Privacy Policy

Last Updated: July 29, 2026

1. Introduction & Regulatory Alignment

IYIMHHSE ("we", "our", or "us") is a grassroots, student-led youth initiative. We respect the privacy of our visitors, volunteers, and supporters. This Privacy Policy outlines our data handling practices and aligns with India's Digital Personal Data Protection (DPDP) Act, 2023.

2. Information We Collect

We do not track you or use invasive advertising cookies. We only collect personal data that you voluntarily submit through our contact query form or donation log:

  • Full Name: To identify you and respond to your queries or acknowledge support.
  • Email Address: To deliver transactional receipt alerts or query responses.
  • UPI Reference Number: Submitted voluntarily to verify direct P2P transfer logs.
  • Message / Query Notes: Optional details submitted alongside your forms.

3. Transactional Communications Only

We process your contact information strictly for the purpose for which it was submitted:

  • No Marketing Spam: We do not send unsolicited marketing emails, promotions, or advertisements.
  • Transactional Alerts: Submitting a form sends an automated, 1-time confirmation receipt via EmailJS.
  • Optional Updates: You will only receive periodic drive updates if you explicitly opt-in via our signup checkboxes.

4. Database Security & Access Control

  • Firestore Storage: Submitted logs are stored securely in Firebase Firestore.
  • Write-Only Security Rules: Anonymous frontend web clients can only write new submission logs and cannot read, query, edit, or delete existing records.
  • Zero Commercial Sharing: We never sell, lease, or rent donor or query logs to third parties.

5. Direct P2P Payment Transparency

Our website does not process or store financial credentials:

  • No credit card, debit card, or net banking information is requested or handled on our servers.
  • All payments are initiated directly by you within your preferred UPI app.
  • We store only the reference string you manually enter to reconcile bank logs.

6. Outreach & Drive Media Privacy

As part of our public awareness workshops and distribution drives, photographs may be taken for awareness reporting on our website. If a participant, volunteer, or guardian wishes to have any photo removed from our website or gallery, please reach out to our team.

7. Data Principal Rights & Grievance Contact

Under the DPDP Act 2023, you have the right to access, correct, or request the complete erasure of your submitted records. For any privacy requests or grievances, you can contact our Data Redressal Team at:

📧 Grievance & Privacy Email: contact@iyimhhse.org.in
⏱️ Response Timeline: We acknowledge and address all privacy requests within 7 to 14 days.