Privacy policy

Tri-Impact Global, tri-impact.org

Version 1.0. Effective from 29 October 2026.

This policy explains what personal data the Tri-Impact Global website handles, why it is handled, who receives it, how long it is kept and how you can exercise your rights.

1. Who we are

Tri-Impact Global ("Tri-Impact") is a public charitable trust established by a trust deed registered with the Sub-Registrar, Varanasi, on 18 October 2012 (Registration No. 303/12). Its registered office is at B-08, 7th Floor, Signature Tower, Wegmans Business Park, Knowledge Park-III, Greater Noida, Uttar Pradesh 201308, India. Its registration details are set out on the Legal and Compliance page of this website.

Tri-Impact, acting through its trustees, decides why and how personal data is used on this website. Under the Digital Personal Data Protection Act, 2023, this makes Tri-Impact the data fiduciary. Where the General Data Protection Regulation of the European Union or the UK GDPR applies to the processing described here, Tri-Impact is the controller.

This policy covers tri-impact.org and the enquiries that reach Tri-Impact through it or through the contact details it publishes. It does not cover personal data that Tri-Impact handles in its programmes and partnerships.

Questions about this policy go to contact@tri-impact.org.

2. Summary

Tri-Impact uses analytics only if you choose to allow it, and you can change that choice at any time through "Cookie settings" in the footer. Tri-Impact does not sell personal data and does not use it for advertising. What you send in an enquiry is used to reply to you and to take forward the conversation you start. You can ask to see, correct or delete your personal data by writing to contact@tri-impact.org, and Tri-Impact responds within one month, as section 9 explains.

3. What the website collects, and why

The website has no user accounts and no donation or payment pages. Personal data reaches Tri-Impact in four situations.

When you visit any page. The website's hosting provider automatically records technical information sent by your browser, such as your IP address, browser and device type, the page requested and the time of the request. This information is used to deliver the pages you request, keep the website secure and fix faults. In India, this is information your browser provides when you request a page, and it is used for that purpose. Under the GDPR, it is processed in Tri-Impact's legitimate interest in running a secure and working website.

If you allow analytics. Analytics cookies collect information about how you use the website, such as the pages you view, how you reached the website, the time and length of your visit, your approximate location, and your device and browser type. Tri-Impact uses this information to understand how the website is used and to improve it. If you send an enquiry, analytics records that an enquiry was sent, but not what you wrote in it. Tri-Impact does not use analytics information to identify individual visitors or for advertising. Analytics runs only with your consent, which is the basis for this processing in India and under the GDPR. You can withdraw that consent at any time through "Cookie settings" in the footer, and when you decline analytics, the website removes the analytics cookies it has set.

If you play a video. Videos are provided by YouTube. Nothing loads from YouTube until you press play, and a notice beside each video tells you this before you choose. When you press play, your browser connects to YouTube, which receives your IP address and technical information about your device and may store or read information on your device under its own privacy policy, including for its own analytics and advertising. Tri-Impact relies on your consent for this, which you give by pressing play after reading the notice. If you do not play a video, the rest of the website works as normal. Tri-Impact does not receive information from YouTube that identifies you.

When you contact us. If you write to us, call us or use the enquiry form, Tri-Impact receives your name, organisation, email address, message and anything else you choose to include. When you submit the enquiry form, your details and the address of the page you sent it from are delivered to Tri-Impact's mailboxes and saved as a record in a spreadsheet held in Tri-Impact's Google account, which only people working for Tri-Impact can open. Your browser connects to Google's servers to send the form, and Google receives your IP address and technical information about your device for that purpose. If the form cannot send your enquiry, it offers to prepare the same email in your own email application instead, and Tri-Impact receives it only once you send it. Tri-Impact uses this information to reply to you, to discuss the work you raise and to keep a record of the correspondence. In India, this is information you have voluntarily provided for that purpose. Under the GDPR, it is processed in Tri-Impact's legitimate interest in answering enquiries and taking forward the work they concern.

Sending an enquiry is your choice. The form asks for the details Tri-Impact needs to reply to you, and without a reply address Tri-Impact cannot respond. Tri-Impact does not add enquiry details to newsletters, fundraising appeals or mailing lists without your agreement. Please send only what your enquiry needs. Do not send passwords, identity documents, bank details, health information or confidential information about other people through this route.

4. Cookies and browser storage

Tri-Impact does not place advertising cookies. The website stores a small record in your browser to remember whether you have allowed or declined analytics. This record is needed for your choice to work. Analytics cookies are placed only if you allow analytics. YouTube may store information on your device if you play a video, as described in section 3. You can change your analytics choice at any time through "Cookie settings" in the footer, and you can delete cookies and other stored information through your browser settings.

5. Who receives personal data

Tri-Impact does not sell, rent or trade personal data. It shares personal data with the service providers that run the website and its communications, each for its own purpose, and with others only as described in this section.

The website hosting provider delivers the pages and keeps the technical records described in section 3. The email service provider hosts the mailboxes where enquiries are received and stored. Google provides the service that delivers enquiries sent through the form and the spreadsheet where the enquiry record is kept. The analytics provider produces visitor reports, only if you allow analytics. YouTube plays videos, only when you choose to play one.

Tri-Impact may disclose personal data to government authorities, regulators and courts where the law requires it, or in response to a lawful order or inspection. It may also share personal data with its auditors and professional advisers where this is needed for a statutory audit or a regulatory filing, or to establish or defend its legal rights.

