Cookie Policy and Consent Management

To explain what cookies or similar technologies this website uses, and how a visitor can control them.

Key provisions

This prototype does not set analytics, advertising or tracking cookies; it uses browser local storage only for small, device specific conveniences described on each page
When analytics or marketing tools are added, this page must be updated first to name them, their purpose and retention period
A consent banner should be added before any non essential cookie is set, with a genuine reject option, not a dismiss only banner
Essential, strictly necessary cookies, if any, do not require consent but must still be disclosed

Escalation

Cookie or tracking concerns go to the Content Editor, then to the Data Protection contact.

Policy record

Classification	Recommended governance practice, conditionally required depending on the tracking technology actually deployed and DPDP consent rules once in force
Applicable legal references	Information Technology Act 2000, Digital Personal Data Protection Act 2023
Responsible role	Content Editor
Approval authority	Board of Trustees, Dev's Foundation Trust
Status	Draft, not yet approved by the Trustees
Version	0.1, draft
Review schedule	Annually, or on a relevant change in law

Current law status, checked October 2026: the Digital Personal Data Protection Act 2023 was brought into force with the Digital Personal Data Protection Rules 2025 notified on 13 November 2025. Board related provisions took effect immediately; consent manager registration phases in from 13 November 2026, and the core obligations most relevant here, including notice and consent, security safeguards, breach reporting, data principal rights and verifiable parental consent for minors, phase in by 13 May 2027. A website that collects donor and beneficiary data is very likely a data fiduciary under the Act's broad definition, and the household purposes exemption does not apply to an organisation. This Trust should build the practices below now, ahead of the deadline, rather than waiting for it. Verify this against the final Rules and any later notification before publishing, since this area is still phasing in. Source.

This is a draft policy template written for site structure purposes. It has not been reviewed by a lawyer. Please have it checked against applicable Indian law, including the Digital Personal Data Protection Act 2023 where relevant, before publishing it as the Trust's actual policy.