Privacy Policy

Welcome to Dreamleap Initiative Foundation ("Dreamleap", "we", "our", or "us").

Dreamleap Initiative Foundation is a registered non-profit organization committed to empowering students through education, scholarships, mentorship, career guidance, skill development, and community initiatives. We believe that every deserving student should have access to opportunities that enable them to achieve their full potential regardless of financial circumstances.

We value the trust that our donors, students, parents, volunteers, mentors, partners, and website visitors place in us. Protecting your personal data and respecting your privacy are fundamental to our mission and operations.

This Privacy Policy explains how we collect, use, process, store, disclose, retain, and protect your personal data when you interact with Dreamleap, including through:

• Our website
• Donation platforms
• Student applications
• Volunteer registrations
• Mentor registrations
• Events and workshops
• Scholarship programmes
• Sponsorship programmes
• Newsletters
• WhatsApp communications
• Email communications
• Contact forms
• Future mobile applications or online portals
• AI-powered support services or chatbots that may be introduced in the future

By using our website or participating in our programmes, you acknowledge that you have read and understood this Privacy Policy.

2. Our Commitment to Privacy

Dreamleap is committed to processing personal data responsibly, transparently, and securely.

We aim to collect only the information reasonably necessary for our charitable activities and to use it fairly, lawfully, and only for legitimate purposes.

We continuously review our practices to improve the protection of personal information and maintain appropriate administrative, technical, and organisational safeguards.

3. Applicability of this Privacy Policy

This Privacy Policy applies to all individuals who interact with Dreamleap, including but not limited to:

• Website visitors
• Donors
• Recurring donors
• Students
• Parents and legal guardians
• Scholarship applicants
• Beneficiaries
• Volunteers
• Mentors
• Employees
• Trustees
• Consultants
• Interns
• Corporate partners
• Educational institutions
• Vendors and service providers
• Newsletter subscribers
• Event participants
• Individuals contacting us through email, telephone, WhatsApp, or online forms

This Policy applies regardless of whether you interact with us online or offline.

4. Information We Collect

Depending on your relationship with Dreamleap, we may collect different categories of personal information.

A. Identity Information

We may collect:

• Full name
• Date of birth
• Age
• Gender (optional)
• Photograph (where required)
• Government-issued identity details where legally required
• Parent or guardian details (for minors)

B. Contact Information

We may collect:

• Email address
• Mobile number
• WhatsApp number
• Residential address
• City
• State
• Country
• Postal code

C. Donation Information

If you make a donation, we may collect:

• Donor name
• Contact details
• Donation amount
• Donation frequency
• Transaction reference number
• Payment status
• PAN (where required for tax purposes)
• Tax receipt information
• Communication preferences

For your security, Dreamleap does not store:

• Debit card numbers
• Credit card numbers
• CVV
• UPI PIN
• Net banking passwords
• Payment passwords

Payments are processed securely through our authorised payment service providers.

D. Student Information

Where applicable, we may collect information relating to students participating in our programmes. Examples include:

• Student name
• Date of birth
• Gender
• School or college
• Class or course
• Academic records
• Attendance records
• Progress reports
• Scholarship information
• Career interests
• Extracurricular achievements
• Educational goals

E. Parent or Guardian Information

Where programmes involve minors, we may collect:

• Parent or guardian name
• Relationship to the student
• Contact information
• Address
• Emergency contact details

F. Supporting Documents

Depending on programme requirements, Dreamleap may request documents such as:

• School identity card
• School admission proof
• Academic mark sheets
• Bonafide certificate
• Family income certificate
• Address proof
• Identity proof
• Bank account details for scholarship disbursement
• Disability certificates (where applicable)
• Other documents reasonably necessary for programme eligibility

We collect only those documents that are relevant to the specific programme.

G. Volunteer and Mentor Information

For volunteers and mentors we may collect:

• Professional background
• Educational qualifications
• Skills
• Resume or curriculum vitae
• Areas of expertise
• Languages spoken
• Areas of volunteering interest
• Availability
• References (where applicable)

H. Employment Information

If you apply to work with Dreamleap, we may collect:

• Employment history
• Educational qualifications
• Resume
• References
• Interview notes
• Background verification documents where applicable

I. Communication Information

When you communicate with Dreamleap, we may collect:

• Emails
• WhatsApp messages
• Contact form submissions
• Telephone enquiries
• Support requests
• Event registrations
• Feedback
• Survey responses
• Complaint or grievance details

J. Technical Information

When you visit our website, certain information may be collected automatically. This may include:

• IP address
• Browser type
• Browser version
• Device type
• Operating system
• Language preferences
• Screen resolution
• Pages visited
• Date and time of access
• Referring website
• Session duration
• Clickstream information
• Cookies and similar technologies

This information helps us improve website performance, security, and user experience.

