Privacy policy

1. Who we are

STEMSUP Education & Environment Foundation (“STEMSUP”, “we”) is a not-for-profit company incorporated under Section 8 of the Companies Act, 2013, based in Thoothukudi, Tamil Nadu. We are the data fiduciary for personal data collected through this website and our programmes.

2. What we collect

• Contact details you give us: name, email, phone number, organisation and city, when you send an enquiry, register for an early-bird offer, request a quote, download a free resource or sign up for updates.
• Order and donation details: name, delivery address, pin code, items ordered, amount and transaction reference. Card, UPI and bank details are entered on our payment partner’s secure page (Razorpay) and are never seen or stored by us.
• Information needed for tax receipts, such as PAN, when you ask for an 80G receipt, as required by the Income Tax Act, 1961.
• Programme information about children and young people we work with, collected only with consent from a parent or guardian (see section 6).
• Basic technical data such as browser type and pages visited, used to keep the site working and improve it.

3. Why we use it

• To deliver orders, process donations and issue receipts.
• To reply to enquiries and confirm bulk orders with schools and organisations.
• To send updates you have asked for, such as launch news for our parent guides.
• To run and report on our programmes, and to meet legal, tax and audit obligations.

We process your data on the basis of your consent, or where the law permits it, such as to complete a transaction you requested or to comply with the law. We do not sell or rent your personal data.

4. Who we share it with

Only with service providers who help us operate, and only what they need: our payment partner (Razorpay), our website host (Wix), Google Workspace (which stores enquiries sent through our website forms), email services, and courier partners for delivery. We also share data when required by law or by a government authority acting under the law.

5. How long we keep it

We keep personal data only as long as needed for the purpose it was collected for, or as long as the law requires. Donation and financial records are kept for the periods required under tax and company law. Marketing contacts are removed when you unsubscribe.

6. Children’s data

As required by the Digital Personal Data Protection Act, 2023, we process the personal data of anyone under 18 only with verifiable consent from a parent or lawful guardian. We do not track, profile or target advertising at children. Photographs and stories of children are handled under our Child safeguarding policy.

7. Your rights

You can ask us to tell you what personal data we hold about you, correct or update it, erase it where we no longer need it, or withdraw your consent at any time. You can also nominate someone to exercise these rights on your behalf. Withdrawing consent doesn’t affect anything done before you withdrew it.

8. Security

We use reasonable security safeguards, including encrypted connections and access limited to people who need it. If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as the law requires.

9. Cookies

Our website and our host use essential cookies to make the site work, and may use analytics cookies to understand how it is used. You can block or delete cookies in your browser settings.

10. Grievances and contact

For any question, request or complaint about your personal data, write to our Grievance Officer at support@stemsupfoundation.org with the subject “Privacy request”. We will acknowledge it within 48 hours and respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

Last updated: October 2026. We review this policy at least once a year.