Privacy Policy

Effective Date: 08 October 2026
Last Updated: 08 October 2026

 

Spriha Society ("Spriha Society", "we", "us", or "our") respects your privacy and is committed to protecting personal data entrusted to us.

​

This Privacy Policy explains how Spriha Society collects, uses, stores, shares and protects personal data when you visit or use www.sprihasociety.org and related pages, forms, services, programmes and communications (collectively, the "Website").

​

This Privacy Policy is intended to operate in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), to the extent applicable and as and when their respective provisions come into force, together with other applicable laws and regulations.

The DPDP framework requires organisations processing digital personal data to provide clear information about the data collected and the purposes for which it is processed. 

​

By using the Website, submitting information to us, registering for a programme, volunteering, applying for an opportunity, contacting us, or otherwise voluntarily providing personal data to us, you acknowledge this Privacy Policy.

Where consent is required by applicable law, we will seek consent appropriately before processing personal data on that basis.

​

1. WHO WE ARE

Spriha Society is a non-profit organisation working in areas including menstrual health education, menstrual hygiene awareness, gender awareness, inclusion, education, community engagement and related social-impact initiatives.

For purposes of applicable data-protection law, Spriha Society may act as the Data Fiduciary in relation to personal data that we determine the purposes and means of processing.

​

Our contact details

​

Organisation: Spriha Society
Website: www.sprihasociety.org
Email: societyspriha@gmail.com

Postal Address: 44A, Baburam Ghosh Rd, Ashok Nagar, Tollygunge, Kolkata, West Bengal 700040

​

Privacy / Grievance Contact

For privacy-related requests, complaints or questions:

Email: societyspriha@gmail.com
Contact Person: Rishav Das

​

Do not publish a person's personal email address here unless the organisation has authorised that person to act as the privacy/grievance contact.

​

2. WHAT PERSONAL DATA DO WE COLLECT?

We collect only personal data that is reasonably necessary for a specific purpose.

Depending on how you interact with Spriha Society, this may include:

​

A. General enquiries

When you contact us through a contact form, email or other communication channel, we may collect:

• Name

• Email address

• Telephone/mobile number

• Message or enquiry

• Information voluntarily included in your communication

​​

B. Donations

Where you choose to donate, we may collect information necessary to identify, acknowledge, record or provide a receipt for the donation, including where applicable:

• Name

• Email address

• Telephone number

• Postal address

• PAN, where required for applicable tax or statutory purposes

• Donation amount

• Transaction/reference number such as UTR

• Payment confirmation or transaction details voluntarily provided to us

​​

We do not request or intentionally store your UPI PIN, card PIN, internet-banking password, CVV, OTP or other authentication credentials.

​

Where payment processing is performed by a bank, payment gateway, UPI provider or other third-party payment service, that provider may independently process payment-related information under its own privacy policy and terms.

You should never send your UPI PIN, OTP, password, CVV or banking credentials to Spriha Society.

​

3. PROGRAMME, COURSE AND EVENT REGISTRATION

If you register for a course, workshop, event, awareness programme or other activity, we may collect information such as:

• Full name

• Email address

• Phone number

• Postal/contact address

• Educational or professional information where relevant

• Programme/course selected

• Registration details

• Information necessary to administer participation

We use this information to:

• process registrations;

• communicate programme details;

• provide confirmations and updates;

• administer attendance;

• issue certificates where applicable;

• organise programme activities; and

• maintain appropriate programme records.

We will not collect information unrelated to the programme simply because it is available.

​

4. VOLUNTEERING, INTERNSHIPS AND RECRUITMENT

If you apply to volunteer, intern, work with, speak for, or otherwise collaborate with Spriha Society, we may collect:

• Name

• Email address

• Telephone number

• Educational qualifications

• Professional experience

• Resume/CV

• Portfolio

• Relevant skills

• Availability

• Information included in your application or communication

We use this information to evaluate and manage applications, communicate with applicants, and administer volunteering, internship, speaker or other opportunities.

​

Applicants should not submit unnecessary sensitive or confidential information that is unrelated to the application.

​

5. INFORMATION YOU CHOOSE TO PROVIDE

You may choose to provide additional information when communicating with us.

Please consider carefully what information you include in:

• enquiry forms;

• applications;

• emails;

• feedback;

• testimonials;

• photographs;

• stories;

• event submissions; or

• other communications.

We request that you do not submit passwords, financial credentials, government authentication credentials, medical records or other highly sensitive information unless specifically requested by Spriha Society for a lawful and necessary purpose.

