Privacy Policy

• Newsletter signups: your name and email address.
• Contact emails: the message you send us, your email address, and anything you voluntarily share in that message.
• Donations: name, email address, phone number, address and PAN (for 80G receipts and our statutory Form 10BD filing). Payment itself is processed by Cashfree Payments, an RBI-authorised payment aggregator; we do not receive or store your card, UPI, or bank account credentials.
• Standard web logs: IP address, browser type, pages visited, and timestamps, used in aggregate to understand how the site is used and to keep it secure.

• To respond to your message or enquiry.
• To process donations and issue 80G receipts.
• To send programme updates, annual reports, and donor communications you have opted in to.
• To meet legal and tax-compliance obligations under Indian law (80G, audit requirements).
• To improve the website and keep it secure.

We do not sell your data. We share information only with the small number of service providers required to operate the site and the donation flow:

• Cashfree Payments India, the RBI-authorised payment aggregator that processes donations and handles bank reconciliation. Their privacy policy applies to the data they collect at checkout; card and bank credentials never touch our servers.
• Hosting, database, and email service providers used to run the website (Vercel), store donation records securely (Neon), and send receipts and donor communications (Resend).
• Government and regulatory authorities where required by Indian law (income tax, audit).

Donor records are retained for the period required by Indian tax law (currently a minimum of eight financial years). Newsletter and contact-form data is retained until you ask us to delete it.

You have the right to ask us to:

• Tell you what personal data we hold about you.
• Correct anything that is wrong.
• Delete your data, subject to legal retention requirements noted above.
• Unsubscribe from donor or newsletter communications at any time.

Write to partnerships@ayang.org.in with your request. We will respond within 30 days.

The website uses a minimal set of cookies necessary for navigation and to remember your preferences. We may add privacy-respecting analytics in the future; if we do, we will update this policy and surface a notice on the site.

The Hummingbird School works with children every day, but this website is not intended for use by minors. We do not knowingly collect personal data from anyone under 18 through this site.

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be highlighted on the site or sent to donors and newsletter subscribers.

This Privacy Policy should be read together with our Terms & Conditions. Where the two overlap, the Terms govern the contractual relationship and this policy governs the handling of personal data.