Privacy Policy

How WCF India collects, uses, and protects your data

Effective Date: June 2025  ·  Last updated: June 2026
1

About This Policy

WCF India (We Care Foundation) is committed to protecting the privacy and personal data of all individuals who interact with our website at wcfindiaa.com and wcfindia.in. This Privacy Policy explains what personal information we collect, why we collect it, how it is used, and your rights in relation to it.

This policy applies to all visitors, donors, volunteers, and individuals who submit inquiries through our website. By using our website, you acknowledge that you have read and understood this Privacy Policy.

Organisation WCF India — We Care Foundation
Data Controller WCF India, Lucknow, Uttar Pradesh — 226002
Contact info@wcfindia.in  ·  +91 95989 44888
Applicable Laws IT Act 2000, IT (Amendment) Act 2008, DPDP Act 2023
2

Data We Collect

We collect personal information only when you voluntarily provide it to us through forms, donations, or direct communication. The types of data we may collect include:

Data Type Examples When Collected
Identity Data Full name Contact form, donation, volunteer signup
Contact Data Email address, phone number Contact form, WhatsApp inquiry
Financial Data Donation amount, payment reference Online donation processing
Technical Data IP address, browser type, pages visited Automatically via website analytics
Communication Data Messages, inquiries, feedback Contact form submissions

We do not collect sensitive personal data such as Aadhaar numbers, PAN details (beyond what is required for 80G certificates), caste, religion, health information, or biometric data through this website.

3

How We Use Your Data

WCF India uses personal data solely for legitimate charitable and operational purposes. We will never use your data for commercial advertising or sell it to any third party. Specific uses include:

  • Processing and acknowledging your donation, and issuing receipts or 80G certificates
  • Responding to your inquiries or volunteer requests
  • Sending updates about our programmes and initiatives (only if you have opted in)
  • Maintaining internal donor or volunteer records for audit and compliance purposes
  • Improving the website experience based on usage analytics
  • Complying with legal obligations, including tax authority requirements
We will never use your personal data to send unsolicited marketing, share with sponsors, or use for any purpose beyond the scope stated in this policy.
4

Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, we process your personal data on the following legal grounds:

  • Consent: When you fill a form, make a donation, or sign up for updates, you provide explicit consent for us to process your data for the stated purpose
  • Contractual necessity: To fulfil donation transactions and issue receipts or exemption certificates
  • Legitimate interests: For website analytics and improving user experience in a privacy-respecting manner
  • Legal obligation: Where required by Indian law, such as tax compliance or regulatory reporting

You may withdraw consent at any time by contacting us at info@wcfindia.in. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5

Cookies

Our website may use cookies — small text files stored on your device — to enhance your browsing experience. We use only the following categories of cookies:

  • Essential cookies: Required for basic website functionality (e.g., form submission, navigation). These cannot be disabled.
  • Analytics cookies: Used to understand how visitors interact with the website (e.g., pages visited, time spent). This data is aggregated and anonymous.

We do not use tracking cookies, advertising cookies, or third-party profiling cookies. You can control cookie settings through your browser. Disabling non-essential cookies will not affect your ability to use the website.

6

Sharing of Data

WCF India does not sell, rent, or trade your personal data. We may share limited information with trusted third parties only when necessary and under strict conditions:

  • Payment gateway providers — to securely process donations. These providers are PCI-DSS compliant and do not retain your financial data beyond the transaction.
  • Regulatory authorities — such as the Income Tax Department of India, if required by law (e.g., Section 80G reporting).
  • Service providers — such as email or SMS platforms used to send receipts or communication, bound by confidentiality agreements.

All third parties with whom we share data are contractually required to handle your data in accordance with applicable Indian data protection laws and this Privacy Policy.

7

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.

Data Category Retention Period
Donation & financial records 7 years (as per Income Tax Act requirements)
Contact / inquiry data 2 years from last interaction
Volunteer records Duration of engagement + 2 years
Website analytics data 12 months (aggregated, anonymised)

After the applicable retention period, personal data is securely deleted or anonymised.

8

Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable Indian laws, you have the following rights with respect to your personal data:

Right to Access
Request a copy of personal data we hold about you
Right to Correction
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of data, subject to legal retention needs
Right to Withdraw Consent
Withdraw consent for processing at any time
Right to Grievance
Lodge a complaint with our Grievance Officer
Right to Nominee
Designate a person to exercise rights on your behalf

To exercise any of these rights, please write to us at info@wcfindia.in. We will respond within 30 days of receiving your request.

9

Security

WCF India takes reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

  • HTTPS encryption for all data transmitted through our website
  • Secure payment processing through PCI-compliant third-party gateways
  • Restricted access to personal data — only authorised personnel can access it
  • Regular review of data handling and security practices
While we take all reasonable precautions, no method of transmission over the internet is completely secure. In the unlikely event of a data breach, we will notify affected individuals as required by applicable law.
10

Children's Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If a parent or guardian becomes aware that their child has submitted personal data to us without consent, they should contact us immediately at info@wcfindia.in and we will delete such data promptly.

While WCF India's charitable programmes may benefit children, any data submitted through our website in connection with such programmes is collected from adult guardians or authorised representatives only.

11

Changes to This Policy

WCF India may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this page periodically. Continued use of our website after any changes constitutes your acceptance of the updated Privacy Policy. If the changes are significant, we may also notify you directly via email (if you have provided one).

12

Contact & Grievance Officer

For any questions, requests, or grievances regarding this Privacy Policy or the handling of your personal data, please contact our designated Grievance Officer:

Grievance Officer WCF India — We Care Foundation
Phone / WhatsApp +91 95989 44888
Address Lucknow, Uttar Pradesh — 226002, India
Response Time Within 30 days of receipt of request

If you are unsatisfied with our response, you may also approach the Data Protection Board of India once operational under the Digital Personal Data Protection Act, 2023.