Privacy Policy

Originally Effective: 01 October 2025
Last Updated: 10 August 2026

Welcome to Simhastha.org.in.

At Simhastha.org.in, we respect the privacy of our visitors, registered users, learners, community members, volunteer applicants, affiliate participants, travel-enquiry users and other persons who interact with our Platform.

This Privacy Policy explains how personal information may be collected, received, used, processed, stored, disclosed, protected, retained, corrected and deleted when you access or use Simhastha.org.in or any feature, programme or service operated through the Platform.

By using a particular feature of the Platform or submitting information to us, your personal information will be handled in accordance with this Privacy Policy, any feature-specific privacy notice presented to you, and applicable law.

Where consent is required for a particular processing activity, we will seek an appropriate affirmative indication of consent. Merely visiting the Website or accepting general Terms and Conditions will not automatically constitute consent for every unrelated use of personal information.

This Privacy Policy should be read together with our:

• Terms and Conditions;

• Disclaimer;

• Cookie or Consent Notice, where applicable;

• Affiliate Disclosure;

• Community Guidelines;

• Simhastha Volunteer Academy terms or notices;

• travel-enquiry notices;

• programme-specific notices; and

• other notices displayed when information is collected.

Where a specific feature provides an additional privacy or consent notice, that notice applies together with this Privacy Policy.

---

1. LEGAL OPERATOR AND DATA RESPONSIBILITY

Simhastha.org.in is operated by:

Legal Name / Operator:
Nageshwar Patidar

Legal Status:
INDIVIDUAL

Email:
[email protected]

Website:
Simhastha.org.in

Location:
Ujjain, Madhya Pradesh, India

The above operator is referred to in this Privacy Policy as “Simhastha.org.in”, “we”, “us”, “our”, “Website”, “Platform” or “Data Fiduciary”, where such terminology is applicable under law.

The operator is responsible for determining the purposes and means of processing personal information collected directly through Platform features under its control.

The operator details above must be completed accurately before publication of this Privacy Policy.

---

2. ABOUT SIMHASTHA.ORG.IN

Simhastha.org.in is an independent informational, educational, community, pilgrimage-assistance and digital facilitation platform primarily relating to Simhastha, Ujjain, spiritual and cultural information, pilgrim assistance, learning initiatives and associated services.

Unless expressly stated in relation to a specific collaboration:

Simhastha.org.in is not a Government website and is not an official Simhastha administrative authority.

We are not automatically acting on behalf of:

• Government of India;

• Government of Madhya Pradesh;

• District Administration;

• Ujjain Municipal Corporation;

• Police Administration;

• Temple Administration;

• Akharas;

• Tourism Authorities;

• Simhastha Mela Administration; or

• any other governmental or statutory authority.

Information submitted through Simhastha.org.in should therefore not automatically be considered information submitted to any government authority.

Any official partnership, authorisation, collaboration or government relationship, if established in the future, will be separately and expressly disclosed.

---

3. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy may apply to persons who:

• browse Simhastha.org.in;

• create an Account;

• sign in using Google or another supported authentication provider;

• create or maintain a profile;

• enrol in the Simhastha Volunteer Academy;

• access lessons;

• complete quizzes or assessments;

• obtain or verify a Certificate;

• express interest in volunteering;

• submit volunteer-related applications;

• participate in community features;

• submit User Content;

• use Lost and Found functionality, where available;

• submit pilgrimage or travel-planning enquiries;

• request accommodation or transport assistance;

• participate in referral or affiliate programmes;

• subscribe to updates;

• receive requested notifications;

• contact us;

• interact with advertisements;

• interact with referral links;

• submit support requests;

• submit complaints or grievances;

• exercise privacy rights; or

• use other Platform features made available from time to time.

This Privacy Policy applies to personal information processed by or on behalf of Simhastha.org.in.

Independent third-party websites, companies and service providers may have their own privacy policies and practices.

---

4. PERSONAL INFORMATION WE MAY COLLECT

The information collected depends upon the features you use.

We do not necessarily collect every category described below from every user.

We follow the principle that personal information should be reasonably related to the purpose for which it is requested.

---

5. ACCOUNT REGISTRATION INFORMATION

When you create an Account directly, we may collect information such as:

• full name;

• email address;

• mobile number, where requested;

• username;

• account identifier;

• profile image, where provided;

• account preferences;

• registration timestamp;

• verification status;

• login information;

• account status; and

• other information necessary to administer your Account.

Passwords must not be stored by us as readable plain-text passwords.

Appropriate password hashing, authentication controls and security measures should be used in our systems.

---

6. GOOGLE SIGN-IN AND OTHER AUTHENTICATION PROVIDERS

If you use Google Sign-In or another supported authentication provider, we may receive information authorised by you and made available by the authentication provider.

Depending on the service, this may include:

• name;

• email address;

• profile identifier;

• profile photograph; and

• authentication-related identifiers.

We do not receive your Google password through Google Sign-In.

Google and other authentication providers operate independently and may process information according to their own privacy policies and terms.

We intend to request only authentication permissions reasonably required for the functionality provided.

Disconnecting a third-party authentication method may affect access to your Account unless another login method is available.

---

7. PROFILE AND PARTICIPATION INFORMATION

Where you create a profile, join a programme or participate in Platform functionality, we may collect information such as:

• full name;

• email;

• mobile number;

• photograph;

• city;

• district;

• state;

• age or date of birth where reasonably required;

• educational background;

• occupation;

• profession;

• languages known;

• skills;

• interests;

• volunteering experience;

• areas of participation;

• availability;

• programme preferences;

• biography;

• public profile information;

• Community preferences;

• participation history; and

• other information specifically requested in the relevant feature.

Optional fields may generally be left blank unless they later become necessary for a particular service.

---

8. VOLUNTEER INTEREST AND APPLICATION INFORMATION

Where a volunteer-interest or participation feature is available, we may request information reasonably necessary to understand the applicant's interest, suitability, preferences or availability.

This may include:

• full name;

• mobile number;

• email address;

• age or date of birth;

• city or location;

• educational information;

• occupation;

• languages known;

• volunteering experience;

• relevant skills;

• preferred areas;

• availability;

• programme preferences;

• photograph where required;

• answers to application questions;

• consent declarations; and

• other information clearly identified in the relevant form.

Submitting a volunteer form on Simhastha.org.in:

does not automatically make a person an official government-appointed Simhastha volunteer and does not automatically transmit the application to a government authority.

Where a specific programme involves a separate organisation or official authority, that relationship will be expressly explained.

---

9. AADHAAR AND GOVERNMENT IDENTIFICATION

Simhastha.org.in does not ordinarily require users to submit their full Aadhaar number or Aadhaar document.

Users should not upload or submit:

• Aadhaar cards;

• passports;

• PAN cards;

• driving licences;

• voter identification;

• government identity documents; or

• similar confidential identification information

unless a specific Platform feature expressly requires such information through a separately disclosed, legally appropriate and secured verification process.

Where only age or eligibility confirmation is required, we will seek to use a proportionate verification method rather than collecting unnecessary identity information.

---

10. SIMHASTHA VOLUNTEER ACADEMY DATA

When you participate in the Simhastha Volunteer Academy, we may process information including:

• Account identity;

• learner identifier;

• enrolment information;

• courses enrolled in;

• lessons accessed;

• learning progress;

• completion percentage;

• quiz responses;

• assessment responses;

• assessment scores;

• number of attempts;

• pass or fail status;

• timestamps;

• course completion records;

• final assessment results;

• Certificate eligibility;

• Certificate issuance information;

• Certificate number;

• Certificate verification data; and

• records reasonably necessary to prevent assessment or Certificate fraud.

This information may be used to:

• administer the Academy;

• provide learning functionality;

• maintain learner progress;

• conduct assessments;

• calculate scores;

• determine completion;

• determine Certificate eligibility;

• issue Certificates;

• verify Certificates;

• prevent cheating or misuse;

• investigate suspicious activity; and

• protect programme integrity.

The Simhastha Volunteer Academy is an independent learning initiative operated through Simhastha.org.in unless a specific collaboration is expressly disclosed otherwise.

---

11. CERTIFICATE INFORMATION

Where a Certificate of Achievement or another digital credential is issued, we may retain information such as:

• recipient name;

• Account or learner identifier;

• programme completed;

• completion date;

• Certificate number;

• Certificate status;

• verification identifier;

• QR-code-linked verification information;

• issuance timestamp;

• correction history; and

• revocation records where applicable.

Certificate records may be retained for longer than ordinary Account information where reasonably necessary to:

• maintain Certificate authenticity;

• allow verification;

• prevent forgery;

• investigate misuse;

• preserve credential history; and

• protect the integrity of the Academy.

---

12. PUBLIC CERTIFICATE VERIFICATION

Where Simhastha.org.in provides Certificate verification functionality, limited Certificate information may be displayed to a person who:

• enters a valid Certificate number;

• uses an official verification link; or

• scans an official Certificate QR code.

Verification information may include:

• learner name;

• Certificate title;

• programme name;

• completion or issuance date;

• Certificate number; and

• validity, revocation or verification status.

Assessment answers, private contact information, passwords and unnecessary Account information will not ordinarily be displayed through the public Certificate verification facility.

Users will be informed, where appropriate, that limited Certificate information may be available for authenticity verification.

---

13. COMMUNITY PARTICIPATION AND USER CONTENT

Where Community functionality is available, we may process:

• profile information;

• posts;

• comments;

• replies;

• photographs;

• uploaded media;

• reactions;

• reports;

• discussions;

• Community membership;

• moderation records;

• user blocking information;

• complaints;

• warnings;

• content-removal records; and

• other information voluntarily submitted through Community features.

Public Information Warning

Information intentionally published in a public profile, public discussion, comment area or Community feature may be visible to:

• other members;

• Website visitors;

• search engines where technically permitted;

• social networks where content is shared; and

• other internet users.

You should not publicly post information that you wish to remain confidential.

Although we may provide deletion or moderation functionality, we cannot control copies, screenshots, downloads or redistribution independently made by another person after information has been made public.

---

14. LOST AND FOUND INFORMATION

Where Simhastha.org.in offers a Lost and Found feature, users may be able to submit information relating to lost or found items.

This may include:

• item description;

• category;

• approximate location;

• date or time;

• photograph;

• contact details;

• reference number; and

• additional information required to identify or recover the item.

Users must avoid publicly publishing confidential information contained on lost documents.

For example, where an Aadhaar card, PAN card, bank card, passport or another identification document is found, users should not publicly post complete identification numbers, financial information or high-resolution copies containing private information.

We may redact, restrict or remove sensitive details where reasonably necessary for privacy, security or fraud prevention.

The Lost and Found functionality is intended as a facilitation service and does not automatically constitute an official police or government lost-property system unless expressly stated.

---

15. CONTACT AND SUPPORT INFORMATION

When you contact us, we may process:

• name;

• email address;

• mobile number;

• subject;

• message;

• attachments;

• Account information;

• previous communications; and

• information reasonably necessary to investigate or respond to the request.

This may include communications concerning:

• Account issues;

• Academy questions;

• Certificate corrections;

• privacy requests;

• Community reports;

• Lost and Found enquiries;

• technical support;

• affiliate questions;

• travel enquiries;

• complaints;

• grievances; and

• legal notices.

---

16. TRAVEL AND PILGRIMAGE ENQUIRIES

When you submit a Mahakal Darshan, Simhastha, pilgrimage, accommodation, transportation or travel-planning enquiry, we may collect information including:

• first and last name;

• mobile number;

• email address;

• arrival date;

• departure date;

• number of travellers;

• number of adults or children where relevant;

• accommodation preferences;

• approximate budget;

• preferred hotel category;

• destinations or places you wish to visit;

• pilgrimage preferences;

• transport requirements;

• itinerary preferences;

• accessibility or special requirements voluntarily disclosed;

• message content; and

• information reasonably necessary to understand the enquiry.

Such information may be processed to:

• respond to your enquiry;

• assist with pilgrimage planning;

• prepare suggested itineraries;

• understand accommodation requirements;

• provide quotations;

• identify relevant providers;

• facilitate requested introductions; or

• coordinate requested services.

Users should avoid providing confidential medical records or other unnecessary sensitive information through ordinary travel-enquiry forms.

---

17. TRAVEL-PARTNER AND SERVICE-PROVIDER SHARING

Submitting a general Website form does not provide unrestricted permission for us to distribute your personal information to unrelated travel businesses.

When you specifically request travel, hotel, transport or pilgrimage assistance, relevant information may be shared with suitable:

• hotels;

• accommodation providers;

• travel agents;

• tour operators;

• transport providers;

• pilgrimage-service providers; or

• other Third-Party Providers

where such sharing is reasonably necessary to fulfil the request and permitted under applicable law.

Where required, users will be informed that partner sharing is involved and appropriate consent will be obtained.

Only information reasonably necessary for the enquiry should be shared.

A Third-Party Provider may contact you directly after an authorised enquiry has been shared.

Once a user independently enters into a relationship with such provider, that provider's own privacy terms and practices may apply.

---

18. AFFILIATE AND REFERRAL PROGRAMME INFORMATION

Where Simhastha.org.in operates an Affiliate or Referral Programme, we may process:

• name;

• email;

• mobile number;

• Account identifier;

• affiliate identifier;

• referral code;

• referral URL;

• referral traffic;

• click information;

• conversions;

• commission records;

• payout history;

• fraud-prevention information;

• programme status; and

• programme-related communications.

Where payments are made to an affiliate, we may additionally request information reasonably necessary for:

• payment processing;

• accounting;

• invoicing;

• taxation; or

• legal compliance.

Such information may include:

• bank payment details;

• UPI identifier;

• PAN information where required;

• GST information where applicable;

• billing information; and

• transaction records.

Payment and taxation information will not knowingly be used for unrelated advertising or marketing purposes merely because it has been submitted for payment administration.

---

19. INFORMATION COLLECTED AUTOMATICALLY

When you access or use the Platform, certain technical information may be collected automatically.

This may include:

• IP address;

• browser type;

• browser version;

• operating system;

• device type;

• approximate location derived from IP address;

• referring website;

• pages accessed;

• URL information;

• access timestamps;

• session duration;

• clicks;

• navigation activity;

• login activity;

• session identifiers;

• cookie identifiers;

• server logs;

• error logs;

• security logs;

• attempted access;

• fraud signals; and

• other technical information reasonably necessary to operate and secure the Platform.

Such information may be used for:

• Platform operation;

• authentication;

• troubleshooting;

• cybersecurity;

• fraud prevention;

• abuse detection;

• analytics;

• performance optimisation;

• measuring content usage;

• maintaining service reliability; and

• improving user experience.

---

20. COOKIES AND SIMILAR TECHNOLOGIES

Simhastha.org.in may use:

• cookies;

• local storage;

• pixels;

• session storage;

• browser identifiers;

• tracking parameters; and

• similar technologies.

Different technologies may serve different purposes.

Essential Technologies

Essential technologies may be used for:

• Account login;

• authentication;

• session management;

• security;

• fraud prevention;

• forms;

• load management;

• Website functionality; and

• essential preferences.

These technologies may be necessary for the relevant service to function correctly.

Analytics

Analytics technologies may be used, where permitted, for:

• traffic measurement;

• page-performance analysis;

• feature usage;

• audience statistics;

• technical diagnostics; and

• Website improvement.

Affiliate Attribution

Cookies or similar technologies may be used to determine:

• referral source;

• affiliate link used;

• campaign source;

• eligible conversions;

• referral validity; and

• commission attribution.

Advertising

Where advertising, personalised advertising, retargeting or campaign-measurement technologies are enabled, cookies or similar identifiers may be used for those purposes in accordance with applicable law and the choices provided to users.

Where consent is required before activating a non-essential technology, we will seek the applicable consent before that processing is initiated.

Users may generally control browser cookies through browser settings.

Disabling essential technologies may affect Website functionality.

---

21. ADVERTISING AND AD-INTERACTION INFORMATION

Where advertisements are displayed on Simhastha.org.in, we may process information including:

• advertisement impression;

• placement displayed;

• advertisement clicked;

• campaign identifier;

• timestamp;

• referral source;

• browser/device information;

• session identifier;

• frequency information;

• conversion information; and

• attribution information.

Where a user is logged in, Account-linked advertising interaction information may be processed where permitted by applicable law and consistent with the notices and choices provided to the user.

Such information may be used for:

• measuring advertisement effectiveness;

• preventing advertising fraud;

• limiting excessive advertisement repetition;

• campaign reporting;

• referral attribution;

• conversion measurement;

• improving advertising relevance; and

• lawful retargeting.

Displaying or clicking an advertisement does not by itself give an advertiser unrestricted access to:

• your private Account;

• Academy assessment answers;

• volunteer information;

• private Community data;

• passwords;

• confidential Certificate information;

• travel-enquiry details; or

• other unrelated private information.

---

22. OPTIONAL MARKETING AND COMMUNICATIONS

Where offered, users may choose to receive communications such as:

• Simhastha updates;

• event information;

• newsletters;

• Community updates;

• Academy information;

• volunteer opportunities;

• travel offers;

• partner offers;

• promotions; and

• other optional updates.

Communications may be provided through:

• email;

• SMS;

• WhatsApp;

• mobile notifications; or

• another authorised communication channel.

Where marketing is based upon consent, users may unsubscribe or withdraw that consent using the method made available.

Opting out of promotional messages does not necessarily prevent necessary:

• Account communications;

• authentication messages;

• security alerts;

• service notifications;

• Academy communications;

• Certificate communications;

• transactional communications;

• support responses; or

• other requested-service communications.

---

23. WHATSAPP COMMUNICATIONS

Where you provide your mobile number and request, authorise or consent to WhatsApp communication, we may communicate with you through WhatsApp.

Messages may concern:

• an enquiry submitted by you;

• Account functionality;

• Academy participation;

• Certificates;

• affiliate participation;

• requested travel assistance;

• support;

• Community participation; or

• updates for which you have subscribed.

WhatsApp is operated independently by its provider.

Use of WhatsApp is also subject to the provider's own privacy and security practices.

---

24. PURPOSES FOR WHICH WE PROCESS INFORMATION

Depending upon the Platform feature, personal information may be processed to:

• create Accounts;

• authenticate users;

• verify Accounts;

• provide Platform functionality;

• maintain profiles;

• administer Community participation;

• process volunteer-interest forms;

• administer the Simhastha Volunteer Academy;

• maintain learning progress;

• administer assessments;

• calculate scores;

• determine completion;

• issue Certificates;

• verify Certificates;

• prevent Certificate fraud;

• administer Lost and Found functionality;

• respond to enquiries;

• provide requested pilgrimage assistance;

• provide travel-planning assistance;

• connect users with suitable providers where authorised;

• administer affiliates;

• attribute referrals;

• process affiliate payments;

• send requested communications;

• maintain Website security;

• prevent fraud;

• prevent spam;

• investigate misuse;

• investigate cybersecurity events;

• enforce our Terms and policies;

• moderate User Content;

• address complaints;

• resolve grievances;

• maintain appropriate business records;

• comply with applicable laws;

• establish or defend legal rights;

• improve Platform functionality;

• understand Platform usage;

• measure advertising effectiveness; and

• perform other clearly disclosed purposes connected with a feature used by the user.

We do not intend to use personal information for a materially unrelated purpose merely because that information is already available to us.

Where additional consent or another legal requirement applies to a new purpose, the appropriate process will be followed.

---

25. BASIS FOR PROCESSING

Depending upon the applicable law, purpose and circumstances, personal information may be processed where:

• you have provided valid consent;

• you voluntarily requested a particular service;

• processing is required to provide functionality requested by you;

• processing is permitted as a legitimate use recognised under applicable law;

• processing is necessary for Platform security;

• processing is reasonably required to prevent fraud or abuse;

• processing is required to comply with a legal obligation;

• processing is required in connection with legal claims; or

• another lawful ground expressly permitted under applicable law applies.

Nothing in this section permits processing prohibited by applicable law.

---

26. CONSENT

Where we rely upon consent, consent should be obtained through an appropriate affirmative action connected with a clear purpose.

Examples may include:

• selecting an unchecked checkbox;

• submitting a consent-enabled form;

• enabling a preference;

• activating an optional feature;

• requesting partner contact;

• subscribing to a communication; or

• another affirmative indication of agreement.

Acceptance of general Terms and Conditions will not automatically be treated as consent for every unrelated type of personal-data processing.

Where appropriate, separate consent or choices may be provided for:

• promotional communications;

• WhatsApp marketing;

• travel-partner sharing;

• public profile visibility;

• optional Community features;

• advertising or retargeting technologies; and

• other activities requiring separate permission.

Where we rely upon consent, appropriate records may be maintained to demonstrate:

• the relevant user or Account;

• the purpose;

• the notice or consent version;

• the action through which consent was provided;

• date and time; and

• subsequent withdrawal, where applicable.

---

27. WITHDRAWAL OF CONSENT

Where personal information is processed on the basis of consent, a user may withdraw that consent using the available feature, communication mechanism or by contacting us.

Withdrawal should be processed in accordance with applicable law.

Withdrawal does not ordinarily make processing that lawfully occurred before the withdrawal invalid.

Where processing is genuinely necessary to provide a requested service, withdrawing relevant consent may prevent continuation of that service.

For example, withdrawing consent for sharing an active travel enquiry with providers may prevent further provider matching.

Limited information may continue to be processed or retained where another applicable legal basis permits or requires it.

---

28. DATA MINIMISATION

We seek to collect personal information reasonably connected with the service or purpose for which it is requested.

Users should not submit unnecessary personal information.

