What we collect, why we need it, and how to get it back

1. Who we are

Hope Foundation is a fictional education nonprofit created for a Salesforce demonstration. In the story this demo tells, it works in Mumbai on girls’ education, digital literacy, and scholarships and school kits, and it is the data fiduciary for the details you enter here — the one who decides what is collected and why, and who answers for it.

Everything below describes how a nonprofit of this kind ought to handle your details, and how this demonstration actually behaves. Where the two differ, we say so.

2. What we collect, and when

Only what the form in front of you asks for. There is no hidden field, no profiling, and nothing is collected while you are simply reading.

About your PAN. It is optional everywhere on this site. We ask for it only because a donation receipt claiming deduction under Section 80G may need it, and we use it for nothing else. If you leave it blank the gift is recorded exactly the same way.

3. Why we need it

Four reasons, and no others:

• To do the thing you asked for — record a gift, issue its receipt, roster you onto a shift, answer your enquiry, send the newsletter.
• To reach you about that thing: a coordinator confirming a session, or a note about the campaign you supported.
• To keep our own books straight, so the funds and expense figures published on the transparency page are the real ones.
• To send you marketing — but only if you ticked the separate box that says so, and never as a condition of anything else.

We do not build profiles, score you, sell lists, run advertising audiences, or use your details to train anything.

4. Our lawful basis

Under the Digital Personal Data Protection Act, 2023, personal data is processed on the basis of consent, or for certain legitimate uses the Act sets out.

Almost everything here runs on your consent: you gave it by ticking the box on the form before you submitted it, after being told what the details would be used for. That tick, its date and the form it was given on are stored alongside the record.

Where a donation receipt has to be issued and kept so that it can be produced later, we also rely on the legal obligation that applies to receipts and financial records. That is the one part you cannot withdraw consent from without us also having to delete the gift record itself.

5. Consent, and taking it back

Consent is asked for once, in plain words, next to the thing it covers. Marketing consent is always a separate tick from the consent needed to process your request, so saying no to one never blocks the other.

You can withdraw consent at any time, for any of it, and you do not have to give a reason. Write to the mailbox in section 13. Withdrawing is as easy as giving: one message, no form to fill in, no phone call required.

Withdrawing consent stops future processing. It does not undo what was already done lawfully — a receipt already issued stays issued.

6. How long we keep it

Until it has done its job, and then not a day longer.

On this demo site, none of that applies for long. Everything you type here goes into a Salesforce sandbox that can be refreshed or wiped at any time, without notice and without a backup. Treat anything you enter as temporary.

7. Where it is stored

In a Salesforce sandbox — a non-production copy of an org, used to demonstrate how a nonprofit could run its donations, volunteering and partnerships. Your details arrive there as a Lead record, either through this site’s own interface or, if scripts are switched off in your browser, through Salesforce Web-to-Lead.

Access is limited to the people running the demonstration. There is no export to a marketing tool, no sync to an advertising platform and no copy on anybody’s laptop.

Because it is a sandbox rather than a production system, it does not carry the availability, backup or recovery guarantees a real donor database would. That is the honest reason for the warning at the top of this page.

8. Who else sees it

We never sell your details, and we never rent, swap or share them for anyone else’s marketing. Not to another charity, not to a fundraising agency, not to a data broker.

In the story this demo tells, details would be seen only by: the staff who need them to do the thing you asked for; Salesforce, as the platform the records sit in; and anyone we are legally required to disclose to, such as a court or a tax authority — and then only the part that is actually demanded.

On this demonstration site, nothing is sent anywhere else at all.

9. Your rights

These are yours, free of charge, and asking is never held against you.

Access

Ask what we hold about you and what we have done with it, and get it in a form you can read.

Correction and completion

Ask us to fix anything wrong, fill in anything missing and bring anything out of date up to date.

Erasure

Ask us to delete what we hold, unless the law requires us to keep a specific record such as a receipt — in which case we tell you exactly what is staying and why.

Withdraw consent

Take back a consent you gave, at any time, without giving a reason. See section 5.

Nominate someone

Name another person to exercise these rights on your behalf if you die or are unable to act for yourself.

Grievance redressal

Complain to us first and get an answer within thirty days. If you are not satisfied with it, you may take the matter to the Data Protection Board of India.

10. Cookies and tracking

This site sets no cookies. It stores nothing in your browser, runs no analytics, loads no fonts or scripts from anyone else’s server, and carries no advertising or social media pixels. There is no consent banner on this page because there is nothing to consent to.

The only network requests the site makes are to its own address, to fetch the figures shown on the campaign, programme and transparency pages.

11. Children’s details

The forms on this site are for adults. We do not knowingly collect details from anyone under 18 through this website, and we do not ask children to fill anything in here.

The children in our programmes are enrolled in person, through their school or their family, with a parent or guardian’s written consent — never through a web form. Their records never appear on this website, and the stories published here are illustrative, written for the demonstration rather than taken from a real child.

12. Changes to this notice

If this notice changes, the date at the top changes with it and the new version replaces this one on this page. If a change means we would use details we already hold for something materially different, we ask for consent again rather than assuming the old one still covers it.

13. Contact and grievances

Write to the Grievance Officer with anything at all — a question, a correction, a deletion request, or a complaint about how your details were handled.

Hope Foundation is a fictional organisation and this notice is written for a demonstration. It is a genuine attempt at what a DPDP-compliant notice should say, not legal advice, and it is not a contract with anybody.