Privacy Policy

How we collect, use, and protect your data.

Last updated: April 2026

Overview

Dhaaga (accessible at getdhaaga.com) is operated by Dhaaga, Bengaluru, India. We are committed to protecting the privacy of our NGO clients, their donors, and all visitors to this website. This Privacy Policy explains what data we collect, how we use it, how long we retain it, and the rights available to you.

By using our website or engaging our services, you agree to the collection and use of information in accordance with this policy. If you have questions at any time, please contact us at support@getdhaaga.com.

Information We Collect

We collect information in the following ways:

  • Contact form submissions: When you fill out our contact form, we collect your name, email address, phone number, and organisation name, along with the message you send us.
  • Donor data processed on behalf of NGO clients: As part of providing our fundraising services, we process donor information (including names, contact details, and giving history) on behalf of our NGO clients. In this context, Dhaaga acts as a data processor and the NGO acts as the data controller.
  • Website analytics: We collect anonymised data about how visitors use our website, including pages visited, time spent on pages, browser type, device type, approximate geographic location (country/city level), and referral source.
  • Cookies and similar technologies: Our website uses cookies to improve functionality and understand usage patterns. See the Cookies section below for details.

How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to enquiries submitted through our contact form
  • To provide our digital fundraising services to NGO clients
  • To process and manage donor relationships on behalf of our NGO clients
  • To improve our website, products, and services based on usage data
  • To send service-related communications (such as updates about your account or our services), where you have provided consent or where we have a legitimate interest
  • To comply with legal obligations applicable to our business

We do not sell, rent, or trade your personal information to any third party for their marketing purposes.

Donor Data

Dhaaga processes donor data strictly as a data processor on behalf of our NGO clients, who are the data controllers for that data. This means:

  • We only process donor data according to the documented instructions of the relevant NGO client
  • We do not use donor data for any purpose beyond the services agreed with the relevant NGO
  • We do not share, sell, rent, or transfer donor data to any third party not involved in delivering the agreed services
  • All sub-processors handling donor data are bound by data processing agreements that impose equivalent privacy obligations

NGOs who are our clients bear responsibility for ensuring they have appropriate legal basis to share donor data with us as their service provider, and for communicating relevant privacy information to their donors.

Cookies

We use the following types of cookies on our website:

  • Essential cookies: Required for the website to function correctly. These cannot be disabled without affecting website functionality.
  • Analytics cookies: Used to understand how visitors interact with our website. We use aggregated, anonymised data only. No individual visitor profiles are built.

We do not use advertising cookies, third-party tracking cookies, or any technology designed to track you across other websites.

You can disable cookies at any time through your browser settings. Please note that disabling essential cookies may affect your ability to use certain features of this website.

Data Retention

We retain personal data for no longer than necessary for the purpose it was collected:

  • Contact form data: Retained for up to 2 years from the date of submission, or until you request deletion.
  • Client account data: Retained for the duration of the client relationship and for up to 3 years after contract termination, to comply with legal and accounting obligations.
  • Donor data: Retained for as long as required to deliver the agreed services to the relevant NGO client. Upon contract termination, donor data is securely deleted or returned to the NGO within 30 days, unless retention is required by law.
  • Analytics data: Retained in anonymised, aggregated form indefinitely. No personally identifiable analytics data is retained beyond 26 months.

Your Rights

You have the following rights regarding your personal data held by Dhaaga:

  • Right to access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request that we correct inaccurate or incomplete data.
  • Right to erasure: You may request that we delete your personal data, subject to any legal retention obligations.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to object: You may object to processing of your data for direct marketing purposes at any time.

To exercise any of these rights, please contact us at support@getdhaaga.com. We will respond within 30 days.

Data Security

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

  • Encryption of data in transit using HTTPS/TLS across all our systems
  • Access controls ensuring only authorised personnel can access personal data
  • Regular internal security reviews and staff training
  • Contractual data processing agreements with all sub-processors

No method of data transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security. If you believe your data has been compromised, please contact us immediately at support@getdhaaga.com.

Third-Party Services

To deliver our services, we use selected third-party tools and platforms, which may include analytics providers, CRM platforms, email delivery services, and cloud infrastructure providers. All third-party service providers are vetted and are required to process data only in accordance with our instructions and applicable privacy law. We maintain data processing agreements with all sub-processors that handle personal data on our behalf.

We do not embed third-party social media trackers, advertising pixels, or behavioural analytics tools on this website.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

Contact Us

For any privacy-related queries, data access requests, deletion requests, or to exercise any of your rights under this policy, please contact us:

We aim to respond to all privacy enquiries within 30 days.