​

6. INFORMATION COLLECTED AUTOMATICALLY

When you visit our Website, certain technical information may be collected automatically by the Website, hosting provider, security tools, analytics tools or similar technologies.

​

Depending on the services enabled on the Website, this may include:

• IP address;

• browser and device information;

• operating system;

• approximate location derived from technical information;

• pages visited;

• date and time of access;

• referring website;

• interaction information;

• session information;

• technical logs; and

• information relating to Website performance and security

We use such information where necessary to:

• operate the Website;

• maintain security;

• detect and prevent misuse;

• troubleshoot technical problems;

• understand Website performance;

• improve our services; and

• generate aggregated or statistical information.

We will not describe technical information as "non-personal" merely because it is generally collected automatically. Where information can reasonably be associated with an identifiable individual, we will treat it as personal data where applicable.

​

7. COOKIES AND SIMILAR TECHNOLOGIES

The Website may use cookies and similar technologies.

Cookies may be used for purposes such as:

• essential Website functionality;

• security;

• remembering preferences;

• understanding Website usage;

• measuring performance;

• improving the user experience; and

• analytics, where enabled.

Some cookies may be placed by third-party service providers whose services are integrated into our Website.

Where applicable law requires consent for a particular category of cookie or similar technology, we will seek the required consent.

​

You may also control cookies through your browser settings. Disabling certain cookies may affect some Website functionality.

​

Important

​

Spriha Society will not intentionally use cookies or similar technologies to unlawfully track individuals or create behavioural profiles.

​

If analytics, advertising, social-media plugins, embedded content or other tracking technologies are introduced in the future, we will review their privacy implications and update this Privacy Policy and consent mechanisms where required.

​

8. WHY DO WE USE YOUR PERSONAL DATA?

We may process personal data for the following purposes:

1. Responding to enquiries and communications.

2. Processing programme, course and event registrations.

3. Managing volunteers, interns, applicants and collaborators.

4. Administering donations and issuing applicable donation acknowledgements or statutory receipts.

5. Maintaining financial, accounting and statutory records.

6. Communicating programme-related information.

7. Sending newsletters or impact updates where you have opted in or where otherwise permitted by applicable law.

8. Managing our activities and programmes.

9. Improving our Website and digital services.

10. Maintaining Website security.

11. Detecting, preventing and investigating fraud, abuse or security incidents.

12. Complying with applicable legal, regulatory, accounting and tax requirements.

13. Establishing, exercising or defending legal claims.

14. Protecting the rights, safety and property of Spriha Society, our users, volunteers, beneficiaries and other persons.

15. Other purposes specifically disclosed to you at or before the time your personal data is collected.

We will not use personal data for a materially different purpose without an appropriate lawful basis or notice where required by applicable law.

​

9. CONSENT

Where consent is the basis for processing your personal data, Spriha Society will seek consent in a manner that is clear and understandable.

​

Where required by law, consent will be:

• informed;

• specific;

• freely given;

• capable of being withdrawn; and

• appropriately recorded.

The DPDP Act places responsibility on the Data Fiduciary to establish that appropriate notice was provided, and consent was obtained where consent is the basis for processing.

​

Withdrawal of consent

​

Where processing is based on consent, you may withdraw that consent by contacting us using the details provided in this Privacy Policy or through the mechanism made available for that particular service.

Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Withdrawal may also mean that we cannot continue providing a particular service or programme where the relevant information is necessary for that service.

​

10. DATA MINIMISATION

Spriha Society will seek to collect personal data that is reasonably necessary for the relevant purpose.

We do not intend to collect personal information merely because it may be useful in the future.

Where a form requests information, the form should identify the information that is necessary for the stated purpose and avoid unnecessary fields.

​

11. CHILDREN'S PERSONAL DATA

Spriha Society conducts programmes and educational activities that may involve children and young persons.

For purposes of the DPDP Act, a child is an individual who has not completed eighteen years of age.

Where processing of a child's personal data is subject to the applicable child-data provisions of the DPDP Act and Rules, Spriha Society will obtain and manage the required verifiable parental or lawful-gateway consent and apply the safeguards required by applicable law. The DPDP Act specifically addresses processing relating to children, including restrictions concerning tracking, behavioural monitoring and targeted advertising. MeitY

We will not knowingly use children's personal data for:

• targeted advertising;

• behavioural monitoring; or

• tracking activities prohibited by applicable law.

