Privacy policy

This website, www.potholeraja.com, is run by GroundReality Trust, a charitable trust based in Bengaluru, Karnataka, India. PotHoleRaja® is the Trust’s programme brand. In this policy, “we”, “us” and “the Trust” mean GroundReality Trust.

We decide why and how personal data collected through this website, our forms, email and WhatsApp, and our donation and volunteering work is used, and we are responsible for it. In the words of the Digital Personal Data Protection Act, 2023, we are the “data fiduciary” and you are the “data principal”.

We follow the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We are also bringing our practices in line with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as their provisions come into force.

This policy does not cover the websites and apps we link to, such as YouTube, WhatsApp and social media. They have their own privacy policies.

• To reply to you

  To answer your enquiry, arrange a co-design session, send the flier you asked for and follow up on your request.

• To handle donations

  To issue receipts and 80G certificates, report donations to the Income Tax Department in Form 10BD, and keep the records that tax, trust and foreign-contribution laws require.

• To fix roads and report the work

  To plan, carry out and record repairs and road-safety work, and to tell you what happened to your report.

• To run volunteering and programmes

  To organise the drives, school and college programmes and partner projects you join, and to keep you informed about them.

• To send updates, only if you agree

  Newsletters and campaign updates go only to people who have asked for them. You can stop them at any time.

• To run and improve this website

  To keep the site working and secure, stop spam and, if you allow it, count visits so that we can see what is useful.

• To meet legal duties

  To comply with Indian law, respond to lawful requests from authorities, and protect the rights and safety of the Trust and others.

Our team reviews enquiries and visit statistics in a private dashboard that reads this data from Wix. Only the Trust’s team can see it, and nothing in it is sold or shared for marketing.

We will not use your personal data for an unrelated purpose without telling you first and, where the law requires, asking for your consent.

• Service providers who work for us

  Wix.com hosts this website, stores form submissions in Wix Forms and Wix Contacts and, if you accept, runs Wix Analytics. Google provides Google Fonts, the YouTube player when you press play, the email accounts that receive our form notifications (Google Workspace) and, if we add it and you accept, Google Analytics. Meta runs WhatsApp, which you use when you choose to message us. Each works under its own terms, privacy policy and security controls.

• Programme partners

  When you take part in a programme we run with a partner, such as a company volunteering drive or a school or college programme, we share with that partner what is needed to run it, such as your name and attendance.

• Road agencies and repair partners

  The location and photos in a pothole report may be shared with the agency responsible for the road, or with partners who can fix it. We do not share your contact details with them unless you agree.

• Authorities and advisers

  The Income Tax Department receives donors’ names, addresses, PAN and donation amounts in Form 10BD. Other authorities receive personal data only when the law requires it. Our auditors and professional advisers see it only as their work needs, and must keep it confidential.

Transfers outside India

Our website host, Wix, and other providers such as Google and Meta, may store or process data outside India, including the form submissions held in Wix. We use them only as Indian law allows, and we will follow any restriction the Government places on transfers to particular countries under the Digital Personal Data Protection Act, 2023.

• Know what we hold

  Get a summary of the personal data we hold about you, how we use it, and who we have shared it with.

• Correct and update

  Correct data that is wrong or misleading, complete it, or bring it up to date.

• Erase

  Delete data we no longer need for the purpose you gave it, unless the law requires us to keep it.

• Withdraw consent

  Stop any use that relies on your consent, at any time, as Part 4 describes.

• Raise a grievance

  Complain to our Grievance Officer (see contact). If you are not satisfied with our answer, you may approach the Data Protection Board of India, as the Digital Personal Data Protection Act, 2023 allows.

• Nominate someone

  Name another person to exercise these rights for you if you die or become unable to act.

To make a request, email csr@groundreality.org with the subject “Privacy request”, or write to us on WhatsApp. We may ask you to confirm who you are before we act, so that we never give your data to someone else. We will reply as soon as we can, and within the time the law allows.

Please give us accurate information, and do not use anyone else’s details. The law asks the same of everyone who shares personal data.

We protect personal data with reasonable security practices: encrypted connections (HTTPS) for every page and form, a content security policy, no third-party scripts before you give consent, access limited to the people who need it, and spam protection on our forms. Our security page explains more.

No system is completely secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.