1. Introduction

Paryavaran Aayog ("we," "us," or "our") is a registered independent Commission, working as the Environment Forest and Climate Change Commission. We are committed to protecting the privacy and personal data of citizens, volunteers, trainees, donors, and partners who use our website, helpline, and services. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and what rights you have. By accessing paryavaranaayog.com or using our services, you agree to the practices described in this policy, in addition to our Terms & Conditions.

2. Scope of This Policy

This policy applies to personal data collected through:

• Our official website and online portals (enrolment, verification, donations, complaints, feedback)
• Helpline (18002028509) and missed-call service (8813099779)
• Volunteer and Paryavaran Mitra registration forms
• Training program enrolment and certification processes
• State office interactions, events, and field campaigns
• Email, WhatsApp, and written correspondence with our offices

3. Information We Collect

Depending on the service you use, we may collect:

• Identity & contact details: Full name, email, mobile number, postal address, state, district, date of birth, and photograph (where required for ID cards or certificates).
• Complaint & vigilance data: Location of violation, photos, videos, descriptions of environmental offences, and reference numbers for follow-up.
• Training & certification data: Course preferences, attendance, assessment scores, certificate numbers, and renewal records.
• Donation & payment data: Transaction ID, amount, billing details, and tax receipt information. We do not store full debit/credit card numbers — payments are processed through secure third-party gateways.
• Volunteer & membership data: Skills, availability, activity preferences, and participation history in plantation or awareness drives.
• Technical & usage data: IP address, browser type, device information, pages visited, and cookies (see Section 9).
• Communications: Records of emails, helpline calls (where recorded for quality and dispute resolution), feedback forms, and support tickets.

4. How We Use Your Information

We use personal data for legitimate purposes including:

• Processing course enrolments, volunteer registrations, and certification issuance
• Investigating and forwarding environmental complaints to relevant authorities
• Operating the certificate and ID verification portal
• Processing donations and issuing receipts under applicable tax laws
• Responding to helpline queries, feedback, and grievances
• Sending service-related SMS, email, or WhatsApp updates (not marketing without consent)
• Improving website functionality, security, and citizen outreach programs
• Complying with legal obligations, court orders, and government directives
• Preventing fraud, misuse of certificates, and unauthorised access

5. Legal Basis for Processing

We process personal data based on: (a) your consent when you submit forms or opt in to communications; (b) performance of a contract when you enrol in a course or register for a service; (c) compliance with legal obligations under Indian law, including environmental and tax regulations; and (d) legitimate interests such as operating helplines, maintaining records, and protecting public interest in environmental conservation — balanced against your privacy rights.

6. Sharing and Disclosure

We do not sell or rent your personal information. We may share data with:

• State & district offices of Paryavaran Aayog for complaint handling and local campaign coordination
• Government departments (Forest, Pollution Control Board, Municipal bodies) when required to act on verified environmental violations
• Certification partners and training affiliates for issuing recognised credentials
• Payment processors (Razorpay or similar) for secure transaction handling
• IT & hosting providers under strict confidentiality agreements
• Legal authorities when required by law, court order, or to protect rights and safety

All third parties are required to use data only for the specified purpose and maintain appropriate security safeguards.

7. Data Security

We implement reasonable technical and organisational measures including encrypted connections (HTTPS), access controls, secure servers, and staff training on data handling. Despite our efforts, no internet transmission is completely secure. You are responsible for keeping your login credentials confidential and reporting any suspected unauthorised access immediately.

8. Your Rights

Under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act), you may have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request erasure of data (subject to legal and certification retention requirements)
• Withdraw consent for optional processing such as newsletters
• Lodge a grievance with our Data Protection Contact (see below)
• Approach the Data Protection Board of India where applicable under law

To exercise these rights, email secretary@paryavaranaayog.com with subject line "Data Privacy Request" and proof of identity. We will respond within the timeframe prescribed by law.

9. Cookies and Analytics

Our website uses cookies and similar technologies to remember preferences, maintain sessions, and analyse traffic patterns. You may disable cookies in your browser settings; however, some features (such as login or language preference) may not function correctly. We may use third-party analytics tools that collect aggregated, non-personally identifiable usage statistics.

10. Data Retention

We retain personal data only as long as necessary for the purpose collected. Certification records, complaint logs, and donation receipts may be retained for longer periods as required by law, audit, or certification body rules — typically up to 7 years for financial records. Anonymised or aggregated data may be retained indefinitely for research and impact reporting.

11. Children's Privacy

Our general website services are not directed at children under 16. School eco-club and youth programs may involve minors only with parental or institutional consent and supervision. If you believe we have collected data from a child without proper consent, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, technology, or our services. The revised version will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance of the updated policy. Material changes may also be communicated via email or website notice where appropriate.