Last updated: 24 May 2025 · Version 3.2
Summary: CG Foundation (CGF) is committed to protecting your privacy. We collect only the data we need, keep it secure, never sell it, and give you full control over what we hold. This policy explains exactly what we collect and why.
CG Foundation is the data controller for personal data collected through this website and our programmes. Our registered address is: 14th Floor, Bandra-Kurla Complex, Mumbai 400 051, India. Data Protection Officer: dpo@cgfoundation.org.
We collect personal data in the following categories:
| Data Category | Examples | Legal Basis |
|---|---|---|
| Identity data | Name, job title, organisation | Legitimate interests / Consent |
| Contact data | Email, phone, postal address | Legitimate interests / Consent |
| Usage data | Pages visited, time on site, browser type | Legitimate interests |
| Communications | Enquiry content, newsletter preferences | Consent |
| Farmer programme data | Farm location, production data, training records | