Privacy Policy

1. Overview & Organizational Commitment

Hidayat Foundation of India ("Foundation", "we", "our", or "us") operates community portals, institutional management modules, verified masjid and madrasa directories, and direct patient medical relief programs across hidayat.org.in. We are dedicated to respecting your digital privacy and safeguarding any personal and financial information you entrust to us in accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act (DPDPA), and relevant Reserve Bank of India (RBI) payment guidelines.

2. Categories of Information We Collect

We collect only information essential to providing our welfare services, institutional services, and receipting systems:

• Donor & Contributor Details: Full name, 10-digit mobile phone number, email address, PAN/tax identification (where requested for 80G tax exemptions), fund intent (General Sadaqah, Zakat, Lillah, Emergency Medical Relief), and generated donation receipt voucher numbers.
• Welfare Beneficiary Documentation: Patient names, medical diagnostics, hospital estimate certificates, physical field-check notes, doctor prescriptions, and identity records required to physically authenticate humanitarian aid appeals.
• Mosque & Madrasa Representative Information: Names, official committee designations, authorized contact details, and institutional credentials registered under our Tasdeeq verification directory and seminary accounting platforms.
• Technical & Geolocation Parameters: IP address, device specifications, browser environment, and approximate or GPS location coordinates (accessed strictly with active user permission to display nearest Jama'at prayer times and calculate live Qibla compass headings).

3. Purpose of Processing & Use of Information

Personal information collected by the Foundation is processed solely for legitimate charitable, operational, and statutory auditing purposes:

• Verifying and processing online contributions made toward specific patient cases or general welfare missions.
• Generating and delivering automated digital receipts, donor ledger slips, and voucher confirmations.
• Publicly presenting authenticated hospital cost estimations for transparent auditing while strictly redacting sensitive personal identifiers (such as Aadhaar numbers or complete home addresses).
• Verifying mosque committee admins, approving verified letters via our Tasdeeq system, and preventing unauthorized portal modifications.
• Facilitating location-aware prayer calculation schedules and live Ka'bah compass alignment.

4. Payment Gateway & Financial Data Handling (Razorpay)

Online charitable contributions and payments are processed securely through certified, RBI-licensed payment aggregators, specifically Razorpay Software Private Limited ("Razorpay"), as well as authorized UPI rails.

5. Medical Record Safeguards & Isolation

All beneficiary identity documentation and unredacted medical bills are stored securely in protected storage repositories outside the public web root. Public-facing documents displayed under our Welfare module are restricted to verified hospital quotation letters and doctor diagnostic sheets cleared by our field assessment volunteers, with access restricted strictly through internal session-scoped controllers.

6. Non-Disclosure & Third-Party Sharing

We do not sell, rent, trade, or commercialize user or donor personal data to any external marketing agencies or third parties. Information is only disclosed in the following limited circumstances:

• To verified payment processors (Razorpay / partner banks) exclusively to authorize and settle transaction payments.
• To medical institutions, hospitals, or pharmacies when disbursing direct relief on behalf of a verified patient.
• When required by applicable law, court summons, or regulatory agencies for statutory tax and charitable audit compliance.

7. Cookies & Session Storage

We use strictly essential HTTP cookies and local storage tokens to manage authenticated login states across committee dashboards, preserve donor filter selections, and prevent Cross-Site Request Forgery (CSRF). We do not deploy third-party advertising tracking cookies.

8. Data Retention & Donor Rights

Transaction records and donation vouchers are retained for the duration mandated by Indian accounting and non-profit regulatory laws. Users and donors may request correction of erroneous details or inquire about their stored profile by submitting a formal request to our administrative desk.

9. Grievance Redressal & Contact Officer

In compliance with the Information Technology Act and rules made thereunder, any privacy queries, grievance escalations, or data correction requests may be directed to our designated compliance officer: