Privacy & Data Protection

What we do with the details you share

This page explains, in plain language, what each form on this website collects, why, who can see it and how to have it removed.

Our commitments

What we collect

Volunteer form: your name, district, area of interest, an email address and/or phone number, and any message you add.
Donation receipt request: your name, postal address, email, phone, the amount and date of transfer, the transaction reference, and your PAN if you choose to provide it for a deduction claim.
Newsletter: your email address.
CSR / sponsorship enquiry: your organisation name, contact person, official email, phone and your indicative area of interest.
For every submission we also store a hash derived from the network address of the request. It is used only to limit automated abuse. It is not stored alongside the address itself and is not intended to identify you, although a hash of this kind should not be treated as absolutely irreversible.

Why we collect it

To contact you about volunteering, an enquiry or an update you asked for.
To verify a contribution and issue an eligible receipt in accordance with the applicable process.
To maintain the records the foundation is required to keep as a registered society.

Website measurement and cookies

This website is hosted and served through the Lovable platform (Lovable Labs Incorporated), which records basic, aggregated visit measurement on our behalf using its analytics service. We do not operate a separate advertising or profiling tracker.
The measurement data covers the page path visited, the referring page, the browser user-agent string, the browser language and a coarse region derived from the browser timezone. It is used only to understand which pages of this website are read.
No information you type into a form — your name, email address, phone number, postal address, PAN, amount, UTR or transaction reference — and no administrator or sign-in data is ever sent to the measurement service.
A short-lived session identifier is set so repeat page views within one visit are not double-counted. On the live site it is limited to this website (SameSite=Lax) and is transmitted only over HTTPS (Secure). Measurement runs after the page has loaded and never blocks the page, a link or a form submission.
Measurement records are retained by the platform for a rolling period of no more than 12 months and are then deleted or aggregated. Sign-in sessions for administrators are held in the browser only until sign-out or expiry.
If you prefer not to be counted, you can block the analytics request with a browser content blocker or use your browser's private mode; the website works normally either way.

Who can see it

Submissions are stored in the foundation's secure database and are readable only by authorised foundation personnel who are signed in with an administrator account.
Our processors are the Lovable platform (website hosting and visit measurement) and Supabase (database and authentication used by the foundation's backend). They process data on our instructions only.
Nothing you submit is published on this website, and we do not sell or rent your details to anyone.
Details may be disclosed only where the foundation is required to do so by law or by a statutory authority.

How long we keep it

Donation verification records are retained for as long as required under applicable law and accounting practice. The exact statutory period is confirmed with the foundation's accountant and is not stated here as legal advice.
Volunteer records are reviewed at least every 24 months and removed when the person is no longer active or asks us to remove them.
CSR and general enquiry records are reviewed at least every 24 months and removed once the enquiry is closed.
Newsletter subscriptions are kept until you unsubscribe, and inactive addresses are reviewed every 24 months.
Abuse-prevention hashes attached to submissions are pruned once they are no longer needed for rate limiting.

Your choices

You can ask us to correct or delete your details, or to stop sending updates, at any time.
You are never required to provide a PAN. It is only needed if you intend to claim a deduction.

Contacting us about your data

Requests can be made in writing to Nava Asom Nirman Foundation, CMH Area, Digboi, Tinsukia, Assam - 786171. You may also write to contact@navaasom.in.

Nava Asom Nirman Foundation will never ask for your OTP, UPI PIN, CVV, card number, password or banking login details. Please do not share them with anyone claiming to represent us.