Privacy Policy

1. Introduction

The Indian Expatriates Society ("IES", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.indianes.org and use our services. We comply with the Digital Personal Data Protection Act (DPDP) 2023 of India and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name, email address, phone number
• Date of birth, gender, nationality
• Residential and correspondence address
• PAN card details (for 80G tax exemption certificates)
• Passport details (for FCRA compliance, if applicable)
• Professional information and educational qualifications
• Bank account details (for refunds, if applicable)

2.2 Donation Information

• Donation amount and frequency
• Payment method and transaction details
• Project or cause preferences
• Tax exemption requirements

2.3 Technical Information

• IP address, browser type, and version
• Device information and operating system
• Cookies and similar tracking technologies
• Pages visited and interaction data

3. How We Use Your Information

We use your personal information for:

• Processing membership applications and maintaining member records
• Processing donations and issuing tax receipts
• Communicating about our programs, events, and initiatives
• Sending newsletters and updates (with your consent)
• Complying with legal obligations (FCRA, Income Tax Act, etc.)
• Improving our services and website functionality
• Preventing fraud and ensuring security
• Statistical analysis and reporting (in anonymized form)

4. Legal Basis for Processing

We process your personal data based on:

• Consent: For marketing communications and newsletters
• Contract: For membership services and donation processing
• Legal Obligation: For tax reporting, FCRA compliance, and statutory requirements
• Legitimate Interest: For improving services and preventing fraud

5. Data Sharing and Disclosure

We may share your information with:

• Payment Processors: Razorpay, Stripe for processing donations
• Government Authorities: As required under FCRA, Income Tax Act, and other laws
• Service Providers: Email services, cloud storage, analytics (under strict confidentiality)
• Auditors: For financial and compliance audits
• Legal Advisors: When necessary for legal proceedings

6. Data Security

We implement appropriate security measures including:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive information
• Access controls and authentication mechanisms
• Regular security audits and updates
• Employee training on data protection
• Incident response procedures

7. Data Retention

We retain your personal data for:

• Member Data: Duration of membership plus 7 years (tax compliance)
• Donation Records: 10 years (statutory requirement)
• FCRA Records: As per FCRA regulations
• Marketing Data: Until consent is withdrawn
• Technical Logs: 90 days

8. Your Rights Under DPDP Act 2023

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Erasure: Request deletion (subject to legal obligations)
• Data Portability: Receive your data in a structured format
• Withdraw Consent: For consent-based processing
• Grievance: File a complaint with our Data Protection Officer

To exercise these rights, contact our Data Protection Officer at dpo@indianes.org

9. Cookies and Tracking

We use cookies for:

• Essential website functionality
• Analytics and performance monitoring
• Remembering your preferences
• Security and fraud prevention

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

10. International Data Transfers

Your data may be transferred to and processed in countries outside India for service provision. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy assessments.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email.