Where a field is optional, users may generally choose whether to provide it unless the information later becomes genuinely necessary for the requested feature.

We may modify forms over time to reduce unnecessary collection.

---

29. INFORMATION ACCURACY

Users are responsible for providing reasonably accurate information.

Users should keep important Account information updated.

Incorrect information may affect:

• Account access;

• Certificate names;

• Academy records;

• volunteer applications;

• affiliate payments;

• travel enquiries;

• communications; or

• other Platform functionality.

We may request reasonable verification before making material changes to certain records.

---

30. SHARING OF PERSONAL INFORMATION

We do not sell or rent our private registered-user database as a standalone commercial database.

Personal information may nevertheless be disclosed in the limited circumstances described in this Privacy Policy.

---

31. SERVICE PROVIDERS AND DATA PROCESSORS

We may use service providers to operate Platform functionality.

Depending on our technical setup, these may include providers of:

• website hosting;

• cloud infrastructure;

• databases;

• content delivery;

• backups;

• cybersecurity;

• authentication;

• email;

• SMS;

• WhatsApp or messaging;

• analytics;

• technical support;

• error monitoring;

• payment processing;

• affiliate tracking;

• advertising technology; and

• other operational services.

Providers processing information on our behalf should receive only the access reasonably necessary for their function.

Where appropriate and required, we may maintain:

• confidentiality obligations;

• data-processing terms;

• security requirements;

• access restrictions;

• breach-notification obligations; and

• other contractual or technical safeguards.

Independent providers acting for their own purposes are responsible for their own applicable privacy obligations.

---

32. AFFILIATE INFORMATION SHARING

Affiliate participants may receive information reasonably necessary to understand eligible referrals, transactions or commissions.

An affiliate should not ordinarily receive unnecessary private information about a referred user.

Affiliate dashboards may display information such as:

• referral identifier;

• transaction status;

• conversion status;

• eligible amount;

• commission amount; or

• anonymised or limited attribution information.

Private Account information should not be disclosed merely because another person originally provided a referral link.

---

33. PUBLIC INFORMATION

Information deliberately published by a user in a public Community or profile area may be publicly visible according to the settings and functionality communicated to that user.

Users are responsible for deciding what they voluntarily make public.

We may restrict, redact, preserve or remove User Content where reasonably necessary for:

• privacy;

• security;

• safety;

• moderation;

• compliance with law;

• enforcement of Terms;

• fraud prevention; or

• protection of another person.

---

34. LEGAL AND REGULATORY DISCLOSURES

We may preserve, process or disclose information where reasonably necessary to:

• comply with applicable law;

• respond to valid legal process;

• comply with a court order;

• comply with a lawful government or regulatory request;

• comply with statutory reporting requirements;

• investigate fraud;

• investigate cybersecurity incidents;

• prevent misuse;

• enforce Platform rights;

• protect users;

• protect Platform infrastructure;

• prevent imminent harm; or

• establish, exercise or defend legal claims.

Information will not be disclosed merely because an unrelated third party informally requests it.

We may seek verification or legal documentation before responding to requests for private information.

---

35. BUSINESS TRANSFERS AND RESTRUCTURING

If ownership or operation of all or part of Simhastha.org.in changes through:

• sale;

• merger;

• restructuring;

• reorganisation;

• succession;

• transfer of business;

• transfer of assets; or

• another lawful transaction,

personal information reasonably connected with the affected operations may be transferred where permitted by applicable law.

Any receiving person or entity will remain subject to applicable data-protection requirements.

---

36. INFORMATION YOU SHOULD NOT PROVIDE

Unless a specific feature expressly and lawfully requests it for a clearly disclosed purpose, users should not submit:

• passwords;

• OTPs;

• card PINs;

• banking passwords;

• complete Aadhaar information;

• unnecessary government identification;

• credit-card security codes;

• confidential medical records;

• biometric information;

• private information belonging to another person;

• unnecessary highly sensitive financial information; or

• other information unrelated to the requested service.

Simhastha.org.in will not legitimately require users to provide their Account password or OTP through an ordinary Community post, comment or unsolicited support message.

---

37. SECURITY OF PERSONAL INFORMATION

We maintain or implement reasonable technical and organisational safeguards appropriate to the Platform, nature of the information and reasonably foreseeable risks.

Depending upon the system and information involved, safeguards may include:

• HTTPS and encrypted network transmission;

• secure authentication;

• appropriate password hashing;

• access controls;

• role-based administrative access;

• restricted database access;

• security logging;

• monitoring;

• backups;

• rate limiting;

• malware protection;

• vulnerability remediation;

• fraud-detection mechanisms;

• secure configuration;

• session controls; and

• restrictions based upon operational necessity.

Access to personal information should be limited to persons and systems reasonably requiring that access.

We may periodically review security practices as Platform functionality changes.

No internet-connected system can guarantee absolute security.

Accordingly, while reasonable safeguards are used, Simhastha.org.in cannot guarantee that every cyberattack, technical failure, malicious act or unauthorised attempt will always be prevented.

---

38. PERSONAL DATA BREACHES AND CYBERSECURITY INCIDENTS

Where we become aware of a personal-data breach or cybersecurity incident, we will take appropriate measures based on the nature and circumstances of the event.

Measures may include:

• investigating the incident;

• containing affected systems;

• restricting access;

• preserving relevant logs or evidence;

• securing Accounts;

• resetting credentials;

• correcting vulnerabilities;

• implementing remediation;

• assessing the affected information;

• communicating appropriate protective measures; and

• notifying users, CERT-In, the Data Protection Board of India or another competent authority where and when required by applicable law.

