Privacy Notice

Community Health Education Society (CHES) is the Data Fiduciary for personal data that we decide to collect and use through this website. CHES is based in Chennai, Tamil Nadu, India.

For privacy questions, requests, withdrawals of consent, or complaints to CHES, contact the authorised privacy contact at admin@cheschennai.com or write to Sakthi Illam, 21/8, 5th Cross Street, United India Colony, Kodambakkam, Chennai - 600 024.

Depending on what you choose to do, we may process:

• Your name, email address, Indian mobile number and postal address when you use the online donation form.
• Your donation amount, donation reference, payment status and payment receipt details that you choose to send to us.
• Your PAN only when you choose to provide it or when it is required for a tax receipt or other lawful compliance purpose. PAN is not required for every donation.
• Your consent record, including the privacy notice version and time at which you accepted the donation notice.
• A random first-party visitor identifier stored in an HttpOnly cookie for up to twelve months, used only to prevent the public homepage counter from counting the same browser or device repeatedly.
• Limited technical information needed to deliver and protect the website, such as request time, device or browser information and security logs maintained by our hosting or infrastructure providers.

We do not collect card numbers, UPI PINs, bank login credentials or Aadhaar numbers through this website. Please do not email Aadhaar or other identity documents to CHES.

We use the listed information only for specific purposes:

• To record and reconcile a donation and create a donation reference.
• To acknowledge a donation and issue receipts or tax documentation where applicable.
• To prevent duplicate submissions, fraud and misuse of the donation flow.
• To answer your programme, partnership, donation or privacy enquiry when you contact us.
• To count approximate unique homepage visitors without using the counter for advertising, profiling or identity recognition.
• To meet applicable tax, accounting, audit, legal and regulatory obligations.
• To maintain the security, availability and integrity of our website and systems.

We do not sell personal data and we do not use it for behavioural advertising. The visitor counter uses only a random first-party cookie, does not read local storage, does not collect IP addresses or user-agent details for the counter, and does not identify a human being. Different browsers or devices are counted separately; clearing cookies may cause a browser to be counted again.

Before an online donation record is created, the donor must actively accept the donation-specific notice on the form. You may refuse consent, but CHES will then be unable to create or process that online donation record.

You may withdraw consent or ask us to stop a consent-based use at any time by emailing admin@cheschennai.com with the subject “DPDP data request”. Withdrawal does not undo processing already completed lawfully and does not require CHES to delete information that we must retain for tax, accounting, audit, legal or fraud-prevention purposes.

Access is limited to authorised CHES personnel and service providers who need the information for the purposes above, such as hosting, database, security, payment or professional compliance services. They may process the data only for authorised services and must apply appropriate confidentiality and security controls.

The donation page does not take payment credentials. When you pay through a bank or UPI app, that payment is handled by your bank or payment provider under its own notice. If a service provider processes data outside India, CHES will apply the safeguards and restrictions required by applicable law.

We keep personal data only for as long as it is needed for the purpose for which it was collected and for applicable tax, accounting, audit, legal, fraud-prevention or dispute-resolution requirements. When it is no longer required, we delete it or irreversibly anonymise it through our operational retention process. A deletion request may therefore be limited where a legal or compliance record must be retained.

The anonymous visitor cookie expires after twelve months. The matching visitor record stores only the random identifier and first/last seen timestamps for the homepage counter. The in-progress donation flow may use short-lived browser session storage only to prevent accidental duplicate submissions. It is not used for advertising or profiling.

Subject to applicable law and reasonable identity verification, you may ask CHES to:

• Confirm whether we process your personal data and provide a summary or copy.
• Correct, complete or update inaccurate or incomplete information.
• Erase personal data when the purpose is no longer served or retention is not legally required.
• Withdraw consent for consent-based processing.
• Provide information about how your data is being used or shared for the purposes stated here.
• Recognise a nominee to exercise your rights where permitted by law.

Send your request to admin@cheschennai.com. Include your name, the email or donation reference connected with the request, the right you want to exercise, and any correction needed. Do not send PAN, Aadhaar or other identity documents by ordinary email unless CHES first gives you a verified secure method. CHES will acknowledge requests as soon as reasonably practicable and handle them within the period required by applicable law, which the DPDP Rules describe as up to ninety days for rights requests.

For an internal privacy grievance, email admin@cheschennai.com with “Privacy grievance” in the subject. We will investigate, keep you informed where appropriate, and provide a response through the contact details you give us.

If a personal data breach is likely to affect you, CHES will take steps to contain and remedy it and notify affected individuals without delay where required. A breach message will explain what happened, the likely impact, steps taken, and how to get help.

If you remain dissatisfied after using the CHES process, you may approach the Data Protection Board of India through the official information published by the Ministry of Electronics and Information Technology at meity.gov.in/data-protection-board-of-india.

CHES works with children, but this website is not designed for children to submit personal data independently. Where CHES processes a child’s personal data in its programmes or publishes a photograph or story, it follows its safeguarding and permission processes and applies the additional protections required for children. Please do not submit a child’s name, health information, HIV status, photograph or case details through a public form or email unless CHES has specifically requested it through a verified channel.

CHES uses server-side validation, access controls, secure transmission, restricted administrator access, HTTP-only administrator sessions, and limited data access for the donation system. No internet transmission or storage system can be guaranteed to be completely secure, so please share only information that is necessary.

We may update this notice when our processing, services or legal obligations change. The current version and effective date will always be published on this page. Material changes will be highlighted where appropriate.