5. How We Collect Information

We collect personal information through various channels depending on how you interact with Dreamleap. Information may be collected when you:

• Visit our website.
• Submit a contact form.
• Make a donation.
• Register as a volunteer.
• Apply as a mentor.
• Apply for scholarships or sponsorship.
• Participate in an event.
• Subscribe to our newsletter.
• Contact us through email.
• Contact us through WhatsApp.
• Call our support number.
• Participate in surveys or feedback sessions.
• Upload documents.
• Interact with our future student portal or volunteer portal.
• Use our future chatbot or AI-powered services.
• Interact with us through our official social media channels.

We may also receive information from:

• Parents or guardians
• Schools
• Educational institutions
• Corporate partners
• Payment service providers
• Service providers assisting us in programme administration
• Publicly available sources where appropriate and lawful

6. Legal Basis for Processing Personal Data

Dreamleap processes personal data for lawful and legitimate purposes, including:

• Where you have provided your consent.
• Where processing is necessary to provide our programmes or services.
• Where processing is required to comply with applicable legal or regulatory obligations.
• Where processing is necessary to protect the vital interests of an individual.
• Where processing is reasonably necessary to support our legitimate charitable activities, while respecting applicable legal requirements and individual rights.

Where consent is relied upon, you may withdraw it at any time, subject to legal or operational limitations.

7. Children's Privacy

Dreamleap works extensively with children and young people under the age of 18.

We recognise the importance of protecting children's privacy and personal information.

Where required by applicable law, we seek consent from a parent or legal guardian before collecting or processing a child's personal data.

Information relating to children is collected only where reasonably necessary for programme administration, educational support, safeguarding, scholarship management, mentorship, or related charitable activities.

We implement additional safeguards when handling children's information and expect all volunteers, mentors, employees, and partners to comply with our Child Safeguarding & Protection Policy.

8. Why We Process Your Personal Data

Dreamleap Initiative Foundation processes personal data only for legitimate charitable, educational, operational, administrative, legal, and communication purposes.

Depending on your relationship with us, we may use your information to:

A. Manage Donations

• Process one-time and recurring donations.
• Generate donation acknowledgements.
• Issue tax receipts and certificates.
• Maintain donor records.
• Respond to donor enquiries.
• Prevent fraudulent transactions.
• Meet accounting and statutory obligations.

B. Administer Scholarships & Student Programmes

We may process personal data to:

• Review scholarship applications.
• Verify eligibility.
• Assess financial assistance requirements.
• Manage sponsorship programmes.
• Track educational progress.
• Monitor programme outcomes.
• Provide mentorship.
• Communicate with students and parents.
• Improve educational programmes.

C. Volunteer & Mentor Management

Information may be processed to:

• Evaluate volunteer applications.
• Assign volunteer responsibilities.
• Match mentors with students.
• Coordinate programme activities.
• Provide training materials.
• Maintain volunteer records.
• Issue participation certificates.
• Conduct programme evaluations.

D. Website Administration

We use personal and technical information to:

• Operate the website.
• Improve website performance.
• Detect technical issues.
• Maintain website security.
• Prevent fraud and misuse.
• Analyse visitor behaviour.
• Improve user experience.

E. Responding to Enquiries

Information submitted through:

• Contact forms
• Email
• WhatsApp
• Telephone
• Social media

may be processed to respond to enquiries, provide support, resolve complaints, or communicate with you regarding your interaction with Dreamleap.

F. Compliance

We may process personal information to:

• Comply with legal obligations.
• Maintain financial records.
• Respond to lawful requests from competent authorities.
• Protect the rights and safety of Dreamleap and its stakeholders.
• Prevent fraud and misuse.

9. Communication with You

Dreamleap believes in maintaining transparent and meaningful communication with its stakeholders.

