PRIVACY POLICY

BRAC Global Social Foundation, a not-for-profit organization incorporated in India under the Companies Act, 2013 as a Section 8 Company, acts as the primary controller of personal information collected through its platforms, programs, campaigns, and services.

For privacy-related requests, grievances, compliance concerns, or data protection matters, users may contact the Data Protection & Privacy Office using the contact information provided at the end of this Privacy Policy.

Depending upon the nature of interaction with the Platform, BRAC may collect information including:

Identity Information

Donation & Transaction Information

Fundraising & Campaign Information

Petition & Advocacy Information

Volunteer, Membership & Internship Information

Grant & Assistance Information

Report BRAC Information

SOS Information

Lost & Found Information

Technical & Security Information

Uploaded Content

Zero-Knowledge Payment Principle

BRAC does not store sensitive payment credentials such as:

Such information is processed directly by authorized payment processors, banking institutions, and payment gateway providers.

BRAC may process personal information for purposes including:

Where applicable, BRAC may process personal information on the basis of:

Where required for donation processing, tax benefits, statutory compliance, audits, fraud prevention, accounting obligations, or regulatory requirements, BRAC may collect and process:

Such information may be retained for periods required under applicable laws, audit requirements, taxation obligations, accounting standards, fraud prevention measures, dispute resolution procedures, and regulatory compliance frameworks.

Information relating to refund requests, payment disputes, chargebacks, transaction reversals, and payment-verification procedures may be processed where necessary for fraud prevention, compliance, accounting, audit, legal, or operational purposes.

Where users apply for grants, educational assistance, medical support, welfare programs, emergency assistance, BRAC Forever Fund assistance initiatives, or related support programs, BRAC may collect, process, verify, and retain information necessary to evaluate and administer such applications.

Such information may include:

Information may be reviewed by authorized personnel, compliance teams, verification officers, auditors, advisors, partner organizations, or other authorized parties where reasonably necessary for evaluation, fraud prevention, due diligence, compliance, or lawful program administration.

Submission of information does not guarantee approval, assistance, funding, or support.

Where users participate in the BRAC Forever Fund, BRAC may collect and maintain information relating to supporter participation, contribution history, recognition preferences, donor acknowledgments, supporter categories, appreciation programs, certificates, badges, recognition records, and related activities.

Information displayed publicly through supporter recognition programs may be limited to information voluntarily submitted, publicly approved, or otherwise permitted by applicable policies and privacy preferences.

BRAC reserves the right to limit, modify, remove, anonymize, or discontinue public recognition features where necessary to protect privacy, security, compliance obligations, or operational requirements.

When users participate in petitions, awareness campaigns, public-interest initiatives, advocacy activities, civic engagement programs, or related services, BRAC may process:

Such information may be used to administer petitions, measure participation, improve campaign effectiveness, verify authenticity, prevent abuse, and support lawful advocacy activities.

Public participation indicators may be displayed in accordance with campaign settings, user preferences, and operational requirements.

Where users apply for volunteer opportunities, membership programs, internships, ambassador initiatives, community service programs, educational engagement activities, leadership programs, or related opportunities, BRAC may collect:

Such information may be used for administration, verification, reporting, certification, program management, educational coordination, community engagement, and related organizational purposes.

Where users submit complaints, grievances, concerns, observations, whistleblower disclosures, public-interest reports, corruption reports, safety concerns, anti-drug reports, senior citizen concerns, or related submissions through Report BRAC, BRAC may take reasonable measures to protect confidentiality where appropriate and legally permissible.

Information may be reviewed by authorized personnel for verification, compliance assessment, fraud prevention, safety considerations, investigation support, or lawful reporting purposes.

Disclosure may occur where required by:

Users should avoid submitting unnecessary sensitive information unless directly relevant to the matter being reported.

Where users utilize SOS services, emergency assistance tools, emergency contact systems, location-sharing services, safety mechanisms, or related features, BRAC may process information necessary to facilitate support requests and emergency communications.

Such information may include:

Information submitted through SOS services may be shared with emergency contacts, healthcare providers, authorities, service organizations, or relevant parties where reasonably necessary to address the reported situation, protect safety, prevent harm, or comply with legal obligations.

Where users submit Lost & Found reports, recovery requests, missing person reports, found property reports, ownership claims, intelligence submissions, recovery evidence, or related information, BRAC may collect and process:

To reduce fraud and protect privacy, BRAC may conduct ownership verification procedures before facilitating recovery-related communications.

Personal information may be restricted, anonymized, withheld, or protected where necessary to safeguard users, prevent fraud, protect investigations, or maintain platform integrity.

Recovery-related information may be retained for verification, compliance, dispute resolution, fraud prevention, safety, audit, or lawful operational purposes.

The Platform may provide public directories, government references, institutional information, service links, contact databases, public-benefit resources, informational listings, and related external resources for public convenience.

