top of page

Privacy Policy

1. General
​

This Privacy Notice explains why Deesha Education Foundation collects information about you, how that information may be used and processed, and the measures we take to protect it when you access or use our website, www.deeshagroup.org (the “Platform”).

Deesha Education Foundation is authorised to operate, use, and maintain the Platform to facilitate online donations, enquiries, pledges, and messaging services. For these activities, Deesha Education Foundation acts as the data controller.

​

This Privacy Notice applies to any person or organisation (“you” or “your”) that accesses the Platform or shares information or data with us. It covers all personal data (“PD”) that may be used, directly or indirectly, to identify an individual.

​

This Privacy Notice forms an integral part of our Terms and Conditions. You have been directed to this page so that you can understand how your PD is handled and provide informed consent. Please read this Privacy Notice before submitting any information to us.

By using the Platform, you acknowledge that you have read and understood this Privacy Notice. If you do not agree with it, please do not use the Platform or submit any information through it.

​

We reserve the right to update this Privacy Notice. Any changes will be published on the Platform.

​

2. Personal Data We Collect
​

We may collect and process PD that you provide when you:

  • access, browse, or use the Platform;

  • make a donation;

  • create, support, or subscribe to a fundraiser;

  • subscribe to our newsletter or other content;

  • contact us for information or assistance;

  • use our messaging services;

  • submit an enquiry;

  • complete an eye or organ donation pledge form; or

  • otherwise enter information on the Platform.

​

The categories of PD we may collect include:

  • Basic identification information, such as your first name, surname, age, photograph, organisation name, logos, marks, relationship details, and IP address.

  • Identity and tax information, such as identity documents, KYC information, tax identification details, tax certificates, financial statements, and tax returns.

  • Contact information, such as your phone number, mobile number, email address, postal address, and country of residence.

  • Financial and payment information, such as bank account details, cheques, invoices, and payment-related records.

  • Donation information, including the project or campaign you support and the amount donated.

  • Fundraiser or campaign information, including titles, categories, images, descriptions, and beneficiary details.

  • Health information, where voluntarily provided, such as medical conditions, diagnostic reports, and details of hospitals or healthcare facilities.

  • Device and technical information, such as device type, hardware details, operating system, and information required for synchronisation and seamless access.

  • Location information.

  • Usage information collected through cookies and similar technologies, including the duration of your visit, pages viewed, features used, and items clicked. For further information, please refer to our Cookie Policy.

  • Social media information, including links to profiles on Facebook, X/Twitter, YouTube, Instagram, LinkedIn, or other social media platforms.

 
Third-Party Payment Gateways
​

When making a donation, you may be redirected to a third-party payment gateway.

The Platform does not receive or store sensitive payment information that you provide directly to the payment gateway. Such information will be processed by the relevant payment gateway provider in accordance with its own privacy policy and terms and conditions.

Deesha Education Foundation is not responsible for the manner in which a third-party payment gateway collects, uses, stores, or protects the information provided directly to it.

​

Log Data
​

If an error occurs while you use the Platform, we may collect technical information known as log data. This may include your IP address, device name, operating system version, date and time of access, activity on the Platform, and other diagnostic statistics.

We take reasonable measures to protect your PD in accordance with applicable law. However, as no internet-based system is completely secure, you are advised to exercise caution when submitting PD or using the Platform.

​

3. How We Collect Personal Data

 

We may collect PD:

  • directly from you when you voluntarily provide it while accessing, browsing, or using the Platform; and

  • indirectly through cookies, web beacons, website traffic data, analytics tools, publicly available sources, and information derived through the processing of PD.

​

4. How We Process Personal Data

 

We may collect, record, organise, structure, store, align, retrieve, adapt, access, review, archive, analyse, pseudonymise, encrypt, decrypt, transfer, or otherwise process PD using technological or manual methods.

