, our practices, or other operational reasons. Any changes will be posted on this page with an updated effective date. For material changes, we will provide notice through our website and, where appropriate, by email.
Join Our Mission by Supporting Our Causes

and Be the Reason Someone’s Life Changes

Donate Us