Privacy Policy

Need of Change Foundation ("we", "our", "us") is committed to protecting the privacy and personal information of all our donors, volunteers, partners, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website at needofchange.org or make a donation through our platform.

By using our website or making a donation, you consent to the practices described in this policy.

a) Donation & Identity Information

• Full name
• Email address
• Mobile number
• PAN number (required for 80G tax exemption certificates under Income Tax Act, 1961)
• Billing address (if provided)

b) Payment Information

• Payment transactions are processed securely through Razorpay Payment Gateway
• We do NOT store your card details, bank account numbers, or CVV on our servers
• Razorpay is PCI-DSS compliant and handles all payment data under their own privacy and security framework

c) Technical Information

• IP address and browser type
• Pages visited and time spent on site
• Device type (desktop/mobile)
• Referring website
• This data is collected via essential cookies only

d) Communication Information

• Messages submitted via contact forms
• Newsletter subscription details
• CSR inquiry form submissions

• Processing your donation and issuing payment confirmation
• Generating and issuing 80G tax exemption certificates under Section 80G of the Income Tax Act, 1961
• Sending donation receipts and acknowledgement emails
• Communicating programme updates and impact reports to donors who have subscribed to our newsletter
• Responding to queries submitted via our contact forms
• Managing monthly/recurring donation subscriptions through the Donor Portal
• Legal and regulatory compliance including FCRA, IT Act, and Companies Act requirements
• Internal analytics to improve our website and donation experience

Need of Change Foundation explicitly commits:

• We will NEVER sell, rent, or trade your personal information to any third party
• We will NEVER share your information with advertisers or marketing companies
• We will NEVER use your PAN number for any purpose other than issuing 80G tax certificates
• We will NEVER send unsolicited commercial communications (spam)
• We will NEVER share donor lists with other NGOs or organisations

a) Service Providers

We work with trusted service providers who assist us in operating our platform:

• Razorpay: Payment processing
• Email service provider: Transactional emails and receipts

All service providers are bound by confidentiality agreements and may only use your data to perform services for us.

b) Legal Requirements

We may disclose information if required by law, court order, or government authority including:

• Income Tax Department (80G compliance)
• Ministry of Home Affairs (FCRA reporting)
• Ministry of Corporate Affairs (CSR-1)

c) With Your Consent

We may share information in any other circumstance only with your explicit prior written consent.

• SSL/TLS encryption for all data transmitted on our website (HTTPS)
• Secure cloud storage with access controls
• Payment data handled exclusively by Razorpay (PCI-DSS Level 1 certified)
• Limited internal access — only authorised staff can access donor records
• Regular security reviews of our platform

Despite these measures, no internet transmission is 100% secure. We encourage you to use strong passwords for your Donor Portal account.

Our website uses only essential cookies required for basic functionality:

• Session management (keeping you logged in)
• Donation form state preservation
• Security tokens (CSRF protection)

We do NOT use:

• Advertising or tracking cookies
• Third-party analytics that share your data externally
• Social media tracking pixels

You can disable cookies in your browser settings, though this may affect some website functionality.

• Donation records: 7 years (as required by Income Tax Act for 80G compliance)
• Contact form submissions: 2 years
• Newsletter subscriptions: Until you unsubscribe
• Donor Portal accounts: Until account deletion is requested

After retention periods expire, data is securely deleted or anonymised.

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate information
• Right to Deletion: Request deletion of your data (subject to legal retention requirements for 80G records)
• Right to Unsubscribe: Opt out of newsletters at any time via the unsubscribe link in any email
• Right to Portability: Request your donation history in a standard format

To exercise any of these rights, email us at: care@needofchange.org. We will respond within 15 working days.

Our website and donation platform are not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.

Our website may contain links to external websites (government portals, news articles, partner organisations). We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies independently.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify registered donors of significant changes via email. The updated policy will always be available on this page with a revised "Last Updated" date.

For any privacy-related queries, concerns, or requests:

Need of Change Foundation
727, 7th Floor, Regus Maloo 1,
Near Velocity Talkies, Indore,
Madhya Pradesh — 452010

Email: care@needofchange.org
Phone: +91-88159-86610
Working Hours: Monday–Friday, 9AM–6PM