Privacy Policy - Stand For Bihar

Website: standforbihar.com Operated by: Stand for Bihar (the “Campaign”, “we”, “us”, “our”) Last updated: 5 November 2026

This Privacy Policy explains what personal data we collect on standforbihar.com, why we collect it, how we use it, who we share it with, how long we keep it and what rights you have. It is written in simple language. Please read it before you sign a petition, become a member, make a donation or send us a message.

In this policy, “personal data” means any information that identifies you, such as your name, phone number or email address. “Data Fiduciary” and “Data Principal” have the meanings given in the Digital Personal Data Protection Act, 2023. We are the Data Fiduciary. You are the Data Principal.

1. Who We Are

1.1 Stand for Bihar is a youth-led civic campaign. We run awareness drives, petitions, school programmes, environmental and community campaigns, and fundraising for these activities.

1.2 We decide why and how your personal data is used on this website. That makes us the Data Fiduciary for that data.

1.3 You can contact us about this policy or your data through the Contact page on standforbihar.com.

2. Laws That Apply

2.1 We handle personal data in line with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and the rules under it, and other Indian laws that apply to us.

2.2 Some parts of these laws are being brought into force in stages. We follow the parts that apply at any given time and update this policy as the rules change.

3. Personal Data We Collect

3.1 Data you give us

Petition forms: name, city or district, email address, phone number (if the form asks for it), and any comment you choose to add.
Membership form: name, email address, phone number, city or district, age group or date of birth (if the form asks), school, college or organisation (if the form asks), and your interests.
Donations: name, email address, phone number, the amount donated and a payment reference. If you want a receipt, we may also ask for your address and PAN, where the law needs it.
Contact and message forms: name, email address, phone number and the content of your message.
Event registration and volunteering: name, contact details, school or organisation, age, emergency contact (where the event needs it), and parent or guardian details for participants under 18.
Photos, videos and stories that you send us.

3.2 Data collected automatically

IP address, browser type, device type, operating system, language and screen size;
pages visited, time spent, links clicked and the website that sent you to us;
approximate location (for example city or state) worked out from your IP address;
cookie and similar technology data (see section 11).

3.3 Data from other sources

Your payment provider confirms to us whether a payment succeeded. We do not receive your full card, UPI PIN or bank login details.
If you contact us through social media or WhatsApp, we see the details that platform shows us, such as your profile name and the messages you send.

3.4 We do not ask for sensitive details such as your religion, caste, political party, health records or biometric data. Please do not send them to us. If you send them to us on your own, we will use them only to answer you and may delete them.

4. Why We Use Your Data

We use personal data only for the purposes below, and only after you agree, or where the law allows use without consent.

To run petitions: to record your signature, count signatures, check for duplicates and fake entries, and show signature counts and, where you agreed, your name, city or comment.
To manage membership: to register you, send updates about campaigns and events, and keep in touch.
To process donations: to confirm payments, send receipts and thank-you messages, keep accounts and meet legal and tax duties.
To answer you: to reply to messages, requests and complaints.
To run events and programmes: to register participants, plan logistics, keep people safe, and issue certificates, medals and prizes.
To tell people about our work: to publish campaign results, reports, photos and videos, with consent where needed.
To keep the website safe and working: to prevent fraud, spam, abuse and attacks, and to fix faults.
To understand and improve the website: to see which pages are useful and how people use them. We use summary data for this wherever possible.
To meet legal duties: to follow laws, court orders and lawful requests from authorities, and to keep records the law requires.
To protect our rights: to deal with claims, disputes and misuse of the website.

5. Consent

5.1 We ask for your consent before collecting your data for a stated purpose. The form or page will tell you what data we collect and why. You give consent by a clear action, such as ticking a box or submitting a form after reading the notice.

5.2 Consent is voluntary. You can use the public parts of this website without giving us personal data. If you do not agree to a form’s notice, you may not be able to use that feature, such as signing a petition or joining as a member.

