Privacy Policy

1. Information We Collect

We collect information that you voluntarily choose to provide to us directly through forms and donation gateways on this website. This includes:

• General Inquiries, Volunteer & Parent Applications: Information submitted via Contact, Become a Volunteer, Parent Inquiry, and Partnership Request forms. Depending on the form, this may include your full name, email address, phone number, address/location, organization name, and any specific queries or messages you provide.
• Donations & Sponsorships: When you donate or sponsor a child through our payment portal, we collect your full name, email address, contact number, postal billing address, transaction amount, and PAN (Permanent Account Number). Under Indian Income Tax regulations, PAN and billing address are mandatory for issuing official Section 80G tax exemption certificates and filing annual Form 10BD statements.
• Child & Beneficiary Protection Safeguards: We do not knowingly collect personal information directly from children through this website. Details, photographs, or case profiles of children presented on the site for sponsorship or reporting purposes are published strictly with prior written, documented consent from their parents or legal guardians. All offline admissions and clinical rehabilitation records are handled separately with strict medical confidentiality.

2. Payment & Financial Data Security

All online contributions made via UPI, Debit/Credit Cards, Net Banking, RTGS, or Wire Transfers are processed through Reserve Bank of India (RBI) authorized, PCI-DSS compliant payment gateways and scheduled banking partners.

HCRA does NOT capture, collect, or store any sensitive financial credentials — such as credit/debit card numbers, CVVs, net banking passwords, or UPI PINs — on our servers or website databases. All payment transactions are completed on encrypted, secure payment partner channels. We receive and maintain only the transaction reference numbers, amounts, dates, and donor contact details necessary for accounting reconciliation and statutory tax receipt generation.

3. How We Use Your Information

We use the information you submit exclusively for legitimate non-profit, administrative, and statutory purposes:

• To process donor contributions, generate official donation receipts, issue Section 80G tax certificates, and file mandatory Form 10BD records with the Income Tax Department;
• To assign sponsorships to specific children as selected by the donor and share periodic milestone updates and thank-you communications;
• To respond to your inquiries, admissions guidance requests, volunteer registrations, or institutional CSR partnership proposals;
• To connect you with the appropriate HCRA coordinator or specialized rehabilitation center (e.g., Kalkaji, Paschim Vihar);
• To maintain internal compliance records and audit trails as required by non-profit regulatory frameworks; and
• To communicate organizational newsletters, program updates, and impact reports (which you may opt out of at any time).

We strictly enforce a non-commercial policy: We do not sell, rent, trade, or share your personal information with third parties for commercial marketing or promotional purposes.

4. Data Sharing & Authorized Processors

Your information is accessible only to authorized HCRA personnel on a strict need-to-know basis. We do not disclose personal information to external entities except in the following limited circumstances:

• Trusted Technical Service Providers: Payment gateway providers, web hosting platforms, and verified email delivery systems operating under strict non-disclosure and data privacy standards.
• Legal & Statutory Authorities: When required by law, regulatory audits, court order, or official reporting mandates to government authorities (such as the Income Tax Department, Ministry of Corporate Affairs for CSR, or FCRA authorities).

5. How We Store, Retain, and Protect Information

Information submitted through our website forms is stored on secure, access-controlled servers protected by Secure Socket Layer (SSL/TLS) encryption, firewalls, and restricted administrative credentials. While we adhere to robust physical and technical safeguards in line with industry standards, no method of transmission over the Internet or electronic storage is completely impenetrable, and absolute security cannot be guaranteed.

Data Retention: General contact inquiries and volunteer records are retained only for as long as necessary to fulfill the requested communication. In compliance with statutory tax, audit, and legal mandates in India, donor transaction histories, PAN data, and accounting records are retained for a minimum statutory period of 7 to 8 financial years.

6. Cookies & Site Analytics

Our website uses only minimal, essential technical cookies required for proper navigation, site security, session maintenance, and donation form functionality. We do not use third-party advertising cookies or cross-site tracking technologies. You may configure your web browser to decline or block cookies; however, doing so may impact certain functionalities, such as automated form completion and payment redirects.

7. Your Legal Rights

Under applicable Indian data privacy regulations, you have the right to request access to the personal information we hold about you, request corrections or updates to inaccurate details, or request that we delete or discontinue non-statutory communication lists (e.g., email newsletters). Please note that certain donor identification records cannot be deleted prior to statutory tax audit expiry. To exercise any of these rights, please write to our Grievance Officer at the address below.

8. Grievance Officer & Contact Information

If you have questions about this Privacy Policy or how we handle your information, please contact us at hcranewdelhi48@hcra.org.in or call 011-41621692, 011-41621693.

9. Changes to This Policy

We may periodically revise this Privacy Policy to reflect advancements in technology, adjustments in our programs, or updates in legal statutory guidelines. Any modifications become effective immediately upon posting to this website. The "Last Updated" timestamp at the top of this document indicates the date of the most recent revision.