Privacy Policy

1. Who We Are

Moras Charitable Foundation ("we", "us", or "our") is a registered charitable organisation dedicated to empowering underserved communities through education, healthcare, and sustainable support — spreading hope, dignity, and opportunity for all.

This Privacy Policy explains how we handle personal information collected through our website, donation forms, and other channels. We comply with India's Digital Personal Data Protection Act, 2023 (DPDPA) and all other applicable data protection laws. By using our website or making a donation, you agree to the practices described here.

2. Information We Collect

We collect personal information only when necessary and with a clear purpose:

We do not collect sensitive personal data such as health information or religious beliefs unless you voluntarily provide it for a specific programme or grant application.

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing donations and issuing tax receipts
• Sending updates, newsletters, and impact reports (with your consent)
• Managing volunteer applications, grant programmes, and partnerships
• Responding to your questions and support requests
• Improving our website, services, and outreach activities
• Complying with legal, regulatory, and accounting obligations
• Preventing fraud and ensuring the security of our systems

We will never use your information for purposes beyond the above without your explicit consent.

4. Online Donations & Payment Security

When you make a donation through our website, your payment is processed by a trusted third-party payment processor. We do not store your full card number, CVV, or bank account details on our servers.

All transactions are encrypted using industry-standard TLS/SSL technology. We retain transaction records — including amount, date, and donor reference — for accounting and tax compliance under Indian law.

If you set up a recurring donation, we store a secure token from our payment processor for future payments. You may cancel at any time by contacting us.

5. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share it only with:

• Payment processors — to complete your donation securely
• Email service providers — to deliver newsletters you have requested
• Analytics providers — to understand website usage (aggregated and anonymised)
• Legal & regulatory authorities — when required by law or to protect rights and safety
• Partner organisations — only with your explicit consent for a specific programme

All third parties are required to handle your data in accordance with applicable privacy laws.

6. Cookies & Tracking

Our website uses cookies to ensure proper functionality and understand how visitors use the site:

• Essential cookies — required for basic website operation; cannot be disabled
• Analytics cookies — help us measure traffic and improve content; can be declined
• Preference cookies — remember your settings and preferences; can be declined

You can manage or withdraw cookie consent at any time via our Cookie Settings or your browser settings.

7. Data Retention

We retain personal information only for as long as necessary or required by law:

• Donation records — 7 years (tax and accounting purposes)
• Email marketing contacts — until you unsubscribe or withdraw consent
• Website analytics data — up to 26 months in aggregated form
• Correspondence and support queries — up to 3 years

When data is no longer required, we securely delete or anonymise it.

8. Your Rights

Under India's DPDPA 2023 and other applicable laws, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — request removal of your data where we have no lawful basis to retain it
• Grievance redressal — raise a complaint with our designated contact person
• Withdraw consent — at any time, for processing based solely on your consent
• Nominate a representative — designate someone to exercise your rights on your behalf

To exercise any of these rights, contact us (Section 10). We will respond within 30 days.

9. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently done so, please contact us and we will delete it promptly.

For programmes involving minors, we obtain verifiable parental or guardian consent in accordance with Indian law.

10. Contact Us

For any questions, concerns, or data requests related to this Privacy Policy, please reach out to us:

We may update this Privacy Policy from time to time. Significant changes will be announced on our website. Continued use of our site after changes constitutes acceptance of the revised policy.