(Compliant with GDPR, India DPDP Act 2023, and global best practices)

Last Updated: 02nd December, 2025

Your trust matters to us. At BRAC Global Social Foundation (BRAC®), we are committed to safeguarding your personal information and using it responsibly.

Introduction

At BRAC Global Social Foundation (BRAC®), we value your trust and are committed to protecting your privacy. This Data Protection & Privacy Policy explains how we collect, use, store, and safeguard your personal data when you interact with us — whether through donations, volunteering, membership, reporting grievances, or simply visiting our website.

By engaging with us, you agree to the practices outlined in this policy.

1. Data We Collect

We only collect data that is necessary to serve you better and fulfill our mission:

Personal Identification Data:
Name, email address, phone number, postal address.

Transaction Data:
Donation amounts, payment method, transaction reference number.

Engagement Data:
Membership details, volunteer applications, grievance reports.

Technical Data:
IP address, browser type, device type (for security and analytics).

We do not collect or store sensitive payment details such as card numbers or CVV codes — these are securely processed by trusted third-party payment gateways.

2. Purpose of Data Collection

Your data is used for:

  • Processing donations, issuing receipts, and enabling tax benefits (80G).
  • Responding to grievances, queries, and requests.
  • Managing volunteer programs, membership records, and event participation.
  • Sharing updates about our initiatives, campaigns, and impact stories (only with your consent).
  • Complying with legal requirements under Indian law and other jurisdictions.

3. Legal Basis for Processing

We process your data on one or more of the following grounds:

Consent: When you voluntarily provide your data (e.g., signing up as a member).

Contractual necessity: To fulfill commitments such as sending donation receipts.

Legitimate interest: To improve our services and security.

Legal compliance: As required by tax authorities or law enforcement.

4. Data Storage & Security

  • All personal data is stored on secure servers with encryption protocols.
  • Access is restricted to authorized personnel only.
  • We implement industry-standard firewalls, SSL encryption, and regular security audits.
  • Data is retained only for as long as necessary to fulfill the purposes mentioned above or as legally required.

5. Sharing of Data

We never sell or trade your personal data.
We may share data with:

Payment gateways: For processing donations securely.

Legal authorities: If required by law, court order, or government regulation.

Technology service providers: For secure hosting, analytics, and communications.

All third parties are bound by strict confidentiality and data protection obligations.

6. Your Rights

Under GDPR and India’s DPDP Act, you have the right to:

  • Request access to your personal data.
  • Request corrections if your data is inaccurate.
  • Request deletion (“Right to be Forgotten”).
  • Withdraw consent at any time (unsubscribe from communications).
  • Lodge a complaint with data protection authorities if you believe your data is being misused.

You can exercise your rights by writing to us at privacy@brac.in.

7. Cookies & Tracking

Our website uses cookies to:

  • Improve site functionality.
  • Analyze website traffic for better user experience.
  • Remember your preferences for future visits.

You can manage cookies via your browser settings at any time.

8. International Visitors

If you are visiting from the EU, UK, US, or other regions, please note that your data may be processed in India. We ensure that international data transfers comply with applicable legal standards.

9. Updates to This Policy

We may update this policy from time to time. The latest version will always be available on our website, with the date of the last revision clearly mentioned.

10. Contact Us

For any privacy-related questions, complaints, or data requests, contact us at:

📧 privacy@brac.in
📍 BRAC Global Social Foundation, Mumbai – 400070, Maharashtra, India.