Privacy Policy

Introduction

Si Asha Foundation ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, interact with our services, or support our mission.

This policy is designed to comply with:

• Constitution of Nepal, Article 28 (Right to Privacy)
• Privacy Act, 2075 (2018)
• Privacy Rules, 2077 (2020)

By using our website and services, you consent to the data practices described in this policy.

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Submit a contact form or inquiry
• Apply for membership (Exclusive or General)
• Make a donation
• Apply to volunteer
• Subscribe to our newsletter
• Register for events or programs

The personal information we collect may include:

• Identity Information: Full name, date of birth
• Contact Information: Email address, phone number, mailing address
• Financial Information: Donation amounts, payment method preferences (we do not store complete payment card details)
• Volunteer Information: Skills, availability, areas of interest
• Communication Data: Messages, inquiries, and feedback you send us

Information Collected Automatically

When you visit our website, we may automatically collect:

• Device Information: IP address, browser type, device type
• Usage Data: Pages visited, time spent on pages, navigation paths
• Technical Data: Cookies, log files, and similar tracking technologies

How We Use Your Information

We use the personal information we collect for the following purposes:

Service Delivery

• Process membership applications and manage member accounts
• Process donations and send donation receipts
• Coordinate volunteer activities and opportunities
• Respond to your inquiries and provide customer support

Communication

• Send updates about our programs, impact, and activities
• Provide information about fundraising campaigns and events
• Send administrative notices and policy updates
• Respond to your questions and requests

Improvement and Analytics

• Analyze website usage to improve user experience
• Understand donor preferences and optimize fundraising efforts
• Evaluate the effectiveness of our programs

Legal Compliance

• Comply with legal obligations and regulatory requirements
• Maintain accurate financial records for auditing purposes
• Respond to legal proceedings and government requests

Legal Basis for Processing

We process your personal information based on:

• Consent: You have given explicit consent for specific processing activities
• Contractual Necessity: Processing is necessary to fulfill membership or donation agreements
• Legal Obligation: Processing is required to comply with Nepal's laws and regulations
• Legitimate Interests: Processing is necessary for our legitimate interests in operating as a non-profit organization, provided it does not override your fundamental rights

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

Service Providers

We may share data with trusted third-party service providers who assist us in operating our website, conducting our business, or serving our users. These providers include:

• Payment Processors: Khalti, eSewa, and banking institutions for donation and membership payment processing
• Email Service Providers: For sending newsletters and communications
• Website Hosting: For website infrastructure and data storage

These service providers are contractually obligated to protect your information and use it only for the specific purposes we authorize.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (court orders, subpoenas)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

Business Transfers

In the event of a merger, acquisition, or transfer of all or a portion of our organization's assets, your personal information may be transferred as part of that transaction.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Data transmission is encrypted using SSL/TLS protocols
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Storage: Data stored in secure, access-controlled databases
• Regular Security Audits: Periodic review of security practices and systems
• Staff Training: Regular training on data protection and privacy

Payment Security: We do not store complete payment card information on our servers. Payment processing is handled by certified third-party payment processors (Khalti, eSewa) that comply with industry security standards.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Retention Periods

• Contact Inquiries: 2 years after last communication
• Membership Records: Duration of membership plus 7 years (for financial auditing)
• Donation Records: 10 years (as required by Nepal tax and audit regulations)
• Volunteer Records: Duration of involvement plus 3 years
• Website Analytics: 26 months

After the retention period expires, we will securely delete or anonymize your personal information.

Your Rights

Under Nepal's Privacy Act and applicable laws, you have the following rights regarding your personal information:

Right to Access

You have the right to request access to the personal information we hold about you.

Right to Correction

You can request that we correct any inaccurate or incomplete personal information.

Right to Deletion

You can request deletion of your personal information, subject to legal obligations requiring us to retain certain records (e.g., financial records for auditing).

Right to Object

You can object to the processing of your personal information for specific purposes, such as direct marketing.

Right to Withdraw Consent

Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing based on consent before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with the relevant data protection authority in Nepal if you believe we have not complied with privacy laws.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in the "Contact Us" section below. We will respond to your request within 30 days.

Cookies and Tracking Technologies

What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and understand how our website is used.

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., form submissions, session management)
• Analytics Cookies: Help us understand how visitors interact with our website
• Functionality Cookies: Remember your preferences and settings

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies
• Delete all cookies when you close your browser

Please note that blocking or deleting cookies may impact your experience on our website and limit functionality.

Third-Party Services

Our website may contain links to third-party websites and services, including:

• Payment processors (Khalti, eSewa)
• Social media platforms
• Partner organizations

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

Note: Information collected about children who benefit from our programs (students, participants) is handled separately with appropriate parental/guardian consent and is subject to additional safeguards not described in this general privacy policy.

International Data Transfers

Your personal information is primarily stored and processed in Nepal. In some cases, data may be transferred to or accessed by service providers in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this policy and applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to registered members and donors
• Displaying a prominent notice on our website

We encourage you to review this policy periodically. Your continued use of our website and services after any changes indicates your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all privacy-related inquiries within 30 days.