Karta Collective Foundation Proppa Visit our brand
Donate

Privacy Policy

Last updated: 27 September 2026

This policy explains what personal information Karta Collective Foundation collects, why we collect it, and how we protect it, in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1. Who we are

Karta Collective Foundation (CIN U88900UW2026NPL255094), Cabin No. GF049, 1st Floor, B-128, Sector 2, Noida, Gautam Buddha Nagar, Uttar Pradesh 201301. Under the DPDP Act, we are the "Data Fiduciary" for the personal data described here.

2. What we collect

When you donate

  • Name, email address, phone number, donation amount and date, and the payment reference (Razorpay payment ID, UPI transaction ID or bank UTR number).
  • If you want a donation receipt and certificate of donation: your PAN and postal address, given at checkout or through our receipt form. PAN is mandatory for reporting your donation and issuing a certificate of donation.

When you contact us

  • Whatever you choose to send us by email, WhatsApp, social media or other channels, such as your name, number and message.

When you visit the site

  • Our website does not use analytics, advertising or tracking cookies.
  • Our hosting provider, Cloudflare, processes basic technical data such as your IP address and browser type to deliver the site and protect it from attacks. Our fonts are served by Google Fonts, which also receives your IP address.
  • During checkout, Razorpay may use its own cookies, as explained in Razorpay's privacy policy.

What we never collect

  • Card numbers, CVV, UPI PIN or net-banking passwords. These go directly to Razorpay, your UPI app or your bank and never reach us.

3. Why we use it

  • To process your donation and send you a confirmation.
  • To issue your donation receipt, report your donation to the Income Tax Department (Form 113) and send you your certificate of donation (Form 114).
  • To keep proper accounts and meet our legal, audit and regulatory obligations.
  • To reply to your messages and questions.
  • To send occasional updates about our work, only if you opt in. You can unsubscribe at any time.

We process your data with your consent, which you give when you donate or contact us, and where the law requires or permits us to, for example for tax filings.

4. Who we share it with

We never sell or rent your personal data. We share it only with:

  • Razorpay: to process online payments.
  • Google Workspace: our email, forms and document storage.
  • Cloudflare: our website host.
  • Our auditors and chartered accountant: for accounts and tax filings.
  • Government authorities such as the Income Tax Department, when the law requires it.

Personal data may be processed on secure cloud infrastructure hosted by service providers in compliance with the cross-border transfer provisions of the DPDP Act, 2023.

5. How long we keep it

  • Donation, accounting and tax records: for the period required under applicable law.
  • Messages and enquiries: for as long as needed to respond and follow up, and then deleted.
  • Update mailing list: until you unsubscribe.

6. How we protect it

The site is served only over encrypted HTTPS, and our email domain is protected against spoofing. Access to donor data is limited to the people who need it, and we use reasonable security safeguards to protect our accounts. If a personal data breach occurs, we will take the steps required under applicable law, including notifying affected individuals and the relevant authorities where required.

7. Your rights

Under the DPDP Act, you can ask us to:

  • Tell you what personal data we hold about you and how we use it.
  • Correct or update your data.
  • Delete your data, except records we must keep by law, such as tax records.
  • Withdraw your consent, for example to stop receiving updates.
  • Nominate someone to exercise these rights on your behalf.

Email hello@kartacollective.org with your request. We will respond within 30 days.

8. Children

Donations can only be made by adults, and we do not knowingly collect personal data from anyone under 18.

9. Grievance Officer

Priya Chandramouli, Grievance Officer
Karta Collective Foundation, Cabin No. GF049, 1st Floor, B-128, Sector 2, Noida, Gautam Buddha Nagar, Uttar Pradesh 201301
Email: hello@kartacollective.org
Phone: +91 88615 54774

If you are not satisfied with our response, you can also complain to the Data Protection Board of India.

10. Changes to this policy

We will post any changes on this page and update the date at the top.