Privacy Policy

This Privacy Policy articulates our transparent practices regarding the collection, processing, storage, and protection of personal data in strict compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. Categories of Information We Collect

We collect personal information that you voluntarily submit to us through our online registration and contact portals:

• Identity Information: First name, last name, date of birth, age (verified to be minimum 13 years), and occupation.
• Contact Information: Valid mobile phone number, WhatsApp contact, and email address.
• Address & Geographic Information: Current residential flat/street address, city/village, taluka, district, state, pin code, and native village details (for community afforestation coordination across Maharashtra's 36 districts).
• Reference Source: Voluntary indication of how you learned about the Foundation (e.g., social media, website, founder, or community referral).
• Financial Transaction Details: For contributing members, nature guardians, and donors, we collect payment confirmation details such as Transaction UTR Number, payment date, and voluntary payment screenshots for receipt reconciliation. We do NOT collect, access, or store banking passwords, ATM PINs, UPI PINs, credit/debit card numbers, or CVVs.
• Automated Device & Security Data: For fraud prevention and bot deterrence, our server architecture logs client IP address, device type, operating system, browser model, and submission timestamp.

2. Purpose & Lawful Basis of Data Processing

All collected personal data is processed exclusively for legitimate, lawful, non-profit public charitable objectives:

• Membership Administration: Processing member enrollments, verifying applicant credentials, and generating official Digital ID Cards and Certificates of Honor.
• Donation Verification & Receipts: Verifying UPI/bank deposits, recording transactions in statutory trust accounts, and issuing official donation acknowledgment receipts.
• Field Program Coordination: Notifying volunteers regarding upcoming sapling planting drives, forest conservation events, tool distribution, and environmental workshops.
• Statutory Record Keeping: Maintaining member registries and financial records mandated under the Maharashtra Public Trusts Act and statutory audit requirements.
• Security & Abuse Prevention: Detecting fraudulent submissions, automated spam, honeypot violations, and unauthorized impersonation attempts.

3. Consent for Public Member Directories & Privacy Shield

Transparency and community pride are fundamental to our mission. In connection with public member recognition:

• Voluntary Public Recognition: By registering through /join-us/, members and Nature Guardians grant informed consent for their name, membership tier, and home district/taluka to be listed on our official public honor directories (/members/, /contributing-members/, and /nisarga-rakshak/).
• Strict Privacy Shield for Sensitive Contact Data: To safeguard personal privacy, personal phone numbers, detailed street/building addresses, and financial transaction records are strictly shielded and NEVER published on public directories.
• Executive Privacy: Contact information for executive committee applicants is transmitted directly via secure internal channels to the Founder/President and is never publicly displayed without express written consent.

4. Strict Zero-Sale & Non-Commercial Policy

5. Data Storage, Security Measures & Technical Processors

We implement robust physical, administrative, and technological security controls:

• Encrypted Transport: All data submitted across vsf.org.in is secured via 256-bit SSL/TLS cryptographic encryption.
• Restricted Cloud Storage: Member records and transaction registers are stored on secured Google Workspace cloud infrastructure protected by multi-factor authentication, accessible solely to authorized Trust executives.
• Secure Administrative Alerts: Real-time alerts of member registrations and donation confirmations are securely transmitted via encrypted Telegram Bot API webhooks and direct WhatsApp APIs to the official administrative helpline.
• Banking Security: Online donations and payments are handled directly through authorized Indian banking channels (HDFC Bank) and UPI applications, ensuring PCI-DSS compliance by the respective banking institutions.

6. Cookies & Web Analytics

Our Website utilizes basic, functional session cookies solely to ensure optimal page rendering, preserve UI state (such as membership tier selection and popup cooldown timers), and analyze aggregate, anonymized website traffic. We do not use third-party behavioral advertising cookies or cross-site tracking trackers. Users may configure their browser settings to decline cookies, though certain interactive features may experience reduced performance.

7. Data Retention & Disposal

We retain personal data only for as long as necessary to fulfill the specific public charitable purposes outlined herein, maintain active membership servicing, and comply with mandatory statutory, tax, and trust audit obligations under the laws of Maharashtra and India. Data that is no longer required is securely anonymized or permanently deleted.

8. Your Data Protection Rights

Under applicable Indian privacy jurisprudence and the DPDP Act, 2023, you are entitled to:

• Right to Review: Request a summary of the personal information held about you in our records.
• Right to Correction: Request the correction, completion, or update of any inaccurate personal record (e.g., change of district, phone number, or address).
• Right to Withdraw Consent / Erasure: Request the removal of your profile from our public member directories, subject to our statutory trust audit obligations to retain official historical financial records.

To exercise any of these rights, please send an email from your registered address to [email protected].

9. Protection of Children & Minors

The Website's online membership portal is intended for individuals aged 13 years and above. We do not knowingly collect personal information directly from children under 13 without verifiable parental/guardian consent. Any minor attending outdoor tree plantation drives must be accompanied by a parent or legal guardian who exercises direct supervision.

10. Third-Party Links & External Social Platforms

The Website includes links to external third-party platforms such as YouTube, Facebook, Instagram, WhatsApp, and Google. We do not exercise control over, and are not responsible for, the privacy policies, data practices, or content of those external entities. We encourage you to review their respective privacy notices when visiting their platforms.

11. Statutory Grievance Redressal Officer

In compliance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the DPDP Act, 2023, the details of our official Data Grievance Officer are set forth below: