Privacy Policy

Last updated: March 2026

Charan-Bahi ("we", "us", or "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights under applicable law including India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Information We Collect

Registration data: name, email address, mobile number, city, address, and postcode.
Order data: records you purchase, payment amounts, and transaction IDs.
Session data: a temporary session cookie to keep you logged in.
Usage data: pages visited (not shared with third parties).

2. How We Use Your Information

To process and fulfil your orders (genealogy PDF downloads).
To send order confirmations and password reset emails.
To provide customer support.
To comply with legal obligations.

3. Payment Processing

Payments are processed by Razorpay. We do not store your card or UPI credentials. Razorpay's privacy policy applies to payment data.

4. Data Retention

We retain account data for as long as your account is active. Order records are retained for accounting and legal compliance purposes. You may request deletion of your account by contacting us.

5. Sharing of Data

We do not sell or rent your personal data. Data is shared only with:

Razorpay (payment processing)
Our email service provider (order notifications)
Law enforcement, if required by law

6. Your Rights

Under the DPDP Act 2023 and applicable law, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data (via the My Profile page).
Request deletion of your account and data.
Withdraw consent for communications.

7. Cookies

We use a single session cookie required for login. We do not use advertising or tracking cookies.

8. Security

Passwords are hashed using industry-standard algorithms. All traffic is encrypted via HTTPS. Access to the admin panel is restricted by role-based permissions.

9. Contact

For any privacy-related questions or requests, please contact us at admin@charans.org.