Privacy Policy
How Eternal Gift Foundation collects, uses and protects personal data, in line with the Digital Personal Data Protection Act, 2023.
Who we are
Eternal Gift Foundation (“the Foundation”, “we”, “us”) is a registered charitable trust (Registration No. 41082610360) based in Bhubaneswar, Odisha, working on organ donation awareness, patient and family support, and related community programmes. For the personal data described in this notice, the Foundation is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act).
This notice explains what personal data we collect through www.eternalgiftfoundation.org and in our programmes, why we collect it, how long we keep it, who we share it with, and the rights you have.
Address: 1st floor, Plot No. N-5/534, IRC Village, Nayapalli, Bhubaneswar, Odisha 751015
Effective date: 14 September 2026
What this website does not do
- We do not record organ pledges. Official organ and tissue pledges are registered only on the NOTTO portal (notto.mohfw.gov.in), run by the Government of India, under NOTTO’s own privacy terms.
- We do not take online payments or store card, bank or UPI details on this website.
- We do not have user accounts on this website.
- We do not sell or rent personal data, or share it with anyone for their own marketing.
Personal data we collect
| Where | What we collect | How |
|---|---|---|
| Contact, volunteer, host-a-programme, partnership and pledge-enquiry forms | Name, email address, phone number (optional), city or organisation, and your message | The form opens your own email app with the message filled in. Nothing is stored on our website; we receive it only if you send the email to connect@eternalgiftfoundation.org. |
| Member accounts (Become a member / Sign in) | Email address and password, your name and title, the group you belong to, speciality and medical council registration number (doctors), postal address, phone and mobile numbers, website, alternate email, and whether you want updates | Entered by you when you create an account and whenever you update it. Your password is held by Amazon Cognito, which stores it in a scrambled form we cannot read; your other details sit in a private Amazon DynamoDB table. Both are in Amazon Web Services’ Mumbai region, in India. |
| Registration form (Register) | Name, email address, phone number (optional), city (optional), who you are (for example doctor, patient, family member or volunteer), and whether you want updates from us | Sent securely from the form and stored by our website host, Vercel, in private storage located in India (Mumbai). Only the Foundation can access it. |
| Emails and phone calls to us | Your contact details and what you tell us | Directly from you |
| Awareness camps, health camps and events | Name, phone number, age and, for health camps, basic check-up readings (for example blood pressure or blood sugar) | Collected in person, on paper or digitally |
| Patient and family support requests | Contact details, relationship to the patient, and the medical and financial information you choose to share so we can guide you | Directly from you, or a family member acting with the patient’s permission |
| Website usage | Pages visited, approximate location (city/country), device and browser type, how you arrived at the site | Google Analytics and Google Tag Manager, only if you accept analytics cookies (see “Cookies and analytics”) |
Health information such as camp readings, diagnoses or transplant status is sensitive. We collect only what we need to help you, and only with your consent.
Why we use your data
- To reply to your enquiry and keep in touch about it.
- To arrange volunteering, awareness programmes, camps and partnerships.
- To guide patients and families towards the right hospitals, coordinators and support schemes.
- To run health camps and tell participants about their results or any follow-up they should consider.
- To understand how the website is used, in aggregate, so we can improve it.
- To meet legal obligations and keep records required of a registered charitable trust.
We will not use your data for any other purpose without asking you first.
Your consent
We process your personal data on the basis of your consent, which you give when you send us a message, register at a camp or event, or ask for support. Where the law requires us to keep certain records, we process that data to comply with the law.
You can withdraw consent at any time by writing to connect@eternalgiftfoundation.org. We will stop using your data for that purpose and delete it unless we must keep it by law. Withdrawal does not affect anything done before you withdrew.
Children: we do not knowingly collect data from anyone under 18 through this website. Where minors take part in school or college programmes or camps, we collect data only with verifiable consent from a parent or lawful guardian.
How long we keep it
| Data | Kept for |
|---|---|
| Enquiry and contact emails | 2 years after the last message |
| Volunteer and partner records | While you are involved, then 2 years |
| Camp and event registration | 3 years |
| Health camp readings | 3 years, or less if the participant asks |
| Patient and family support records | 5 years after support ends, or as required by law |
| Member accounts and member details | Until you ask us to close the account, or 3 years after you last sign in |
| Registrations | Until you ask us to remove them, or 3 years after our last contact with you |
| Website analytics | 14 months |
We delete or anonymise data once it is no longer needed, unless the law requires us to keep it longer.
How we protect it
- Access is limited to trustees, staff and volunteers who need it for the purpose.
- Email accounts are protected with strong passwords and, where available, two-factor authentication.
- The website is served only over encrypted HTTPS. Registration form entries are kept in private storage only the Foundation can access. Member passwords are never seen or stored by us: Amazon Cognito keeps them, and sign-in uses a session cookie your browser cannot read.
- Paper records from camps are kept securely and destroyed when no longer needed.
If a personal data breach occurs, we will inform the Data Protection Board of India and the people affected, as the DPDP Act requires.
Your rights
- Access: know what personal data we hold about you and how we use it.
- Correction and completion: have inaccurate or incomplete data corrected.
- Erasure: ask us to delete your data when it is no longer needed or you withdraw consent.
- Grievance redressal: raise a complaint and receive a response.
- Nomination: nominate someone to exercise these rights on your behalf in case of death or incapacity.
To use any right, email connect@eternalgiftfoundation.org with the subject “Data request”. We will respond within 30 days.
Grievance Officer
Grievance Officer, Eternal Gift Foundation
Email: connect@eternalgiftfoundation.org
Address: 1st floor, Plot No. N-5/534, IRC Village, Nayapalli, Bhubaneswar, Odisha 751015
We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Changes to this notice
We may update this notice when our work or the law changes. The effective date above will change, and significant changes will be highlighted on the website.