Privacy Policy

This privacy policy outlines how the Fight Against Diabetes movement platform collects, uses, and protects personal information in compliance with the Digital Personal Data Protection (DPDP) Act, 2023.

1. Data We Collect

We collect personal information that you voluntarily provide when registering for events, submitting pledges, applying as a partner, or submitting stories. This may include: name, phone number, email address, city, age group, and area of interest. For health camps, we may also collect clinical data (BMI, blood glucose, HbA1c) with your explicit consent.

2. How We Use Your Data

• To register you for events and send confirmation communications
• To display your pledge on the Pledge Wall (after moderation)
• To process partner/doctor applications
• To generate aggregated, anonymized impact statistics
• To send event notifications (only if opted in)
• To provide clinical screening results and follow-up care

3. Consent

We collect data only with your explicit consent. Consent checkboxes are never pre-checked. You may withdraw consent at any time by submitting a Data Subject Request using the form below or by contacting us.

4. Data Storage & Security

All data is stored on secure servers within India with encryption at rest and in transit. Access to personal data is restricted to authorized personnel only through role-based access controls. All administrative actions are recorded in tamper-evident audit logs with SHA-256 hash chain integrity.

5. Your Rights Under DPDP Act

Under the DPDP Act, you have the right to:

• Right to Access — Request a copy of all personal data we hold about you (processed within 72 hours)
• Right to Correction — Request correction of inaccurate or incomplete data (processed within 7 days)
• Right to Erasure — Request deletion/anonymization of your personal data (processed within 30 days)
• Right to Data Portability — Export your data in a machine-readable format (JSON)

To exercise these rights, use the Data Subject Request form below. Your identity will be verified before processing.

6. Data Sharing

We do not sell or rent your personal data. Health-related data is shared with partner healthcare providers only with your explicit consent. We do not transfer data outside India.

7. Cookie Policy

We use essential cookies required for the platform to function. With your consent, we may use analytics cookies (Google Analytics) to understand usage patterns and improve the platform. You can manage your cookie preferences using the cookie banner displayed on your first visit.

• Essential Cookies — Required for authentication, security, and basic functionality. Cannot be disabled.
• Analytics Cookies — Optional. Used only with your explicit consent to improve our services.

8. Data Retention

Personal data is retained only as long as necessary for the purpose it was collected. Upon erasure, data is anonymized — aggregate statistics (without personal identifiers) are retained for public health research. Consent records are retained as required by law.

9. Contact

For privacy-related queries, contact: [email protected]