Privacy Policy for Alambiya Foundation

Effective Date: April 27, 2025

1. Introduction

Welcome to the Alambiya Foundation (“we,” “us,” “our”). We are committed to protecting the privacy and security of our website visitors, donors, volunteers, and supporters. This Privacy Policy outlines how we collect, use, protect, and share your personal information when you visit our website (alambiya-foundation.org) or interact with us. Our website is hosted in India via Hostinger India.

By using our website, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

Our website address is: http://alambiya-foundation.org.

Alambiya Foundation is a non-governmental organization based in Pune, Maharashtra, India. We strive to:

• Support and care for poor and orphaned children.
• Preserve and promote cultural and educational heritage through our Madrasah, blending traditional Islamic education with modern educational approaches.
• Create opportunities for underprivileged communities and respond effectively to community needs during disasters and emergencies.
• Serve as a bridge between traditional values and contemporary needs.

3. Information We Collect

We collect information in the following ways:

Information You Provide Directly:

• Comments: When visitors leave comments on the site, we collect the data shown in the comments form (like name, email, website), and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture may be visible to the public in the context of your comment.
• Contact Forms: When you use our contact forms, we collect your name, email address, phone number, and the content of your message.
• Donations: When you make a donation through our website, we collect your Name, Email address, Phone number, and the donation amount. Online payments are processed securely through our third-party payment processor, PayU India (https://payu.in/). PayU directly handles your sensitive financial details (like credit card or bank account numbers) according to their security standards and privacy policy; this financial data is not stored on our servers.
• Volunteer Applications & Event Registrations: When you apply to volunteer or register for our events via forms on our website, we collect the information you provide, which typically includes your name, contact details (email, phone number), and any other information relevant to the application or event.
• User Accounts (If applicable): If user registration is enabled on our site, we store the personal information provided in user profiles.

Information Collected Automatically:

• Cookies: We use cookies to enhance your experience. See the “Cookies” section below.
• Log Data & Analytics: Like many websites, we collect information that your browser sends (Log Data), such as IP address, browser type/version, pages visited, time/date of visit, and time spent on pages. We use Google Analytics to collect, monitor, and analyze this data anonymously or pseudonymously to understand website traffic and improve our services. Google Analytics may use cookies and transfer data internationally (see Section 10).
• Embedded Content: Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves as if you visited the other website directly. These sites may collect data, use cookies, embed tracking, and monitor your interaction, especially if you are logged into an account on their site.

Media:

If you upload images (e.g., comments, profile pictures if enabled), avoid images with embedded location data (EXIF GPS). Visitors can download and extract location data from images on the website.

4. How We Use Your Information

We use the collected information for:

• Operating and maintaining our website.
• Processing donations, issuing receipts, and maintaining legally required donation records.
• Responding to your inquiries, comments, applications, or registrations.
• Communicating with you regarding your donations, volunteering, or event participation.
• Improving our website, understanding user engagement (via analytics), and enhancing our programs.
• Preventing spam and ensuring the security of our website and data.
• Complying with applicable legal and regulatory obligations in India.
• [Optional: Add if relevant] Sending occasional important updates about the Foundation (we currently do not operate a regular newsletter, but may do so in the future, based on explicit consent obtained at that time).

5. Cookies

Cookies are small files stored on your device. We use them for:

• Essential Cookies: Necessary for website function (e.g., session management).
• Convenience Cookies: If you leave a comment, you may opt-in to save your name, email, and website in cookies (lasts one year). Login cookies (if enabled) save login info (2 days) and screen options (1 year). “Remember Me” persists login for two weeks. Logout removes login cookies. Editing/publishing sets a post ID cookie (expires after 1 day). A temporary cookie checks if your browser accepts cookies (discarded on close).
• Analytics Cookies: Used by Google Analytics to gather aggregated, often anonymized, data about website usage.

You can manage cookie preferences through your browser settings. Disabling some cookies may affect website functionality.

