Privacy Policy – Aarya S Trust

Date: 30/09/2026 | Last Updated: 30/09/2026 | Version 1.0

---

1. Purpose and Scope

Aarya S Trust (“Aarya S Trust”, “Trust”, “we”, “our” or “us”) respects your privacy and is committed to protecting the personal data of visitors, supporters, volunteers, partners, beneficiaries, donors and other users of this website. This Privacy Policy explains how we collect, use, store, share, protect, retain and delete personal data, and the choices and rights available to you, when you access or use https://aaryatrust.in/ (the “Website”).

The Website provides information about Aarya S Trust, its initiatives, charitable activities, healthcare assistance programmes, community welfare projects, relief efforts, support services and other Trust activities.

This Policy applies only to personal data collected through this Website. It does not govern personal data collected through offline interactions, events, programmes, volunteer activities, beneficiary services, donations or other channels, which may be covered by separate notices presented when that data is collected.

This Policy is not itself a blanket consent. Where consent is required, we will request it through a clear affirmative action, for a specific purpose and for the specific data involved.

2. Identity of the Data Fiduciary

Aarya S Trust is the Data Fiduciary that determines the purpose and means of processing of personal data collected through this Website. Where a service provider processes personal data on our behalf, it acts as a Data Processor on our documented instructions.

Trust registration details: Aarya S Trust

Registered office: 12th Floor, D Wing, Kamala Mills Compounds, Senapati Bapat Marg, Lower Parel (West), Mumbai – 400013, Maharashtra, India.

3. Applicable Legal Framework

This Policy is intended to support compliance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as applicable and brought into force from time to time. The Information Technology Act, 2000 and the rules made under it, and other applicable laws relating to tax, accounting, audit and charitable organisations, may also apply.

If a legal requirement provides a higher standard of protection, or requires longer retention of a particular record, that requirement will prevail for that record.

4. Personal Data We Collect

4.1 Information you submit

When you submit an enquiry through the Contact Us form on the Website, we collect:

• Full name;
• Email address;
• Subject of the enquiry; and
• Message or enquiry details you provide.

The Website currently provides fields for Your Name, Your Email, Subject and Message. Providing this information is voluntary; however, if you do not provide certain information, we may not be able to respond to your enquiry or request.

4.2 Information collected automatically

When you visit the Website, certain technical information is collected automatically through its operation and infrastructure, such as IP address, browser type, device information, date and time of access, pages visited, referring URLs and similar usage information needed for operation, security, performance monitoring and analytics.

4.3 Information about another person

If you give us personal data about another individual, you must have lawful authority to do so and must provide any notice or obtain any consent required by law.

5. How We Use Your Information

We use personal data and technical information collected through the Website to:

• respond to enquiries, requests and communications submitted through the Website;
• communicate with visitors, supporters, volunteers, partners, beneficiaries, donors and other stakeholders about the activities and initiatives of Aarya S Trust;
• understand and address enquiries, feedback and requests received through website;
• provide information about our charitable initiatives, community welfare programmes, healthcare assistance, relief activities, support services and other Trust activities;
• administer, operate, maintain and improve the Website and its functionality;
• monitor Website performance, security and user experience, and conduct analytics and usage analysis;
• maintain appropriate administrative, operational and organisational records.
• performing research, statistical analysis or service improvement using information that has been anonymized or aggregated so that it does not identify an individual.

6. Lawful Grounds and Consent

We process personal data on the basis of consent or another lawful ground available under applicable law, including certain legitimate uses. Depending on the circumstances, processing may be necessary to provide a service requested by the individual or comply with applicable law.

Where consent is used, the request will be presented in clear and plain language and will identify the personal data and purpose. Consent must be free, specific, informed, unconditional, unambiguous, and must be given through a clear affirmative action. Optional purposes, such as promotional communication, optional profile photographs or non-essential analytics, should not be bundled with consent required to provide the core service.

An individual may withdraw consent using the same or a comparably easy method through the website. Withdrawal does not affect processing lawfully performed before withdrawal. Aarya Trust and its processors will cease consent-based processing within a reasonable period unless continued processing is required or authorized by law.

7. Cookies and Similar Technologies

The Website may use essential cookies for authentication, session continuity, security, and user preferences. It may also use cookies, web beacons, pixels, analytics tools, and similar technologies to improve Website functionality and user experience, analyse traffic and usage patterns, measure performance, detect suspicious activity, and troubleshoot technical issues.

You may configure your browser to reject, block or restrict cookies. Disabling certain cookies may affect the availability or functionality of some Website features. Non-essential cookies will be used in accordance with the consent choice you make.

The Website uses third-party technologies, including Google services such as Google Maps and Google Tag Manager, and may use analytics tools and embedded content. These third parties may collect, process or store information under their own privacy policies and terms. We encourage you to review those policies.

8. Sharing and Disclosure

We do not sell, rent or trade personal data collected through the Website. We share personal data only where reasonably necessary for the purposes in this Policy, with:

• authorised trustees, employees, representatives and personnel of Aarya S Trust;
• technology service providers, website hosting providers and website maintenance providers;
• analytics, communication and IT service providers;
• contractors, consultants, auditors and other professional advisers;
• volunteers, implementation partners, charitable organisations or other entities assisting in administering or delivering Trust initiatives, where necessary;
• government authorities, regulatory bodies or law enforcement agencies where required or permitted by law; and
• other persons where disclosure is reasonably necessary to establish, exercise or defend legal rights, respond to legal process, or investigate suspected fraud or unlawful activity.

