Privacy Policy

1. Who this policy is about

This policy explains how GPF & FISSOT (Graduates, Post Graduates Federation, and Federation of Indian Students & All Social Services Organization Trust), established 2008, Govt. of India Reg. No. 297/23/24 (“we”, “us”, “the organisation”) handles personal data collected through this website.

It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act). For the purposes of that Act, GPF & FISSOT is the Data Fiduciary and you are the Data Principal.

2. What we collect

We collect only what you choose to send us. When you submit the enquiry form, we receive:

• Your full name
• Your phone number
• Your email address
• The enquiry category you select (for example: donating, volunteering, partnership, mass marriage registration, media, or a general enquiry)
• The message you write
• Your explicit consent, recorded via the consent checkbox

Our hosting provider also processes standard technical information that every web server receives, such as your IP address, browser type and the pages requested. This is used for delivering the site, security and spam prevention.

What we do not collect

We do not ask for and you should never send us, through this website, any of the following:

• Aadhaar number, PAN, voter ID, passport or any government identity document
• Bank statements, account credentials, card numbers or UPI PINs
• Income proof, caste or community certificates
• Health or medical information
• Any other sensitive document

If a programme such as the 1001 Free Mass Marriage initiative later requires supporting documents, that will be handled through a separate, secure process with its own notice and consent, never through this website's general enquiry form.

3. Why we use it

We use the information you submit only to:

• Reply to your enquiry
• Share information you have asked for about our programmes
• Record your interest in volunteering, partnership or participation
• Keep an internal record of the enquiry and the consent you gave
• Prevent spam and misuse of the form

Our legal basis is your consent, given when you tick the consent box before submitting. We do not use your data for automated decision-making or profiling.

4. Who processes it

We do not sell, rent or trade personal data. It is shared only with the service providers needed to operate this website:

• Netlify: hosts this website and stores enquiry-form submissions.
• Google: serves the web fonts used by this site, and provides the reCAPTCHA anti-spam check on the form. Because these are loaded from Google's servers, Google receives your IP address. Google's use of that data is governed by its own privacy policy.

These providers operate servers outside India, so your data may be processed outside India. We may also disclose information where we are legally required to do so by a court or competent authority.

5. Photographs, video and event media

GPF & FISSOT runs social programmes, camps, distributions, ceremonies and community events. Photographs and video are taken at these events and may be published on this website, in reports, and on official social media to document our work.

If you attend a GPF & FISSOT event:

• Notices are displayed at events where filming or photography is taking place. Attending such an area indicates you are aware that recording may occur.
• We aim to depict participants with dignity and will not publish images intended to embarrass, demean or exploit anyone.
• We do not publish names, contact details or personal circumstances alongside event photographs unless the person has separately agreed.
• For close-up or featured images of an identifiable individual, and for any image of a child, we seek specific consent, from a parent or guardian in the case of a child.
• You may ask us to remove a photograph of yourself (or of your child) from this website and our official channels at any time using the contact details in section 12. We will remove it from material we control. We cannot recall copies already downloaded or reshared by others.

Volunteer names and photographs are published only where the volunteer has agreed to appear, and can be withdrawn on request.

6. Data collected outside this website

Some GPF & FISSOT programmes involve collecting information offline, for example participant registrations, eligibility verification, beneficiary lists, camp attendance or partner records. This may include categories of data not collected through this website.

That collection is not governed by this website policy. Each such programme carries its own notice and consent process, given to you at the point of collection, stating what is collected, why, how long it is kept and who it is shared with. Where a programme requires identity, income or similar supporting documents, those are handled through a separate secure process, never through this website's enquiry form.

7. Future programmes and services

GPF & FISSOT expects to add further social service activities over time. This policy is written to cover our website's data handling generally, not only the programmes listed today. If a new activity requires personal data beyond what section 2 describes, or requires it for a materially different purpose, we will publish an updated notice for that activity and, where the law requires, seek fresh consent before collecting it.

8. How long we keep it

We keep enquiry submissions only as long as needed to deal with your enquiry and to maintain a reasonable record of it, after which they are deleted. If you ask us to erase your data sooner, we will do so unless we are legally required to keep it.

9. Your rights

Under the DPDP Act you may:

• Ask what personal data of yours we hold and how it is being used
• Ask us to correct or complete inaccurate data
• Ask us to erase your data
• Withdraw your consent at any time (this does not affect anything done before you withdrew it)
• Nominate another person to exercise these rights on your behalf
• Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved

To exercise any of these, contact us using the details in section 12. We will respond within a reasonable period.

10. Children

This website is not directed at children. We do not knowingly collect personal data of anyone under 18 through this website. If you believe a child has submitted data to us, contact us and we will delete it.

11. Security

This site is served over HTTPS and we take reasonable measures to protect the limited data we hold. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please do not send sensitive documents through the enquiry form.

12. Contact and grievances

For any privacy question, request or grievance, contact GPF & FISSOT:

• Email: gpffissot@gmail.com
• Phone: +91 76769 97444
• Address: No. 5 & 6, BS Building, Near Kempegowda BDA Layout, Kodigehalli Post, Yeshwanthpur Hobli, Bengaluru North, Bengaluru 560112
• Grievance Officer: Contact details as above

The DPDP Act requires a published contact point for grievances, so these details must be filled in before this site goes live.

13. Changes

If we change this policy we will update the “last updated” date above. Material changes will be highlighted on this page.