BONDHEAL SERVICES PVT LTD - PRIVACY POLICY

1. Introduction

Welcome to BondHeal Services Private Limited (“BondHeal,” “Company,” “We,” “Us”). We value the trust you place in us and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose your information when you use our website www.bondheal.com, mobile application, and related services (the “Platform”).

By using the Platform, you expressly consent to the collection and use of your information as described in this Policy and our Terms of Use.

2. Information We Collect

We collect several types of information to provide a smooth and safe experience:

• Identity Data: Full name, date of birth, gender, and photographs.
• Contact Data: Email address, phone number, and physical billing/shipping address.
• KYC Data: PAN card (masked), Aadhaar (masked), and Government-issued IDs required for statutory verification.
• Financial Data: Bank account details and IFSC/SWIFT codes. For credit/debit cards, we follow PCI-DSS standards—we do not store full card numbers or CVV.
• Technical Data: IP address, browser type, geo-location, and device specifications.
• Synthetic Media Disclosure: Data regarding whether campaign content is AI-generated (as per 2026 regulations).

3. How We Collect Your Data

• Direct Interaction: Information you provide when creating a fundraiser, donating, or contacting support.
• Automated Technologies: We use "Cookies," server logs, and web beacons to track site flow and effectiveness. Session timeout is set to 14 days.
• Third-Party Sources: Data from social media logins (Facebook/Google), analytics providers (Google Analytics), and payment gateways (Razorpay, PayU, Stripe).

4. How We Use Your Personal Data

We only process your data under the following legal bases:

• Performance of Contract: To register you, process donations, and disburse funds.
• Legal Obligation: To comply with AML (Anti-Money Laundering), FCRA, and Tax laws.
• Legitimate Interest: To detect fraud, prevent site abuse, and improve our services.
• Consent: To send you newsletters or marketing updates via WhatsApp, Email, or SMS (which you can opt out of at any time).

5. Sharing of Personal Information

• Campaigners & Beneficiaries: We share the donor’s name and contact info with the campaigner to facilitate updates and rewards. Donors may choose to remain "Anonymous" on the public page, but contact info remains accessible to the campaigner for legal/logistical reasons.
• Service Providers: We share data with banks, payment gateways, and KYC verification agencies.
• Legal Requirements: We will disclose data to law enforcement or the Economic Offences Wing (EOW) if required by a court order or to prevent fraud.
• Business Transfers: In the event of a merger or sale, your data will be transferred to the new entity under the same privacy protections.

6. Your Rights (Data Principal Rights)

Under the DPDP Act 2023, you have the following rights:

• Right to Access: Request a summary of your personal data being processed.
• Right to Correction/Erasure: Correct inaccurate data or request deletion (subject to legal retention requirements).
• Right to Withdraw Consent: Stop our processing of your data by deactivating your account.
• Right to Grievance Redressal: Contact our Grievance Officer if you feel your privacy is compromised.

7. Data Security & Retention

• Security: We use industry-standard encryption (SSL) and secure cloud hosting (AWS/Azure) to protect your data. However, the internet is not 100% secure; we are not liable for breaches caused by "Force Majeure" events (hacks beyond reasonable control, natural disasters).
• Retention: We keep your data only as long as necessary for the purpose it was collected or as required by Indian tax and financial laws (typically 7-10 years).

8. Prohibited Activities & Third-Party Links

Our site may contain links to third-party websites. BondHeal is not responsible for the privacy practices of those external sites.

Usage of the platform to host deepfakes or non-consensual AI-generated content is strictly prohibited and will result in a permanent ban.

9. Grievance Officer

In accordance with the Information Technology Act and DPDP Act, if you have questions or complaints, please contact our Grievance Officer:

Name: Kunal Yadav
Designation: Grievance & Privacy Officer
BondHeal Services Private Limited
Address: BondHeal Services Private Limited, Near Bus Stand, IMT Manesar, Manesar, Gurgaon - 122051, Haryana
Email: Ykunald4802@gmail.com
Response Time: We aim to respond within 30 days.

10. Consent

By clicking "I Accept" or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms.