Privacy Policy

Vesak Care Foundation (“VesakCare”, “we”, “us”) is a Section 8 not-for-profit company (CIN U88900MH2025NPL460992) based in Kolhapur, Maharashtra, with operations linked to Kolhapur, Pune, and Mumbai. We exist to deliver compassionate, professional home healthcare and community health outreach — with integrity, transparency, and dignity for every person we serve.

This Privacy Policy explains how we collect, use, store, share, and protect personal information across our public website, staff / operations systems (including the VesakCare app), WhatsApp Business messaging, Meta (Facebook / Instagram / WhatsApp) pages and ads, donation and compliance tools, health camps, volunteer programmes, and related services.

Our privacy practices follow the same values that guide our care work:

• Compassion & dignity — health and family information is handled with respect; we avoid unnecessary exposure of patient identity in public materials.
• Integrity & transparency — we tell you why we ask for data, and we do not sell personal information.
• Least privilege — staff and systems only see what their role needs (for example, care coordination vs finance vs CA compliance).
• Accountability — we keep records needed for lawful care, tax, labour, and donor compliance, and we delete or anonymise when retention is no longer required.

This policy applies when you interact with VesakCare in connection with:

• Home patient care — nursing, attendant / caretaker support, physiotherapy and rehab, chronic and elderly care, maternal / newborn support, and family care navigation.
• Gig / field care workers — nurses, caretakers, physiotherapists, attendants, and similar professionals engaged for shifts or cases (including onboarding, scheduling, attendance, and payments-related records).
• Employees & office staff — salaried or contracted office / operations roles supporting care delivery.
• Volunteers — medical volunteers, companion caregivers, community mobilisers, technology / admin volunteers, and camp support.
• Health camps & community outreach — registration, screening, awareness, follow-up referrals, and local coordination.
• Environment & community health linkage — field activity connected to camp logistics and community health (for example venue / sanitation / outreach coordination), where we collect only operationally needed contact and location details.
• Donations & CSR — donor details for receipts, 80G / compliance, and stewardship communication.
• Digital channels — website forms, VesakCare app / portal logins, WhatsApp chatbot and OTPs, Meta ads and lead forms, email, and phone.

Depending on your relationship with us, we may collect:

• Identity & contact — name, phone / WhatsApp number, email, address, city / PIN, emergency contacts.
• Patient / family care details — care needs, relationship to patient, scheduling preferences, and health-related information you or an authorised family member choose to share for care delivery (we treat this as sensitive and restrict access).
• Workforce data — for employees and gig workers: qualifications, role, availability, attendance / punch records, bank or payout references where required, identity documents for compliance (for example PAN where legally needed), and performance / conduct records held for fair operations.
• Volunteer data — role preference, skills, availability, and contact details from volunteer applications.
• Camp / outreach data — participant registration details, screening notes as relevant to the camp workflow, and organiser contacts.
• Donor data — name, contact, payment references, and tax fields required for lawful receipts.
• Messaging & account data — WhatsApp or in-app messages, OTP verification events, login identifiers, and role permissions.
• Technical data — IP address, device / browser type, approximate location from IP, cookies or similar technologies, and Meta pixel / ads attribution events where enabled.

• Deliver and coordinate home care safely and reliably.
• Match families with appropriate nurses, caretakers, physiotherapists, or attendants.
• Run health camps, volunteer programmes, and community / environment-linked outreach.
• Operate WhatsApp and app messaging (support replies, owner/staff alerts, secure OTPs).
• Process donations and issue statutory receipts where applicable.
• Meet employment, tax (including TDS where applicable), audit, and regulatory duties.
• Improve quality, training, security, fraud prevention, and service design.
• Measure and improve Meta ads / lead forms when you interact with our Meta properties.

If you message our WhatsApp Business number, use Click-to-WhatsApp ads, fill Meta lead forms, or receive OTPs / operational messages, Meta Platforms may process delivery metadata under Meta’s own terms. VesakCare uses WhatsApp Business / Cloud API tools and related systems to receive messages and send replies — including human support and automated assistance for intake, scheduling, and authentication.

We do not sell WhatsApp conversation content. Marketing messages (if any) are separate from operational messages such as OTPs, booking confirmations, or critical care coordination alerts.

We may share personal information only as needed with:

• Assigned care workers and clinical / operations staff involved in a patient’s care journey.
• Service providers who host or operate our systems (cloud hosting, database, email, payments) under confidentiality obligations.
• Meta Platforms, when you use WhatsApp / Facebook / Instagram features connected to VesakCare.
• Regulators, auditors, courts, or tax authorities when required by law.
• Camp venue partners or community organisers, limited to logistics contacts for an event.

We do not sell personal information.

We retain information only as long as needed for care delivery, legal / tax retention, dispute resolution, audit, and security. Messaging logs, lead records, workforce files, and donor records follow role-based retention appropriate to each purpose, then are deleted or anonymised when no longer required.

We use administrative and technical safeguards appropriate to the sensitivity of the data (access controls, encrypted transport where supported, least-privilege roles). No method of transmission or storage is 100% secure.

• Request access, correction, or deletion of personal information we hold about you, subject to legal exceptions (for example records we must keep for tax or clinical accountability).
• Opt out of non-essential marketing; operational messages (OTPs, service-critical alerts) may still be sent when necessary.
• Stop WhatsApp chats using WhatsApp’s block / report tools, or ask us to close an active support conversation.
• Families and patients may ask who in our team can see their care information for an active case.

Our public marketing is directed to adults arranging care, volunteering, donating, or working with us. We do not knowingly collect children’s data for marketing. Care-related information about minors is processed only as provided by a parent, guardian, or authorised adult for service delivery or camp participation.

We process personal data in line with applicable Indian law and evolving data-protection expectations (including the Digital Personal Data Protection Act framework). We may update this Privacy Policy from time to time; the “Last updated” date below will change when we do. Continued use of our services after an update means you acknowledge the revised policy.

For privacy requests or questions:

• Website contact: vesakcare.com/contact
• Registered address: RS no 1042/F-5/1042/G1 PI, No 1 Vishal Nagar, Kolhapur City, Karvir, Kolhapur – 416012, Maharashtra
• Legal name: Vesak Care Foundation (Section 8)

This page is provided for transparency and Meta / platform compliance. It is not a substitute for independent legal advice.