Privacy Policy

1. Who we are

Immaculate Heart of Mary Trust operates ihmary.in. For privacy enquiries, requests concerning personal data, or complaints about our handling of personal data, please use the contact details provided below.

2. Personal data we may collect

We may receive and store personal data from individuals themselves and, where lawfully permitted, from other sources. This may include:

• name and contact details such as email address, telephone number and postal address;
• information contained in messages, enquiries, correspondence, requests or forms you submit;
• information pertaining to donations, publications or other services you specifically request; and
• technical information made available through ordinary operation of the website and hosting infrastructure, such as IP address, browser/device information, access times and server logs.

We seek to collect only information that is reasonably necessary for the stated purpose.

3. Why we use personal data

We may use personal data to send our publications, religious literature, devotional materials, correspondence and other materials to individuals who have requested, subscribed to, received or otherwise established a relationship with the Trust in connection with such materials. We may also maintain records of such communications and requests so that we can continue to fulfil them. Individuals may contact us at any time to request that such communications cease.

4. Notice and consent

Where consent is the applicable legal basis for processing, we will seek consent in a clear and informed manner. Where applicable law permits processing on another lawful basis, including a legitimate use recognised by law, we may process personal data without consent to the extent permitted by law.

5. Withdrawal of consent

Where processing is based on consent, you may withdraw that consent by contacting us using the details below. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. We will provide a reasonably accessible method for withdrawal and related privacy requests.

6. Sharing of personal data

We do not sell or rent personal data.

7. Children's personal data

We do not knowingly seek to collect children's personal data through an ordinary public website form without the permissions or safeguards required by law.

8. Cookies and similar technologies

The website may use essential cookies or similar technologies needed for basic operation, security and preferences. Third-party services embedded in the website, if any, may use their own cookies or technologies subject to their respective policies. Where consent is legally required for a non-essential technology, we will seek it through an appropriate mechanism.

9. Security

We take reasonable technical and organisational measures appropriate to the nature of the personal data we process to protect it against unauthorised access, disclosure, alteration, loss or destruction. 

10. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, for legitimate operational requirements, or as required by applicable law. When personal data is no longer required, we will delete or otherwise dispose of it as appropriate, subject to lawful retention requirements.

11. Your rights

Subject to applicable Indian law and the provisions in force at the relevant time, a Data Principal may have rights including access to information about personal data, correction, completion, updating and erasure, withdrawal of consent where consent is the basis of processing, grievance redressal, and nomination. Requests may be made through the contact details below. We may need to verify identity before acting on a request.

12. Grievances and privacy requests

For privacy-related requests or grievances, please contact us using the details below and clearly indicate that your communication concerns a privacy or personal-data matter. We will review and respond in accordance with applicable law and the procedures in force at the relevant time.

13. Changes to this policy

We may update this Privacy Policy when our website, services, data practices or applicable law changes. The latest version will be published on this page with its effective date.

14. Applicable law

This policy is intended for a website operated in India and is to be read subject to applicable laws and regulations of India, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as applicable and in force from time to time.