Data Privacy Policy

1. Purpose

Manvar Foundation is committed to handling personal data responsibly and transparently. This Data Privacy Policy explains the categories of personal data that may be collected, the purposes for which it may be processed, the safeguards used to protect it, retention practices and the rights and choices available to individuals.

2. Personal Data We May Collect

Depending on the interaction or activity, we may collect information such as:

• Name and basic identification details.
• Mobile number, email address and communication details.
• Address and other location information voluntarily provided for a program or activity.
• Course, training, event, volunteer or program registration information.
• Information contained in applications, enquiries, feedback or correspondence.
• Donation or contribution records where applicable.
• Photographs, testimonials or participation-related information where appropriately obtained or permitted.
• Technical information such as IP address, browser, device and website usage information.

We seek to limit collection to information that is reasonably necessary for the relevant purpose or activity.

3. How Data Is Collected

Personal data may be received through:

• Website forms and online registrations.
• Course, training and event applications.
• Volunteer and participation forms.
• Direct communication by email, telephone or other authorised channels.
• Participation in Foundation activities.
• Cookies, logs and similar technical technologies used by the website.
• Authorised service providers supporting a specific activity.

4. Purposes of Processing

Personal data may be processed for purposes including:

• Responding to enquiries and requests.
• Managing registrations and participation.
• Delivering educational, training and social-development activities.
• Managing volunteers, beneficiaries, participants and program records.
• Issuing certificates, acknowledgements or activity-related documents.
• Communicating program announcements, schedules and important updates.
• Maintaining website functionality and improving services.
• Protecting systems and preventing unauthorised access, misuse or fraud.
• Meeting accounting, audit, legal or regulatory obligations where applicable.

5. Notice & Transparency

Where required, we will provide an appropriate notice explaining the personal data being requested and the purpose for which it is intended to be processed. Notices may be provided through website forms, registration pages, consent screens or other suitable communication methods.

We aim to use clear and reasonably understandable language so that individuals can make informed decisions about providing their personal data.

6. Consent

Where consent is the applicable basis for processing, we will seek consent in a manner appropriate to the purpose and the nature of the information requested.

Where practicable, individuals may withdraw consent for processing that depends on consent. Withdrawal does not affect processing that has already occurred lawfully before withdrawal and may not apply where another lawful basis or legal obligation requires continued processing.

7. Other Lawful Purposes

Personal data may also be processed where permitted or required under applicable law, including for compliance with legal obligations, protection of rights, security, prevention of unlawful activity, or other purposes recognised by applicable data-protection requirements.

8. Data Accuracy

We take reasonable steps to maintain personal data that is relevant and reasonably accurate for the purpose for which it is used.

Individuals are requested to provide accurate information and to inform the Foundation when important information needs to be corrected or updated.

9. Data Security

We implement reasonable technical and organisational safeguards appropriate to the nature of the personal data and the risks associated with its processing.

Depending on the systems involved, safeguards may include:

• Access controls and role-based access.
• Authentication and account-security measures.
• Encryption or secure transmission where appropriate.
• System monitoring and security logging.
• Backups and recovery measures.
• Security updates and vulnerability management.
• Administrative controls for authorised personnel and service providers.

No electronic system can be guaranteed to be completely secure, but we seek to continuously improve appropriate safeguards.

10. Service Providers

We may engage authorised third-party service providers for hosting, technology, communications, analytics, payment processing, document handling or other operational support.

Where such providers process personal data on our behalf, we aim to use appropriate contractual, technical or organisational safeguards and limit their access to what is reasonably required for the relevant service.

11. Data Disclosure

Personal data is not intended to be sold or rented for unrelated commercial marketing purposes.

Information may be disclosed where reasonably necessary:

• To authorised personnel or project partners for a stated activity.
• To service providers performing authorised functions.
• To government authorities, courts, regulators or law-enforcement bodies where required or permitted by law.
• To protect the safety, rights, property or security of individuals, the Foundation or its systems.
• In connection with a lawful organisational restructuring or transfer, subject to applicable requirements.

12. Data Retention & Erasure

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, for legitimate organisational needs, or where retention is required or permitted by applicable law.

When personal data is no longer required and no lawful reason for continued retention exists, appropriate steps may be taken to erase, anonymise or securely dispose of it.

Certain records may need to be retained for longer periods to meet legal, accounting, audit, dispute-resolution or record-keeping requirements.

13. Children's Data

Some Foundation programs may involve children or students. Where personal data relating to a child is processed, we will apply appropriate safeguards and, where required, obtain verifiable parental or lawful guardian consent.

We aim to collect only information reasonably necessary for the relevant educational, welfare, safety, administrative or program purpose.

14. Individual Rights

Subject to applicable law, individuals may have rights relating to their personal data, including rights to:

• Obtain information about processing of their personal data.
• Request correction or updating of inaccurate information.
• Request erasure of personal data where legally permissible.
• Withdraw consent where processing is based on consent.
• Raise a grievance regarding processing or handling of personal data.
• Nominate another individual to exercise applicable rights in circumstances recognised by law.

Requests may require reasonable verification of identity to protect personal information from unauthorised disclosure.

15. Grievance & Data Requests

Requests, complaints or concerns relating to personal data may be submitted through the Foundation's official contact details.

We aim to review and respond to valid requests within the timelines required by applicable law and according to the nature of the request.

16. Personal Data Breach

If we become aware of a personal data breach requiring notification under applicable law, we will take appropriate steps to contain, assess, remediate and report the incident in accordance with the applicable legal requirements.

Where notification to affected individuals or a competent authority is required, the Foundation will provide the information and assistance required by law.

17. Data Transfers

Personal data may be processed using technology infrastructure or service providers located in different jurisdictions where permitted by applicable law.

Any applicable restrictions or requirements concerning transfer of personal data will be considered when selecting and using relevant services.

18. Cookies & Technical Data

The website may use cookies, server logs and similar technologies for essential functionality, security, preferences, performance and analytics.

Technical information collected through these mechanisms may include IP address, browser type, device information, pages visited, timestamps and general usage information.

Users can manage certain cookie settings through their browser or device, although disabling essential technologies may affect website functionality.

19. User Security Responsibilities

Individuals should use reasonable care when submitting personal data online. Users should not share passwords, authentication codes, PINs or other confidential credentials through ordinary enquiry or support forms.

If you believe that your information has been compromised, please contact the Foundation promptly through its official communication channel.

20. Policy Changes

This Data Privacy Policy may be updated to reflect changes in our activities, technology, data-processing practices or applicable legal requirements.

The current version will be published on this page with its latest revision date. Significant changes may be communicated through an appropriate website notice or other reasonable channel where required.

21. Contact

For data-access requests, correction requests, deletion requests, consent questions, privacy concerns or grievances, please contact Manvar Foundation using the official details below.