Organized by: Kafila Foundation (J&K)

Effective Date: 18 July 2026 Last Updated: 18 July 2026

1. Introduction

1.1 Kafila Foundation (J&K) ("Kafila Foundation", "we", "us", "our"), a registered non-profit organization based near River Point Goose, 300 Meters from Lolab Gate, Kupwara, Jammu & Kashmir – 193222, India, is committed to protecting the privacy and personal data of everyone who interacts with us in connection with the event "RUN FOR LOLAB 2026" ("Event") and our website www.kafilafoundation.org ("Website").

1.2 This Privacy Policy explains what personal data we collect, why we collect it, how we use, store, and protect it, and the rights available to you. This Policy is drafted with reference to the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and rules made thereunder, and, where relevant to visitors from outside India, general principles consistent with the EU General Data Protection Regulation ("GDPR").

1.3 By registering for the Event, using the Website, making a donation, or otherwise submitting personal data to us, you consent to the collection, use, and disclosure of your personal data as described in this Policy. If you do not agree with this Policy, please do not provide your personal data to us.

1.4 In this Policy, "Data Principal" (as used under the DPDP Act) refers to you, the individual to whom the personal data relates. "Data Fiduciary" refers to Kafila Foundation, which determines the purpose and means of processing your personal data.

2. Information We Collect

2.1 We may collect the following categories of personal data, depending on your interaction with us:

(a) Identity and Contact Information: full name, age/date of birth, gender, phone number, residential address, email address.

(b) Registration Information: category of registration (school student, youth participant, wheelchair participant, volunteer, NGO partner, CSR partner, business, donor), school/institution name (where applicable), emergency contact name and number.

(c) Sensitive Personal Data:

• Medical Information: health conditions, allergies, fitness declarations, or disability details voluntarily disclosed for the purpose of event safety and reasonable accommodation.
• Aadhaar/Government ID details: collected only where legally necessary or reasonably required for identity or age verification, such as for wheelchair participant accommodations or school-linked verification. We collect only the minimum Aadhaar-related information necessary and do not store full Aadhaar numbers beyond what is required for verification.
• Payment Information: payment proof/screenshots, UTR/UPI transaction reference numbers, transaction IDs, and related payment metadata. We do not collect or store full card numbers, CVV, or UPI PINs; where a payment gateway is used, such details are handled directly by our payment gateway partners.

(d) Communication Data: any correspondence you have with us via email, WhatsApp, phone, or the Website, including queries, complaints, and feedback.

(e) Technical and Usage Data: IP address, browser type, device information, pages visited, and cookies collected through the Website (see Clause 9, Cookies & Analytics).

2.2 We collect personal data directly from you at the time of registration (currently via Google Forms, and subsequently via the Website), through email/WhatsApp communication, or through payment confirmations shared with us.

3. Sensitive Personal Data — Special Care

3.1 Medical information and any government-issued identification details are treated as sensitive personal data. We collect such information only where necessary and proportionate to the purpose stated (primarily participant safety, age verification, and category eligibility) and limit access to authorized event safety personnel and administrative staff on a need-to-know basis.