Privacy

When you ask to join a club, we collect what the form asks for:

• your name, date of birth, email address, and — if you give them — your phone number and town;
• your school, college or organisation, your class or year, and why you want to join;
• if you give it, your address, for the Foundation’s records;
• for anyone under 18, a parent or guardian’s name, email and phone number;
• whether you agreed to the code of conduct, and whether photographs of you may be used.

Once you are a member, we also keep what you and your club record here: the projects and activities you log, photographs and evidence you upload, and the meetings and roles you hold.

We ask for your name, email and address, and — if you give from India and want an 80G certificate — your PAN. The law needs these: the India entity reports every donation, with the donor’s PAN and address, to the Income Tax Department each year (Form 10BD), and the US entity reports donors of $5,000 or more to the IRS (Form 990 Schedule B). Your PAN is kept apart from everything else, is shown masked everywhere on the platform, and is read in full only to prepare those returns.

The member contribution is paid through Razorpay (a club in India) or PayPal (anywhere else). We never see or store your card number, UPI details or bank login. Razorpay and PayPal handle them under their own privacy policies. We keep only what we need to match the payment to you: the amount, the date, and the payment service’s order and transaction IDs.

• to let a club’s leaders decide who joins, and to run the club once you are in;
• to confirm your email address, and to ask a parent or guardian before anyone under 18 joins;
• to take and record the member contribution, and to send receipts and notices about your membership;
• to report, without naming you, what clubs achieve.

We do not sell your information, and we do not use it for advertising.

The Foundation advertises its programmes on Google through a free Google Ad Grant, and the grant asks us to count what its ads lead to. So on the public pages — the front page, starting a club, applying to a club and giving — a Google tag notes when somebody who arrived from one of our ads sends a request or makes a gift. It sends Google only that the action happened, never what you typed, and it asks Google not to use it to personalise ads. It does not run inside the club platform once you are signed in.

Nobody under 18 joins without a parent or guardian agreeing first, by email. Until they agree, no account and no membership exists in the child’s name. A child is never asked to pay — if there is a contribution, their parent or guardian is asked. A parent or guardian can ask to see, correct or delete their child’s information at any time.

Your club’s leaders and teachers, and the Foundation’s administrators, see what they need to run the club. Your email address and phone number are not shown to other members.

We use a small number of services to run the platform: Supabase (our database and sign-in), Microsoft Azure (hosting and email), and Razorpay and PayPal (payments), and Google Ads (counting what our ads lead to, as above). They hold information only to provide those services to us.

A request to join that nobody decides on within 21 days is deleted, with everything you typed into it. Member records are kept while you are a member, and payment records for as long as tax and charity law require.

You can ask to see the information we hold about you, to correct it, or to delete it. Email club@youngtinker.org with the subject “Privacy request”. We reply within two working days, and we may ask you to confirm it is you before we act.

More: refund policy · contact us.