Privacy Policy

1. Who we are

Ujjwala Foundation is a Registered society, Telangana Societies Registration Act, 2001, Certificate of Registration No. 513 of 2022, PAN AAABU1619F. Income-tax registered u/s 332(8) · Donation approval u/s 354(4) · CSR-1 CSR00116765 · NITI Aayog Darpan.

Registered office: 2-144/1/A, Mudhiraj Colony, Bibinagar, Nalgonda, Telangana 508126, India. Correspondence office: 5-58/5, 2nd Floor, Buddha Nagar Colony, Uppal, Hyderabad, Telangana 500092, India.

For any question about this policy write to hello@ujjwalafoundation.org or call +91 73968 35639.

2. Data we collect

• Donation and order data: your name, email address, mobile number, postal address (only where a physical item is being delivered), the amount, the programme or product you chose, and any note you write to us.
• Payment reference data returned to us by the payment aggregator: order or subscription identifier, payment status, payment mode (UPI, card, net banking, mandate), settlement timestamp and the last four digits or masked instrument reference. We do not receive or store full card numbers, CVV or UPI PIN.
• Volunteer, membership, CSR and contact-form submissions: the details you type into those forms.
• Tax and receipt data: PAN, where you choose to provide it so that a donation receipt can be issued in a form usable for a deduction claim.
• Technical data: IP address, device and browser type, pages viewed and referring page, collected in aggregate to keep the site secure and to understand which pages are useful.

3. Why we use it

• To process your donation, monthly mandate or shop order and to issue a receipt.
• To send transactional email and SMS you would expect: payment confirmation, receipt, mandate reminder, delivery or dispatch update, and failure or retry notices.
• To keep the statutory books, donation register and reports that a registered society and its auditor are required to maintain.
• To answer your questions, respond to grievances and — only if you opt in — to send occasional programme updates. Every update carries an unsubscribe link, and SMS updates can be stopped by replying STOP or writing to us.

4. Payments

Online payments on this website are processed by Cashfree Payments India Private Limited, a payment aggregator authorised by the Reserve Bank of India. Card numbers, UPI credentials, net-banking passwords and mandate authentication are handled entirely on the payment aggregator's PCI-DSS compliant systems. Ujjwala Foundation never sees, records or stores your card number, CVV, UPI PIN or banking password.

5. Email and SMS

Transactional email is delivered through our email service provider (Brevo / Sendinblue) and transactional SMS through a DLT-registered SMS gateway operating on Indian telecom templates. These providers process your email address and mobile number strictly on our instructions and only for the purpose of delivering the message.

Transactional messages relating to a donation, mandate or order are part of the service and are sent even if you have not opted into marketing. Promotional or newsletter messages are sent only with your consent and can be withdrawn at any time.

6. Who else processes your data

• Cashfree Payments India Private Limited — payment processing, mandates, refunds and settlement.
• Our cloud hosting and database provider — secure storage of donation, order and receipt records.
• Our email and SMS gateways — delivery of transactional and (where consented) programme messages.
• Our chartered accountant and statutory auditor — verification of donations and accounts.
• A government authority, where disclosure is required by law.

We do not sell, rent, trade or barter your personal data with anyone, and we do not share donor lists with other organisations.

7. How long we keep it

Donation, receipt and order records are retained for at least eight financial years, as required for tax and audit purposes. Volunteer, membership and enquiry records are retained for up to three years from your last interaction, unless you ask us to delete them earlier. Marketing consent records are retained for as long as the consent is active.

8. How we protect it

The site is served over HTTPS. Administrative access to donor records is restricted to authorised trustees and staff, is authenticated, and is protected by row-level database access rules. Payment credentials never touch our systems. No method of transmission over the internet is perfectly secure, so we also keep the data we hold to the minimum we actually need.

9. Your rights

• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything inaccurate.
• Ask us to erase data we are not legally required to keep.
• Withdraw consent for programme updates at any time.
• Raise a grievance with our Grievance Officer.

Write to grievance@ujjwalafoundation.org or hello@ujjwalafoundation.org. Acknowledged within 3 working days; resolved within 30 days.

10. Children

This website is not directed at children, and we do not knowingly collect personal data from anyone under 18. Photographs of children from our programmes are published only with the written consent of a parent or guardian, and are never captioned with a child's full identifying details.

11. Cookies

We use only the cookies and local storage needed to keep the site working — session handling, security and remembering a donation in progress. We do not run third-party advertising or cross-site tracking cookies. You can block cookies in your browser; a donation in progress may then not complete.

12. Changes

We may update this policy. The effective date at the top of the page always reflects the current version, and material changes will be highlighted on this page. Effective 27 August 2026.