Privacy Policy

We collect information in the following ways:

• ✓ Process and confirm your donation and generate an official 80G tax receipt.
• ✓ Send you transactional emails (donation confirmations, receipts, volunteer acknowledgements).
• ✓ Respond to your enquiries or volunteer applications.
• ✓ Send periodic newsletters and programme updates — only if you have subscribed or donated and have not opted out.
• ✓ Improve our website and understand how visitors use it (via anonymised analytics).
• ✓ Comply with applicable Indian laws, including the Foreign Contribution (Regulation) Act (FCRA), Income Tax Act, and other regulatory requirements.

All online donations are processed through Razorpay, a PCI-DSS-compliant payment gateway. Rainbow Foundation does not store your full card number, CVV, or UPI credentials on our servers. Razorpay's privacy policy governs the processing of your payment data.

Our website uses HTTPS (TLS encryption) for all pages. Donation data in our database is accessible only to authorised personnel.

We share your personal data only with:

• • Razorpay — to process your payment securely.
• • Government authorities — when required by law (e.g., Income Tax Department for 80G filings, FCRA reporting).
• • Our trusted service providers (e.g., email delivery, cloud hosting) — strictly under confidentiality agreements, only to the extent necessary to provide the service.

Donation records (including PAN details) are retained for a minimum of 7 years as required by Indian tax law. Volunteer enquiries and newsletter subscriber data are retained as long as relevant and deleted upon request. Analytics data is aggregated and anonymised after 26 months per Google's default GA4 retention policy.

You have the right to:

• • Access the personal data we hold about you.
• • Correct inaccurate information (e.g., misspelled name on a receipt).
• • Unsubscribe from our newsletter at any time using the unsubscribe link in any email we send.
• • Request deletion of non-statutory data (data not required to be kept by law).

To exercise any of these rights, email us at info@rainbowfoundationindia.org with the subject line "Privacy Request". We will respond within 15 working days.

Our website is not directed at children under 18. We do not knowingly collect personal information from minors. If a parent or guardian believes their child has submitted information to us, please contact us and we will delete it promptly.

Our website may contain links to external websites (e.g., government portals, social media). We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing any information.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the website after a policy update constitutes acceptance of the revised policy.