1Introduction
Welcome to the Tamboli Jamat Community Portal ("we", "us", "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.tambolijamatpune.com, register your family, make payments, or interact with our services.
By accessing or using our portal, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please do not access the site. This policy is drafted in accordance with the Information Technology Act, 2000 and the rules made thereunder, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023 (DPDP Act).
2Information We Collect
2.1 Personal Information You Provide
When you register on our portal (via OTP-based mobile verification) and submit your family details (Khanesumari), we collect:
- Identity Information: Full name, father/husband name, mother name, date of birth, gender, marital status
- Contact Information: Mobile number, WhatsApp number, email address, full residential address, pincode
- Demographic Information: Education qualification, occupation, relation to family head
- Family Information: Family surname, family members, location/area, family photographs
- Voter Information: Voter status and verification details (when applicable)
2.2 Financial Information (Payments & Donations)
- Payment transaction details (amount, date, mode — UPI/Cash/Online/Bank Transfer)
- Donation records (campaign, beneficiary, amount, receipt number)
- Annual fee payment history
Important: We NEVER store your credit/debit card numbers, CVV, net banking passwords, or UPI PINs. All online payments are processed securely through our PCI-DSS compliant payment gateway partner.
2.3 Automatically Collected Information
- IP address and approximate geographic location
- Browser type, version, and operating system
- Device information and user agent
- Login timestamps and session data
- Pages visited and time spent on pages
3How We Use Your Information
We use the collected information for the following legitimate purposes:
- Community Management: Maintaining the Khanesumari (family census) database for community welfare
- Authentication: Sending OTPs via SMS/WhatsApp for login and registration verification
- Payment Processing: Processing annual membership fees and donation transactions
- Communication: Sending important community notifications, event announcements, and scheme updates
- Voter Verification: Maintaining verified voter lists for community elections
- Helpdesk Support: Responding to your queries and support tickets
- Security: Detecting and preventing fraud, unauthorized access, and abuse
- Legal Compliance: Meeting statutory obligations and responding to lawful requests
- Service Improvement: Analyzing usage patterns to improve portal features
4Payment & Financial Data
All online payments on our portal are processed through Razorpay, a PCI-DSS Level 1 compliant payment gateway. By making payments, you acknowledge:
- Your card/UPI details are entered directly on Razorpay's secure page — we never see or store them
- We only store transaction reference IDs, amounts, and payment status for receipt generation
- Payment receipts are generated instantly and stored in your account
- For cash payments, records are entered manually by authorized administrators
Refund & Cancellation: Annual membership fees are non-refundable once the financial year has commenced. Donations are generally non-refundable as per Indian tax laws (Section 80G), except in cases of duplicate/erroneous payments, which will be refunded within 7-10 business days to the original payment method.
5Information Sharing & Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following cases:
| Recipient | Purpose | Data Shared |
|---|
| Payment Gateway (Razorpay) | Payment processing | Amount, order ID, contact details |
| SMS/WhatsApp Providers | OTP & notifications | Mobile number, message content |
| Community Administrators | Khanesumari approval | All submitted family data |
| Legal Authorities | As required by law | As mandated by court/government order |
| Service Providers | Hosting, email, analytics | Limited technical data only |
6Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS)
- Password Security: Passwords are hashed using bcrypt algorithm — we cannot read your passwords
- Access Controls: Role-based access ensures only authorized administrators can view sensitive data
- Session Management: Secure session tokens with automatic expiry
- Audit Logs: All administrative actions are logged for accountability
- Regular Backups: Encrypted backups prevent data loss
- Vulnerability Monitoring: Regular security reviews and updates
Your Responsibility: You are responsible for keeping your mobile device secure and not sharing your OTP with anyone. We will never ask for your OTP, password, or payment PIN via phone, email, or message.
7Cookies & Tracking Technologies
Our portal uses cookies and similar technologies for:
- Essential Cookies: Required for login sessions and portal functionality (cannot be disabled)
- Preference Cookies: Remember your language and display preferences
- Analytics Cookies: Help us understand how visitors use our portal (anonymized)
You can control cookies through your browser settings. Disabling essential cookies may prevent you from logging in or using certain features.
8Your Rights Under DPDP Act 2023
As a data principal under Indian data protection laws, you have the following rights:
- Right to Access: Request a copy of your personal data that we hold
- Right to Correction: Request correction of inaccurate or incomplete data (through your account or by contacting us)
- Right to Erasure: Request deletion of your data, subject to legal and community record-keeping requirements
- Right to Grievance Redressal: Lodge complaints regarding data handling
- Right to Withdraw Consent: Withdraw consent for specific processing activities
- Right to Nominate: Nominate a person to exercise your rights in case of death/incapacity
To exercise any of these rights, please contact our Grievance Officer (details in Section 13).
9Children's Privacy
Our portal is intended for family registration by adults (18+). Information of minor family members (children) is collected only as part of the family census submitted by their parents/guardians (the family head). We do not knowingly collect personal information directly from children under 18. If you believe a child has provided us personal data directly, please contact us and we will delete such information.
10Data Retention
We retain your personal information for as long as necessary to:
- Maintain your active family membership in the community
- Fulfill the purposes outlined in this Privacy Policy
- Comply with legal, accounting, and reporting requirements (typically 7-8 years for financial records as per Indian tax laws)
- Resolve disputes and enforce our agreements
Account deletion requests will be processed within 30 days, though certain records may be retained in anonymized form for historical/archival purposes of the community.
11Third-Party Links
Our portal may contain links to external websites (e.g., government scheme portals, YouTube videos). We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal information.
12Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or for legal/operational reasons. The "Last Updated" date at the top will indicate when revisions were made. Significant changes will be notified via portal notification or email. Your continued use of the portal after changes constitutes acceptance of the updated policy.
If you have questions, concerns, or wish to exercise your data rights, please contact us: