Varya Life Sciences Foundation Last Updated: May 2026

Varya Life Sciences Foundation ("we", "us", "our") is committed to protecting the privacy and personal data of everyone who visits or interacts with our Website at varyalifesciences.com.

This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights regarding that information. It is in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

Organisation: Varya Life Sciences Foundation CIN: U72100DL2026NPL465479 Registered Address: G-30, Ground Floor, Harkesh Nagar, Okhla Industrial Estate, New Delhi – 110020, India Data Contact: rohit@varyalifesciences.com

1. What Information We Collect

We collect only the minimum information necessary to operate our Website and serve our mission.

1.1 Information You Provide Directly

When you use our Contact Form, you voluntarily share:

• Your first and last name

• Your email address

• A subject and message

When you make a Donation, our payment processor may collect:

• Your name

• Email address

• Payment details (processed securely by the third-party payment gateway; we do not store card details)

When you subscribe to updates or newsletters (if applicable):

• Your email address

1.2 Information Collected Automatically

When you visit our Website, standard technical information may be collected automatically, including:

• IP address

• Browser type and version

• Device type (desktop, mobile)

• Pages visited and time spent

• Referring website (where you came from)

This information is collected through website analytics tools (such as Framer Analytics or Google Analytics) and is used only in aggregated, non-identifiable form to understand how our Website is used and how to improve it.

1.3 What We Do NOT Collect

We do not collect:

• Sensitive personal data such as health records, medical history, biometric data, or government identity numbers (Aadhaar, PAN, etc.) through this Website

• Financial account information (handled entirely by payment gateways)

• Data from children under 18 years of age knowingly or intentionally

2. How We Use Your Information

We use the information we collect solely for the following purposes:

• To respond to your enquiries submitted via the Contact Form

• To process and acknowledge donations

• To send you updates about our programmes or campaigns, if you have consented

• To improve our Website content and user experience using anonymised analytics

• To comply with applicable legal obligations

We do not sell, rent, trade, or share your personal data with third parties for their marketing purposes.

3. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:

• Your consent — when you submit a contact form, make a donation, or subscribe to updates

• Legitimate interest — for operating and improving the Website through anonymised analytics

• Legal obligation — where required by applicable Indian law

4. How We Share Your Information

We do not sell or share your personal data with third parties, except in the following limited circumstances:

Service Providers: We may share data with trusted third-party service providers who help us operate our Website and process donations (e.g., payment gateways, email service providers, web hosting/CMS platforms like Framer). These providers are bound by confidentiality obligations and are not permitted to use your data for any other purpose.

Legal Requirements: We may disclose personal information if required to do so by law, court order, or a government authority under Indian law.

Organisational Transfer: In the unlikely event of a merger, dissolution, or restructuring of Varya Life Sciences Foundation, personal data may be transferred to the successor entity, subject to the same privacy commitments.

5. Data Retention

We retain your personal data only for as long as it is necessary for the purposes outlined in this Policy, or as required by applicable law.

• Contact form enquiries: retained for up to 2 years, then deleted

• Donation records: retained for 7 years as required by Indian accounting and tax regulations

• Newsletter subscriber data: retained until you unsubscribe

6. Cookies

Our Website may use cookies — small text files stored on your device — to improve your browsing experience and collect anonymised usage data.

Types of cookies we may use:

• Essential cookies: Required for the Website to function (e.g., session management)

• Analytics cookies: Help us understand how visitors use the Website (anonymised data only)

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Website.

7. Security of Your Data

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

• Secure HTTPS connection across the Website

• Restricted access to personal data within our organisation

• Use of reputable, security-compliant third-party payment processors

However, no method of data transmission over the internet is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security.

8. Your Rights Under Indian Law

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights regarding your personal data:

Right to Access: You may request a summary of the personal data we hold about you.

Right to Correction: You may request correction of inaccurate or incomplete personal data.

Right to Erasure: You may request deletion of your personal data, subject to legal retention obligations.

Right to Withdraw Consent: You may withdraw your consent for us to process your data at any time. This will not affect the lawfulness of processing before the withdrawal.

Right to Grievance Redressal: You have the right to raise a grievance with us regarding processing of your personal data.

To exercise any of these rights, please write to us at rohit@varyalifesciences.com. We will respond within 30 days.

9. Children's Privacy

Our Website is not directed at or intended for use by children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.

10. Links to Other Websites

Our Website contains links to external resources (such as WHO, ICMR, MoHFW). These are provided for informational purposes only. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any external sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and applicable rules, the details of the Grievance Officer are:

Name: Rohit Kumar Organisation: Varya Life Sciences Foundation Address: G-30, Ground Floor, Harkesh Nagar, Okhla Industrial Estate, New Delhi – 110020 Email: rohit@varyalifesciences.com Response Time: Within 30 days of receipt of grievance

13. Contact Us

For any privacy-related questions, requests, or concerns, please contact:

Varya Life Sciences Foundation G-30, Ground Floor, Harkesh Nagar, Okhla Industrial Estate, New Delhi – 110020, India Email: rohit@varyalifesciences.com