5.3 Withdrawing consent. You can withdraw consent at any time, as easily as you gave it. Write to us through the Contact page and tell us what you want to withdraw. You can also use the unsubscribe link in our emails or reply STOP to our messages. After you withdraw, we stop using your data for that purpose within a reasonable time, and delete it unless the law requires us to keep it. Withdrawal does not make earlier use of your data unlawful.

5.4 Some uses do not need your consent under the law. These include use needed to follow a law or a court order, to respond to a medical emergency or a threat to life, to respond to a disaster or public order situation, and other uses the law allows.

6. Children and Young People

6.1 Our work involves young people, so we take extra care.

6.2 We do not collect personal data of anyone under 18 unless a parent or legal guardian gives verifiable consent. We may ask for proof, such as a signed form or confirmation from a school.

6.3 We do not track, monitor the behaviour of, or send targeted advertising to anyone under 18.

6.4 For school programmes, the school may give consent for activities it organises, and we may work with the school’s records of who took part.

6.5 Photos and videos of anyone under 18 are published only with parent, guardian or school consent.

6.6 If you think a child has given us data without proper consent, please contact us. We will delete it unless the law requires otherwise.

6.7 The same care applies to a person with a disability who has a lawful guardian.

7. Who We Share Data With

7.1 We do not sell your personal data. We do not rent it out.

7.2 We share data only as below.

Service providers (Data Processors): companies that help us run the website and campaigns, such as hosting, website tools and form plugins, email and messaging services, payment gateways, analytics tools and cloud storage. They may use the data only for our instructions and must keep it safe.
Payment providers: to process donations. Their own terms and privacy policies apply to payment data.
Campaign partners and event partners: such as schools, colleges, other organisations and sponsors, but only with your consent or when needed to run an event you registered for. We do not give sponsors your personal data without your consent.
Authorities: government bodies, courts, tax authorities and law enforcement, when the law requires it or a lawful order is received.
Professional advisers: such as lawyers, accountants and auditors, under a duty of confidence.
Successor organisation: if the Campaign’s work is transferred to another organisation, your data may move with it, and that organisation must follow this policy.

7.3 Public display. Petition pages may show signature counts. They show your name, city or comment only if the form told you so before you submitted it. Content you post or send for publication may be seen by anyone.

7.4 Photos and videos. Event photos and videos may appear on our website and social channels. You can ask us to remove an image of you at any time.

8. Transfers Outside India

8.1 Some of our service providers may store or process data on servers outside India.

8.2 We transfer data outside India only where the law allows, and we choose providers who use reasonable safety measures.

8.3 We follow any restriction the Government of India places on transfers to particular countries.

9. How Long We Keep Your Data

9.1 We keep personal data only as long as we need it for the purpose you agreed to, or as long as the law requires.

9.2 Typical periods are below.

Petition and membership data: for as long as the campaign or your membership is active, and then up to 3 years after your last activity.
Donation and receipt records: for the period that tax, accounting and other laws require.
Messages and complaints: up to 3 years after we close the matter.
Event and volunteer records: up to 3 years after the event or your last activity.
Website logs: up to 12 months.

9.3 If you do not use our services or contact us for 3 years, we may delete your data. We will send you a notice at least 48 hours before we delete it, where we can reach you.

9.4 We may keep summary or anonymous data that does not identify you for longer.

9.5 We keep some data for longer if the law requires it, or if we need it for a legal claim or an investigation.

10. How We Protect Your Data

10.1 We use reasonable security measures. These include access controls, passwords, encryption for data in transit where available, secure payment gateways, and limits on who in our team can see personal data.

10.2 Our team members and volunteers who handle personal data are told to keep it confidential.

10.3 No website or system is completely secure. We cannot promise that data will never be lost, stolen or reached without permission.

10.4 Data breaches. If a personal data breach happens, we will take steps to contain it. We will tell the Data Protection Board of India and the people affected, as the law requires, and explain what happened, what the likely effect is, and what we are doing about it.

10.5 Please protect your own data. Do not share passwords or one-time codes. Be careful of messages that pretend to be from us and ask for money or personal details. We ask for donations only through our website and official channels.