Users acknowledge that information presented through the India Services Directory may originate from government departments, public authorities, institutions, organizations, service providers, or other external sources.

BRAC does not own, operate, control, administer, supervise, or manage third-party organizations, government departments, institutions, authorities, agencies, schemes, services, or websites referenced through the directory.

Where users access external websites through directory listings or resource links, the collection and processing of information by those external services shall be governed by their respective privacy policies and practices.

BRAC encourages users to review the privacy policies of third-party websites before providing personal information.

The Platform may provide calculators, generators, converters, document utilities, educational tools, productivity resources, informational services, software utilities, and related public-use technologies.

Where technically necessary, BRAC may process limited technical information required to:

Users acknowledge that files, data, content, or information submitted to certain tools may be temporarily processed to provide the requested functionality.

BRAC does not intentionally collect more information than reasonably necessary for the operation of such tools.

To provide a secure, reliable, and efficient user experience, BRAC may utilize cookies, session identifiers, authentication tokens, local storage technologies, security mechanisms, and similar technologies.

These technologies may be used for purposes including:

Certain features of the Platform may not function properly if these technologies are disabled through browser settings.

BRAC does not use such technologies to sell personal information or engage in unauthorized commercial profiling activities.

Users may manage browser-based cookie settings through their devices or browsers. However, disabling essential technologies may affect the availability, security, functionality, or performance of certain Platform features.

By continuing to use the Platform, users acknowledge that essential technical cookies, session technologies, authentication mechanisms, and related functionality technologies may be used where reasonably necessary for security, platform operations, user authentication, fraud prevention, and service delivery.

BRAC does not sell, rent, lease, trade, or commercially distribute personal information.

Information may be shared where reasonably necessary with:

Payment Processors

Technology Service Providers

Professional Advisors

Partner Organizations

Government & Regulatory Authorities

Information may also be disclosed where necessary to:

Any disclosure shall be limited to what is reasonably necessary under the circumstances.

BRAC retains personal information only for as long as reasonably necessary to fulfill operational, legal, compliance, security, audit, fraud-prevention, dispute-resolution, and organizational requirements.

Retention periods may vary depending upon:

Where information is no longer required, BRAC may securely delete, anonymize, archive, or otherwise dispose of such information in accordance with applicable policies and legal requirements.

Certain records may be retained for extended periods where necessary to comply with statutory obligations, protect legitimate interests, prevent fraud, resolve disputes, support investigations, or satisfy legal requirements.

BRAC treats personal information as a significant responsibility and implements commercially reasonable administrative, technical, organizational, and security safeguards designed to protect information against unauthorized access, disclosure, alteration, misuse, destruction, loss, or unlawful processing.

Security measures may include:

Access to personal information is limited to authorized personnel, service providers, advisors, contractors, or representatives who require such access for legitimate operational, compliance, security, administrative, or legal purposes.

While BRAC takes reasonable measures to protect information, no method of transmission, storage, processing, or electronic communication can be guaranteed to be completely secure. Users acknowledge that transmission of information over the internet involves inherent risks.

BRAC primarily operates within India. However, users may access the Platform from jurisdictions outside India.

By accessing or using the Platform from outside India, users acknowledge that personal information may be transferred to, processed within, stored in, or managed from India or other jurisdictions where service providers, technical infrastructure, authorized partners, or operational systems may be located.

Where reasonably applicable, BRAC seeks to implement safeguards designed to protect personal information during such transfers.

Users who do not agree with such transfers should discontinue use of the Platform.

BRAC does not knowingly collect personal information directly from children without appropriate consent, authorization, supervision, or lawful basis where required.

Where participation by minors occurs through educational programs, internships, volunteer initiatives, community-service programs, awareness campaigns, grant applications, welfare initiatives, or related activities, information may be processed through parents, guardians, educational institutions, authorized representatives, or other lawful mechanisms.

If BRAC becomes aware that information has been collected in a manner inconsistent with applicable legal requirements, reasonable steps may be taken to review, restrict, delete, or otherwise address such information as appropriate.

Parents, guardians, or authorized representatives who believe information relating to a child has been improperly submitted may contact the Privacy Office.

In the event of a suspected, actual, or reasonably identified security incident, unauthorized access event, data breach, cyber incident, information disclosure event, or related security concern, BRAC may take reasonable steps to:

Where required by applicable law, regulatory requirements, or competent authorities, BRAC may notify affected individuals, regulators, law enforcement agencies, or other relevant parties.

The Organization reserves the right to determine the scope, timing, method, and content of any notification in accordance with applicable legal requirements and operational circumstances.

BRAC reserves the right to modify, revise, amend, replace, supplement, update, suspend, or otherwise alter this Privacy Policy at any time.

Updates may be introduced to reflect:

Updated versions shall become effective upon publication unless otherwise specified.

Continued use of the Platform following publication of revised policies constitutes acknowledgment and acceptance of such updates.

Users are encouraged to review this Privacy Policy periodically.