At Polaris Foundation (Ullas), we are committed to protecting the privacy and personal data of our Students,staff, volunteers, and partners. This privacy statement explains how we collect, use and safeguard your information under the Digital Personal Data Protection (DPDP) Act.

Legal Basis for Processing

In accordance with the DPDP Act, we process your personal data under the following legal grounds:

• Consent: For most of our program activities, Consent is our primary legal basis.
• Certain Legitimate uses: Fulfilling our obligations under Indian Law, including CSR reporting, audits and statutory filings as applicable.

Information We Collect

To deliver the Ullas program effectively, we collect only the information necessary for academic training, conducting examinations, and reporting on our CSR impact. The personal data collected is limited to:

• Student data: Name, contact details, academic record, bank account information
• Staff data: Name, professional qualifications, contact details
• Volunteer data: Name, contact information and skills/interests

How We Use Your Information

The information is used to:

• Operational efficiency: Managing schedules , training modules and attendance
• Coordination: Connecting students with the right mentors and volunteers
• Reporting: Creating reports for the stakeholders

Consent & Processing of Children’s Data

In compliance with the DPDP Act:
For Minors: Since our students are under the age of 18, we require verifiable consent from a parent or lawful guardian before collecting any data.
Withdrawal: You have the right to withdraw consent at any time. Upon withdrawal, we will cease processing your data unless required by law.

Security of Your Information

Keeping your information safe is very important to us. We take robust measures to protect your Personal Information from unauthorized access, loss, disclosure or alteration. These measures include:

• Encryption: Data is encrypted both in transit and at rest to prevent unauthorized interception.
• Role-Based Access Control (RBAC): Access to your personal data is limited to only authorized project personnel within the EcoDRR program.

Data Sharing

We do not use personal data for any commercial or marketing purposes or purposes beyond the operations of this Ullas program. We may share data only under the following limited circumstances:

• Government Authorities: As a registered CSR initiative, we may disclose information to Government authorities and regulatory bodies.
• Service Providers: To facilitate the training modules, conduct assessments and store the program data on encrypted servers.

Data Retention

As the Ullas program is an ongoing initiative, we retain your information for as long as is necessary to fulfill the program’s objectives for which it was collected.

We will periodically review our data to ensure that data is not kept longer than required for our program or for legal purposes.

Your Rights

You have the right to request access to the information we hold about you, to request corrections to any inaccuracies or to withdraw your consent for data processing. To exercise these rights, please contact contactus@ullastrust.org

If you have any questions / suggestions about this Privacy Statement, or the practices of the Ullas program, please contact us through the aforementioned email ID.

Our Privacy Statement was last updated in May 2026