privacy

Legal

Privacy Policy

Last updated: February 2026. This policy explains how Sutra Foundation (“we,” “us,” “the Foundation”) collects, uses, and protects your personal data.

Before you accept international payments: this policy is based on publicly known Indian law (IT Act 2000, Digital Personal Data Protection Act 2023, FCRA 2010). Please confirm with your CA, lawyer, or company secretary that your registration status actually permits accepting foreign contributions into your Indian account before enabling international donations.

1. Who We Are

Sutra Foundation is a registered non-profit organisation based at 202 Suchet Chambers, 1224/5 Bank Street, Karol Bagh, Delhi – 110005, India, registered under the Societies Registration Act, 1860, registration no. S/50866/2004, PAN AAFTS41101H. We are the “Data Fiduciary” for personal data processed through this website, as defined under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

2. Information We Collect

We collect information you provide directly, including:

  • Name, email address, phone number, and postal address (contact and volunteer forms)
  • PAN, in relation to donations for which you request an 80G tax exemption receipt (if applicable)
  • Donation amount, cause selected, and transaction reference (donation forms)
  • Any message content you submit voluntarily

We do not collect or store your card, UPI, or bank account details. All payments are processed by our third-party payment gateway (Razorpay or equivalent), which is independently PCI-DSS compliant. We only receive confirmation of a successful transaction and a reference ID.

3. How We Use Your Information

  • To process and acknowledge donations, and issue 80G tax exemption receipts where applicable
  • To respond to enquiries submitted via our contact or volunteer forms
  • To send programme updates, impact reports, or fundraising communication, where you have consented to receive these
  • To comply with legal, regulatory, and reporting obligations, including those under the Income Tax Act, 1961 and, where applicable, the Foreign Contribution (Regulation) Act, 2010

4. Legal Basis for Processing

We process personal data on the basis of your consent (given by submitting a form on this site) and, where relevant, for compliance with a legal obligation, consistent with the Digital Personal Data Protection Act, 2023 and rules made thereunder. You may withdraw consent at any time by contacting us at the details in Section 13, though this may affect our ability to provide certain services, such as issuing a tax receipt.

5. International and Foreign Donors

If you are donating from outside India, your data may be processed and, where necessary, transferred outside India in connection with payment processing. We take reasonable steps to ensure such transfers are protected consistent with the DPDP Act. Separately, please see our Terms of Use regarding our current ability (or inability) to legally accept foreign contributions under the Foreign Contribution (Regulation) Act, 2010.

6. Cookies

This website may use cookies or similar technologies for basic site functionality and, if enabled, analytics (e.g. Google Analytics). You can disable cookies through your browser settings; some site features may not function correctly if you do so.

7. Disclosure of Information

We do not sell your personal data. We may share information with:

  • Our payment gateway provider, solely to process your transaction
  • Government or regulatory authorities, where required by law, including the Ministry of Home Affairs in relation to FCRA reporting obligations, or tax authorities in relation to 80G compliance
  • Professional advisors (auditors, legal counsel) under confidentiality obligations

8. Data Retention

We retain donation and donor records for as long as required under the Income Tax Act, 1961, the Foreign Contribution (Regulation) Act, 2010 (where applicable), and other statutory retention periods, and in any event no longer than necessary for the purposes described in this policy.

9. Your Rights

Subject to applicable law, you may request access to, correction of, or erasure of your personal data, and may raise a grievance regarding our handling of it. To exercise these rights, contact our Grievance Officer below.

10. Grievance Officer

Name: [INSERT NAME]
Designation: [INSERT]
Email: [INSERT EMAIL]
Address: 202 Suchet Chambers, 1224/5 Bank Street, Karol Bagh, Delhi – 110005, India
We will acknowledge and address grievances within the timeframes prescribed under applicable law.

11. Children’s Privacy

While our programmes serve children, this website is intended for use by adults (donors, volunteers, and visitors aged 18 and above). We do not knowingly collect personal data directly from children through this site. Any images or stories of children featured on this site are published with appropriate consent from parents, guardians, or authorised representatives.

12. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect the most recent revision. Material changes will be notified on this page.

13. Contact Us

Sutra Foundation, 202 Suchet Chambers, 1224/5 Bank Street, Karol Bagh, Delhi – 110005, India
Phone: +91 99535 89890
Email: info@sutrafoundation.org