Privacy Policy
How we collect, use, and protect your information
Last updated: 1 January 2025
1. Introduction
Mandir Mahasangh ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.mandirmahasangh.org or use our services. This policy is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable data protection laws of India.
2. Information We Collect
We may collect the following types of information:
2.1 Personal Data You Provide
- Membership registration: Name, email address, phone number, state, city, role (trustee/priest/devotee/volunteer)
- Temple registration: Temple name, location, deity information, trust registration number, contact details, property information
- Contact form submissions: Name, email, phone number, subject, message content
- Event registrations: Name, contact details, organizational affiliation
- Newsletter subscriptions: Email address
2.2 Automatically Collected Data
- Usage data: Pages visited, time spent on pages, click patterns, referring website
- Device information: Browser type, operating system, screen resolution, device type
- Location data: Approximate geographic location based on IP address (country/state level only)
- Cookies and similar technologies: Session identifiers, preference settings (see Cookie Policy below)
3. How We Use Your Information
We use your personal data for the following purposes:
- Processing membership and temple registration applications
- Responding to your inquiries and contact form submissions
- Sending event invitations, newsletters, and organizational updates (with your consent)
- Maintaining and improving our Digital Temple Directory
- Facilitating legal aid and property documentation services for member temples
- Generating anonymized, aggregated statistics about temple distribution, challenges, and trends
- Complying with legal obligations and protecting our legitimate organizational interests
4. Legal Basis for Processing (DPDP Act Compliance)
Under the Digital Personal Data Protection Act, 2023, we process your personal data based on the following lawful grounds:
- Consent: When you voluntarily provide information through our forms, you consent to its processing for the stated purposes. You may withdraw consent at any time.
- Legitimate use: Processing necessary to fulfill our obligations as a temple-trust federation, including membership administration and temple registration.
- Legal obligation: Where required to comply with applicable Indian laws and regulations.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your data in limited circumstances:
- State chapters: Relevant membership data may be shared with your respective state chapter for coordination purposes
- Service providers: Trusted third-party services (website hosting, email delivery) that process data on our behalf under strict contractual terms
- Legal requirements: When required by law, court order, or government authority
- Temple Directory: Temple information you voluntarily submit for the Digital Temple Directory will be publicly visible; personal contact details of trustees are kept private unless explicitly authorized
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure data storage, access controls, and regular security assessments. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Membership records are retained for the duration of your membership and for a reasonable period afterward. Contact form submissions are retained for up to two years. You may request deletion of your data at any time (see Your Rights below).
8. Cookie Policy
Our website uses cookies and similar technologies for the following purposes:
- Essential cookies: Required for basic website functionality (session management, security)
- Preference cookies: Remember your settings such as language and display preferences
- Analytics cookies: Help us understand how visitors use our website so we can improve the user experience
You can control cookie preferences through your browser settings. Disabling cookies may affect some website functionality.
9. Your Rights
Under the DPDP Act and applicable data protection laws, you have the following rights:
- Right to access: Request a summary of your personal data that we hold
- Right to correction: Request correction of inaccurate or incomplete personal data
- Right to erasure: Request deletion of your personal data, subject to legal retention requirements
- Right to withdraw consent: Withdraw your consent for data processing at any time
- Right to grievance redressal: Lodge a complaint with the Data Protection Board of India
- Right to nominate: Nominate another individual to exercise your data rights in case of your death or incapacity
10. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a child, we will take steps to delete such information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us for Data Requests
If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your personal data is handled, please contact us:
- Email: info@mandirmahasangh.org
- Subject line: "Privacy Request" or "Data Rights Request"
- Response time: We aim to respond to all privacy-related requests within 30 days