Who this policy covers
This policy applies to the Vistara Charitable Trust website and the donations made through it. The trust’s registered name, address and contact details are on our contact page. Payment providers have their own privacy policies.
Information we collect
- Donor details you give us, such as your name, mobile number, email address and postal address.
- Donation details such as the amount, date, payment method, transaction reference and payment status.
- Details needed to issue a receipt when you ask for one. This can include identity details such as your PAN where the law requires them for a tax-deduction receipt.
- Messages and information you send when you contact us, volunteer or ask for support.
- Technical information used to run and protect the website, such as session identifiers, request logs and IP addresses used for security and rate limiting.
Why we use it
We use this information to process and confirm donations, issue acknowledgements and receipts, answer your questions, keep accounting and statutory records, meet legal and regulatory obligations, and prevent fraud or misuse of the website.
Payments
Online payments are processed by our payment gateway partner (Paytm Payment Gateway) and by UPI apps and banks. The trust receives the payment status and transaction references. It does not collect or store your card number, CVV, UPI PIN or banking password. The payment provider handles your payment information under its own privacy policy.
Sharing your information
We do not sell, rent or trade your personal information. We share it only as needed with payment providers and banks to process donations, with service providers who help run the website, with auditors and professional advisers, and with government or regulatory authorities where the law requires it.
Cookies & sessions
The website uses essential cookies and server-side sessions to protect forms and keep the website working securely. It does not use advertising trackers.
Storage, security & retention
Records are stored securely on our systems, and only authorised people can access them. We keep donation records for as long as accounting, audit and legal requirements need. No method of storage or transmission is completely secure, but we take reasonable steps to protect your information.
Your choices & requests
You can ask to see, correct or delete your personal information, or stop receiving messages from us, using the details on our contact page. We may need to check your identity first. Some donation records must be kept by law even after a deletion request. Never send passwords, PINs or OTPs.
Updates
When this policy changes, we will publish the new version on this page with an updated date.