Users who believe their Account or information has been compromised should contact:

[email protected]

as soon as reasonably possible.

---

39. SECURITY AND SYSTEM LOGS

We may maintain certain:

• server logs;

• access logs;

• authentication logs;

• security logs;

• fraud-prevention records;

• traffic records;

• system-event records; and

• cybersecurity records

for periods reasonably necessary for:

• cybersecurity;

• incident investigation;

• fraud prevention;

• service reliability;

• legal compliance; and

• enforcement of Platform policies.

Where applicable law or binding cybersecurity requirements require specific logs to be maintained for a particular period or in a particular manner, we will follow the applicable requirement.

---

40. DATA RETENTION

We do not intend to retain all personal information indefinitely.

Retention periods depend upon factors including:

• purpose of collection;

• Account status;

• ongoing service requirements;

• Certificate verification;

• programme administration;

• fraud prevention;

• security;

• legal disputes;

• complaints;

• taxation;

• accounting;

• legally required record preservation;

• statutory obligations; and

• other legitimate operational requirements permitted by law.

Personal information that is no longer reasonably required should be deleted, anonymised, suppressed or access-restricted, subject to applicable legal or operational requirements.

---

41. ACCOUNT INFORMATION RETENTION

Account information may generally be maintained while an Account remains active.

After closure, limited information may remain temporarily or for a legally justified period where reasonably required for:

• Account security;

• fraud prevention;

• previous transactions;

• unresolved disputes;

• legal claims;

• statutory recordkeeping;

• Certificate verification; or

• other purposes permitted by applicable law.

---

42. ACADEMY INFORMATION RETENTION

Learning progress, assessment and Academy information may be retained while reasonably necessary to:

• operate the Academy;

• maintain learner progress;

• conduct assessments;

• issue Certificates;

• verify Certificates;

• prevent assessment abuse;

• resolve Certificate disputes; and

• maintain educational or programme records.

Assessment information that is no longer reasonably required may be deleted or anonymised where appropriate.

---

43. CERTIFICATE INFORMATION RETENTION

Limited Certificate information may be retained for an extended period where necessary for:

• authenticity;

• credential verification;

• fraud prevention;

• correction history;

• revocation history;

• historical credential records; and

• Certificate integrity.

Retention of a minimum verification record may continue even after Account deletion where reasonably necessary to maintain the validity and verification of a Certificate previously issued.

---

44. AFFILIATE AND FINANCIAL INFORMATION RETENTION

Affiliate transactions, commission records, payment information, invoices and tax-related records may be retained for the periods required or reasonably justified for:

• taxation;

• accounting;

• audits;

• payment disputes;

• fraud prevention; and

• legal compliance.

---

45. TRAVEL-ENQUIRY RETENTION

Travel-enquiry information may be retained while reasonably necessary for:

• responding to the enquiry;

• providing requested assistance;

• completing an introduction or service;

• follow-up requested by the user;

• resolving disputes;

• preventing fraud;

• maintaining appropriate business records; and

• complying with legal requirements.

Information no longer reasonably required should be deleted or anonymised subject to applicable obligations.

---

46. BACKUPS

Information removed from active systems may remain temporarily within secured backup systems until the relevant backup cycle expires.

Backup information is generally maintained for disaster recovery, security and system restoration rather than ordinary business use.

Where reasonably practicable, information deleted from active systems will not be restored into ordinary use merely because an older backup contains it.

---

47. ACCOUNT DELETION

Where Account deletion functionality is available, users may request closure or deletion of their Account.

Account deletion may affect or remove access to:

• profile information;

• preferences;

• Academy progress;

• Community functionality;

• volunteer application history;

• saved information; and

• other Account-dependent features.

Account deletion does not necessarily require immediate destruction of every associated record.

Limited information may remain where reasonably necessary or legally permitted for:

• Certificate verification;

• fraud prevention;

• cybersecurity;

• financial records;

• statutory retention;

• legal claims;

• dispute resolution;

• abuse prevention;

• previously completed transactions; or

• compliance obligations.

Where reasonably possible, unnecessary identifying information should be deleted, anonymised or access-restricted.

---

48. PRIVACY RIGHTS

Subject to applicable law and the statutory provisions in force at the relevant time, users may have rights relating to their personal information.

These may include rights to request:

• information concerning personal-data processing;

• access to applicable information;

• correction of inaccurate information;

• completion of incomplete information;

• updating of information;

• erasure of eligible personal information;

• withdrawal of consent;

• grievance redressal; and

• nomination of another person to exercise applicable rights in circumstances recognised by law.

Users may also be able to:

• modify Account information;

• change communication preferences;

• manage certain consent choices;

• disable certain cookies; and

• request Account closure.

Rights may be subject to reasonable legal, security, identity-verification and record-retention requirements.

---

49. VERIFYING PRIVACY REQUESTS

To protect users from fraudulent requests, we may require reasonable information to verify:

• identity;

• Account ownership;

• email ownership;

• mobile-number ownership;

• Certificate ownership; or

• authority to act on behalf of another person.

We will not knowingly disclose private Account information simply because a person claims to be the Account holder.

Verification requirements should be proportionate to the nature of the requested information or action.

---

50. ERASURE AND DELETION REQUESTS

Where applicable law provides a right to erasure, users may request deletion of eligible information.

Deletion may not apply to information that must or may lawfully continue to be retained for reasons such as:

• legal compliance;

• cybersecurity;

• fraud prevention;

• unresolved complaints;

• financial records;

• accounting;

• taxation;

• legal proceedings;

• legal claims;

• Certificate integrity;

• statutory preservation; or

• completed transactions.

