1. Scope and role
રિસ્ટોરેશન મૂવમેન્ટ determines why and how personal data submitted through this website is processed and therefore acts as the data fiduciary for that processing. This Policy is designed around India's Digital Personal Data Protection Act, 2023 and applicable rules as their provisions come into force, as well as continuing obligations under other Indian law.
2. Data we collect
- Account data: name, email, password hash, verification and security records.
- Member and family data: photograph, date of birth, gender, city, state, relationship status, church membership, profession, education, family relationship, member/donor identifiers and review status.
- Ministry data: prayer or pastoral messages, event interests, reports and communications. Please avoid unnecessary medical, financial or other highly private detail.
- Donation data: donor, amount, church, receipt, payment/order references, status and timestamps. Razorpay and payment participants separately process payment credentials.
- Technical and compliance data: session/security information, IP address, browser/user agent, consent records and administrative audit logs.
- Public contact data: name, email, optional phone, reason and message.
3. Why we use data
We use data to verify accounts; administer household membership and church review; issue identifiers; communicate; provide pastoral, prayer and event functions; create and reconcile donations and receipts; prevent misuse; maintain security and audit records; respond to rights and complaints; and comply with tax, accounting, payment, FCRA, court or regulatory obligations.
Where processing relies on consent, you may withdraw it by contacting us. Withdrawal does not invalidate prior processing and may make an account or requested service impossible to continue. Some records may be retained where processing is required or permitted for legal claims, fraud prevention, accounting or another lawful purpose.
4. Children and family information
Only an adult primary account holder may submit a child's information. The submitter must be the parent/lawful guardian or otherwise have verifiable authority. We do not use member data for behavioural monitoring, targeted advertising or sale. Contact us to challenge authority, correct a child's data or request deletion, subject to lawful retention.
5. Sharing and processors
Data is available only to authorized ministry administrators, pastors or service personnel who need it for their role. We may share limited data with hosting, email, security, backup and support providers; Razorpay, banks, UPI apps and payment networks; professional advisers; and government, regulators, courts or law-enforcement bodies where lawfully required. Providers may process data in India or other permitted locations under their own obligations and contractual safeguards.
We do not sell or rent personal data. We do not disclose prayer/pastoral content publicly unless you separately authorize it or disclosure is necessary to address a serious safety concern or legal obligation.
6. Retention and security
We retain account/member data while membership is active and afterwards only as reasonably required for administration, disputes and legal obligations. Donation, receipt, tax and accounting records may be retained for the applicable statutory period. Unsuccessful payment orders, OTP/security logs, contact messages, consent records and audit logs are retained only as long as justified by security, operations or law.
Controls include password hashing, email verification, CSRF protection, restricted administration, HTTPS in production, secure cookies, server-side payment verification and audit records. No system is risk-free. If a breach is likely to affect you, we will take containment and notification steps required by applicable law.
7. Your choices and rights
Subject to applicable law, you may ask for a summary of your data and processing, correction, completion, updating, erasure, withdrawal of consent, grievance redressal, or nomination of another person to exercise rights in the event of death or incapacity. We may verify identity and may refuse or limit a request where law permits.
Send requests to the grievance contact at contact@restorationmovement.org. State the request, registered email and relevant member/receipt ID. We will acknowledge and respond within the period required by applicable law. You may escalate to the Data Protection Board of India when the statutory process is available and applicable, after using our grievance process.
8. Changes and language
Material changes will be posted with a new version/effective date and fresh consent will be requested where required. English is the controlling draft until legally reviewed Gujarati and Hindi versions are published; assistance may be requested at contact@restorationmovement.org.