Where a service provider processes data on our behalf, we take reasonable steps, including contractual measures, to ensure appropriate confidentiality, security and data-protection safeguards. We remain responsible for processing carried out on our behalf by our Data Processors, and access is limited to personnel with a legitimate operational or legal need.

We may also disclose information where necessary to establish, exercise, or defend legal rights, respond to legal processes, investigate suspected fraud or unlawful activity, or comply with applicable legal, regulatory, governmental, or administrative requirements.

We do not disclose personal information to third parties except as described in this Privacy Policy or as otherwise required or permitted by applicable law.

9. Cross-Border Processing

Personal data may be processed outside your state or country where our approved service providers, including providers of Google services, operate. We will comply with any restrictions notified by the Government of India and any other applicable law imposing a higher standard of protection, and will apply appropriate contractual, technical and organisational safeguards.

10. Information Security

We implement reasonable administrative, technical, organisational, and physical safeguards designed to protect personal information and other information processed through the website against unauthorised access, disclosure, alteration, misuse, loss, destruction, or other unauthorised processing.

While we take reasonable steps to safeguard information, no website, internet transmission, electronic communication, or information storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee the absolute security of information transmitted to, though, or stored on the website.

Users should also take appropriate precautions to protect their own information when communicating with us electronically.

11. Personal Data Breach Management

We will investigate, contain, document and remediate any suspected personal data breach. Where required by applicable law, we will notify affected individuals without delay in clear and plain language, and will notify the Data Protection Board of India within the prescribed timelines. Notifications may describe the nature and extent of the breach, its likely consequences, the mitigation measures taken, protective steps you can take and a contact person.

12. Data Accuracy

We take reasonable steps to keep personal data complete, accurate and consistent where it is likely to be used to make a decision affecting you or to be disclosed to another Data Fiduciary. Please give us accurate information and tell us promptly if your contact details change.

13. Data Retention and Erasure

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including:

• responding to enquiries, requests and communications;
• providing requested information or assistance;
• maintaining administrative, operational, financial and organisational records;
• monitoring and improving Website performance and security;
• complying with legal, regulatory, tax, audit, accounting or governmental requirements; and
• establishing, exercising or defending legal rights, and resolving disputes, complaints or investigations.

When the purpose is no longer served, consent is withdrawn, or a valid erasure request is accepted, we will erase or anonymise the relevant personal data and instruct our Data Processors to do the same, unless retention is necessary for the specified purpose or required by law. Backup copies may remain until overwritten in the ordinary backup cycle.

14. Children’s Privacy

Our website is intended for individuals, supporters, volunteers, partners, beneficiaries, donors, and other persons interested in the activities and initiatives of Aarya S Trust. The website is not specifically directed towards children.

We do not knowingly collect personal information from children in a manner that is prohibited by applicable law.

If we become aware that personal information relating to a child has been collected through the website in circumstances where such collection is not permitted, we may take reasonable steps to delete, anonymise, or otherwise appropriately handle such information in accordance with applicable legal requirements.

Any person who believes that a child has provided personal information through the website may contact us using the contact details provided in this Privacy Policy so that appropriate action may be taken.

15. Rights of Data Principals

Subject to applicable law, exemptions and identity verification, you may request:

• a summary of the personal data we process about you and the processing activities;
• the identities of other Data Fiduciaries and Data Processors with whom your personal data has been shared, subject to lawful exceptions;
• correction of inaccurate or misleading personal data;
• completion of incomplete personal data and updating of personal data;
• erasure of personal data that is no longer required, subject to lawful retention;
• withdrawal of consent, where consent is the basis of processing;
• grievance redressal about our processing or the exercise of your rights; and
• nomination of another individual to exercise your rights in the event of your death or incapacity.

We may ask for information reasonably necessary to verify your identity and authority. We will not disclose information that would adversely affect another person’s rights, compromise security or conflict with law.

16. How to Exercise Your Rights

You may submit a request by emailing connectus@aaryatrust.in or writing to the address in Section 18. Please state your request clearly and give enough detail for us to identify the personal data concerned. If we process personal data only on behalf of another organisation, we may forward your request to that organisation or ask you to contact it directly.

17. Duties of Users

When using the Website you must comply with applicable law; must not impersonate another person; must not suppress material information when providing identity or address details; must not submit false or frivolous grievances; and must provide verifiably authentic information when requesting correction or erasure. You must not submit another person’s information without lawful authority.

18. Grievance Redressal and Contact Details

Privacy questions, consent withdrawal requests, security concerns and grievances may be submitted using the contact details below. We will acknowledge and resolve grievances within the period published for its grievance mechanism and within the applicable statutory period, which will not exceed 90 days where the Digital Personal Data Protection Rules apply.

A Data Principal should first use the our grievance mechanism. If the grievance is not resolved satisfactorily after the available redressal process is exhausted, the Data Principal may make a complaint to the Data Protection Board of India in the manner permitted by applicable law.

19. Third-Party Websites and Services

The Website may contain links to or integrations with third-party websites, social media platforms, government websites, service providers, embedded content or other external services. We are not responsible for their privacy practices, security or content. Please review their privacy policies before providing personal data to them.

20. Changes to This Policy

We may update this Policy to reflect changes in Website functionality, data-processing practices, security requirements, applicable law or government policy. The revised Policy will be published on this page and will show its effective date and last-updated date. Where a material change affects the purpose of processing or your rights, we will give appropriate notice through the Website or by email, and will obtain fresh consent where required.

21. Governing Law

This Policy is governed by the laws of India. Any complaint or dispute remains subject to the statutory rights and remedies available under applicable data-protection and other laws. Subject to those mandatory rights and any applicable dispute-resolution provisions, the courts at Mumbai, Maharashtra, India will have jurisdiction.

---