Privacy Policy

1. Introduction

This policy outlines the data safety and security protocols for Gyan Elevate Education India Foundation, a non-governmental organization dedicated to promoting education for all. The organization recognizes the importance of safeguarding the personal and sensitive data of its beneficiaries, donors, volunteers, employees, and partners. This policy ensures that all data is handled responsibly, securely, and in compliance with applicable laws and regulations.

 

2. Purpose

The purpose of this policy is to:

• Protect the confidentiality, integrity, and availability of data.

• Prevent unauthorized access, disclosure, alteration, or destruction of data.

• Ensure compliance with relevant legal and regulatory requirements.

• Foster a culture of security awareness within the organization.

 

3. Scope

This policy applies to all data collected, stored, processed, and transmitted by Gyan Elevate Education India Foundation, including but not limited to:

• Personal data of beneficiaries, donors, volunteers, and employees.

• Financial and transactional data.

• Programmatic data related to educational activities.

• Any other sensitive or confidential information.

 

4. Data Collection and Use

• Data will be collected only for specific, legitimate purposes related to the organization’s educational initiatives.

• Personal data will be processed fairly, transparently, and in accordance with the individual's consent.

• Data will be used strictly for the purpose for which it was collected, unless consent for additional uses is obtained.

 

5. Data Access and Sharing

• Access to data is restricted to authorized personnel who require it to perform their duties.

• Data will not be shared with third parties unless required by law or with explicit consent from the data subject.

• Third-party service providers handling data on behalf of Gyan Elevate Education India Foundation must comply with the organization’s data security standards.

 

6. Data Storage and Retention

• Data will be stored securely, using encryption and other appropriate security measures.

• Physical and digital data storage will be protected against unauthorized access, damage, or loss.

• Data will be retained only as long as necessary for the purposes for which it was collected, or as required by law.

 

7. Data Security Measures

• The organization will implement robust security measures, including but not limited to:

  • Firewalls and intrusion detection systems.

  • Regular security audits and vulnerability assessments.

  • Secure communication channels (e.g., encrypted emails).

  • Access controls and authentication mechanisms.

• All employees and volunteers will be trained on data security best practices.

 

8. Data Breach Response

• In the event of a data breach, Gyan Elevate Education India Foundation will:

  • Immediately contain and mitigate the breach.

  • Notify affected individuals and relevant authorities as required by law.

  • Conduct a thorough investigation and implement corrective actions to prevent future breaches.

 

9. Compliance and Monitoring

• Gyan Elevate Education India Foundation will regularly review and update this policy to ensure compliance with applicable laws and best practices.

• The organization will conduct regular audits to monitor adherence to this policy.

• Any violations of this policy will be taken seriously and may result in disciplinary action.

 

10. Responsibilities

• Data Protection Officer (DPO): The DPO is responsible for overseeing the implementation of this policy and ensuring compliance with data protection regulations.

• Employees and Volunteers: All staff and volunteers are responsible for adhering to this policy and reporting any security incidents or vulnerabilities.

 

11. Review and Amendments

• This policy will be reviewed annually or as needed to address emerging risks or changes in legal requirements.

• Any amendments to this policy will be communicated to all stakeholders.

 

12. Conclusion

Gyan Elevate Education India Foundation is committed to protecting the data of all individuals and entities it interacts with. By following this policy, the organization ensures that data is handled with the utmost care and responsibility, contributing to the trust and confidence of its beneficiaries and partners.