Effective 1 October 2026 · Last updated 16 September 2026
This Privacy Policy explains how Ek Zraa Si Koshish ("we", "us", "our") collects, uses, discloses, and protects personal data when you visit ekzraasikoshish.org, submit a donation, apply to volunteer, or otherwise interact with us online (together, the "Site"). It is written to be consistent with the Information Technology Act, 2000 and associated rules, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").
By using the Site, you consent to the collection and use of information as described here. If you do not agree with this Policy, please do not use the Site.
Volunteer applications: your full name, email address, and city, and any further details you provide during onboarding (for example, availability or relevant experience).
Donations: your name and email address, and — where you choose to share it — your phone number or postal address for receipting purposes. Card, UPI, and bank details you enter at checkout are collected directly by our payment gateway and are never transmitted to or stored on our own servers.
Correspondence: any information you include when you email us or use a contact form, including the content of your message.
Technical and usage data: standard information collected automatically when you browse the Site, such as IP address, browser and device type, pages viewed, and referring pages, typically gathered through server logs or cookies.
We process personal data to: process and receipt donations, including complying with Section 80G tax-receipting requirements and FCRA reporting obligations where a contribution qualifies as foreign contribution; review, respond to, and manage volunteer applications, including background verification for roles involving direct contact with program participants; respond to enquiries sent through the Site; send program updates or newsletters, but only where you have opted in, and always with an option to unsubscribe; and maintain, secure, and improve the Site, including diagnosing technical issues and understanding aggregate usage trends.
We rely on your consent (for example, when you submit a form or opt in to updates), the steps necessary to fulfil a donation or volunteer request you have initiated, and our legal obligations as an 80G/12A and FCRA-registered nonprofit as the grounds for this processing.
We use a limited set of cookies to keep the Site functional and to understand how it is used in aggregate — for example, to remember a completed form submission within a session, or to see which pages are visited most. We do not use cookies to build advertising profiles or to sell data to advertisers. You can block or delete cookies through your browser settings at any time; doing so may affect features such as form persistence, but will not prevent you from browsing the Site.
We do not sell, rent, or trade your personal data. We share it only with: our payment gateway, to process donations; service providers who host the Site, send email on our behalf, or provide similar operational support, under contractual confidentiality obligations; regulators and government authorities, where required for FCRA reporting, tax compliance, or another legal obligation; and, in the limited case of a merger, reorganisation, or transfer of our operations, a successor organisation that continues our charitable purpose, subject to the same protections described here.
We retain donation and receipting records for as long as required under the Income Tax Act, 1961 and FCRA record-keeping rules (currently a minimum of eight years for FCRA-related records). Volunteer application data is retained for the duration of an active or prospective volunteer relationship and for a reasonable period afterward for safeguarding and reference purposes, after which it is deleted or anonymised. Contact form submissions are retained only as long as needed to resolve your enquiry, unless you request otherwise.
We apply reasonable technical and organisational safeguards appropriate to the sensitivity of the data involved, including restricting internal access to personal data on a need-to-know basis and relying on PCI-DSS-compliant processors for all payment handling. No system is completely secure, and we cannot guarantee absolute protection against unauthorised access; if we become aware of a breach affecting your personal data, we will notify you and the relevant authority as required by law.
Under the DPDP Act, 2023, you have the right to: request a summary of the personal data we hold about you and how it has been processed; request correction or completion of inaccurate or incomplete data; request erasure of data we no longer have a valid basis to retain; withdraw consent you previously gave (for example, to stop receiving program updates), without affecting the lawfulness of processing carried out before withdrawal; and nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, email contact@ekzraasikoshish.org. We will respond within 30 days. If you are not satisfied with our response, you may escalate your complaint to our Grievance Officer (below) and, subsequently, to the Data Protection Board of India.
Our training programs serve girls and young women, but this Site itself is designed for use by adults — parents, guardians, volunteers, donors, and partner organisations. We do not knowingly collect personal data directly from children through the Site's forms. Where a program requires information about a minor participant, that information is collected offline through our program intake process, with parental or guardian consent, and is governed by our program-specific data-handling procedures rather than this Site Policy.
In accordance with the Information Technology Act, 2000 and its associated rules, our Grievance Officer for data protection and privacy matters can be reached at: Grievance Officer, Ek Zraa Si Koshish, Haridwar, Uttarakhand, India — contact@ekzraasikoshish.org. We acknowledge privacy-related grievances within 24 hours and aim to resolve them within 30 days.
We may update this Privacy Policy periodically to reflect changes in our practices or in applicable law. The version in effect is the one published on this page, dated by the "Last updated" notice above. Where a change is material, we will highlight it prominently on the Site or notify donors and volunteers by email ahead of the change taking effect.
For any question about this Privacy Policy or how we handle your data, write to contact@ekzraasikoshish.org or Ek Zraa Si Koshish, Haridwar, Uttarakhand, India.