Depending on your relationship with us, we may contact you through:

• Email
• Telephone
• SMS
• WhatsApp
• Postal mail
• Website notifications
• Future mobile applications
• Official social media channels

Communications may include:

• Donation confirmations
• Tax receipts
• Scholarship updates
• Mentorship schedules
• Volunteer coordination
• Event invitations
• Workshop reminders
• Programme announcements
• Impact reports
• Annual reports
• Newsletters
• Important policy updates
• Administrative notices
• Customer support responses

10. WhatsApp Communications

Dreamleap may use the WhatsApp Business Platform to communicate with:

• Donors
• Students
• Parents
• Volunteers
• Mentors
• Beneficiaries
• Corporate partners

WhatsApp communications may include:

• Donation acknowledgements
• Digital donation receipts
• Scholarship updates
• Programme reminders
• Event invitations
• Volunteer schedules
• Mentor coordination
• Important administrative notifications
• Support responses

Where applicable, we will obtain your consent before sending promotional or non-essential WhatsApp communications.

You may opt out of promotional WhatsApp messages by:

• replying "STOP" where applicable;
• contacting us via email; or
• using any unsubscribe option that we provide.

Please note that operational or legally required communications may continue where necessary.

11. Newsletters & Promotional Communications

If you subscribe to our newsletter or otherwise consent to receive updates, we may send information relating to:

• Educational opportunities
• Student success stories
• Foundation news
• Upcoming events
• Volunteer opportunities
• Fundraising campaigns
• Annual reports
• Impact updates

You may unsubscribe at any time using the unsubscribe link in our emails or by contacting us.

Withdrawal of consent for newsletters will not affect essential communications such as donation receipts or programme-related notifications.

12. AI & Chatbot Services

Dreamleap may introduce AI-powered assistants, virtual support agents, or chatbots to improve accessibility and respond to common enquiries.

If you interact with such services:

• your messages may be processed to provide responses;
• conversations may be reviewed to improve service quality;
• automated responses may not always be accurate or complete; and
• important decisions relating to scholarships, sponsorships, or programme eligibility will not be based solely on automated processing.

Users should contact Dreamleap directly if they require clarification or personalised assistance.

13. Cookies & Similar Technologies

Our website uses cookies and similar technologies to improve functionality, security, analytics, and user experience.

Cookies help us:

• remember your preferences;
• analyse website traffic;
• understand visitor behaviour;
• improve performance;
• maintain security.

Additional information is available in our Cookie Policy.

14. Analytics Services

To better understand how visitors use our website, we currently use Google Analytics.

Google Analytics helps us understand:

• visitor numbers;
• popular pages;
• navigation paths;
• device types;
• browser information;
• general usage trends.

This information helps us improve our website and educational resources.

Meta Pixel

Meta Pixel may be used to:

• understand campaign performance;
• measure awareness initiatives;
• improve fundraising campaigns;
• understand visitor engagement.

Meta may process information according to its own privacy practices.

15. Payment Processing

Online donations made through our website are securely processed through authorised payment service providers, including Razorpay.

Dreamleap does not store:

• payment card numbers;
• CVV;
• UPI PIN;
• internet banking passwords; or
• similar payment credentials.

Payment information is processed securely by the payment provider in accordance with applicable industry security standards.

16. Email Communications

Dreamleap currently uses Resend and may use other trusted email service providers for sending:

• donation receipts;
• newsletters;
• programme communications;
• volunteer updates;
• mentorship notifications;
• event confirmations; and
• administrative communications.

Email service providers process information solely for delivering communications on our behalf.

17. Website Hosting & Security

Our website is hosted using Cloudflare Pages and related infrastructure services.

These services help provide:

• website availability;
• content delivery;
• performance optimisation;
• security protections;
• traffic management.

Technical information may be processed as part of providing these services.

18. Third-Party Service Providers

To support our operations, Dreamleap may engage trusted third-party service providers, including those providing:

• Payment processing
• Website hosting
• Email delivery
• Analytics
• Communication platforms
• Cloud infrastructure
• Document storage
• Customer support
• Event management
• Survey tools

Examples include:

• Razorpay
• Cloudflare
• Resend
• Google Analytics
• Meta Pixel
• WhatsApp Business Platform through our authorised messaging service provider

These providers receive only the information reasonably necessary to perform their services and are expected to protect such information appropriately.

19. When We May Share Personal Data

Dreamleap does not sell your personal information.

We may share personal data only where necessary:

• with trusted service providers acting on our behalf;
• with educational institutions involved in programme delivery (where appropriate);
• with auditors, accountants, legal advisers, or regulatory authorities where required;
• to comply with applicable law or lawful governmental requests;
• to protect the rights, safety, or property of Dreamleap or others; or
• where you have provided your consent.

Whenever possible, we limit the information shared to what is necessary for the specific purpose.

