1. Introduction
Bharati Web Private Limited ("Company", "we", "us", or "our") operates eNidhi ("the Platform"). We are committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.
By using the Platform, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Platform.
2. Information We Collect
We collect information that you provide directly to us, including:
- Account Information: Name, email address, phone number, organisation name, registration number, 80G certificate details, and bank account information when you register.
- Donor Information: When your NGO uses our Platform to collect donations, donor names, email addresses, phone numbers, PAN numbers, addresses, and donation amounts are stored on our servers.
- Payment Information: Payment gateway credentials, transaction records, and billing details. Note: We do not store full credit card or banking passwords — these are handled directly by your payment gateway provider.
- Communication Data: Emails, support tickets, and other correspondence you send to us.
We also collect certain information automatically when you visit the Platform:
- Log Data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
- Cookies & Similar Technologies: We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyse usage. See our Cookie Policy for details.
3. How We Use Your Information
We use the collected information for the following purposes:
- To provide, operate, and maintain the Platform.
- To process donations and generate tax receipts on behalf of your NGO.
- To manage user accounts, subscriptions, and billing.
- To communicate with you about service updates, security alerts, and support.
- To improve the Platform based on usage patterns and feedback.
- To enforce our Terms of Service and prevent fraudulent or illegal activity.
- To comply with legal obligations, including tax and regulatory requirements.
4. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:
- With the NGO You Represent: If you are a staff member of an NGO, your account activity may be visible to other authorised users of that NGO's account.
- Payment Gateways: Donation transaction data is shared with the payment gateway (Razorpay, CCAvenue, Easebuzz, or PayU) configured for your organisation to process payments.
- Service Providers: We may engage third-party vendors for hosting, email delivery, and analytics. These providers have limited access to data necessary to perform their functions and are contractually bound to protect it.
- Legal Compliance: We may disclose information if required by law, court order, or government regulation, or to protect the rights, property, or safety of the Company, our users, or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction. You will be notified of any change in ownership.
5. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Service. Donation records and receipts are retained for a minimum period required by Indian tax laws (generally 8 years from the end of the relevant financial year). Upon account termination, we may retain certain data as required by law or for legitimate business purposes.
6. Data Security
We implement industry-standard security measures including:
- 256-bit TLS encryption for data in transit.
- Bcrypt hashing for all passwords.
- Two-factor authentication (2FA) for administrative accounts.
- CSRF (Cross-Site Request Forgery) protection.
- Regular security audits and updates.
However, no method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Objection: Object to processing of your data for certain purposes.
- Data Portability: Request transfer of your data to another service.
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
8. NGO Responsibilities
If you are an NGO using our Platform to collect donor information, you act as a data controller for your donors' personal data. You are responsible for:
- Obtaining necessary consent from donors for data collection and use.
- Complying with applicable data protection laws, including the Information Technology Act, 2000 and rules thereunder.
- Ensuring that donor data collected through the Platform is used only for legitimate charitable purposes.
9. International Data Transfers
Your data is stored on servers located in India. If you access the Platform from outside India, you consent to the transfer of your data to India, which may have different data protection laws than your country of residence.
10. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on the Platform. The "Last updated" date at the top indicates when this policy was last revised.
12. Grievance Officer
In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of the Grievance Officer are:
Grievance Officer
Bharati Web Private Limited
S3, Laxmi Nagar, Nagpur – 440022, Maharashtra, India
Email: [email protected]
Phone: +91 91581 70055
13. Contact Us
For any questions about this Privacy Policy, please contact:
Bharati Web Private Limited
S3, Laxmi Nagar, Nagpur – 440022, Maharashtra, India
Email: [email protected]
Phone: +91 91581 70055