​​

Photographs and videos

Because Spriha Society conducts workshops, awareness programmes and public activities, photographs or videos may sometimes be taken.

​

We will implement appropriate consent/permission procedures where required, particularly when identifiable children are involved.

​

Parents, guardians, schools or authorised representatives may contact us regarding the use of identifiable photographs or other personal information involving children.

​

We will not publish a child's full name, contact information, address or other unnecessary identifying information alongside an image unless there is an appropriate lawful basis and permission/consent where required.

​

12. MENSTRUAL HEALTH AND OTHER SENSITIVE INFORMATION

Spriha Society works in the field of menstrual health, gender awareness and social inclusion.

We recognise that information shared with us in connection with these activities may sometimes be personal or sensitive in nature.

​

We do not require individuals to disclose medical or intimate information merely to participate in general awareness activities.

​

Where sensitive or health-related information is voluntarily provided, we will handle it with appropriate care and use it only for the purpose for which it was provided or another lawful purpose.

​

13. SHARING OF PERSONAL DATA

We do not sell your personal data.

​

We may disclose personal data where reasonably necessary to:

​

A. Service providers

We may use third-party service providers for services such as:

• Website hosting;

• Website management;

• Form processing;

• Email delivery;

• Cloud storage;

• Analytics;

• Cybersecurity;

• Payment processing;

• IT support;

• Communications;

• Event management; and

• other administrative or technical services.

​​

Such parties should receive only information reasonably necessary for the services they provide and should be subject to appropriate contractual or other safeguards where required.

​

B. Legal and regulatory authorities

We may disclose information where required or authorised by applicable law, regulation, court order, governmental authority or lawful request.

​

C. Professional advisers

Where necessary, we may share relevant information with professional advisers such as auditors, accountants, lawyers or consultants, subject to appropriate confidentiality and legal requirements.

​

D. Protection of rights and safety

We may disclose information where reasonably necessary to prevent fraud, security incidents, unlawful activity or threats to the safety, rights or property of Spriha Society or another person.

We do not grant third parties unrestricted access to personal data.

​

14. THIRD-PARTY SERVICES

Our Website may contain integrations, embedded content or links provided by third parties.

Examples may include:

• payment services;

• social-media platforms;

• video platforms;

• maps;

• analytics services;

• online forms;

• cloud services; and

• educational platforms.

​​

When you interact directly with such services, the third party may process information under its own privacy policy and terms.

​

Spriha Society does not control the privacy practices of independent third parties.

​

We recommend reviewing their privacy policies before submitting information to them.

​

15. INTERNATIONAL DATA TRANSFERS

Some technology or service providers used by Spriha Society may process personal data outside India.

Where personal data is transferred outside India, Spriha Society will do so in accordance with applicable Indian law and any applicable restrictions or requirements relating to cross-border transfers.

​

We will also take reasonable steps to ensure that service providers handling personal data provide appropriate contractual, organisational and technical safeguards.

​

16. DATA SECURITY

Spriha Society takes reasonable security measures designed to protect personal data against:

• unauthorised access;

• unauthorised disclosure;

• loss;

• misuse;

• alteration;

• destruction; and

• other reasonably foreseeable security risks.

​​

Security measures may include appropriate access controls, authentication, confidentiality requirements, secure service configurations, backups, monitoring and other technical and organisational safeguards appropriate to the nature of the data and processing.

​

However, no Internet-based system can be guaranteed to be completely secure.

​

If Spriha Society becomes aware of a personal data breach requiring notification under applicable law, we will follow the applicable breach-response and notification requirements.

​

17. DATA RETENTION

We retain personal data only for as long as reasonably necessary for:

• the purpose for which it was collected;

• providing the relevant service or programme;

• maintaining legitimate organisational records;

• complying with tax, accounting, charitable, statutory or other legal obligations;

• resolving disputes;

• establishing or defending legal claims; or

• complying with applicable legal requirements.

​​

When personal data is no longer required, and there is no lawful reason to retain it, we will take reasonable steps to delete, anonymise or otherwise dispose of it in accordance with our retention procedures and applicable law.

Donation records may need to be retained for longer periods because of statutory, tax, accounting or audit requirements.

​

18. YOUR RIGHTS

Subject to applicable law, you may have rights relating to your personal data, including the right to:

• request access to information about your personal data and its processing;

• request correction of inaccurate or misleading personal data;

• request erasure of personal data where legally applicable;

• withdraw consent where processing is based on consent;

• obtain information about certain data-sharing activities;

• nominate another individual to exercise rights in accordance with applicable law; and

• raise a grievance concerning our processing of personal data.

