Overview
Who we are and what this policy covers
ShaniMandirSeva ("we", "our", or "us") is a Hindu devotional donation platform dedicated to facilitating sacred giving, temple donations, and spiritual services across India. Our platform is operated by a voluntary devotional organisation based at the Government Senior Secondary School premises, Karan Village, Sikar, Rajasthan — 332001, India.
This Privacy Policy describes the types of information we collect from users of our website at shanimandirseva.org (the "Website"), how that information is used, how it is stored and protected, and the choices you have regarding your personal data.
By accessing or using our Website, registering an account, or making a donation, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.
We collect only the information necessary to provide our services. We do not sell your personal data to third parties. All data is used solely for the purpose of facilitating devotional donations and temple services.
Information We Collect
Categories of personal data collected through our platform
2.1 Information You Provide Directly
When you register an account, make a donation, or use our services, you may provide us with the following personal information:
| Category | Data Collected | When Collected |
|---|---|---|
| Identity | Full name, gotra (optional) | Registration, donation form |
| Contact | Email address, phone number | Registration, donation form |
| Donation | Donation amount, temple selected, purpose, message or sankalpa | At time of donation |
| Account | Email address, encrypted password | Account registration |
| Payment | Payment reference number, transaction status (no card details stored by us) | During payment processing |
2.2 Information Collected Automatically
When you visit our Website, we may automatically collect the following technical information through cookies and server logs:
- Internet Protocol (IP) address and approximate geographic location (city/country level)
- Browser type, version, and operating system
- Pages visited on our Website and time spent on each page
- Date and time of each visit and referring URL
- Device type (desktop, tablet, or mobile) and screen resolution
- Aggregated website usage patterns for performance improvements
2.3 Information We Do Not Collect
We want to be explicit about what we do not collect or store:
- Full credit card or debit card numbers
- Bank account details or net banking credentials
- UPI PINs, OTPs, or wallet passwords
- Government-issued identity document numbers (Aadhaar, PAN, etc.)
- Sensitive personal information beyond what is listed above
Purpose of Data Collection
Why we collect your information and how it is used
We use the information we collect for the following specific, lawful purposes:
- Processing Donations — To record, process, and confirm your donation to the selected temple or campaign.
- Issuing Donation Receipts — To send you an official digital receipt and confirmation of your contribution via email.
- Temple Seva Records — To include your name and gotra in the temple's puja or donation records as requested.
- Account Management — To create and manage your registered devotee account, including login authentication and donation history.
- Customer Support — To respond to your queries, complaints, or refund requests in a timely manner.
- Platform Improvement — To analyse anonymous usage data and improve the performance and usability of our Website.
- Legal Compliance — To maintain accurate donation records for financial and legal compliance purposes as required under Indian law.
- Communication — To send you important updates about your donation, temple campaigns, or changes to our policies (you may opt out of non-essential communications at any time).
We do not send marketing communications without your explicit consent. You may unsubscribe from any email communication by clicking the unsubscribe link in any email we send.
Payment Information & Security
How your financial transactions are processed and protected
All payment transactions on ShaniMandirSeva are processed through Razorpay, a licensed Payment Aggregator regulated by the Reserve Bank of India (RBI). ShaniMandirSeva does not directly collect, process, or store any payment card information on its servers.
4.1 How Payment Processing Works
- When you initiate a donation, you are redirected to or interact with Razorpay's secure payment interface.
- All card details, net banking credentials, UPI information, and wallet data are entered directly on Razorpay's servers — not on ShaniMandirSeva's servers.
- Razorpay transmits payment data using TLS (Transport Layer Security) encryption.
- Razorpay is PCI DSS Level 1 compliant, the highest level of certification in the payment industry.
- ShaniMandirSeva receives only a transaction reference number and payment status (success/failure) from Razorpay.
4.2 Razorpay's Privacy Policy
Your financial data processed by Razorpay is governed by Razorpay's own Privacy Policy, which is available at razorpay.com/privacy. We encourage you to review their policy to understand how your payment data is handled.
ShaniMandirSeva never stores credit card numbers, CVV codes, UPI PINs, or banking passwords. All financial transactions are processed through Razorpay's PCI DSS certified infrastructure.
Cookies & Analytics
How we use cookies and website analytics tools
Our Website uses cookies — small text files stored on your device — to enhance your browsing experience and analyse website usage. The following types of cookies may be used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Required for the Website to function — session management, login authentication, and form security (CSRF tokens). | Session |
| Functional | Remember your preferences such as language, selected temple, or donation amount for a smoother experience. | 30 days |
| Analytics | Track anonymous usage patterns — page visits, time spent, and navigation flow — to improve website performance. | 12 months |
5.1 Google Analytics
We may use Google Analytics to understand how visitors interact with our Website. Google Analytics collects anonymous usage data and does not identify individual users. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
5.2 Managing Cookies
You may control or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of certain features of our Website, including the login system and donation form. Most modern browsers allow you to:
- View all cookies stored on your device
- Delete specific cookies or all cookies
- Block cookies from specific websites
- Set preferences for future cookie storage
Data Security
The technical and organisational measures we use to protect your data
We take the security of your personal information seriously. The following security measures are implemented to protect your data:
- Encryption in Transit — All data transmitted between your browser and our servers is encrypted using HTTPS (TLS 1.2 or higher).
- Password Hashing — User passwords are stored as one-way cryptographic hashes using the bcrypt algorithm. We cannot retrieve your plain-text password.
- Access Controls — Access to personal data is restricted to authorised personnel only and is governed by the principle of least privilege.
- Database Security — Our database servers are not publicly accessible and are protected by firewall rules and regular security patching.
- Regular Backups — Data is regularly backed up to prevent accidental loss, and backups are stored securely.
- Security Reviews — We conduct periodic reviews of our security practices and address identified vulnerabilities promptly.
While we implement industry-standard security measures, no method of data transmission or storage is 100% secure. In the unlikely event of a data breach that affects your personal information, we will notify you as required under applicable Indian data protection laws.
Third-Party Services
External services and partners that may process your data
We use a limited number of trusted third-party services to operate our platform. Each third party is bound by their own privacy policies:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Razorpay | Payment processing for donations | Name, email, phone, donation amount |
| Google Analytics | Anonymous website usage analytics | Anonymous browsing data (no personal identifiers) |
| Google Fonts | Website typography | IP address (for font file delivery) |
| Web Hosting Provider (Hostinger) | Website and database hosting | All website data (stored on their servers) |
We do not sell, rent, or trade your personal information to any third party for commercial purposes. We do not share your data with advertising networks.
Disclosure of Your Data
Circumstances under which we may share your information
We do not share your personal information with third parties except in the following limited circumstances:
- Service Providers — With third-party vendors listed in Section 7 who perform services on our behalf, under strict data processing agreements.
- Legal Obligations — When required to do so by law, court order, or governmental authority under applicable Indian law.
- Protection of Rights — When necessary to protect the rights, property, or safety of ShaniMandirSeva, its users, or the public.
- Fraud Prevention — To investigate and prevent fraudulent transactions, abuse, or illegal activities on our platform.
- Temple Records — Your name and gotra may be shared with the selected temple's administration for inclusion in their sacred puja or donation records, as you have requested.
Data Retention
How long we retain your personal information
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | Until account deletion + 30 days | Account management and security |
| Donation Records | 7 years from date of donation | Financial record-keeping and legal compliance |
| Payment Transaction Data | 7 years | Tax compliance and dispute resolution |
| Website Analytics | 26 months (aggregated, anonymous) | Website improvement |
| Support Communications | 3 years | Quality assurance and dispute resolution |
You may request deletion of your account and associated personal data at any time, subject to our legal obligation to retain certain records (such as donation transaction data).
Your Rights
Your rights regarding your personal information
Subject to applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:
- Right to Access — Request a copy of the personal information we hold about you.
- Right to Correction — Request correction of inaccurate or incomplete personal information.
- Right to Erasure — Request deletion of your personal data, subject to our legal retention obligations.
- Right to Portability — Request your personal data in a structured, machine-readable format.
- Right to Object — Object to the processing of your personal data for direct marketing purposes.
- Right to Nominate — Nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, please contact us at shanimandirseva@gmail.com. We will respond to your request within 30 days.
Children's Privacy
Our policy regarding users under the age of 18
Our Website and services are not directed to individuals under the age of 18 years. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us immediately at shanimandirseva@gmail.com, and we will take steps to delete such information promptly.
Donations made on behalf of a minor must be made by a parent or legal guardian who is at least 18 years of age.
Changes to This Policy
How we notify you when this Privacy Policy is updated
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes to this policy, we will:
- Update the "Last Updated" date at the top of this page.
- Send an email notification to registered users at the email address on file.
- Display a prominent notice on our Website for a period of at least 30 days.
Your continued use of our Website after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
Contact Us
Reach out with any privacy-related questions or concerns
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through any of the following channels. We are committed to addressing your concerns promptly and thoroughly.
Privacy & Data Officer — ShaniMandirSeva
We aim to respond to all privacy-related inquiries within 7 business days.