Legal Document

Privacy Policy

Last Updated: May 2026

Proshfuton Foundation (Section 8 — registration in progress), maintained and operated digitally by Udofera Consultancy Pvt Ltd, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website or engage with our programmes.

Quick Summary:

  • We collect only what you provide via our contact and partnership forms — name, email, and inquiry details.
  • We use Google Analytics only after you explicitly accept cookies.
  • Your data is stored securely in India and on Google's servers under contractual protections.
  • You have full rights to access, correct, or request deletion of your information.
  • We do not sell, share, or monetise your data in any form.

1. Who We Are

Entity: Proshfuton Foundation (Section 8 — registration in progress)
Registered Address: 1050/1, Survey Park, UG-18-03B, Kolkata-700075, West Bengal, India
Contact Email: [email protected]
Digital Developer & Maintainer: Udofera Consultancy Pvt Ltd

Note: The CIN for Proshfuton Foundation is pending formal registration and is not included here. Udofera Consultancy Pvt Ltd operates this website under a digital development and maintenance agreement with Proshfuton Foundation.

2. EU Representative Status

Under GDPR Article 27(2), Proshfuton Foundation is currently exempt from appointing a formal EU Representative on the following grounds:

  • We are an organisation based entirely outside the European Union.
  • We process EU visitor data on a limited, occasional basis only.
  • We do not engage in large-scale processing of special categories of data.
  • Our processing activities pose minimal risk to the rights and freedoms of data subjects.

Should our data processing activities expand materially, we will appoint an EU Representative as required by law.

3. What Information We Collect

Information You Provide Directly

We collect only the information you voluntarily submit through our forms:

  • Contact Form: Name, email address, phone number (optional), programme interest, message content.
  • Partnership Inquiry Form: Name, email address, phone number (optional), organisation name, inquiry type, message content.

Information Collected Automatically

Google Analytics 4 — loaded only after you accept our cookie consent banner:

  • IP address (anonymised)
  • Browser type and version
  • Device type (desktop, mobile, tablet)
  • Pages visited and time spent
  • Referring website
  • Geographic location (city-level only)

Third-Party Embeds

Our Performance Archives section embeds Facebook video content via iframes. When you view these embeds, Facebook may collect data in accordance with their own privacy policy: Facebook Privacy Policy.

What We Do Not Collect

  • Government identification numbers or sensitive personal data
  • Health or medical information
  • Passwords or login credentials (we have no user accounts)
  • Racial, ethnic, political, or religious information
  • Financial information or payment details (no payment is processed on this website)

4. How We Use Your Information

Legal Bases for Processing (GDPR Article 6)

  • Legitimate Interests — Article 6(1)(f): Responding to your contact and partnership inquiries.
  • Consent — Article 6(1)(a): Google Analytics, loaded only after you explicitly accept cookies.

Specific Uses

  • Responding to your enquiries via email within 48 hours of receipt.
  • Routing partnership inquiries to the appropriate team member.
  • Analysing site traffic patterns to improve navigation and content — only with your cookie consent.
  • Sending administrative notices (policy updates, programme changes) — non-marketing only.

What We Will Never Do

  • Sell your data to any third party.
  • Share your information with advertisers.
  • Send unsolicited marketing communications.
  • Use your data for any purpose not stated in this policy.

5. How We Store & Protect Your Data

Form Submissions

Website Analytics

  • Processed via Google Analytics 4 — only loads after explicit consent.
  • IP anonymisation enabled. Data retention: 26 months.

Website Hosting

  • Self-hosted on Raspberry Pi Zero 2W — Kolkata, India.
  • SSL encryption via Let's Encrypt (HTTPS enforced on all traffic).
  • Server logs: retained for 30 days for troubleshooting, then deleted.

Security Measures

  • HTTPS encryption for all website traffic.
  • Secure form submission via POST requests — no data passed in URLs.
  • Honeypot anti-spam fields on all forms — no personal data collected from these fields.
  • Access-controlled Google Workspace with two-factor authentication.

6. How Long We Keep Your Data

Data Type Retention Period
General inquiry form submissions 1 year from date of collection
Partnership inquiry form submissions 1 year from date of collection
Google Analytics 4 data 26 months (Google default)
Server logs (nginx) 30 days, then automatically deleted

After the applicable retention period, data is deleted from Google Workspace and server infrastructure. Requests for early deletion are honoured — contact [email protected].

7. Your Privacy Rights

GDPR Rights (EU Visitors)

If you are located in the European Economic Area, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Restriction: Request that we restrict processing of your data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw cookie consent at any time by clearing cookies in your browser.

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

India DPDP Act 2023 Rights (Indian Users)

Under the Digital Personal Data Protection Act 2023, you have the right to:

  • Access: Obtain a summary of personal data processed and the processing activities.
  • Correction & Erasure: Request correction of inaccurate data or erasure where processing is no longer necessary.
  • Grievance Redressal: Have your grievances addressed in an expeditious manner.
  • Nominate a Nominee: Nominate a person to exercise rights on your behalf in the event of death or incapacity.

8. Cookies

We use only one category of cookies: Google Analytics 4 analytics cookies. These are not loaded until you explicitly click "Accept" on our cookie consent banner.

If you click "Decline," no analytics cookies are set and no tracking occurs. Your preference is stored for 365 days. You may change your preference by clearing your browser cookies and revisiting the site.

We do not use advertising cookies, social media cookies, or any persistent tracking technologies beyond the above.

9. Third-Party Services

  • Google Workspace — stores form submission data and handles email. Data Processing Amendment governs their role as our processor.
    Google Workspace DPA
  • Google Analytics 4 — website analytics, loaded only after your explicit cookie consent.
    Google Privacy Policy
  • Facebook — video content embedded via iframes in our Performance Archives section. Facebook may set its own cookies when these iframes are loaded.
    Facebook Privacy Policy

10. Newsletter

This feature is not currently active. No newsletter or mailing list is operated by Proshfuton Foundation at this time. No marketing emails will be sent to form submitters. If a newsletter is introduced in future, it will require explicit opt-in, and this policy will be updated accordingly.

11. Children's Privacy

Proshfuton Foundation provides voice arts training to students including children under 18. Where a parent or guardian submits a form on behalf of a minor, that submission is treated with the same protections as adult data.

We do not knowingly collect data directly from individuals under 13. If we become aware that data from a child under 13 has been submitted without appropriate parental consent, we will delete it within 48 hours of identification.

Parents or guardians may contact [email protected] to request review or deletion of any data relating to a minor.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in data protection law, new features, or regulatory feedback. When material changes are made:

  • The "Last Updated" date at the top of this page will be revised.
  • A prominent notice will appear on the homepage for 30 days.

Continued use of the website after changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, requests, or concerns:

Email: [email protected]
Subject Line: Privacy Inquiry — [Your Topic]
Response Time: Within 48 hours

Postal Address:
Proshfuton Foundation
c/o 1050/1, Survey Park, UG-18-03B
Kolkata — 700075, West Bengal
India

Thank you for trusting us with your information. Proshfuton Foundation is committed to handling all personal data with the care and dignity that defines everything we do. If you have questions or concerns, we genuinely want to hear from you.