Privacy Policy

1. Introduction

MCKS Food For The Hungry Foundation Cochin ("Foundation", "we", "us", or "our"), located at Kadavanthra, Kochi – 682020, Kerala, India, is committed to protecting the privacy and personal data of our donors, volunteers, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

We collect the following personal information when you donate, volunteer, or interact with our website:

• Full Name — To identify you as a donor and issue receipts.
• Email Address — To send donation receipts, 80G certificates, and important updates.
• Phone Number — For communication regarding your donations or volunteer activities.
• PAN (Permanent Account Number) — Mandatory under Section 80G of the Income Tax Act, 1961 and Rule 18AB for issuing 80G tax exemption receipts. Without PAN, we cannot issue an 80G certificate for donations exceeding ₹50.
• Aadhaar Number — Optional; collected only when PAN is not available, as an alternative identity verification.
• Postal Address — Required for 80G receipt issuance and Form 10BD/10BE filing with the Income Tax Department.
• Nationality — To determine if your donation falls under FCRA 2010 regulations for foreign contributions.
• Donor Type — Individual, HUF, Company, Firm, or Trust — required for tax compliance categorization.

3. Why We Collect This Data

Your data is collected for the following purposes:

• Processing your donations and issuing receipts
• Issuing 80G tax exemption certificates as required under the Income Tax Act
• Filing Form 10BD (Statement of Donations) and generating Form 10BE (Donation Certificates) with the Income Tax Department as mandated under Section 80G
• Compliance with FCRA 2010 for foreign contributions
• Communicating with you about your donations and our programs
• Maintaining accurate donor records for audit purposes

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:

• Consent — You provide consent when you create an account and make a donation.
• Legal Obligation — Collection of PAN, address, and donor details is mandated by Section 80G, Rule 18AB, and Form 10BD requirements under the Income Tax Act, 1961.
• Legitimate Interest — To maintain accurate records, prevent fraud, and communicate about our charitable activities.

5. How We Store and Protect Your Data

Your data is stored securely using industry-standard cloud infrastructure with encryption at rest and in transit. We implement reasonable security practices and procedures as required under the IT Rules, 2011. Access to personal data is restricted to authorized personnel only. We do not store payment card details — all payment processing is handled by certified third-party payment gateways.

6. Data Sharing

We do not sell, rent, or trade your personal information to any third party. Your data may be shared only in the following circumstances:

• Income Tax Department — Donor details are reported via Form 10BD as legally mandated.
• FCRA Authorities — Foreign contribution details are reported as required under FCRA 2010.
• Payment Processors — To process your donation payments securely.
• Legal Requirements — When required by law, court order, or government authority.

7. Cookies and Analytics

Our website may use essential cookies to maintain your session and preferences. We may use analytics tools to understand website usage patterns. No personal data is shared with analytics providers without your consent. You can disable cookies through your browser settings, though this may affect some website functionality.

8. Your Rights Under the DPDP Act, 2023

As a Data Principal, you have the following rights:

• Right to Access — You can request a summary of your personal data and how it is being processed.
• Right to Correction and Erasure — You can request correction of inaccurate data or erasure of data no longer necessary.
• Right to Grievance Redressal — You can raise concerns about data processing with our Data Protection Officer.
• Right to Withdraw Consent — You can withdraw consent at any time, though this may affect our ability to issue 80G receipts or process future donations.

Note: Certain data (PAN, donation records, address) must be retained for the statutory period required by the Income Tax Act even after consent withdrawal, as this constitutes a legal obligation.

9. Data Retention

Donation records and associated donor data are retained for a minimum of 8 years from the end of the relevant assessment year, as required under the Income Tax Act, 1961. After the statutory retention period, data will be securely deleted or anonymized.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a grievance regarding your personal data, please contact us: