Privacy Policy
Last updated: 27 July 2026
Who we are
Maa Kalawati Foundation (“the Foundation”, “we”) is a charitable foundation at 4th Floor, Pal Tower, Sikanderpur, MG Road, Gurugram, Haryana – 122002. This policy explains how we handle personal information on this website and in our work, in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules.
What we collect
Medical support requests: name, age, gender, phone, city, optional address, the help needed, and parent/guardian details for patients under 18. Visitor register: when you visit our office, the visitor book records your name, contact and purpose; we digitise these entries for safe keeping. Donations: completed on our payment partner's site — we do not receive or store your card, bank or UPI credentials. Website: no analytics trackers, no advertising cookies; only two essential cookies (your language choice, and a sign-in session for administrators).
Why we use it
Only for the purpose you gave it to us: to arrange medical support you requested, to keep a record of office visitors, to issue donation receipts, and to respond when you contact us. We do not sell personal information, use it for marketing, or profile anyone. We process it with your consent, or for the limited “legitimate uses” the DPDP Act allows — for example responding to a medical emergency.
Children
Where a medical support request concerns a person under 18, we require the verifiable consent of a parent or lawful guardian, and we collect the guardian's details for that purpose. We do not track children, monitor their behaviour, or direct any advertising at them (we show no advertising at all).
Who we share it with
Only with those needed to do the work: the medical partners directly involved in arranging care you requested, and the technology providers that run this website (hosting and database services), who process data under contract for us. We never share personal information for anyone else's marketing.
How long we keep it
Medical support records: while the request is active and up to one year after it closes. Visitor register entries: up to three years, matching the purpose of an office visitor log. Donation receipt records: as long as tax and accounting law requires. Security logs: about one year. When a period ends, or when you validly ask us to erase your data, we delete it from our systems.
How we protect it
All traffic to this website is encrypted (TLS). Personal records are held in an access-controlled database; only authorised administrators can view them, each action is logged, and administrator sign-in uses phishing-resistant passkeys. We keep backups and monitor for unauthorised access.
Your rights
You may ask us for a summary of your personal data and how it has been processed; ask us to correct, complete, update or erase it; withdraw consent at any time (withdrawing is as easy as giving it — one call or email); nominate a person to exercise your rights if you are unable to; and raise a grievance. We respond within 15 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Grievance contact
The Foundation's contact person for data questions is published in the footer of every page of this site along with their email and phone. You can also reach us at our office address above, or by calling 0124-4268181.
If something goes wrong
If a personal data breach ever affects you, we will inform you promptly and plainly — what happened, what it may mean for you, what we have done, and what you can do — and we will report it to the Data Protection Board of India as the law requires.
Changes to this policy
If we change this policy, the new version will appear on this page with a new “last updated” date. This notice is available in English and Hindi; versions in other Indian languages are available on request.