Privacy Policy
This policy explains what personal information Shri Arham Foundation collects through this website, why we collect it, and what we do with it.
1. Who we are
Shri Arham Foundation, also known as Khichdi Ghar, is a non-profit organisation based at Kandivali East, Mumbai, Maharashtra, India. For any question about this policy, write to shriarhamfoundation@gmail.com or call +91 7738999909.
2. Information we collect
We only collect information you choose to give us:
- Contact form: your name, email address, phone number (if provided), subject and message.
- Volunteer form: your name, email address, phone number, city, area of interest, availability and any message.
- Donations: your name, email address, phone number, chosen purpose, optional message, optional PAN, and the reference identifiers Razorpay returns for the payment.
- Technical: your IP address and browser user-agent string, recorded with form submissions and donations for security and anti-abuse purposes.
3. Payment information we never see
Payments are processed by Razorpay Software Private Limited on Razorpay's own systems. Card numbers, CVV codes, UPI PINs, net-banking passwords and similar credentials are never entered on, transmitted to, or stored by this website. We receive only a payment reference, an order reference and a verification signature.
Razorpay's handling of your payment data is governed by their own privacy policy and by applicable payment industry standards.
4. Why we use your information
- To reply to your enquiry or volunteering request.
- To process and acknowledge your donation, and to send you a receipt.
- To keep records of donations received.
- To protect this website from spam, fraud and abuse.
- To comply with any legal obligation that applies to us.
We do not use your details for unsolicited marketing, and we do not add you to a mailing list without your asking.
5. Sharing
We do not sell, rent or trade your personal information. We share it only with:
- Razorpay, to process a donation you have chosen to make.
- Our email provider, to deliver messages and receipts.
- Our hosting provider, which stores the website and its data.
- A public authority, where we are legally required to do so.
6. Cookies
This website sets a single session cookie. It holds no personal information — it exists so
that security features such as CSRF protection and one-time form messages work correctly. It
is marked HttpOnly and SameSite=Lax, and is sent only over HTTPS in
production. It expires when you close your browser.
Razorpay Checkout may set its own cookies while a payment is in progress. We run no advertising, analytics or third-party tracking scripts on this site.
7. How long we keep it
- Form messages: kept in our email inbox for as long as we need them to respond and follow up.
- Donation records: retained for our accounting and audit records, as required by law.
- Security logs: retained for a limited period and then deleted.
8. Security
This website is served over HTTPS. Form submissions are protected against cross-site request forgery, validated on the server, rate-limited, and filtered for spam. Credentials for email and payments are stored in server-side configuration outside the web root and are never exposed to the browser. Donation records are written using parameterised database queries.
No system is perfectly secure. If you believe you have found a security issue with this website, please tell us at shriarhamfoundation@gmail.com.
9. Your choices
You may ask us what personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Write to shriarhamfoundation@gmail.com and we will respond within a reasonable period.
10. Children
This website is not directed at children, and we do not knowingly collect personal information from anyone under 18 through it.
11. Changes
We may update this policy from time to time. The date at the top of this page shows when it was last changed.