Privacy Policy

1Purpose and Scope

This Privacy Policy explains how the Foundation collects, uses, stores, shares and protects personal data relating to donors and persons who use the donation facility on the Foundation’s website. It applies to individual donors and to personal data supplied by representatives, authorised signatories, employees or other contacts of companies, institutions and organisations.

2Data We May Collect

  • Identity and contact details: name, organisation, designation, email address, telephone number and postal address.
  • Tax and statutory information: PAN, Aadhaar or other information where required by law or voluntarily provided for a lawful purpose.
  • Donation information: amount, date, purpose or programme selected, transaction or reference number, donor category and receipt details.
  • Payment information: limited payment-related information received from the payment gateway or bank. The Foundation does not ordinarily store full card numbers, CVV or online banking credentials.
  • Compliance information: information needed for KYC, FCRA, sanctions screening, fraud prevention, audit, accounting or regulatory reporting.
  • Technical information: IP address, browser or device information, logs, cookies and website usage information, subject to applicable law and consent requirements.

3How We Collect Data

  • Directly from the Donor through donation forms, emails, telephone calls or other communications.
  • From authorised representatives of corporate, institutional or organisational donors.
  • From payment gateways, banks and other service providers in connection with a transaction.
  • Automatically through website technologies such as cookies, logs and analytics, where applicable and lawfully used.

4Purposes of Processing

  • To process, verify, reconcile and acknowledge donations.
  • To issue receipts, certificates and other donor records.
  • To meet tax, accounting, audit, corporate, FCRA, anti-fraud and other legal or regulatory obligations.
  • To respond to donor queries, requests and complaints.
  • To maintain records and support transparency, governance and financial reporting.
  • To prevent fraud, misuse, security incidents and unlawful activity.
  • To improve website functionality, security and donor experience.
  • To send permitted updates about the Foundation’s programmes and activities, subject to applicable consent and communication requirements.

5Legal Basis and Lawful Processing

The Foundation will process personal data only for lawful purposes and in accordance with applicable data-protection requirements. Depending on the circumstances, processing may be necessary for the Donor’s request or transaction, for compliance with a legal obligation, for legitimate organisational purposes permitted by law, or on the basis of consent where consent is required.

The Foundation is adopting this Policy to be aligned with India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, to the extent applicable and as the relevant provisions come into force.

6Consent and Withdrawal

Where processing is based on consent, consent may be withdrawn in the manner provided by the Foundation. Withdrawal will not affect processing already lawfully undertaken before withdrawal and may not be possible where the Foundation is required to retain or process information under law.

7Sharing of Personal Data

The Foundation may share relevant personal data with payment gateways, banks, technology and hosting providers, auditors, accountants, professional advisers, statutory authorities, regulators, law-enforcement agencies and other service providers where necessary for the purposes described in this Policy or where required or permitted by law.

The Foundation does not sell donor personal data. It will not disclose donor information to unrelated third parties for their independent marketing purposes except where the Donor has specifically consented or such disclosure is otherwise lawful.

8Payment Information

Online payments may be processed by third-party payment service providers. Such providers may collect and process payment credentials in accordance with their own terms and privacy policies. The Foundation generally receives transaction status and limited payment information rather than full payment credentials.

9Cookies and Analytics

The website may use necessary cookies and, where applicable, analytics or preference technologies to operate, secure and improve the website. Where consent is required for non-essential cookies or similar technologies, the Foundation will provide an appropriate choice mechanism.

10Data Retention

Personal data will be retained only for as long as reasonably necessary for the purposes for which it was collected, including statutory, tax, accounting, audit, dispute-resolution, fraud-prevention and record-keeping requirements. Different categories of records may therefore have different retention periods.

11Data Security

The Foundation will implement reasonable technical and organisational safeguards appropriate to the nature of the personal data and the risks involved. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12Donor Rights and Requests

Subject to applicable law and the date on which relevant statutory provisions become operative, individuals may have rights concerning access to information about processing, correction or update of inaccurate data, withdrawal of consent where applicable, grievance redressal and other rights prescribed by law.

Requests may be sent to email@pdalfoundation.org. The Foundation may require reasonable verification of identity before acting on a request and may retain information where required by law.

13Children and Minors

The donation facility is not intended to knowingly collect personal data from children except where permitted by applicable law and with appropriate consent or authorisation. Where a donation is made on behalf of a minor, the donor or guardian is responsible for providing information lawfully.

14International and Cross-Border Data Transfers

Some service providers may process data outside India. Where personal data is transferred or made accessible across borders, the Foundation will do so subject to applicable Indian law, contractual safeguards and any restrictions notified by the competent authority.

15Data Breach and Security Incident

If a personal-data breach occurs, the Foundation will take reasonable steps to contain, assess, remediate and notify affected persons or authorities where required by applicable law.

16Grievance Redressal and Contact

For donation, privacy or data-related questions, contact:

  • Professional Development And Leadership Foundation
  • Office Address: Plot No 12, Shakti Kunj, RSC 12, Sector 2, Charkop, Kandivali West, Mumbai 400067
  • Email: email@pdalfoundation.org
  • Telephone: 8657434090 (WhatsApp message only and we will contact you back)

17Updates to Privacy Policy

The Foundation may update this Policy from time to time. Material changes will be reflected on the website with an updated effective date. Donors are encouraged to review the Policy periodically.

18Important Donor Notice

Nothing in this Policy guarantees that a donation will qualify for a tax deduction, CSR recognition, FCRA treatment or any other statutory benefit. Eligibility depends on the Foundation’s status, approvals, the nature and mode of the donation, the Donor’s status and the law applicable to the relevant transaction and financial year. Donors are encouraged to review and confirm required information at the time of donation.