1. Organisation responsible for your information
RAHAT SOCIAL IMPACT FOUNDATION, CIN U86909DL2026NPL466630, is responsible for personal information collected directly through this website and Rahat's official channels. The registered office is G 66/7, First Floor, Shaheen Bagh, Abul Fazal Enclave Part 2, Jamia Nagar, New Delhi, Delhi 110025, India.
2. Information we may collect
- Name, mobile number, email address, postal address, and communication preferences.
- Citizenship or domestic-donation declarations and identification details such as PAN or another voluntarily supplied identifier where needed for records or compliance.
- Donation amount, purpose, date, transaction reference, UTR, payment ID, subscription or mandate ID, payment status, and receipt information.
- Volunteer, contact, beneficiary-support, or partnership information submitted through website forms.
- Basic technical and security data such as IP address, browser type, device information, request logs, and form-submission timestamps where generated by our hosting, security, or form systems.
- Correspondence sent by email, telephone, WhatsApp, or other official channels.
3. Payment information
Payments may be processed by Razorpay, banks, UPI applications, card networks, and other payment partners. Rahat does not intentionally collect or store your complete card number, CVV, UPI PIN, internet-banking password, or similar authentication credentials. Those details are handled by the relevant regulated payment provider under its own privacy and security terms.
4. How we use information
- To initiate, verify, reconcile, acknowledge, and account for donations and recurring mandates.
- To maintain donor, campaign, statutory, audit, financial, and internal control records.
- To issue receipts, respond to enquiries, provide requested updates, and communicate about a donation or mandate.
- To assess domestic-donation eligibility and comply with applicable tax, company, banking, anti-fraud, and foreign-contribution requirements.
- To administer volunteer applications, partnerships, events, beneficiary support, and programme operations.
- To protect Rahat, donors, beneficiaries, and the website against fraud, misuse, security incidents, or unauthorised fundraising.
- To improve website accessibility, reliability, content, and donor experience using aggregated or operational data.
5. Legal and operational basis
Rahat processes information where it is necessary to provide a requested service, administer a donation or mandate, comply with legal obligations, protect legitimate organisational and security interests, or act on consent where consent is the appropriate basis. You may withdraw consent for optional communications without affecting records that Rahat must retain for legal, accounting, audit, or fraud-prevention purposes.
6. When information may be shared
Rahat may share relevant information only as reasonably necessary with:
- Razorpay, banks, UPI participants, payment networks, and reconciliation providers.
- Website hosting, form, email, cloud-storage, accounting, audit, legal, compliance, and technology service providers acting for Rahat.
- Authorised Rahat directors, employees, volunteers, consultants, and programme personnel who need the information for their assigned work.
- Government authorities, regulators, courts, law-enforcement bodies, auditors, or professional advisers where required by law or reasonably necessary to protect lawful interests.
- A beneficiary institution or implementation partner where necessary to administer a restricted donation, recognition request, or programme, while limiting the information shared.
Rahat does not sell personal information to advertisers or data brokers.
7. Public recognition
A donor's name, memorial wording, or recognition message is published or placed on an asset only when requested or authorised. Payment credentials, contact details, PAN, addresses, and private correspondence are not intended for public display. Donors may choose anonymous recognition where the relevant campaign permits it.
8. Retention
Information is retained for as long as reasonably necessary for the purposes described above, including applicable accounting, tax, company, audit, banking, dispute, and regulatory periods. Records may be retained longer where required by law, an investigation, a legal claim, or a legitimate safeguarding or fraud-prevention need.
9. Security
Rahat uses reasonable administrative, technical, and access-control measures appropriate to its operations. No internet, email, cloud, or payment system can be guaranteed completely secure. Please use only official Rahat pages and immediately report suspicious links, QR codes, messages, or payment requests.
10. Your choices and requests
Subject to applicable law and necessary verification, you may request access to, correction of, or deletion of information that Rahat controls; ask how it is being used; withdraw optional communication consent; or raise a privacy concern. Some information cannot be deleted while it is required for legal, accounting, audit, payment, or fraud-prevention records.
11. Children's information
The donation facility is intended for persons legally capable of making the payment or acting through an authorised guardian. Rahat does not knowingly seek unnecessary personal information from children through the donation checkout.
12. External services and policy changes
This website may link to third-party services whose privacy practices are governed by their own policies. Rahat may update this policy when its systems, programmes, or legal obligations change. The current version is the one published on this page with its effective date.