Data Protection Notice

The entire website is served over HTTPS with HTTP Strict Transport Security (HSTS). Forms cannot be submitted over unencrypted connections.

Card, UPI and netbanking details are entered directly into the PCI-DSS-certified payment gateway environment. They never pass through or rest on our servers.

All database access uses parameterised prepared statements (SQL-injection protection); all output is escaped (XSS protection); all forms carry anti-forgery (CSRF) tokens; sessions use HttpOnly, Secure, SameSite cookies; and submission rates are limited to deter abuse.

Donor records are accessible only to authorised personnel on a need-to-know basis. Administrative access is password-protected with hashed credentials (bcrypt) and is logged.

We collect only the data required for receipts and statutory compliance, and retain it only as long as the law requires (see Privacy Policy retention schedule).

In the unlikely event of a personal-data breach, we will assess, contain and remediate it promptly and notify affected donors and the Data Protection Board of India as required under the DPDP Act, 2023.

Data-protection queries and requests: Grievance & Compliance Desk, info@nuran.foundation, Opp. I.T.I., Jail Road, Nasrullaganj, District Sehore – 466331, Madhya Pradesh, India.