20. How We Protect Your Personal Data

Dreamleap Initiative Foundation is committed to protecting the confidentiality, integrity, and availability of the personal information entrusted to us.

We implement reasonable administrative, technical, and organisational safeguards designed to protect personal data against accidental loss, unauthorised access, misuse, alteration, disclosure, or destruction.

Our security measures may include:

• Role-based access controls.
• Password-protected systems.
• Multi-factor authentication where appropriate.
• Encryption of data during transmission using secure protocols.
• Secure cloud hosting and infrastructure.
• Regular software updates and security patches.
• Firewall and network security measures.
• Logging and monitoring of critical systems.
• Access restrictions for authorised personnel only.
• Confidentiality obligations for employees, volunteers, and service providers.

While we strive to use commercially reasonable security measures, no website, internet transmission, or electronic storage system can be guaranteed to be completely secure. Users should also take reasonable precautions to protect their own devices, passwords, and accounts.

21. Data Retention

Dreamleap retains personal information only for as long as it is reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with applicable laws, resolve disputes, protect legal rights, or meet regulatory and financial obligations.

When personal data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with our internal practices and applicable law.

22. Indicative Data Retention Schedule

The actual retention period may vary depending on legal, regulatory, operational, or programme requirements.

Dreamleap may retain anonymised or aggregated information that does not identify individuals for research, reporting, statistical analysis, or impact measurement.

23. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete information.
• Request updating of your information.
• Withdraw consent where processing is based on consent.
• Request deletion of personal data where legally permissible.
• Request information regarding the categories of personal data processed.
• Raise concerns regarding the processing of your personal information.
• Lodge a grievance regarding our handling of personal data.

Some requests may be subject to legal, regulatory, operational, or contractual limitations.

24. How to Exercise Your Rights

To exercise your privacy rights, please contact us using the details provided at the end of this Privacy Policy.

To help us process your request efficiently, please include:

• Your full name.
• Contact details.
• The nature of your request.
• Any information necessary to identify your records.

For your protection, we may request additional information to verify your identity before acting on certain requests.

25. Withdrawal of Consent

Where personal data is processed based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Please note that withdrawal of consent may affect our ability to provide certain services, programmes, or communications.

Dreamleap may continue processing information where required by law or where another lawful basis for processing exists.

26. Managing Communication Preferences

You may choose to stop receiving non-essential communications from Dreamleap at any time. For example:

• Use the unsubscribe link included in newsletters.
• Reply "STOP" to promotional WhatsApp communications where applicable.
• Contact us directly to update your communication preferences.

Please note that certain communications may still be sent where necessary, including:

• Donation confirmations.
• Tax receipts.
• Programme-related notifications.
• Safety or safeguarding communications.
• Legal or regulatory notices.
• Responses to enquiries initiated by you.

27. Data Accuracy

Dreamleap relies on the accuracy of the information provided by individuals. You are encouraged to notify us promptly if:

• your contact details change;
• your educational information changes;
• your donation information requires correction; or
• any other information previously provided becomes inaccurate.

Keeping your information current helps us administer our programmes effectively.

28. International Data Processing

Dreamleap primarily operates in India.

However, some of our trusted technology service providers may process or store information using infrastructure located outside India or across multiple jurisdictions. Examples may include providers offering:

• cloud hosting;
• website delivery;
• analytics;
• communication services;
• payment processing; or
• email delivery.

Where such processing occurs, Dreamleap takes reasonable steps to work with service providers that maintain appropriate security measures and contractual obligations designed to protect personal information in accordance with applicable law.

29. Data Breach Response

Despite our security measures, no organisation can eliminate every cybersecurity risk.

If Dreamleap becomes aware of a personal data breach that is reasonably likely to affect individuals or that requires notification under applicable law, we will take appropriate steps, which may include:

• investigating the incident;
• containing and mitigating the impact;
• restoring affected systems where necessary;
• notifying relevant authorities where legally required; and
• informing affected individuals where required by applicable law or where appropriate.

Dreamleap continually reviews its security practices to reduce the likelihood and impact of such incidents.

30. Children's Personal Data

Dreamleap is dedicated to protecting the privacy of children participating in our programmes.

Where applicable, we seek consent from a parent or legal guardian before collecting or processing a child's personal data.

Children's personal information is used only for legitimate programme purposes, including:

• scholarship administration;
• educational support;
• mentorship;
• safeguarding;
• communication with parents or guardians;
• programme monitoring; and
• impact assessment.

We do not knowingly use children's personal information for behavioural advertising or commercial profiling.

31. Automated Decision-Making

Dreamleap may use technology to assist with administrative tasks, workflow management, or responding to general enquiries. However:

• scholarship decisions;
• sponsorship decisions;
• beneficiary selection; and
• other significant programme decisions

will not be based solely on automated processing without appropriate human review.

32. Links to Other Policies

This Privacy Policy should be read together with the following Dreamleap Initiative Foundation policies, where applicable:

• Terms & Conditions
• Cookie Policy
• Refund & Cancellation Policy
• Volunteer Terms & Code of Conduct
• Child Safeguarding & Protection Policy
• Student & Parent Consent Policy
• Website Disclaimer
• Copyright & Intellectual Property Policy
• Grievance Redressal Policy

Each of these policies addresses a specific aspect of your relationship with Dreamleap and should be read alongside this Privacy Policy.

33. Third-Party Websites

Our website may contain links to third-party websites or services for your convenience. Examples may include:

• Payment service providers
• Educational institutions
• Government websites
• Social media platforms
• Corporate partners
• Event registration platforms

Once you leave the Dreamleap website, your use of third-party websites is governed by their own privacy policies and terms of use.

Dreamleap is not responsible for the privacy practices, security, or content of third-party websites. We encourage you to review their privacy policies before providing personal information.

34. Changes to this Privacy Policy

Dreamleap Initiative Foundation may revise or update this Privacy Policy from time to time to reflect:

• changes in applicable law;
• organisational changes;
• new programmes or services;
• technological developments;
• improvements to our privacy practices; or
• changes to our service providers.

Whenever material changes are made, the revised version will be published on our website together with the updated "Last Updated" date.

Where required by applicable law, we may also provide additional notice or seek fresh consent before implementing certain changes.

Your continued use of our website or participation in our programmes after the revised Privacy Policy becomes effective constitutes your acknowledgement of the updated Policy.

35. Privacy & Grievance Officer

Dreamleap Initiative Foundation has established a process for addressing privacy-related questions, requests, and grievances. For all matters relating to:

• personal data;
• privacy rights;
• correction requests;
• deletion requests;
• withdrawal of consent;
• data protection concerns; or
• grievances relating to this Privacy Policy,

please contact:

Privacy & Grievance Officer
Dreamleap Initiative Foundation
19, First Floor, Block-D, CC Colony
Malka Ganj
Delhi – 110007
India
Email: info@dreamleapfoundation.org
Phone: +91 8920943490

We aim to acknowledge and respond to privacy-related requests within a reasonable timeframe. Certain requests may require verification of identity before they can be processed.

36. Contact Us

If you have any questions regarding this Privacy Policy or Dreamleap's privacy practices, please contact:

Dreamleap Initiative Foundation
Registered Non-Profit Organization
12AB & 80G Registered
URN: AALCD7544GE20251
Registered Office:
19, First Floor, Block-D, CC Colony
Malka Ganj
Delhi – 110007
India
Email: info@dreamleapfoundation.org
Phone: +91 8920943490

37. Our Privacy Commitment

At Dreamleap Initiative Foundation, protecting personal information is not merely a legal obligation—it is an essential part of the trust placed in us by students, parents, donors, volunteers, mentors, partners, and the wider community.

We are committed to:

• Collecting only the personal information that is reasonably necessary.
• Processing personal data fairly, transparently, and responsibly.
• Respecting the privacy and dignity of every individual.
• Protecting children's personal information with enhanced care.
• Maintaining appropriate technical and organisational safeguards.
• Continuously improving our privacy and security practices.
• Complying with applicable laws and recognised good governance practices.

As our programmes and digital services evolve, we will continue strengthening our privacy practices to ensure that personal information remains protected.

38. Consent & Acknowledgement

By accessing our website, submitting information to Dreamleap Initiative Foundation, making a donation, applying for a programme, registering as a volunteer or mentor, subscribing to our newsletter, communicating with us through email, telephone, WhatsApp, or participating in any Dreamleap initiative, you acknowledge that:

• You have read and understood this Privacy Policy.
• You understand how your personal information may be collected, used, stored, disclosed, and protected.
• You consent to the processing of your personal data where such consent is required under applicable law.
• You understand that additional programme-specific consent may be requested where appropriate.
• You agree to notify Dreamleap if any information provided by you becomes inaccurate or requires updating.

Where you are providing personal information on behalf of another individual, including a child, you confirm that you are authorised to do so and, where required, have obtained the necessary consent.

39. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.

Any dispute arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in Delhi, India.