Sigma Education and Welfare Association

1. Introduction

SewaWorld.org ("we," "us," or "our") respects your privacy under India's Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws. This policy explains how we collect, use, disclose, and protect your personal data when you use our website.

2. Data We Collect

• Personal Data: Name, email, phone number, address, payment details (if applicable)
• Non-Personal Data: Browser type, IP address, device information, cookies (see Section 4)
• Sensitive Personal Data (if applicable): Financial data (securely processed via PCI-DSS compliant gateways)

3. How We Use Your Data

We use your data to:

• Provide services (e.g., account creation, transactions)
• Respond to inquiries and improve user experience
• Send updates (with consent) and comply with legal obligations

4. Cookies & Tracking

We use cookies to:

• Analyze traffic via tools like Google Analytics (anonymized data)
• Remember preferences (e.g., login sessions)

You can disable cookies via browser settings.

5. Data Sharing & Disclosure

We share data only:

• With service providers (e.g., payment gateways) under strict confidentiality
• If required by law, courts, or government authorities
• For business transfers (e.g., mergers), with user notification

6. Data Security

• We implement ISO 27001-aligned measures: encryption, firewalls, access controls
• Regular audits and staff training on data protection

7. Data Retention

We retain data only as long as necessary for:

• Service delivery (e.g., order history)
• Legal compliance (e.g., tax records)

Deletion occurs upon request or after 2 years of inactivity.

8. Your Rights Under DPDPA

You have the right to:

• Access, correct, or delete your data
• Withdraw consent (e.g., unsubscribe from emails)
• Grievance redressal (contact our Data Protection Officer)

9. Children's Privacy

We do not knowingly collect data from children under 18. Parents/guardians may contact us to remove unintended data.

10. International Data Transfers

Data is stored in India-based servers. Cross-border transfers (if any) comply with DPDPA safeguards.

11. Updates to Policy

Changes will be notified via email or website banners. Continued use implies consent.