​

We process PD fairly, lawfully, transparently, and in accordance with applicable law. Our data-processing principles include:

  • processing PD lawfully, fairly, and transparently;

  • using PD only for the purposes communicated to you, purposes reasonably connected with them, or compatible purposes;

  • collecting only the PD that is adequate, relevant, and necessary;

  • taking reasonable steps to keep PD accurate and up to date;

  • retaining PD only for as long as necessary;

  • implementing appropriate technical, operational, physical, and organisational safeguards;

  • protecting PD against accidental loss, unlawful destruction, unauthorised access, alteration, or damage; and

  • maintaining the confidentiality and integrity of PD, except where disclosure is permitted under this Privacy Notice or required by law.

​

5. Why We Process Personal Data

 

We may process PD for the following purposes:

  • entering into or performing a lawful contract with you;

  • registering you on the Platform;

  • providing information about our activities, services, and initiatives;

  • communicating with you;

  • responding to enquiries, requests, or complaints;

  • processing donations, grants, and contributions to our projects;

  • issuing receipts, acknowledgements, and tax certificates;

  • sending information about upcoming events, campaigns, newsletters, and organisational updates;

  • managing pledge forms and related communications;

  • conducting surveys, research, analytics, and trend analysis;

  • understanding user needs and improving our services;

  • creating, maintaining, improving, and developing the Platform;

  • obtaining and acting upon feedback;

  • administering and protecting our operations and the Platform;

  • detecting, preventing, and responding to fraud, security incidents, and data breaches;

  • maintaining secure personal information management systems;

  • reviewing PD to fulfil your requests and comply with legal obligations;

  • conducting archival, statistical, research, and development activities;

  • managing our relationship with you;

  • managing payments, fees, and charges;

  • complying with applicable laws and contractual obligations;

  • promoting and marketing our activities, campaigns, and services;

  • sharing PD with authorised third parties where necessary;

  • protecting our rights, property, safety, and legitimate interests;

  • honouring your requests and exercising your data-protection rights; and

  • initiating or defending legal, contractual, or equitable claims.

​

6. How We Protect Personal Data

 

We take the security and confidentiality of your PD seriously.

We implement reasonable technical, operational, physical, and organisational safeguards appropriate to the nature and sensitivity of the PD being processed.

​

Our staff, personnel, officers, representatives, volunteers, and members receive appropriate guidance and training regarding their obligations to maintain confidentiality, protect PD, and respect your privacy.

Access to PD is limited to authorised personnel and approved third parties who require access for specific purposes and on a need-to-know basis.

​

7. How Long We Store Personal Data

 

We store and process PD only for as long as reasonably necessary to fulfil the purposes described in this Privacy Notice and to comply with applicable legal, regulatory, contractual, accounting, or reporting requirements.

​

For example, where a donation receipt or tax-exemption certificate is issued, applicable taxation laws may require us to preserve related information for a specified number of years.

​

We follow data-minimisation principles and aim not to retain PD in an identifiable form for longer than necessary. Once PD is no longer required, it will be securely deleted, destroyed, or anonymised, subject to applicable legal requirements.

​

8. Sharing Personal Data with Third Parties

 

We do not sell, rent, or trade your PD.

​

We may share PD on a strict need-to-know basis with authorised service providers that support our operations, including:

  • website hosting providers;

  • cloud service providers;

  • technology and maintenance vendors;

  • analytics providers;

  • communication and messaging service providers;

  • professional advisers;

  • payment and financial service providers;

  • advertising and promotional platforms; and

  • other vendors that assist us in operating, maintaining, or promoting the Platform and our activities.

 

We may also disclose PD where necessary to:

  • comply with applicable laws, regulations, legal processes, or government requests;

  • enforce our policies and agreements;

  • investigate or prevent fraud, misuse, or security incidents;

  • protect our rights, property, or safety, or those of another person; or

  • establish, exercise, or defend legal claims.

 

Where PD is shared with a third party, we require the recipient, where applicable, to:

  • maintain appropriate confidentiality and security;

  • process PD only for the purpose for which it was disclosed;

  • restrict unauthorised onward transfers; and

  • securely delete or destroy the PD when it is no longer required, subject to applicable law.

​

9. Contact Us

 

For any questions, comments, complaints, or requests relating to this Privacy Notice or your personal data, please contact us at:

Email: admin@deeshagroup.org

​

bottom of page