Legal and Transparency
Every policy, in one place
All 24 policy areas identified for Dev's Foundation Trust are listed below, each classified by whether it is legally required, conditionally required, recommended governance practice, or operationally necessary. Every page is a draft awaiting legal review and Trustee approval, not a published, binding policy yet.
Demo content Time sensitive, flagged for immediate attention: the compliance snapshot in this project states 12A and 80G approval as provisional for AY 2024-25 to AY 2026-27. Provisional registration under Section 12AB is typically valid for three years, and the application for regular registration (Form 10AB) is due at least 6 months before that validity ends, or within 6 months of commencing activities, whichever is earlier. AY 2026-27 corresponds to FY 2025-26, ending 31 March 2026. On the information available here, both of those trigger dates appear to have already passed as of October 2026. This page does not assume the Trust has missed its renewal, since the actual filing history is not available here, but this should be confirmed with the Trust's Chartered Accountant immediately, because an expired provisional registration would affect whether current donations qualify for 80G deduction at all.
| Policy | Classification | Status |
|---|---|---|
| Privacy Policy | Conditionally required, under the Digital Personal Data Protection Act 2023 once fully in force | Draft published |
| Website Terms and Conditions | Recommended governance practice | Draft published |
| Donation Cancellation and Refund Policy | Operationally necessary | Draft published |
| Donation Terms and Conditions | Operationally necessary | Draft published |
| Sponsorship Terms and Conditions | Operationally necessary | Draft published |
| CSR Partnership Terms and Conditions | Operationally necessary | Draft published |
| Cookie Policy and Consent Management | Recommended governance practice, conditionally required depending on the tracking technology actually deployed and DPDP consent rules once in force | Draft published |
| Data Retention and Deletion Policy | Conditionally required, under the Digital Personal Data Protection Act 2023 once its retention related provisions take effect | Draft published |
| Information Security Policy | Recommended governance practice | Draft published |
| Child Protection and Safeguarding Policy | Legally relevant wherever the Trust's activities involve a minor, given obligations under the POCSO Act 2012 | Draft published |
| Beneficiary Privacy and Consent Policy | Operationally necessary, and conditionally required under the Digital Personal Data Protection Act 2023 | Draft published |
| Photo, Video and Media Consent Policy | Operationally necessary | Draft published |
| Intellectual Property and Copyright Policy | Recommended governance practice | Draft published |
| Accessibility Statement | Recommended governance practice; not uniformly mandated for a private charitable trust's own website under current Indian law, though good practice and expected for a publicly funded, publicly facing organisation | Draft published |
| Grievance Redressal and Complaints Policy | Operationally necessary | Draft published |
| Volunteer Terms and Code of Conduct | Operationally necessary | Draft published |
| Scholarship and Beneficiary Eligibility Policy | Operationally necessary | Draft published |
| Anti Fraud and Donation Misuse Policy | Operationally necessary, supporting trustee fiduciary duty | Draft published |
| Whistleblower and Reporting Policy | Recommended governance practice | Draft published |
| Conflict of Interest Disclosure Policy | Recommended governance practice, directly relevant to Section 13 of the Income tax Act | Draft published |
| CSR Fund Utilization and Reporting Policy | Operationally necessary, supporting the corporate donor's own obligations under the Companies (CSR Policy) Rules 2014 | Draft published |
| Foreign Donation and FCRA Restrictions Policy | Legally required if the Trust accepts any foreign contribution, under the FCRA 2010 | Draft published |
| Disclaimer and Limitation of Liability | Recommended governance practice | Draft published |
| Contact and Official Communication Policy | Operationally necessary | Draft published |
What is not yet built
- A document verification register populated with real registration numbers, issue dates and renewal deadlines for every certificate the Trust holds
- The internal governance manual (trustee procedures, delegation of authority, procurement, asset management)
- CSR agreement templates, trustee resolution templates, and beneficiary and volunteer consent forms as separate signable documents
- The admin compliance dashboard with automated filing reminders, described in the governance module brief
- Independent legal, Chartered Accountant and Company Secretary review of every page above
These sit in the backend and professional services phase of this project, not the static website. See the handoff notes for next steps.