Privacy Policy

At Indian Heart Association, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit ihajobs.com or use our website, online portals, helpline, training programs, registration services, and other activities.

1. Introduction

Indian Heart Association ("we," "us," or "our") operates as an organization working in areas such as public welfare, first aid education, emergency life support, and cardiac emergency preparedness. We are committed to respecting the privacy of our visitors, volunteers, trainees, donors, applicants, and partners.

This Privacy Policy describes the types of personal information we may collect, the purposes for which we use it, the circumstances in which it may be shared, and the privacy rights available to you under applicable law. By accessing our website or using our services, you acknowledge this policy.

2. Scope of This Policy

This Privacy Policy applies to personal information collected through the following channels:

• Our official website and online portals, including enrolment, verification, donations, complaints, and feedback forms.
• Helpline and missed-call services, where available.
• Volunteer and First Responder registration forms.
• Training program enrolment, assessment, and certification processes.
• State office interactions, events, workshops, and field campaigns.
• Email, WhatsApp, telephone, and written correspondence with our offices.

3. Information We Collect

Depending on the services you use and the information you choose to provide, we may collect the following categories of personal data:

3.1 Identity and Contact Information

Your full name, email address, mobile number, postal address, state, district, date of birth, and photograph, where required for identification cards, registrations, or certificates.

3.2 Grievance and Support Information

Details of your inquiries, complaints, service requests, feedback, issue descriptions, and reference numbers used to investigate and resolve your requests.

3.3 Training and Certification Information

Course preferences, enrolment details, attendance records, assessment results, certificate numbers, and renewal information.

3.4 Donation and Payment Information

Transaction references, payment amounts, billing details, and receipt information. Payment card details are processed by the relevant payment service provider. We do not intend to store complete debit or credit card numbers on our systems.

3.5 Volunteer and Membership Information

Skills, availability, training background, registration details, and participation records relating to volunteer activities, emergency drills, and public awareness campaigns.

3.6 Technical and Usage Information

Information such as IP address, browser type, device information, pages visited, access times, and cookie-related data, where collected through our website and technical systems.

3.7 Communications

Records of emails, support tickets, feedback submissions, and helpline communications. Calls may be recorded only where applicable, subject to appropriate notice and legal requirements.

4. How We Use Your Information

We use personal information only for appropriate purposes connected with our services, operations, and legal responsibilities, including:

• Processing course enrolments, volunteer registrations, and certification requests.
• Reviewing and responding to inquiries, complaints, and user feedback.
• Operating certificate verification and identification card verification services.
• Processing donations and issuing receipts, where applicable.
• Responding to helpline queries and service requests.
• Sending important service-related updates through SMS, email, or WhatsApp.
• Maintaining website functionality, system security, and service quality.
• Supporting public awareness, first aid education, and cardiac emergency preparedness initiatives.
• Meeting applicable legal and regulatory obligations and responding to lawful requests.
• Detecting fraud, preventing misuse of certificates, and protecting against unauthorized access.

Marketing communications will be sent where appropriate consent or another lawful basis is available. You may opt out of promotional communications where applicable.

5. Legal Basis for Processing

We process personal data where permitted by applicable law. Depending on the circumstances, this may include:

• Consent: Where you voluntarily provide information or consent to a particular use of your data.
• Service Delivery: Where processing is necessary to provide a course, registration, or service you have requested.
• Legal Obligations: Where applicable laws, tax requirements, or lawful directions require us to process or retain information.
• Other Permitted Grounds: Where processing is otherwise authorized under applicable data protection laws.

6. Sharing and Disclosure of Information

Indian Heart Association does not sell or rent personal information to third parties for their independent commercial use.

Where necessary and legally permitted, information may be shared with:

• Authorized state and district offices involved in delivering our services.
• Certification, training, and verification partners.
• Payment gateways and financial service providers for transaction processing.
• Technology, hosting, communication, and technical support providers.
• Government authorities, regulators, or law enforcement agencies where disclosure is legally required.

We aim to limit shared information to what is reasonably necessary for the relevant purpose and require appropriate safeguards from service providers where applicable.

7. Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include HTTPS encryption, access controls, secure hosting, and appropriate data-handling practices.

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. Users should keep their passwords and login credentials confidential and notify us if they suspect unauthorized access to their accounts.

8. Your Privacy Rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, and provisions in force from time to time, you may have rights concerning your personal data, including:

• Requesting information about personal data processed by us.
• Requesting correction or updating of inaccurate or incomplete information.
• Requesting erasure of personal data where legally permissible.
• Withdrawing consent where processing is based on consent, subject to applicable legal requirements.
• Raising a grievance or complaint regarding the handling of your personal data.
• Exercising any additional rights available under applicable law.

Requests may require identity verification to protect against unauthorized disclosure. We may retain certain information where required by law or necessary for legitimate recordkeeping and dispute resolution.

9. Cookies and Website Technologies

Our website may use cookies and similar technologies to maintain website functionality, remember preferences, understand website usage, and improve user experience.

You can manage cookies through your browser settings. Disabling certain cookies may affect the availability or functionality of some website features. Where legally required, we will seek consent before using non-essential cookies.

10. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this policy, provide our services, maintain relevant registration and financial records, resolve disputes, prevent fraud, and meet legal obligations.

When personal information is no longer required, we will take appropriate steps to delete or anonymize it, subject to applicable retention requirements.

11. Third-Party Websites and Services

Our website may contain links to third-party websites, payment gateways, or external services. Those services may have their own privacy policies and data-handling practices. Indian Heart Association is not responsible for the independent privacy practices of third-party websites.

We encourage users to review the relevant privacy notices before submitting personal information to third-party services.

12. Children's Privacy

Our services are not intended to collect children's personal data without an appropriate lawful basis and any consent or authorization required by applicable law. Where services involve children, we will handle their personal information in accordance with applicable legal requirements and safeguards.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, operational practices, or legal requirements. Updated versions will be published on this page with a revised effective date, where appropriate.

We encourage users to review this page periodically to remain informed about how their information is handled.

14. Contact and Grievance Requests

If you have questions about this Privacy Policy, wish to request access to or correction of your personal information, or want to raise a privacy-related grievance, please contact Indian Heart Association using the official contact details published on our website.

Please include sufficient details about your request so that our team can verify it and respond appropriately.

Indian Heart Association

We are committed to handling personal information responsibly, transparently, and in accordance with applicable data protection laws.