Privacy Policy
This is a working draft — it has not yet received a legal review pass and should not be treated as final. Last updated: ⚠ [date] — needs your input before publishing.
This Privacy Policy explains how Cancer Support India collects, uses, and protects your personal data, in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law.
1. What We Collect
- Account information: name or display name, email address, and, if provided, demographic details relevant to personalising resources (e.g. role: patient/caregiver/survivor).
- Content you provide: forum posts, comments, and any information you choose to share in community spaces.
- Usage data: pages visited, general device/browser information, collected via cookies and analytics (see Cookie Policy).
We do not require you to disclose your specific diagnosis, and we encourage you to share only what you are comfortable with in public or semi-public community spaces.
2. How We Use Your Data
- To operate your account and enable community participation.
- To personalise resource recommendations (e.g. by cancer type or role) where you choose to provide that information.
- To moderate community content for safety.
- To improve the Platform through aggregated, non-identifying usage analysis.
We do not sell personal data to third parties. We do not use health-related information you share for advertising purposes.
3. Anonymity in Community Spaces
Where the Platform offers anonymous participation, your display identity in community spaces will not be linked publicly to your account email or real name. Internally, moderators retain the ability to identify accounts for safety and moderation purposes only.
4. Your Rights
Under the DPDP Act, you have the right to access, correct, and request erasure of your personal data, and to withdraw consent for processing where consent is the basis for that processing. To exercise these rights, contact us at ⚠ [privacy contact email] — needs your input before publishing.
5. Data Storage and Security
Data is stored using Supabase infrastructure with access controls (Row-Level Security) restricting who can view your data. We take reasonable technical and organisational measures to protect your data, though no system can be guaranteed fully secure.
6. Data Retention
We retain account and content data for as long as your account is active, or as needed to comply with legal obligations. You may request account deletion at any time.
7. Children’s Data
This Platform is intended for adult use. If you are a caregiver managing information on behalf of a minor, please contact us so we can advise on appropriate handling.
8. Third-Party Links
The Support Directory and Global Resources sections link to third-party websites. This Privacy Policy does not apply to those external sites — please review their own privacy policies.
9. Contact
For privacy questions or data requests, contact: ⚠ [privacy contact email] — needs your input before publishing.