The Young Women’s Christian Association of Bombay (“YWCA of Bombay”, “we”, “us”, or “our”) has served the women of this city since 1875. We take the privacy of our residents, guests, donors, volunteers, and website visitors as seriously as we take our mission. This policy explains, in plain terms, how we collect, use, and safeguard your personal information.
This Privacy Policy describes how the Young Women’s Christian Association of Bombay (“YWCA of Bombay”) collects, uses, stores, discloses, and protects personal information of individuals who interact with our services, including our website (www.ywcabombay.co.in), our International Centre guest house, our hostels, our welfare programmes, our donation platforms, and our administrative operations.
This policy is published in accordance with the Digital Personal Data Protection Act, 2023 of India (“DPDP Act”), the Information Technology Act, 2000 and the Reasonable Security Practices Rules, 2011 framed thereunder, and where applicable to international guests and donors the EU General Data Protection Regulation (GDPR).
By accessing our website, booking accommodation with us, making a donation, enrolling in a programme, or otherwise providing us with personal information, you acknowledge that you have read and understood the terms of this Privacy Policy.
The YWCA of Bombay is a registered non-profit organisation established in 1875, dedicated to the welfare, empowerment, and accommodation of women. We operate the following principal establishments in and around Mumbai:
For the purpose of the DPDP Act, the YWCA of Bombay acts as the Data Fiduciary. For the purpose of the GDPR, we act as the Data Controller.
This Privacy Policy applies to personal information we collect or process in connection with:
We collect only such information as is reasonably necessary for the specified purposes set out in this policy. The categories of personal information we may collect include:
| Category | Examples |
| Identity Information | Full name, date of birth, gender, nationality, photograph |
| Contact Information | Postal address, email address, mobile and landline numbers, emergency contact details |
| Identification Documents | Passport, Aadhaar, PAN, Voter ID, driving licence, or other government-issued photo identification required by law for accommodation check-in |
| Booking and Stay Information | Check-in and check-out dates, room type, dietary preferences, purpose of visit, guest companions, vehicle registration |
| Financial Information | Payment card details processed by PCI-DSS compliant gateways, UPI IDs, bank details for refunds, billing address, donation amounts, 80G certificate details |
| Programme Information | Educational qualifications, professional details, referral sources, counselling notes, shelter intake assessments |
| Technical Information | IP address, browser type, device identifier, operating system, referring URLs, pages visited, time spent on pages |
| Sensitive Personal Data | Health information, religious affiliation, financial records |
| CCTV Footage | Video surveillance recordings at our premises |
How we collect information
We collect personal information directly from you when you provide it to us through forms online or printed, during check-in, over the telephone, by email, or in person. We also collect certain technical information automatically when you use our website, through cookies and similar technologies described in Section 8.
We do not sell, rent, or trade your personal information to any third party. We may share information in the following limited circumstances:
Please note that third-party booking platforms may also apply their own privacy policies.
You can control cookies through your browser settings.
Payments for accommodation, programme fees, and donations are processed through third-party payment gateways that comply with the Payment Card Industry Data Security Standard (PCI-DSS). We do not store your full credit or debit card numbers, CVV codes, or UPI PINs on our servers.
For donations:
We retain personal information only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Broadly:
Once the retention period expires, personal information is securely deleted or anonymised.
We implement reasonable security practices and procedures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. Our measures include:
While we take reasonable steps to protect your information, no method of transmission or storage is completely secure. We will notify you and authorities of any breach as required by law.
Subject to applicable law, you have the following rights:
To exercise your rights, contact the Grievance Officer. We respond within timelines prescribed by law.
Our operations are primarily based in India. In some cases, data may be transferred outside India through service providers or international coordination. Appropriate safeguards are implemented in accordance with applicable law.
Our accommodation services are generally intended for individuals aged 18 and above. Where data of children is processed, it is done with parental or guardian consent and only where necessary for welfare, education, or safety.
Our website may contain links to third-party websites. This policy does not apply to those websites. Users are encouraged to review their respective privacy policies.
Continued use of services constitutes acceptance of updates.
In accordance with applicable laws, we have designated a Grievance Officer:
Grievance Officer
[Name of Grievance Officer]
Young Women’s Christian Association of Bombay
18, Madame Cama Road, Fort, Mumbai – 400 039, Maharashtra, India
Email: gs.ywcabombay@gmail.com
Telephone: +91 22 2202 0122
Response time within 30 days of receipt of complaint
For any questions about this Privacy Policy or to exercise your rights, contact:
Young Women’s Christian Association of Bombay
YWCA International Centre
18, Madame Cama Road, Fort
Mumbai – 400 039, Maharashtra, India
Email: gs.ywcabombay@gmail.com
Website: www.ywcabombay.co.in
This Privacy Policy has been prepared in good faith to reflect our commitment to data protection. In the event of any conflict between this policy and applicable law, the applicable law shall prevail.