6. Personal data handled outside India

Tri-Impact is based in India. India is not covered by an adequacy decision of the European Commission or by adequacy regulations of the United Kingdom. Tri-Impact's service providers may handle personal data in other countries.

Where the GDPR or the UK GDPR applies to personal data handled outside India, you can ask for information about the safeguards that apply by writing to contact@tri-impact.org.

7. Security

Tri-Impact uses reasonable technical and organisational measures to protect personal data. If a personal data breach occurs, Tri-Impact informs the relevant authorities and the people affected where the law requires it.

8. How long personal data is kept

Technical records of visits are kept for the period the hosting provider sets for security and fault-fixing, or for any longer period the law requires.

Analytics data linked to individual visits or devices is kept for no longer than fourteen months.

Enquiries and correspondence, including the enquiry records in the spreadsheet, are kept for as long as needed to deal with the enquiry and any work that follows, and to meet legal record-keeping requirements. Where an enquiry leads to a grant, donation, CSR contribution or other funding, the related correspondence becomes part of Tri-Impact's financial and statutory records. It is then kept for the periods that Indian tax, foreign contribution and charity laws require.

Copies held in service providers' backups follow those providers' own retention practices. Your analytics choice stays in your browser until you clear its storage. Names, photographs and statements on the website stay for as long as they describe current or past work, or until they are removed on request.

Where a particular record must be kept to meet a legal requirement or for a specific dispute, it is kept and used only for that need, including any audit or inspection the law provides for.

9. Your rights

The rights below depend on where you are and which law applies. Tri-Impact considers every request it receives and responds in line with the law that applies to it.

If you are in India. Under the Digital Personal Data Protection Act, 2023, you can ask Tri-Impact to:

If you are in the European Union or the United Kingdom. Under the GDPR and the UK GDPR, you can ask Tri-Impact, where these rights apply, to:

You can also complain to the data protection authority in the country where you live or work, or where you believe the law has been breached.

Your right to object. Where Tri-Impact relies on its legitimate interests, as it does for technical records of visits and for enquiries, you can object at any time on grounds relating to your particular situation. Tri-Impact will then stop, unless it has compelling legitimate grounds that override your interests, rights and freedoms, or needs the data to establish, exercise or defend legal claims.

How to make a request. Write to contact@tri-impact.org with "Privacy request" in the subject line. Tri-Impact may ask you to confirm your identity before acting. It responds within one month of receiving your request. If a request is complex, Tri-Impact tells you within that month why more time is needed, and completes it within ninety days of receiving it. Withdrawing analytics consent needs no request. Use "Cookie settings" in the footer.

If Tri-Impact cannot meet a request in full, for example because the law requires a record to be kept, it explains the reason. Withdrawing consent does not affect processing carried out before you withdrew it. If you ask Tri-Impact to stop using the details of an enquiry, it may no longer be able to take that enquiry forward.

10. People on this site

The website shows the names, roles, profiles and photographs of Tri-Impact's team and governing board, the names and works of partner artists, statements attributed to named people, and photographs from programme activities. These describe who Tri-Impact is and the work it does. Images of partner artists and their works are published with the artists' consent.

If you appear on this website, or a child in your care appears, and you want a detail corrected or a photograph removed, write to contact@tri-impact.org with the page address and what you would like changed. Tri-Impact responds within one month. It corrects or removes the material where the request comes from the person shown or someone acting for them, unless there is a legal reason to keep it, which it explains.

11. Children

The website is written for organisations and professionals and is not directed at children. Tri-Impact does not knowingly collect personal data from children through it, and does not knowingly track or profile children. If you are a parent or guardian and believe a child has sent personal data to Tri-Impact, write to contact@tri-impact.org and it will be deleted unless the law requires it to be kept.

12. Artificial intelligence and website content

Tri-Impact may use digital tools, including artificial intelligence tools, to help prepare, edit or translate content on this website. Tri-Impact reviews website content before it is published and takes editorial responsibility for it.

Tri-Impact does not use artificial intelligence or any other automated processing to make decisions about you, including profiling, and does not use personal data from enquiries or from this website to train artificial intelligence models.

13. Links to other websites

The website links to Tri-Impact's pages on social media and publishing platforms, and to partner and reference websites. Those websites have their own privacy policies, which apply once you leave tri-impact.org.

14. Changes to this policy

Tri-Impact updates this policy when the website or the law changes. The version and effective date at the top show the current text, and each version is listed in section 16.

A change to this policy does not by itself permit a new use of personal data already collected. Where a new use needs fresh notice or consent, Tri-Impact gives that notice or seeks that consent before the new use begins.

Nothing in this policy limits rights you hold under the data protection law that applies to you.

15. Contact

All privacy questions, requests and grievances, including questions about how Tri-Impact processes personal data, go to one place.

Write to contact@tri-impact.org with "Privacy request" in the subject line, call +91 120 6253535, or write to Tri-Impact Global, B-08, 7th Floor, Signature Tower, Wegmans Business Park, Knowledge Park-III, Greater Noida, Uttar Pradesh 201308, India.

16. Version history

Version 1.0, effective from 29 October 2026. First published version.

Your enquiry goes to the Tri-Impact team and is kept as a record, as the Privacy Policy explains.