Bharat Rural Livelihoods Foundation (BRLF), an autonomous society registered under the Societies Registration Act, 1860, and operating under the aegis of the Ministry of Rural Development, Government of India, is committed to protecting the personal data of everyone who interacts with us — donors, website visitors, partner CSOs, job applicants, and beneficiaries. This policy is framed in accordance with the Digital Personal Data Protection Act, 2023 (DPDP) and the Digital Personal Data Protection Rules, 2025, along with other applicable Indian laws.
What This Policy Covers
This Data Protection Policy explains how we (BRLF), as a Data Fiduciary, collect, store, use, secure, and dispose of the personal data of Data Principals gathered through our website (www.brlf.in), donation platform, newsletter sign-ups, career applications, and partner engagements.
Data We Collect
Depending on how you interact with us, we may collect:
In line with the DPDP Act’s principle of data minimisation, we only collect personal data that is necessary for the specific, stated purpose for which it is being processed.
Lawful Basis for Processing
We process your personal data primarily on the basis of your free, specific, informed, unconditional, and unambiguous consent, given through a clear affirmative action (such as ticking a box or submitting a form). In limited situations, we may process personal data without consent where permitted under the DPDP Act — for example, to comply with a legal obligation or court order, or for other “legitimate uses” recognised under the Act. Where processing is based on consent, you have the right to withdraw that consent at any time (see “Your Rights” below), and doing so will not affect the lawfulness of processing carried out before withdrawal.
Why We Collect It
We collect and process personal data only for legitimate, clearly stated purposes, including:
Personal Data Breach Notification
In the event of a personal data breach, BRLF will, in accordance with the DPDP Act and Rules, notify the Data Protection Board of India and affected Data Principals as required, describing the nature of the breach, its likely consequences, and the measures taken to mitigate it.
Children's Data
BRLF does not knowingly collect personal data from individuals below 18 years of age without verifiable parental/guardian consent. If we become aware that we have inadvertently collected data from a child without such consent, we will take steps to delete it.
Cross-Border Data Transfer
BRLF’s website and donation platform are hosted in India. There is no cross-border data transfer.
Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
To exercise any of these rights, write to our Grievance Officer at Mukesh Dubey, Lead – Communications and Project Integration, BRLF, info@brlf.in, or call +91 11 4606 1935. We will endeavour to respond within a reasonable time, in accordance with the timelines prescribed under the DPDP Rules.
Third-Party Sharing
We do not sell, trade, or rent personal data to third parties. We may share data with:
Changes to This Policy
BRLF may update this Data Protection Policy from time to time to reflect changes in law or our practices. The updated version will be posted on this page with a revised “Last updated” date.
Contact us
Grievance Officer
Mr. Mukesh Dubey
Registered office
C-32, Second Floor, Niti Bagh, New Delhi – 110049