11. Cookies and Similar Tools

11.1 Cookies are small files that a website stores in your browser.

11.2 We use these kinds of cookies and tools:

Necessary: to make the website work, keep it safe and remember form entries;
Preference: to remember choices such as language;
Analytics: to count visits and see which pages are used, using summary data;
Third-party embeds: content from YouTube, Instagram, Facebook, WhatsApp, maps and payment providers may set their own cookies when you use or load it.

11.3 You can block or delete cookies in your browser settings. Some features may stop working if you do.

11.4 Third parties control their own cookies. Please read their privacy policies.

11.5 We do not use cookies to track or target anyone under 18.

12. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have these rights.

Right to information: to get a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
Right to correction and completion: to ask us to correct wrong data and to complete incomplete data.
Right to erasure: to ask us to delete your data when you no longer want us to use it, unless the law requires us to keep it.
Right to withdraw consent: at any time, as set out in section 5.
Right to grievance redressal: to make a complaint to us and get a reply.
Right to nominate: to name another person who can use your rights for you if you die or cannot act for yourself.

12.1 How to use your rights. Write to us through the Contact page. Say what you want and give enough details for us to find your data, such as the name and email address or phone number you used.

12.2 Proof of identity. We may ask you to prove who you are before we act, so that nobody else can get your data.

12.3 Our reply. We will reply as quickly as we can. We aim to reply within 30 days, and in every case within the time the law allows. We may refuse a request if the law allows or requires, and we will tell you why.

12.4 There is no fee for using your rights.

13. Your Duties

The law also asks you to:

follow the law when you use this website;
not pretend to be another person;
not give false details or file false or frivolous complaints;
give only true and correct information when you use our forms or ask for a correction.

14. Grievances and Complaints

14.1 If you have a concern about your data, please write to us first through the Contact page. Put “Privacy complaint” in the subject or message.

14.2 We will acknowledge your complaint and try to resolve it quickly. We will answer within the time the law allows.

14.3 If you are not satisfied with our reply, you may complain to the Data Protection Board of India, once it is set up and open for complaints. Please use our grievance process before you go to the Board.

15. Third-Party Websites and Platforms

15.1 This website links to and uses other platforms, including Instagram, YouTube, Facebook, WhatsApp and payment providers.

15.2 When you click to those sites or use their tools, their own privacy policies apply. We do not control them and are not responsible for how they handle your data.

16. Messages and Updates From Us

16.1 We may send emails, SMS or WhatsApp messages about petitions, events, results and ways to help. We send them only to people who agreed to receive them.

16.2 Every message gives you a way to stop receiving it. You can also tell us through the Contact page.

16.3 We may still send you service messages that you need, such as a donation receipt or a reply to your question.

17. Political and Campaign Use of Data

17.1 We do not use your personal data to tell you how to vote, and we do not give your data to any political party or candidate.

17.2 We do not use your petition signature, membership or donation as a sign of your political views, and we do not share it for that purpose.

17.3 We may share summary figures, such as how many people signed a petition or from which districts, with officials, media and partners. These figures do not name you.

18. Changes to This Policy

18.1 We may update this policy when our work, our tools or the law change.

18.2 We will post the new version on this page and change the “Last updated” date. If a change is important, we will tell you through the website or by email or message, and we will ask for your consent again if the law requires it.

18.3 Please check this page from time to time.

19. Limits of This Policy

19.1 This policy covers data collected through standforbihar.com and the forms, messages and events linked to it. It does not cover other websites or social media pages, even if we link to them.

19.2 This policy gives general information about how we handle personal data. It does not create any right or duty beyond those the law gives.

19.3 This policy should be read with our Terms and Conditions. If the two differ about personal data, this Privacy Policy applies to the difference.

19.4 This policy is written in English. If it is translated, the English version applies if there is a difference.

20. Governing Law

This policy is governed by the laws of India. Courts in Bihar, India have jurisdiction over any dispute about it, subject to the dispute process in our Terms and Conditions and to your rights under the data protection law.

21. Contact Us

For any question about this policy, your personal data or your rights, please use the Contact page on standforbihar.com. We are also on Instagram @standforbihar_ and YouTube @standforbihar. Please do not send personal data or complaints through social media comments. Use the Contact page instead.