Privacy Policy

This policy applies to anyone who registers for membership, submits a business listing, or contacts the Trust through this website. It is issued by the Shri Thana Halai Lohana Mahajan Trust ("the Trust", "we", "us") and is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDPA).

When you register for membership, we collect, for you and any family members you add:

• Identity details — full name, date of birth, gender, marital status, blood group
• Contact details — email address, WhatsApp/phone number, residential address, pincode
• Background details — native place, district, state, education, occupation, years in Thane
• Government ID — Aadhaar number, collected for identity verification of the family head
• Payment details — membership fee amount and payment/order reference (card and bank details are handled directly by our payment gateway, Razorpay, and never pass through or are stored on our servers)

If you submit a business listing or a contact form, we collect only the details you provide in that form — typically your name, contact details, and message.

We use this information only to:

• Verify your identity and process your membership application
• Maintain the Trust's community records and membership register
• Process and confirm your membership payment
• Contact you about your registration, Trust events, and community updates
• Respond to business listing submissions and general enquiries

We do not sell your data, and we do not use it for advertising or share it with any third party except as described in this policy.

By checking the consent box on the membership registration form and submitting your application, you confirm that you have read this policy and consent to the Trust collecting, storing, and using the information above for the purposes listed. This consent is recorded, with a timestamp, against your membership record. You may withdraw consent at any time by contacting us (see Section 8) — this may mean we are unable to continue processing an in-progress or existing membership application.

Your Aadhaar number is encrypted before it is stored, using industry-standard encryption (AES-256), and is never stored or transmitted in plain text. When an admin views your membership record, only the last 4 digits are shown (e.g. "••••••••1098") — the full number is never displayed on screen or in any report. If a membership application is rejected, the Aadhaar number tied to that application is permanently deleted from our systems rather than retained.

Access to membership records is restricted to authorised Trust administrators, who must log in with a password and one-time code. All administrator access is logged.

If your membership application is approved, we retain your details for as long as you remain a member and for the period required to maintain the Trust's historical membership records. If your application is rejected, your Aadhaar number is deleted immediately (see Section 5); your other details are retained only as long as reasonably needed to handle any related query or appeal, after which they are deleted. Contact form and business listing submissions are retained only as long as needed to respond to and resolve the enquiry.

Under the DPDPA, you have the right to:

• Ask us what personal data we hold about you
• Ask us to correct inaccurate or incomplete data
• Ask us to erase data that is no longer needed for the purpose it was collected for
• Withdraw consent, and be told the consequences of doing so
• Register a grievance if you believe your data has been misused

To exercise any of these rights, contact us using the details in Section 8.

For any question about this policy, or to make a request or complaint about your personal data, contact the Trust office:

We aim to acknowledge grievances promptly and resolve them as soon as reasonably possible.

We may update this policy from time to time to reflect changes in our practices or in applicable law. The effective date at the top of this page will always show when it was last updated.