6. Who We Share Your Data With

We value your privacy and do not sell your personal information. We share data only when necessary with trusted parties:

• Payment Processor: We share transaction details (Name, Email, Phone, Amount) with PayU India to process your donations securely. PayU handles financial data directly.
• Analytics Provider: Anonymized or pseudonymized data is shared with Google Analytics to help us understand website usage.
• Service Providers: Our website host (Hostinger India) and providers of necessary tools like spam detection services (visitor comments may be checked).
• Gravatar Service: If you use Gravatar, an anonymized hash of your email is sent to check for your profile picture when commenting.
• Legal Requirements: If required by law, court order, or governmental authority in India, or if necessary to protect our rights, property, or safety, or the safety of others.
• Password Resets: If user accounts exist and you request a password reset, your IP address is included in the reset email (sent via default WordPress email functions).

We require third parties to respect data security and use it only for the specified purposes.

7. How Long We Retain Your Data

We retain data only as long as needed for the purposes it was collected, and to comply with legal obligations:

• Comments: Comments and metadata are retained indefinitely for moderation context.
• Contact Form/Inquiry Data: Retained typically for 1-2 years after the inquiry is resolved, unless needed longer for legal reasons or ongoing communication.
• Donation Records: Retained for at least 7-8 years as required by Indian tax and accounting laws.
• Volunteer/Event Data: Retained for the duration relevant to the volunteering activity or event, plus a reasonable period afterward (e.g., 1-3 years) for record-keeping or as legally required.
• Analytics Data: Retained according to Google Analytics settings (often 14-26 months), typically in aggregated or anonymized form.
• User Accounts (If applicable): Data retained until the user deletes their account.

8. Your Data Protection Rights

Under applicable Indian law (including potentially the Digital Personal Data Protection Act, 2023, as regulations evolve), you have rights regarding your data:

• Right to Access: Request a copy of your personal data we hold.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data, subject to legal retention obligations (e.g., donation records).
• Right to Information: Be informed about how your data is processed (as outlined in this policy).
• Right to Grievance Redressal: Raise concerns about data handling.
• Right to Nominate (if applicable under DPDP Act): Potentially nominate someone to exercise rights in case of incapacity/death.

To exercise these rights, contact us using the details below. We may need to verify your identity. We cannot erase data essential for administrative, legal, or security purposes.

9. Data Security

We implement appropriate technical and organizational measures (like using secure connections (HTTPS), limiting access, using reputable service providers like Hostinger and PayU) to safeguard your personal data against loss, theft, misuse, and unauthorized access or disclosure. However, no system is 100% impenetrable.

10. International Data Transfers

Our website is hosted by Hostinger India, meaning primary website data resides within India. However, we use third-party services that may process data outside India:

• Google Analytics: Data may be processed in the USA or other countries where Google operates servers.
• PayU: While PayU India processes payments locally, it is part of a global group, and data handling adheres to international standards.
• Gravatar: Data processed according to Automattic’s policies, potentially internationally.

By using our site and services, you acknowledge that data collected via these third parties may be transferred internationally, subject to their respective privacy policies and safeguards.

11. Children’s Privacy

Our website and services are intended for individuals 18 years of age and older. We do not knowingly collect personally identifiable information from children under 18 without verifiable parental consent. While the content may not be harmful to older teenagers (16+), the site is not specifically targeted at them, and data collection assumes users are 18+. If you are a parent/guardian and believe your child under 18 has provided us with personal data without consent, please contact us immediately so we can take steps to remove it.

12. Links to Other Websites

Our website may contain links to external sites. We are not responsible for their content or privacy practices. Please review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this policy occasionally. Changes will be posted on this page with an updated “Effective Date.” We encourage you to review it periodically. Continued use of the website after changes constitutes acceptance.

14. Contact Us

For questions about this Privacy Policy or to exercise your data rights, please contact us:

• By email: contact@alambiya-foundation.org
• By visiting our contact page: https://alambiya-foundation.org/contact-us/
• By mail (Alternative Email): alambiyafoundation22@gmail.com

Disclaimer: This Privacy Policy provides general information and is based on the details provided. It is not a substitute for legal advice. You should consult with a qualified legal professional familiar with Indian data protection laws (like the DPDP Act, 2023 and IT Act rules) to ensure full compliance for Alambiya Foundation’s specific operations.