Privacy Policy

• Newsletter signups: your email address, and nothing else. The signup form asks for one thing.
• Contact emails: the message you send us, your email address, and anything you voluntarily share in that message.
• Donations: name, email address, phone number, address and PAN (for 80G receipts and our statutory Form 10BD filing). Payment itself is processed by Cashfree Payments, an RBI-authorised payment aggregator; we do not receive or store your card, UPI, or bank account credentials.
• Standard web logs: IP address, browser type, pages visited, and timestamps, used in aggregate to understand how the site is used and to keep it secure.

• To respond to your message or enquiry.
• To process donations and issue 80G receipts.
• To send programme updates, annual reports, and donor communications you have opted in to.
• To meet legal and tax-compliance obligations under Indian law (80G, audit requirements).
• To improve the website and keep it secure.

We do not sell your data. We share information only with the small number of service providers required to operate the site and the donation flow:

• Cashfree Payments India, the RBI-authorised payment aggregator that processes donations and handles bank reconciliation. Their privacy policy applies to the data they collect at checkout; card and bank credentials never touch our servers.
• Hosting, database, and email service providers used to run the website (Vercel), store donation records securely (Neon), and send receipts and donor communications (Resend).
• Government and regulatory authorities where required by Indian law (income tax, audit).

Donor records are retained for the period required by Indian tax law (currently a minimum of eight financial years). Newsletter and contact-form data is retained until you ask us to delete it.

You have the right to ask us to:

• Tell you what personal data we hold about you.
• Correct anything that is wrong.
• Delete your data, subject to legal retention requirements noted above.
• Unsubscribe from donor or newsletter communications at any time.

Write to partnerships@ayang.org.in with your request. We will respond within 30 days.

The website uses a minimal set of cookies necessary for navigation and to remember your preferences.

We also use Google Analytics to understand how the site is used, so we can see which pages help people find what they came for and where the site is failing them. It sets cookies and records things like the pages you visit, roughly where in the world you are, and whether you arrived from a search engine, a social post, or a direct link. We use it to measure the website, not to build a profile of you: we do not send your name, email address, phone number, PAN, or postal address to Google, and we do not use this data for advertising or share it with advertisers. Google processes it on our behalf under its own privacy policy.

Donation payments are handled by Cashfree on its own pages; what you enter there is covered by Cashfree’s privacy policy and is not visible to our analytics. The featured film is embedded through youtube-nocookie.com, which sets no cookies unless you press play.

You can opt out at any time. Most browsers let you block or delete cookies, and Google publishes a browser add-on that switches Google Analytics off across every site you visit. Blocking analytics cookies does not affect your ability to read the site, contact us, subscribe, or donate.

The Hummingbird School works with children every day, but this website is not intended for use by minors. We do not knowingly collect personal data from anyone under 18 through this site.

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be highlighted on the site or sent to donors and newsletter subscribers.

This Privacy Policy should be read together with our Terms & Conditions. Where the two overlap, the Terms govern the contractual relationship and this policy governs the handling of personal data.