Where only part of a record needs continued retention, we may seek to minimise the information retained.

---

51. CHILDREN AND USERS UNDER 18

For purposes of our privacy safeguards and applicable Indian data-protection requirements, individuals under 18 years of age may be treated as children where applicable.

The Platform may provide general informational, cultural or educational content that can be viewed by younger users.

However, Account-based or interactive features may require:

• age eligibility;

• parental involvement;

• lawful guardian involvement;

• verifiable parental consent;

• age verification; or

• additional restrictions.

Where applicable law requires verifiable consent from a parent or lawful guardian before processing a child's personal information, the appropriate mechanism must be completed before such processing.

Unless an appropriate child-specific process is available, children should not knowingly submit personal information through adult-oriented features such as:

• affiliate registration;

• travel enquiries;

• public Community participation; or

• other features designated for adults.

Where prohibited by applicable law, we will not knowingly engage in:

• targeted advertising directed at children;

• behavioural monitoring of children; or

• tracking of children for advertising purposes.

A parent or lawful guardian who believes a child has improperly submitted personal information may contact us.

A child's ability to access educational material or obtain an independent learning Certificate does not automatically establish eligibility for:

• official volunteering;

• government appointment;

• employment;

• field deployment; or

• another third-party opportunity.

---

52. INFORMATION ABOUT OTHER PEOPLE

Users must not submit another person's personal information unless:

• the person has authorised it;

• the user has appropriate permission;

• the user is legally authorised;

• the user is the parent or lawful guardian where appropriate; or

• another lawful ground exists.

Users organising travel for a family or group should avoid providing unnecessary private information relating to other travellers.

---

53. PRIVACY AND ADVERTISERS

Advertisers may receive information concerning advertising performance such as:

• impressions;

• clicks;

• campaign results;

• conversion information;

• aggregated reporting; or

• attribution information.

Displaying an advertisement does not automatically give the advertiser access to:

• private Account profiles;

• Academy assessment responses;

• volunteer applications;

• private Community information;

• passwords;

• confidential Certificate information;

• travel-enquiry details; or

• unrelated personal information.

Any materially different disclosure will be subject to appropriate notice, permission or other lawful basis where required.

---

54. NO SALE OF PRIVATE USER DATABASES

Simhastha.org.in does not sell, rent or trade its private registered-user database as a standalone commercial database for unrelated third-party marketing.

This statement does not prevent the processing expressly described in this Privacy Policy, including:

• authorised service-provider processing;

• authorised travel-partner introductions;

• affiliate attribution;

• advertising measurement;

• lawful corporate restructuring;

• legal disclosures; or

• other processing appropriately disclosed and permitted under applicable law.

---

55. CROSS-BORDER PROCESSING

Some providers of:

• hosting;

• cloud infrastructure;

• authentication;

• analytics;

• cybersecurity;

• communications;

• payments;

• content delivery; or

• other technology services

may use infrastructure located outside India.

Where personal information is processed or made available outside India, such processing will be handled subject to applicable Indian laws and any legally applicable restrictions or requirements concerning cross-border processing.

We may change technology providers as Platform requirements evolve, subject to applicable privacy obligations.

---

56. AUTOMATED PROCESSING

We may use automated processes for ordinary Platform functions including:

• calculating assessment scores;

• determining whether a passing threshold has been achieved;

• detecting suspicious login behaviour;

• detecting spam;

• identifying potential fraud;

• affiliate attribution;

• advertisement frequency management; and

• recommending content.

Where an automated process materially affects an important Platform entitlement and appropriate review or correction is reasonably required, we may provide a suitable review mechanism.

Personal information will not knowingly be used for unlawful discriminatory automated decision-making.

---

57. FRAUD, ABUSE AND SECURITY MONITORING

To protect Simhastha.org.in and its users, we may analyse information including:

• login behaviour;

• IP addresses;

• Account activity;

• assessment activity;

• referral patterns;

• affiliate conversions;

• Certificate activity;

• verification activity;

• form submissions;

• advertising interaction;

• Community activity; and

• other Platform activity

to identify potential:

• fraud;

• bots;

• spam;

• fake Accounts;

• Account takeover;

• Certificate manipulation;

• assessment manipulation;

• affiliate abuse;

• advertising fraud;

• cybersecurity attacks;

• scraping;

• unauthorised access; or

• violations of Platform policies.

Where suspicious activity is detected, an Account, transaction, Certificate or feature may be temporarily restricted while appropriate review occurs.

---

58. THIRD-PARTY WEBSITES AND SERVICES

Simhastha.org.in may contain links to independent:

• government websites;

• news websites;

• hotels;

• booking platforms;

• travel providers;

• transportation providers;

• payment providers;

• social networks;

• advertisers;

• affiliate partners;

• maps;

• video platforms; and

• other external services.

We do not control the privacy, security or data-handling practices of independent third-party websites.

The presence of a link does not mean Simhastha.org.in controls or guarantees the external provider's privacy practices.

Users should review the relevant provider's privacy policy before submitting information directly to that provider.

---

59. GOOGLE AND OTHER TECHNOLOGY SERVICES

Platform functionality may use independent technology services such as:

• Google authentication;

• Google services;

• map providers;

• analytics services;

• video or media embedding;

• email providers;

• SMS providers;

• messaging providers;

• advertising platforms;

• payment services; and

• cloud infrastructure providers.

When you interact with an independent provider's feature, information may also be processed by that provider under its own policies and terms.

