Privacy Policy

Who we are

This website is operated by ATHINARAPU Family Foundation, a community service initiative in Telangana, India ("we", "us"). Contact: see our Contact page. [REVIEW: add the name of the person responsible for data protection questions.]

What we collect and why

We collect only what we need for each purpose:

• Scholarship and support applications: student name and age group; parent or guardian details for students under 18; phone and optional email; location; institution, course and year; the support requested and a short description of need; and documents you choose to upload (such as marks memos and fee receipts). Used only to review, decide on and administer the request. We do not ask for Aadhaar numbers or bank details in the initial application.
• Event registrations: participant name and age, contact details, team details, guardian consent for minors, and an optional, separate photo-publication consent. Used to run the event.
• Volunteer applications: contact details, skills, availability and preferences. Used to review and coordinate volunteering.
• Teacher nominations: teacher and institution details and the nominator's contact details. Used to review the nomination.
• Contact, partnership and support messages: the details you provide, used to reply.
• Online contributions (only if enabled in future): donor name and contact details. Payment details are entered on the payment provider's own pages and are never received or stored by us.

Children's information

Applications and registrations for anyone under 18 require a parent or guardian. Photo-publication consent is always optional and separate from eligibility for any support. We never publish a child's contact details, school records or family circumstances.

Who can see your information

Only authorised members of our team, each with a role that limits what they can see. For example, scholarship documents are visible only to authorised scholarship reviewers and the Super Administrator. We do not sell or share personal information for marketing. [REVIEW: list any service providers, e.g. hosting provider, database provider, email provider, and where they store data.]

How we protect it

Encrypted connections (HTTPS); private storage for documents with time-limited, authorised access; individual staff accounts with role-based permissions; audit logs of important actions; and emails that never contain sensitive applicant details.

How long we keep it

• Declined or withdrawn applications: deleted after the period set by our administrators (default 24 months).
• Supported applications and payment records: kept for the period needed for accounting and reporting (default 7 years). [REVIEW: confirm required retention periods.]
• General messages: default 24 months.

Your choices and rights

You may ask to see, correct or delete your information, or withdraw consent (including photo consent) by contacting us. Withdrawing photo consent removes the photograph from our website. Some records may need to be kept where required by law. [REVIEW: describe the grievance process and response time required under applicable law.]

Cookies

We use only essential cookies: one to remember your language choice, one to keep staff signed in, and a short-lived one while you check an application's status. We do not use advertising or tracking cookies.

Changes

We will update this page if our practices change. Last reviewed: [REVIEW: date].