Privacy Notice
What personal information we collect, why we collect it, and the rights you have over it.
Last updated: TODO_CLIENT: date
Who we are
Mercy Outreach Global India (TODO_CLIENT: registered legal entity name) is the data fiduciary responsible for the personal information described in this notice. Our registered office is TODO_CLIENT: registered office address.
You can contact us about anything in this notice at TODO_CLIENT: email.
The information we collect
When you donate we collect your name, email address, mobile number and postal address. If you ask for an 80G receipt we also collect your PAN, because the Income Tax Department requires it on the receipt.
When you use this website we collect technical information — your IP address, browser and the pages you viewed. Analytics information is only collected if you have consented to it.
We do not collect your card, UPI or bank details. Those go directly to our payment gateway and never reach our servers.
Why we use it
To process your donation and issue your receipt. To meet our obligations under the Income Tax Act, the Foreign Contribution (Regulation) Act where applicable, and our auditors' requirements. To keep you updated about our work, where you have asked us to. To detect and prevent fraud.
Our lawful basis
We process your information to perform the transaction you asked for, to comply with legal obligations that apply to a registered charitable organisation in India, and — for marketing and analytics — on the basis of your consent, which you may withdraw at any time.
Who we share it with
Our payment gateway, in order to take your donation. Our auditors and, where required, the Income Tax Department and other regulators. Service providers who help us send email or host this site, under contract and only for that purpose.
We do not sell your personal information, and we do not share it with other charities.
How long we keep it
Donation records are kept for the period required by Indian tax and charity law, currently TODO_CLIENT: retention period, confirm with auditor. Marketing preferences are kept until you withdraw them.
Your rights
You may ask us for a copy of the information we hold about you, ask us to correct it, ask us to erase it where we are not required to keep it, and withdraw consent for marketing or analytics at any time.
To exercise any of these, contact TODO_CLIENT: email. We will respond within 30 days.
Complaints
If you are unhappy with how we have handled your information, please contact our Grievance Officer — see our Grievance Officer page. You also have the right to complain to the relevant authority under the Digital Personal Data Protection Act, 2023.