Privacy Policy

Introduction

Shanthimalai Trust is committed to protecting the privacy and personal data of all individuals associated with our services—students, beneficiaries, donors, staff, and volunteers.

This policy outlines how we collect, use, store, and protect your personal information.

What Data We Collect

Depending on your relationship with us, we may collect the following data:

• Full name
• Date of birth
• Aadhar number / other ID proofs
• Contact details (Phone, Email, Address)
• Academic or health information (students/beneficiaries)
• Photographs or video recordings
• Bank or UPI details (for donations, salary)

Why We Collect Your Data

We collect your data for purposes such as:

• Student admission and records
• Processing donations and issuing receipts
• Delivering beneficiary services and support
• Reporting to government agencies or donors
• Volunteer coordination and training
• Internal documentation and communication

Legal Basis for Collection

We collect and process your data only:

• With your explicit consent, or
• When required by law or government regulation

Your Rights Under the DPDP Act

As a data principal (you), you have the right to:

• Access your personal data
• Request correction of incorrect data
• Withdraw your consent at any time
• File a complaint in case of misuse

To exercise your rights, contact our Data Protection Officer (details below).

Data Storage & Protection

We store personal data in:

• Secure physical files (locked cabinets)
• Password-protected systems (Google Workspace, Excel)

Access is restricted to authorized staff only.

Data Retention

We retain personal data only as long as necessary for the purpose it was collected. Retention periods are reviewed regularly.

Data Sharing

We do not share your personal data with third parties unless:

• Required by law or legal proceedings
• Shared with donors or authorities in anonymized or consented form

Data Breach Response

In case of a data breach, we will:

• Inform affected individuals promptly
• Notify the Data Protection Board of India if required
• Take immediate corrective actions