Privacy policy

Information we collect

We collect information you submit in donation, contact, volunteer, newsletter and account forms: your name, email, phone, address, organisation, messages and donation records. PAN or other identification requested for statutory donation reporting is used for that purpose. Please do not include unnecessary sensitive information in an enquiry.

Security and hosting systems may log IP addresses, device/browser information, request times and errors. Payment references, amounts, status and receipt records are retained to reconcile donations.

Why we use it

We use information to respond to requests, administer accounts, verify payments, issue receipts, maintain accounts, coordinate programmes and partnerships, meet legal obligations and prevent misuse. Newsletter sign-up is separate from donation-related communication. We do not sell donor contact information.

Payments and service providers

Online checkout uses the provider identified on the donation form, including Razorpay or Cashfree. The payment provider handles card details, banking authentication and payment credentials; ACS Foundation does not ask for or store your CVV, UPI PIN or banking password. The provider identified at checkout processes the payment under its own privacy terms.

Authorised hosting, database, email, file-storage and payment providers may process information needed to deliver their services. Information may also be disclosed where required by law or to resolve a payment dispute. Providers may process data outside your location under their own safeguards and applicable requirements.

Provider information: Cashfree privacy policy and Razorpay privacy policy.

Cookies, campaign attribution and the installed app

Authentication uses cookies to maintain and protect signed-in sessions. Local storage keeps campaign attribution, including UTM source, medium, campaign, landing page and referrer, so submissions can be associated with outreach. Browser storage can also retain app-install preferences. Installed-app support caches the offline page; it does not make private donation records publicly available.

When configured, Google Analytics or Google Tag Manager may collect visit and interaction data using their technologies. You can restrict cookies and clear local storage in your browser; this may sign you out or remove preferences. Campaign information is not used to make automated eligibility decisions about you.

Retention and security

We retain records for the operational, accounting, legal and dispute-resolution purposes for which they are needed, and review requests for deletion against those obligations. Financial and statutory records may need to be retained even if you close your account. We use encrypted connections and restricted administrative access, but no system can guarantee absolute security.

Your choices and requests

Contact us to request access, correction or deletion of eligible information, withdraw consent for optional communications, or raise a privacy concern. We may verify your identity before acting. Withdrawing optional consent does not remove records we must retain or affect earlier lawful processing. Contact us to stop newsletters; essential transaction and account messages are separate.

Children and policy changes

Children should not create donor accounts or submit donations without a parent or guardian. If a child has supplied personal information unintentionally, contact us for review. Updates to this policy will be published here with the revised date.