Legal and Transparency

Every policy, in one place

All 24 policy areas identified for Dev's Foundation Trust are listed below, each classified by whether it is legally required, conditionally required, recommended governance practice, or operationally necessary. Every page is a draft awaiting legal review and Trustee approval, not a published, binding policy yet.

Demo content Time sensitive, flagged for immediate attention: the compliance snapshot in this project states 12A and 80G approval as provisional for AY 2024-25 to AY 2026-27. Provisional registration under Section 12AB is typically valid for three years, and the application for regular registration (Form 10AB) is due at least 6 months before that validity ends, or within 6 months of commencing activities, whichever is earlier. AY 2026-27 corresponds to FY 2025-26, ending 31 March 2026. On the information available here, both of those trigger dates appear to have already passed as of October 2026. This page does not assume the Trust has missed its renewal, since the actual filing history is not available here, but this should be confirmed with the Trust's Chartered Accountant immediately, because an expired provisional registration would affect whether current donations qualify for 80G deduction at all.
PolicyClassificationStatus
Privacy PolicyConditionally required, under the Digital Personal Data Protection Act 2023 once fully in forceDraft published
Website Terms and ConditionsRecommended governance practiceDraft published
Donation Cancellation and Refund PolicyOperationally necessaryDraft published
Donation Terms and ConditionsOperationally necessaryDraft published
Sponsorship Terms and ConditionsOperationally necessaryDraft published
CSR Partnership Terms and ConditionsOperationally necessaryDraft published
Cookie Policy and Consent ManagementRecommended governance practice, conditionally required depending on the tracking technology actually deployed and DPDP consent rules once in forceDraft published
Data Retention and Deletion PolicyConditionally required, under the Digital Personal Data Protection Act 2023 once its retention related provisions take effectDraft published
Information Security PolicyRecommended governance practiceDraft published
Child Protection and Safeguarding PolicyLegally relevant wherever the Trust's activities involve a minor, given obligations under the POCSO Act 2012Draft published
Beneficiary Privacy and Consent PolicyOperationally necessary, and conditionally required under the Digital Personal Data Protection Act 2023Draft published
Photo, Video and Media Consent PolicyOperationally necessaryDraft published
Intellectual Property and Copyright PolicyRecommended governance practiceDraft published
Accessibility StatementRecommended governance practice; not uniformly mandated for a private charitable trust's own website under current Indian law, though good practice and expected for a publicly funded, publicly facing organisationDraft published
Grievance Redressal and Complaints PolicyOperationally necessaryDraft published
Volunteer Terms and Code of ConductOperationally necessaryDraft published
Scholarship and Beneficiary Eligibility PolicyOperationally necessaryDraft published
Anti Fraud and Donation Misuse PolicyOperationally necessary, supporting trustee fiduciary dutyDraft published
Whistleblower and Reporting PolicyRecommended governance practiceDraft published
Conflict of Interest Disclosure PolicyRecommended governance practice, directly relevant to Section 13 of the Income tax ActDraft published
CSR Fund Utilization and Reporting PolicyOperationally necessary, supporting the corporate donor's own obligations under the Companies (CSR Policy) Rules 2014Draft published
Foreign Donation and FCRA Restrictions PolicyLegally required if the Trust accepts any foreign contribution, under the FCRA 2010Draft published
Disclaimer and Limitation of LiabilityRecommended governance practiceDraft published
Contact and Official Communication PolicyOperationally necessaryDraft published

What is not yet built

  • A document verification register populated with real registration numbers, issue dates and renewal deadlines for every certificate the Trust holds
  • The internal governance manual (trustee procedures, delegation of authority, procurement, asset management)
  • CSR agreement templates, trustee resolution templates, and beneficiary and volunteer consent forms as separate signable documents
  • The admin compliance dashboard with automated filing reminders, described in the governance module brief
  • Independent legal, Chartered Accountant and Company Secretary review of every page above

These sit in the backend and professional services phase of this project, not the static website. See the handoff notes for next steps.