​​

The DPDP Act expressly provides Data Principals with rights including access, correction/erasure, grievance redressal and nomination, subject to the statutory framework and applicable conditions.

​

19. HOW TO EXERCISE YOUR RIGHTS

To submit a privacy request, please contact:

Email: societypriha@gmail.com

Please include:

• your name;

• contact details;

• nature of your request;

• relevant information that helps us identify the interaction or data concerned; and

• any other information reasonably necessary to verify your request.

​​

We may need to verify your identity before acting on certain requests to prevent unauthorised disclosure or deletion of personal data.

​

We will respond to valid requests within the period prescribed by applicable law.

​

20. GRIEVANCE REDRESSAL

If you have concerns regarding our processing of personal data, please contact our designated privacy/grievance contact first.

​

Privacy / Grievance Email: societypriha@gmail.com

​

We will review the grievance and take appropriate steps in accordance with applicable law and our internal grievance process.

​

Nothing in this section limits any statutory right you may have to approach the competent authority or Data Protection Board under applicable law.

​

21. DATA BREACHES

Spriha Society maintains processes for identifying, assessing, responding to and managing personal-data security incidents.

​

Where a personal-data breach occurs, and notification is required under applicable law, we will make the required notifications to the appropriate authorities and affected individuals in accordance with the applicable statutory requirements.

​

The DPDP framework includes obligations concerning reasonable security safeguards and breach-related responsibilities.

​

22. THIRD-PARTY LINKS

The Website may contain links to websites operated by third parties.

​

These websites are not controlled by Spriha Society.

​

A link to another website does not constitute an endorsement of that website's privacy practices.

​

We recommend reviewing the privacy policy and terms of each third-party website before providing personal information.

​

23. DONATION INFORMATION

Spriha Society accepts donations through mechanisms made available from time to time.

Where donations are processed through an external payment provider, that provider may independently process payment information.

Spriha Society does not request your:

• UPI PIN;

• card PIN;

• CVV;

• OTP;

• internet-banking password; or

• payment authentication password.

​​

Please do not send such information to us.

​

Where required for tax or statutory compliance, donors may be asked to provide information such as PAN and address.

​

24. DONATION REFUNDS

Donation refunds are generally considered only in cases such as:

• an accidental or duplicate donation;

• an incorrect transaction;

• a technical/payment error; or

• another circumstance approved by Spriha Society.

​​

Refund requests should be submitted promptly to:

Email: societyspriha@gmail.com

A request may require:

• donor name;

• transaction date;

• amount;

• transaction/UTR/reference number;

• proof of payment; and

• reason for the refund.

​​

Where a statutory donation receipt or tax benefit has already been issued, any refund will be subject to applicable tax and legal requirements.

​

Spriha Society reserves the right to assess refund requests individually and may decline requests where the law, payment-provider rules, accounting requirements or circumstances do not permit a refund.

​

For international donations, additional legal and banking requirements may apply, including requirements under applicable Indian foreign-contribution laws where relevant.

​

25. EMAILS AND COMMUNICATIONS

We may send transactional or service-related communications where necessary, including:

• registration confirmations;

• donation acknowledgements;

• receipts;

• programme updates;

• application-related communications;

• important Website/service notices.

​​

Where required, promotional newsletters, campaign updates or similar communications will be sent only where an appropriate consent or other lawful basis exists.

​

You may unsubscribe from optional marketing or newsletter communications using the unsubscribe mechanism provided or by contacting us.

​

26. ACCURACY OF INFORMATION

You are responsible for providing accurate and current information when submitting personal data to Spriha Society.

If your information changes, you may contact us to request correction where applicable.

​

27. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• changes in our activities;

• changes in Website functionality;

• new technology or service providers;

• changes in applicable law;

• regulatory developments; or

• improvements to our privacy practices.

​​

The updated version will be published on this page with a revised "Last Updated" date.

​

Where required by law, we will provide additional notice or obtain consent before implementing material changes.

​

28. GOVERNING LAW

This Privacy Policy shall be governed by the laws of India.

​

Subject to applicable law, disputes relating to this Privacy Policy shall be subject to the jurisdiction of the competent courts in Kolkata, West Bengal, India.

​

29. CONTACT US

For questions, privacy requests, grievances or concerns:

Spriha Society
Kolkata, West Bengal, India
Website: www.sprihasociety.org
Email: societyspriha@gmail.com
Privacy/Grievance Contact: societyspriha@gmail.com