The short version: we collect only what we need to take your donation, send your 80G certificate and reply to you. We never see your card details, we never sell your information, and you can ask to see, correct or delete what we hold.
It covers pledgeasmile.com and every form on it: donations, collection drives, internship certificates and general enquiries.
Who we are
Pledge A Smile Foundation is a not-for-profit company registered under Section 8 of the Companies Act 2013, CIN U85300DL2020NPL366994, registered office 336, Sec-16, Dwarka, New Delhi. We are registered under 12A and 80G of the Income Tax Act (80G approval AALCP2854P25DL02, valid to 31/3/2031), registered for CSR-1, and listed on NGO Darpan as DL/2020/0262693.
Under the Digital Personal Data Protection Act 2023 we are the data fiduciary for this data: we decide what is collected and why, and we answer for it.
Our FCRA application is pending, so we cannot accept foreign contributions. If you live outside India or hold a foreign passport, write to [email protected] before you give, so we do not have to return your money later.
What we collect
Only what a form asks for. Nothing here needs an account, and we do not build profiles of visitors.
- Donations: your name, email, phone, and the amount and frequency of your gift. Ask for an 80G certificate at checkout and we also collect your PAN, address, city, state and PIN code.
- 80G certificate requests: your name, email, phone, full address, country, the amount you donated and how, your PAN, an optional message, and the screenshot or receipt you attach as proof.
- Contact form: your name, email address and your message.
- Collection drives and sponsorship: your organisation, your name, email, phone, the drive you have in mind, and your message.
- Internship certificate claims: the name for the certificate, the payment link we sent you, your email and phone, whether your stipend is paid or donated back, your UPI ID if it is paid, and your LinkedIn profile if you share it.
- Payment records: the transaction identifiers for your gift, the amount, the payment method and the status the gateway reports.
Card and bank details
We never see or store your card number, UPI PIN, net-banking credentials or bank account details. Payments happen inside Razorpay's checkout window, and Razorpay holds those details under its own privacy policy. What reaches us is the confirmation, the amount and the transaction identifiers, which we keep as the record of your gift. We also never ask for your caste, religion, health or biometrics.
Why we use it
- To take your donation, confirm it and record it.
- To issue your receipt and 80G certificate, and to report the donation in our Form 10BD filing.
- To reply to you: about a donation, a collection drive or an internship certificate.
- To meet our obligations under the Income Tax Act, the Companies Act and other Indian law, and to answer auditors and regulators.
We never use your information for advertising, and send no marketing email to anyone who has not asked for it.
Where it is stored
Form submissions, donation records and 80G proofs are written to files on our own servers in India. Access is limited to the people who need it to issue certificates, answer mail and close our books, and the records are backed up.
We do not transfer personal data out of India ourselves. Services we depend on (the payment gateway, our mailboxes, our analytics tools) may process data outside India under their own terms.
How long we keep it
Records that support a tax filing (donations, PAN, 80G certificates and the proofs attached to a certificate request) are kept for the statutory period, at least eight years, as required for our statutory filings.
Everything else is kept only while it is useful, and you can ask us to delete anything we are not required to keep.
Email, phone and WhatsApp
Receipts, certificates and replies come from our own mailboxes, which run on Google Workspace. If you write on WhatsApp or call +91 91539 99399, that conversation sits in the records of that number. We do not send donation receipts over WhatsApp.
Your rights
Under the Digital Personal Data Protection Act 2023 you can ask us to:
- Tell you what personal data we hold about you and what we have done with it.
- Correct or complete anything wrong: a misspelt name on a certificate, a wrong PAN, an old phone number.
- Erase what we hold, except records the law requires us to keep, such as donation and tax records.
- Stop using anything you gave us voluntarily, by withdrawing your consent.
- Accept a nominee who can exercise these rights for you if you are unable to.
Write to [email protected] about a donation or a certificate, and to [email protected] for anything else, with the name, email and date you used so we can find your record.
Keeping it safe
The site is served over HTTPS, and every payment confirmation is checked against a cryptographic signature on our server before a record is written. Donor records are restricted and backed up. If a breach ever affects your data, we will tell you and the Data Protection Board of India as the law requires.
Children
Donating and applying for an internship are for people aged 18 and over, and we do not knowingly collect children's data online. If a child has sent us their details, write to [email protected] and we will delete them.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top of it, and say plainly when a change is significant.
Grievance officer and contact
If you are unhappy with how we have handled your personal data, tell our grievance officer:
- Manu Rao, Director, Pledge A Smile Foundation
- [email protected]
- 336, Sec-16, Dwarka, New Delhi
- +91 91539 99399
We answer every grievance; if our answer does not satisfy you, you may complain to the Data Protection Board of India. This policy is governed by Indian law (the Digital Personal Data Protection Act 2023, the Information Technology Act 2000 and the 2011 rules on sensitive personal data) and the courts at New Delhi have jurisdiction.