---

60. USER RESPONSIBILITIES

Users should help protect their privacy and Account security by:

• using a strong password;

• keeping passwords confidential;

• never sharing OTPs;

• keeping authentication information secure;

• signing out from shared devices;

• keeping Account information updated;

• avoiding unnecessary public disclosure;

• verifying third-party links;

• not uploading unnecessary identity documents;

• protecting sensitive travel or financial information; and

• promptly reporting suspicious Account activity.

Users must not impersonate another person or submit fraudulent privacy requests.

---

61. PRIVACY REQUESTS AND GRIEVANCES

For questions, complaints, privacy requests, consent withdrawal, correction requests or deletion requests, contact:

Email:
[email protected]

Website:
Simhastha.org.in

Users are encouraged to include:

“Privacy Request”

in the email subject line.

Please provide sufficient information for us to understand the request and reasonably verify the requester where necessary.

Where applicable law specifies a particular grievance process, response mechanism, escalation process or statutory timeframe, the applicable procedure will be followed.

Nothing in this Privacy Policy prevents an individual from exercising any lawful right to approach a competent data-protection authority, Data Protection Board, regulator, court, tribunal or other authority where such right is available under applicable law.

---

62. DATA PROTECTION CONTACT

The person or designation responsible for handling privacy-related matters on behalf of Simhastha.org.in may be contacted at:

Email:
[email protected]

Website:
Simhastha.org.in

Where applicable law requires appointment or publication of a separate:

• Data Protection Officer;

• grievance officer;

• nodal officer; or

• other designated person,

the required details will be published separately or incorporated into this Policy as appropriate.

---

63. CHANGES TO THIS PRIVACY POLICY

Simhastha.org.in may modify, amend, replace or update this Privacy Policy to reflect changes in:

• applicable law;

• regulatory requirements;

• technology;

• Platform functionality;

• services;

• security practices;

• programmes;

• third-party providers;

• data-processing activities; or

• business operations.

The latest version will be published on this page with an updated “Last Updated” date.

Users are encouraged to review this Privacy Policy periodically.

Where a change requires under applicable law:

• specific notice;

• fresh consent;

• renewed consent;

• additional choices; or

• another prescribed procedure,

we will follow the applicable requirement.

Continued use of the Platform after an updated Privacy Policy is published may constitute acknowledgement of the updated notice where legally appropriate.

However, continued use of the Website will not automatically constitute consent to a materially new processing purpose where affirmative consent is legally required.

An updated Privacy Policy will not retrospectively remove mandatory statutory privacy rights.

---

64. RELATIONSHIP WITH TERMS AND OTHER POLICIES

This Privacy Policy governs the handling of personal information.

Our Terms and Conditions separately govern use of Simhastha.org.in.

Additional policies or notices may govern specific areas, including:

• Community participation;

• affiliate programmes;

• Simhastha Volunteer Academy participation;

• Certificate issuance;

• travel enquiries;

• advertising;

• cookies;

• User Content; and

• particular promotions or programmes.

Where a contractual provision conflicts with a mandatory right or obligation under applicable law, the mandatory legal requirement will prevail.

---

65. SEVERABILITY

If any provision of this Privacy Policy is determined by a competent authority to be invalid or unenforceable, that provision will be interpreted or limited to the minimum extent necessary where legally permissible.

The remaining provisions will continue to operate to the extent permitted by law.

---

66. NO WAIVER OF STATUTORY RIGHTS

Nothing in this Privacy Policy is intended to:

• waive a mandatory privacy right;

• exclude a legally non-excludable obligation;

• prevent a lawful complaint;

• restrict access to a competent regulatory authority; or

• prevent a user from exercising a remedy available under applicable law.

---

67. GOVERNING LAW AND JURISDICTION

This Privacy Policy will be interpreted in accordance with the applicable laws of India.

Nothing in this Policy prevents a user from exercising any right before a competent:

• statutory authority;

• Data Protection Board;

• regulator;

• tribunal;

• consumer forum;

• court; or

• other authority

where jurisdiction cannot lawfully be excluded.

Subject to mandatory statutory jurisdiction requirements, matters concerning Simhastha.org.in may be handled by competent courts having jurisdiction in:

Ujjain, Madhya Pradesh, India.

---

68. CONTACT US

For questions concerning:

• this Privacy Policy;

• Account privacy;

• consent;

• withdrawal of consent;

• Account deletion;

• correction of information;

• Certificate privacy;

• Simhastha Volunteer Academy information;

• volunteer applications;

• Community information;

• Lost and Found privacy;

• travel enquiries;

• affiliate information;

• advertising information;

• security concerns; or

• other privacy-related matters,

contact:

Legal Operator:
[INSERT EXACT LEGAL NAME]

Privacy / Grievance Contact:
[INSERT NAME OR DESIGNATION]

Email:
[email protected]

Address:
[INSERT COMPLETE ADDRESS]

Website:
Simhastha.org.in

Location:
Ujjain, Madhya Pradesh, India

Please use “Privacy Request” in the subject line where appropriate.

---

69. PRIVACY COMMITMENT

Simhastha.org.in is committed to handling personal information responsibly and for legitimate Platform purposes.

Our privacy approach is:

Collect only what is reasonably required → clearly explain the purpose → obtain appropriate consent or other lawful authorisation where required → protect information → restrict unnecessary access → use information only for disclosed and lawful purposes → provide appropriate user controls → retain information only as long as justified → delete, anonymise or restrict information when it is no longer reasonably required, subject to applicable legal obligations.

---

END OF PRIVACY POLICY