Proposed community initiatives are awaiting foundation verification. Our commitment to accuracy
Rehoboth Foundation

Legal draft

Privacy Policy

A plain-language draft describing how this platform is designed to handle personal information. It requires legal and organisational approval before production use.

Draft for legal review. This language is an operational starting point, not legal advice or an approved policy.

Information we collect

The platform may collect contact information, donation records, volunteer details, enquiries, consent records, and information submitted through private assistance requests. Payment card and UPI authentication secrets are handled by the payment provider and are not stored here.

Why we use it

Information is used to respond to enquiries, review applications, coordinate volunteers, process and reconcile donations, issue eligible receipts, prevent abuse, meet legal duties, and improve service delivery.

Sensitive assistance information

Assistance applications and documents are private. Access is limited to authorised staff for review, safeguarding, verification, and approved delivery. They are never published as campaign content without a separate controlled matching and consent process.

Retention and rights

Final retention periods and the legally responsible data-contact process require approval. The system supports access, correction, consent withdrawal, and deletion or anonymisation where retention law permits.

Service providers and access

Approved hosting, database, email, payment, storage and security providers may process limited information for their contracted purpose. Access should be role-based, logged where sensitive, and removed when no longer required. Personal data must not be sold or exposed in public donor or beneficiary directories.

Cookies, analytics and communication

Essential cookies may maintain language or secure sessions. Optional analytics and communications should respect consent and must not send donor or beneficiary identifiers to advertising platforms. Marketing messages require a lawful, recorded preference and a practical unsubscribe route.

Security and incidents

The platform is designed for validation, encryption in transit, secure sessions, audit logs and restricted document access. No system can promise absolute security. A documented response process should assess, contain, record and notify affected parties or authorities when legally required.