Ambuja Foundation ("Ambuja Foundation", "Company", "we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with applicable laws.
This Privacy Notice outlines our practices in relation to the collection, storage, usage, processing, and disclosure of personal data that you have consented to share with us when you access, use, or otherwise interact with our website or any other digital platforms, portals, or online services operated by us (collectively, the "Platform"). This Notice also describes the rights you have with respect to your personal data.
It may be noted that the website may include links to third-party websites whose privacy practices differ from those of Ambuja Foundation. If you provide data to any of those websites, then your data is governed by their respective privacy statements.
We do collect your personal information and process your personal data in accordance with the Digital Personal Data Protection Act, 2023 and other national and state laws which relate to the processing of personal data.
If you are a visitor from another country, we acknowledge that you may have rights under your local data protection laws (e.g., General Data Protection Rules and California Consumer Privacy Act), and we will make reasonable efforts to respect such rights where applicable.
Definitions and Key Terms
Personal Data: Any data about an individual who is identifiable by or in relation to such data.
Data Principal: The individual to whom the personal data relates and, where such individual is a minor or person with disability, includes their parent or lawful guardian.
Data Fiduciary: Any person who alone or in conjunction with others determines the purpose and means of processing personal data.
Data Processor: Any person who processes personal data on behalf of a Data Fiduciary.
Processing: Any automated operation or set of operations performed on digital personal data, including collection, recording, storage, use, sharing, disclosure, restriction, erasure, or destruction.
Minor: An individual who has not completed eighteen (18) years of age.
Cookies: Small files placed on your device by our website to remember preferences or analyse usage.
Data Grievance Officer: An individual designated to address grievances relating to this Privacy Notice and the processing of personal data.
DPDP Act means Digital Personal Data Protection Act of 2023.
Scope
Ambuja Foundation collects data to operate this website. You can also visit ambujafoundation.org without telling us who you are.
How We Collect the Data:
Information You Provide to Us: We collect personal data when you submit inquiries, contact us through online forms, subscribe to newsletter or download our reports, or otherwise interact with us directly through the Platform or via any email address, hyperlink or social media address posted therein.
Automatic Information We Collect: We collect a standard set of internet related information such as IP address, date and time of access, browser type, operating system, device details, language settings, and pages visited through cookies and similar technologies. This information is used for analytics, security monitoring, and improving website functionality. Cookies are used only after obtaining your consent.
Purpose of Data Collection and Processing
We process your personal data for the purposes specified below:
| S. No. | Purpose / Activity | Data Elements |
|---|---|---|
| i. | To respond to queries, requests, and communications submitted through the Platform. | Name, email address, phone number, query details, postal address. | ii. | To administer, operate, and secure our digital platforms and IT systems. | Technical data, log data, online identifiers. |
| iii. | To analyse website usage and improve content, performance, and user experience. | Usage data, device and browser information. |
| iv. | To comply with statutory, regulatory, contractual, and corporate governance obligations. | Data required under applicable laws and regulations. |
Lawful Basis of Processing
Consent: We process personal data based on your consent for purposes such as responding to requests, enabling digital interactions, and using cookies and analytics.
Legal and Regulatory Obligations: Certain processing is required to comply with obligations under labour laws, corporate laws, tax laws, environmental regulations, and other applicable statutory requirements.
Any changes to data processing purposes will be communicated in advance where required by law.
How we obtain your consent
We obtain your consent through affirmative, opt-in mechanisms at each relevant data collection point on the website. These include:
Tick-box declarations on web forms and contact pages;
Each consent is specific to the purpose for which it is obtained. You may withdraw consent at any time in accordance with Cookie Policy below.
Processing of Data of Children and Persons with Disabilities
We are committed to safeguarding the personal data of children and persons with disabilities.
Where personal data relating to children or persons with disabilities is collected through the website, we obtain verifiable consent from parents or lawful guardians through our consent form and limit processing to what is strictly necessary.
Sharing of Data
We may share personal data with:
Authorized employees, vendors, agents, and professional advisors working on or our behalf for the purpose described in this Privacy Notice
Authorised service providers and vendors supporting IT systems, website hosting, analytics, recruitment, and communication platforms;
HR and Compliance Team for governance, compliance, or operational purposes;
Regulatory authorities, government bodies, or courts, where disclosure is required by law.
Partners like funding partners, program implementation partners, training and assessment partner, impact-assessment, monitoring & evaluation agencies, auditors and professional advisers, government authorities and regulators
All such sharing is subject to appropriate contractual, confidentiality, and data protection safeguards.
Rights of Data Principals
Subject to applicable law, you may have the following rights:
a) Right to access personal data
b) Right to Correction and Erasure
c) Right to grievance redressal
d) Right to nominate another individual to exercise your rights in case of incapacity or death
Requests may be submitted through the designated grievance mechanism or by writing to our grievance officer Ms. Richa Honavar at richa.honavar.ext@ambujafoundation.com
If you are not satisfied with our response, you may approach the Data Protection Board of India, after exhausting our internal grievance redressal mechanism accessible at richa.honavar.ext@ambujafoundation.com
Duties of Data Principals
You are expected to provide accurate and up to date information and exercise your rights responsibly, keeping in mind our legal and operational obligations.
Social Media
We operate official social media channels to share updates and engage with stakeholders.
Users are advised not to share sensitive or confidential personal data on public platforms.
Ambuja Foundation is not responsible for content posted on third party social media platforms unless officially published by authorised representatives.
Data Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.
Our service providers are required to maintain equivalent security standards.
Any suspected data misuse or security incident should be reported to our grievance officer Ms. Richa Honavar at richa.honavar.ext@ambujafoundation.com
Data Retention
Personal data is retained only for as long as necessary to fulfil the stated purposes, comply with legal or regulatory requirements, resolve disputes, or enforce agreements.
Data data is retained only for as long as necessary to fulfil the stated purposes, comply with legal or regulatory requirements, resolve disputes, or enforce agreements.
Cookie Policy
We use cookies and similar tracking technologies on our Platform. Cookies are used only after obtaining your consent (except for strictly necessary cookies).
Breach Notification
In the event of a personal data breach, we will notify affected Data Principals and the Data Protection Board of India in accordance with the DPDP Act and applicable timelines.
How to Contact Us
If you have any questions, concerns, or requests relating to this Privacy Notice or the processing of your personal data, please contact our grievance officer Ms. Richa Honavar at richa.honavar.ext@ambujafoundation.com
Changes in the Privacy Notice
This Privacy Notice may be updated from time to time to reflect changes in law or business practices.
Updated versions will be published on the Platform.
Any material changes will be communicated in accordance with applicable law.
This Notice may be made available in English and other languages listed in the Eighth Schedule to the Constitution of India. In case of any inconsistency, the English version shall prevail.
Last Updated on: 29th September 2026