Privacy Policy

1. Who we are

Immaculate Heart of Mary Trust operates ihmary.in. For privacy enquiries, requests concerning personal data, or complaints about our handling of personal data, please use the contact details provided below.

2. Personal data we may collect

We may receive and store personal data that you voluntarily provide, including:

• name and contact details such as email address, telephone number and postal address;
• information contained in messages, enquiries, correspondence, requests or forms you submit;
• information pertaining to donations, publications or other services you specifically request; and
• technical information made available through ordinary operation of the website and hosting infrastructure, such as IP address, browser/device information, access times and server logs.

We seek to collect only information that is reasonably necessary for the stated purpose.

3. Why we use personal data

We may process personal data for purposes such as responding to enquiries, communicating with well-wishers or subscribers, fulfilling requests, administering donations, maintaining records, protecting website security, preventing misuse, complying with legal obligations, and operating and improving our services.

4. Notice and consent

Where consent is the legal basis for processing, we will seek consent in a clear and informed manner. Where applicable law permits processing on another lawful basis, we may process data without consent to the extent permitted by law.

5. Withdrawal of consent

Where processing is based on consent, you may withdraw that consent by contacting us using the details below. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. We will provide a reasonably accessible method for withdrawal and related privacy requests.

6. Sharing of personal data

We do not sell or rent personal data.

7. Children's personal data

We do not knowingly seek to collect children's personal data through an ordinary public website form without the permissions or safeguards required by law.

8. Cookies and similar technologies

The website may use essential cookies or similar technologies needed for basic operation, security and preferences. Third-party services embedded in the website, if any, may use their own cookies or technologies subject to their respective policies. Where consent is legally required for a non-essential technology, we will seek it through an appropriate mechanism.

9. Security

We take reasonable technical and organisational measures appropriate to the nature of the personal data we process to protect it against unauthorised access, disclosure, alteration, loss or destruction. 

10. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, for legitimate operational requirements, or as required by applicable law. When personal data is no longer required, we will delete or otherwise dispose of it as appropriate, subject to lawful retention requirements.

11. Your rights

Subject to applicable Indian law and the provisions in force at the relevant time, a Data Principal may have rights including access to information about personal data, correction, completion, updating and erasure, withdrawal of consent where consent is the basis of processing, grievance redressal, and nomination. Requests may be made through the contact details below. We may need to verify identity before acting on a request.

12. Grievances and privacy requests

For privacy-related requests or grievances, please contact us using the details below and clearly indicate that your communication concerns a privacy or personal-data matter. We will review and respond in accordance with applicable law and the procedures in force at the relevant time.

13. Changes to this policy

We may update this Privacy Policy when our website, services, data practices or applicable law changes. The latest version will be published on this page with its effective date.

14. Applicable law

This policy is intended for a website operated in India and is to be read subject to applicable laws and regulations of India, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as applicable and in force from time to time.