Privacy Policy

Introduction

International Justice Mission (IJM) is fully committed to safeguarding the privacy and protection of personal data in strict compliance with both national and international data protection laws, including but not limited to the Information Technology Act, 2000, the General Data Protection Regulation (GDPR), and other relevant statutes and guidelines. This Privacy Policy sets out the principles governing IJM’s data collection, processing, usage, and sharing practices, applicable to our Services, including the website www.ijmindia.org (the “Site”), mobile applications, and other platforms through which IJM interacts with individuals.

By interacting with our Services, you acknowledge that you have read, understood, and consented to the data practices described in this Privacy Policy. This Policy covers the rights and obligations under international and national laws, ensuring a legally compliant framework for the protection of your personal data.

Scope of this Privacy Policy

This Privacy Policy governs all personal data collected by IJM from users of our Services and other stakeholders. It applies to any individual who provides personal information to IJM or who visits the Site. The Policy also details our practices related to the sharing of personal data with third parties and the international transfer of such data, ensuring that the highest legal standards for privacy protection are adhered to, even across jurisdictions.

This Policy does not apply to external websites that may be linked from our Site. IJM is not responsible for the privacy practices of other organizations or websites that do not link to or reference this Privacy Policy. We encourage users to review the privacy policies of any third-party sites they engage with.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• Personal Data: Any information that can directly or indirectly identify an individual, including but not limited to name, contact details, email address, IP address, and user activity data.
• Processing: Any operation performed on personal data, whether by automated means or otherwise, including collection, storage, use, transfer, and deletion.
• Data Controller: IJM, which determines the purposes and means of processing personal data.
• Data Processor: A third-party entity engaged by IJM to process personal data on its behalf.

Collection of Personal Data

We may collect the following categories of personal data:

1. Contact Information: Name, email address, mailing address, phone number, and other contact details.
2. Technical Data: IP address, browser type, time zone settings, device type, and information about your visit to the Site, including access time, pages viewed, and interaction data.
3. Communications: Records of correspondence or inquiries made through email, phone, or other communication channels.
4. Sensitive Data: In certain limited circumstances, we may collect sensitive personal data such as health information, religious beliefs, or details regarding racial or ethnic origin. Such data will only be processed with your explicit consent or as otherwise permitted by law.

Collection Methods: Personal data may be collected directly from you through web forms, registration processes, or emails, or indirectly through automated technologies like cookies and other tracking mechanisms, as explained below.

Legal Bases for Processing Personal Data

We process personal data in strict compliance with legal standards, relying on one or more of the following lawful bases:

• Consent: Where explicit consent has been provided, particularly in relation to marketing communications or the collection of sensitive personal data.
• Legal Obligation: To comply with statutory or regulatory requirements, including anti-corruption and financial transparency regulations.
• Legitimate Interests: For purposes such as improving our Services, ensuring website security, preventing fraud, and maintaining proper organisational governance, provided these interests are not overridden by your privacy rights.

Use of Personal Data

We use your personal data for the following purposes:

• To Provide Services: Including responding to inquiries and managing subscriptions to our newsletters or event participation.
• To Ensure Website Functionality: By analysing technical and usage data to enhance user experience, troubleshoot issues, and monitor for security risks.
• To Comply with Legal Requirements: Such as record-keeping obligations, responding to lawful requests from public authorities, or defending legal claims.
• For Marketing Purposes: With your consent, we may send you newsletters, updates, or event invitations relevant to IJM India’s mission.

In the event that processing is required for a purpose other than that for which the data was initially collected, we will inform you and seek your consent, if necessary, unless such further processing is permissible under applicable law.

Cookies and Tracking Technologies

IJM India utilizes cookies, web beacons, and similar technologies to collect data on website usage. Cookies are small text files stored on your device that help us track user behaviour, improve site navigation, and personalize content. We classify cookies as follows:

• Strictly Necessary Cookies: Essential for core site functionality.
• Functional Cookies: Allow the website to remember choices made by the user.
• Performance Cookies: Collect information on website usage and performance.
• Targeting Cookies: Track user behaviour to serve personalised advertisements and content.

You have the ability to manage your cookie preferences through your browser settings. Please note that disabling cookies may affect certain functionalities of the Site.

Data Retention

IJM India retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Data retention periods vary depending on the nature of the information and legal obligations. Financial data related to donations may be retained for accounting and audit purposes in line with applicable financial regulations.

Security Measures

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. Security protocols include encryption, access controls, firewalls, and regular monitoring of our systems. Despite our efforts to secure your personal data, no method of transmission over the Internet or method of storage is completely secure. We therefore cannot guarantee the absolute security of your data and advise you to take personal precautions, such as protecting your passwords and utilising secure networks.

Sharing of Personal Data

IJM India shares personal data with third-party service providers strictly for the purposes of providing technical, logistical, or other services on our behalf, such as hosting services, and website maintenance. All third-party processors are bound by contract to ensure your personal data is protected in line with applicable data protection laws.

We may also disclose personal data in the following circumstances:

• Legal Requirements: Where required by law or regulatory obligation, including compliance with judicial proceedings, subpoenas, or governmental requests.
• Emergency Situations: To protect the safety and security of individuals or IJM India, including in the case of fraud prevention or investigation.

Your Rights

As a data subject, you have various rights under applicable data protection laws, including but not limited to:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Restrict Processing: Temporarily limit the processing of your personal data.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Challenge the processing of your data for direct marketing or legitimate interests.
• Right to Withdraw Consent: If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your rights, please contact us at [email protected]. We will respond to your request in accordance with applicable laws.

Children’s Privacy

IJM India does not knowingly collect personal data from individuals under the age of 16 without parental consent. If you believe that we may have inadvertently collected such information, please contact us so that we can take appropriate action.

Changes to this Privacy Policy

IJM India reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices or legal requirements. Any significant changes will be communicated to users through our Site or via email notifications. We encourage you to review this Policy periodically to stay informed of how we protect your data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at:

Email:[email protected]
Address: 66/2253, Sarvpriya, Gurudwara Road, Karol Bagh, New Delhi 110005