Privacy Policy

1. Purpose

This Privacy Policy explains how Ganeshutsav.in collects, uses, stores, protects, shares, and manages personal information of its users.

The policy is designed to promote transparency, protect user privacy, and comply with applicable Indian laws and internationally accepted privacy practices.

2. Objectives

• Protect User Privacy
• Ensure Transparency
• Comply with Applicable Laws
• Minimize Data Collection
• Secure Personal Information
• Respect User Rights
• Build User Trust
• Support Responsible Data Processing

3. Scope

This Privacy Policy applies to

• Website Visitors
• Registered Ganesh Mandals
• Administrators
• Advertisement Partners
• Business Partners
• Service Providers
• Future Platform Services

This policy applies to all personal data processed through Ganeshutsav.in.

4. Legal Basis

Ganeshutsav.in processes personal information in accordance with applicable laws including

• Digital Personal Data Protection Act, 2023 (India)
• Information Technology Act, 2000
• Information Technology Rules, 2021
• Applicable contractual obligations
• User consent where required

5. Information We Collect

Information provided by users

Examples include

• Name
• Email Address
• Mobile Number
• Ganesh Mandal Name
• Address
• District
• Taluka
• Village / City
• Profile Information
• Uploaded Photos
• Uploaded Videos
• Event Information
• Communication Messages

Automatically collected information

Examples include

• IP Address
• Browser Type
• Device Information
• Operating System
• Language Preference
• Date & Time
• Log Information
• Usage Statistics

Cookies and Similar Technologies

The platform may use

• Essential Cookies
• Security Cookies
• Performance Cookies
• Analytics Cookies (if enabled)

Details are provided in the Cookie Policy.

6. Purpose of Data Processing

Personal information may be processed for

• User Registration
• Ganesh Mandal Management
• Website Administration
• Identity Verification
• Communication
• Customer Support
• Security Monitoring
• Fraud Prevention
• Legal Compliance
• Service Improvement
• Analytics
• Advertisement Management

Information shall not be processed for unlawful purposes.

7. Information Sharing

Personal information may be shared only when necessary with

• Authorized Administrators
• Technology Service Providers
• Hosting Providers
• Government Authorities when legally required
• Law Enforcement Agencies where legally applicable

Ganeshutsav.in does not sell users' personal information.

8. Data Storage

Information may be stored

• Secure Cloud Infrastructure
• Database Systems
• Backup Systems
• Log Management Systems

All reasonable security measures shall be implemented.

9. Data Retention

Personal information shall be retained

• For as long as necessary to provide services
• To comply with legal obligations
• To resolve disputes
• To enforce platform policies

Data retention periods are defined in the Data Retention Policy.

10. User Rights

Subject to applicable law, users may request

• Access to their information
• Correction of inaccurate information
• Deletion of eligible information
• Withdrawal of consent where applicable
• Restriction of processing where applicable
• Grievance submission

Requests shall be reviewed according to applicable laws.

11. Children's Privacy

Ganeshutsav.in is not intended for children unless permitted and supervised under applicable law.

If personal information relating to children is identified without appropriate authorization, reasonable steps shall be taken to remove such information where legally required.

12. Information Security

Reasonable technical and organizational safeguards include

• TLS 1.3 Encryption
• AES-256 Encryption at Rest
• Role-Based Access Control (RBAC)
• Audit Logging
• Secure Authentication
• Infrastructure Monitoring
• Regular Security Reviews

No system can guarantee absolute security.

13. Third-Party Services

The platform may use trusted third-party services for

• Cloud Hosting
• Database Services
• Email Delivery
• Analytics
• Security Services

Each provider remains responsible for its own privacy practices.

14. International Data Transfers

If information is processed outside India, appropriate safeguards shall be implemented in accordance with applicable law.

15. Privacy Incident Response

Privacy-related incidents may include

• Unauthorized Access
• Data Exposure
• Account Compromise
• Security Breach

Incidents shall be managed according to the Incident Response and applicable legal obligations.

16. User Responsibilities

Users shall

• Provide accurate information
• Protect account credentials
• Avoid uploading unlawful content
• Respect privacy of others
• Notify suspected unauthorized access

17. Policy Updates

Ganeshutsav.in may update this Privacy Policy periodically.

Material changes may be communicated through

• Website Notices
• Administrative Notifications
• Email Notifications where applicable

The latest published version shall govern.

18. Grievance Redressal

Privacy-related concerns and grievances may be submitted to the designated grievance officer.

Grievance Officer, Ganeshutsav.in

Email: ganeshutsavproject@gmail.com

Complaints shall be reviewed within a reasonable period in accordance with applicable legal requirements.

19. Compliance

This Privacy Policy aligns with

• Digital Personal Data Protection Act, 2023
• Information Technology Act, 2000
• Information Technology Rules, 2021
• ISO/IEC 27701
• ISO/IEC 27001
• ISO/IEC 29100
• OWASP ASVS

20. Business Rules

• Personal information shall be collected only for legitimate purposes.
• Data collection shall be limited to what is reasonably necessary.
• Personal information shall not be sold.
• Security controls shall protect personal information.
• User requests shall be handled according to applicable law.
• Privacy documentation shall remain version controlled.
• Privacy practices shall undergo periodic review.
• Legal obligations shall take precedence where required.

21. Future Enhancements

• Privacy Dashboard
• Consent Management Center
• Automated Data Deletion
• Privacy Impact Assessment Automation
• AI-assisted Privacy Monitoring
• Data Classification Engine
• User Privacy Preferences
• Automated Compliance Reporting

22. Related Documents

• LEGAL-001 Legal & Regulatory Compliance Framework
• LEGAL-003 Terms & Conditions
• LEGAL-004 Cookie Policy
• LEGAL-005 Disclaimer
• LEGAL-009 Data Retention & Record Management Policy
• LEGAL-010 Legal Governance & Compliance Management
• SEC-001 Security Architecture
• SEC-006 Audit Logging & Compliance
• SEC-007 Backup & Disaster Recovery
• SEC-008 Incident Response & Monitoring
• OPS-010 Business Continuity & Operational Governance

Revision History

End of Document