Privacy Policy

Effective Date: 1st March 2026
Last Updated: 3rd March 2026

Kuchipudi Dance Academy & Heritage Society (KHAS) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [Kuchipudi Heritage Arts Society – The Tradition of Kuchipudi] make donations, register for programs, or interact with us.

Please read this policy carefully. By accessing or using our website and services, you consent to the practices described in this policy.

1. Information We Collect

We collect personal information only when you voluntarily provide it to us or when it is necessary for our legitimate organizational activities.

A. Information You Provide

• Personal Identification: Name, age, gender, date of birth, photograph (for event participation or donor recognition).
• Contact Information: Email address, phone number, postal address.
• Donation Information: Donor name, contact details, billing address, PAN card details (for tax receipt purposes), donation amount and date, and payment method .
• Program & Volunteer Information: For individuals applying to volunteer or participate in our programs: skills, experience, demographic information, and any other details relevant to the specific program or role .
• Communications: Information you provide when you contact us, sign up for newsletters, or submit inquiries.

B. Information Collected Automatically

• Technical Data: IP address, browser type, operating system, device information, pages visited, time spent on the website, referral source, and clickstream data .
• Cookies: We use cookies and similar tracking technologies to enhance your experience, analyze website traffic, and remember user preferences. You can manage cookie preferences through your browser settings .

C. Information We Do NOT Collect

• We do not knowingly collect sensitive personal data unless explicitly necessary and with your consent (e.g., health information for specific program participation) .
• We do not store complete credit card or banking information. All payment processing is handled by secure, certified third-party payment gateways .

2. Legal Basis for Processing

Under the Digital Personal Data Protection Act (DPDPA) 2023 and other applicable Indian laws, we process your personal data based on the following grounds :

• Consent: For newsletter subscriptions, marketing communications, collection of any sensitive personal data, and placement of non-essential cookies.
• Legitimate Uses: For processing donations, responding to inquiries, maintaining website security, and conducting internal analysis to improve our programs.
• Legal Obligation: For complying with tax laws (issuing 80G receipts), maintaining financial records as required by the Income Tax Act, and responding to lawful requests from government authorities .

3. How We Use Your Information

We use your personal information for the following purposes:

• Donation Management: Processing donations, issuing tax-exempted receipts, and maintaining donor records .
• Program Delivery: Registering participants for workshops, performances, and educational programs; evaluating program impact; ensuring participant safety .
• Communications: Responding to your inquiries, sending newsletters and project updates (with your consent), and notifying you about upcoming events or organizational news .
• Website Operations: Improving and personalizing your experience on our website, analyzing usage patterns to enhance content and functionality, and ensuring website security .
• Transparency and Accountability: Preparing annual reports, conducting analysis on donation patterns, and meeting regulatory reporting requirements for charitable organizations .

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third parties. We may share limited information only in the following circumstances :

• Service Providers: With trusted third-party vendors who assist us in operating our website, processing donations (e.g., payment gateways like Razorpay or PayPal), sending emails, and managing data. These providers are contractually bound to maintain confidentiality and data security .
• Legal Requirements: When required by law, such as sharing information with tax authorities for donation verification, complying with court orders, or responding to lawful requests from government agencies .
• Consent-Based Sharing: With partners or collaborators, but only with your explicit consent.

5. Data Security

We implement reasonable security safeguards to protect your personal information from unauthorized access, use, or disclosure :

• Technical Measures: SSL encryption for data transmission, secure servers with regular security updates, firewalls, access controls, and regular security monitoring .
• Organizational Measures: Access to personal data is limited to authorized personnel only. Staff are trained on data protection practices .
• Payment Security: We do not store credit card or banking information. All payments are processed through certified, PCI-DSS-compliant payment gateways .

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will promptly notify you and relevant authorities in case of a data breach, as required by law .

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements :

Data Type	Retention Period	Purpose
Donation Records	7 years	Tax compliance, audit requirements (Income Tax Act)
Contact Form Submissions	2 years	Follow-up and inquiry resolution
Newsletter Subscriptions	Until unsubscribe	Communication management
Program Participant Records	Duration of program + 3 years	Program delivery and impact assessment
Website Analytics	2 years	Performance analysis and improvement

When data is no longer required, it is securely deleted or anonymized .

7. Your Rights

Under the DPDPA 2023, you have the following rights regarding your personal data :

• Right to Access: Request copies of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of your personal data, subject to legal obligations (e.g., tax record retention requirements).
• Right to Withdraw Consent: Withdraw your consent at any time for processing based on consent (e.g., unsubscribing from newsletters). Withdrawal will not affect the lawfulness of processing before withdrawal .
• Right to Grievance Redressal: Lodge a complaint regarding our data handling practices.

To exercise your rights, please contact us using the information provided in Section 11.

8. Cookies and Tracking Technologies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device .

• Essential Cookies: Required for basic website functionality, such as form submission and session management.
• Analytics Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics). Data collected is anonymized.
• Preference Cookies: Remember your preferences to enhance user experience.

You can manage or disable cookies through your browser settings. However, disabling cookies may affect certain website functionalities.

9. Third-Party Links

Our website may contain links to external websites (e.g., social media platforms, partner organizations, payment gateways). We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal information .

10. Children’s Privacy

We are committed to protecting the privacy of children. Our website and services are not directed at persons under 18 years without parental involvement. We do not knowingly collect personal information from children without verifiable parental consent. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it .

For programs involving children, we obtain explicit consent from parents or legal guardians.

11. Contact Information and Grievance Redressal

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, or if you wish to exercise your rights, please contact us at: info.kuchipudiheritage@gmail.com

We will acknowledge receipt of any grievance within 24 hours and resolve it within one month (30 days) as required under Indian law .

You also have the right to lodge a complaint with the Data Protection Board of India (once operational) or other appropriate authorities .

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on this page with an updated “Last Updated” date. For significant changes, we will notify you via email or a prominent notice on our website .

---

By using the KHAS website, you acknowledge that you have read and understood this Privacy Policy.