Privacy Notice — Digital Personal Data Protection Act, 2023

Who we are

SAMAVIKASA — SustaiNxt Initiative, 11-9-28, Plot No. 62, Road No. 1A, Dasapalla Hills, Visakhapatnam – 530003, Andhra Pradesh, India, is the Data Fiduciary for personal data collected through this website.

Questions, grievances and consent withdrawal requests: privacy@samavikasa.org.

What we collect

Only what you voluntarily provide: your name, mobile number, email address, the role or pathway you choose, and any notes or event details you write.

When you post an event we also record the event title, description, date, venue, host and contact email.

We do not run advertising trackers, we do not profile you, and we do not knowingly collect data of children.

Why we collect it (purpose)

To contact you about the SAMAVIKASA initiative, to respond to your idea or submission, to invite you to relevant forums, workshops and gatherings, and to review and publish events you submit.

Your data is processed only for these stated purposes and for no other purpose.

Legal basis and consent

Processing is based on your free, specific, informed, unconditional and unambiguous consent given by a clear affirmative action, as required by Section 6 of the Digital Personal Data Protection Act, 2023.

Every consent is recorded in a consent register with the exact notice text shown to you, the notice version, and the date and time of consent. This register is maintained for audit and accountability.

Your rights as a Data Principal

Right to access a summary of your personal data and how it is processed.

Right to correction, completion, updating and erasure of your personal data.

Right to withdraw consent at any time — as easily as it was given — by writing to privacy@samavikasa.org. Withdrawal is recorded against your consent entry and processing stops.

Right to grievance redressal, and the right to nominate another individual to exercise your rights in the event of death or incapacity.

We respond to verified requests within a reasonable period, ordinarily within 30 days.

Sharing, retention and security

We do not sell your data. We share it only with team members and processors who need it to contact you, under confidentiality obligations.

Data is stored on secured, access-controlled infrastructure with row-level access rules; submissions cannot be read from the public website.

We retain personal data only as long as needed for the stated purpose. Once the purpose is served or consent is withdrawn, the data is erased, except where retention is required by law. The consent record itself is retained as proof of lawful processing.

Breach notification

In the event of a personal data breach, we will notify the Data Protection Board of India and each affected Data Principal as required under the DPDP Act, 2023.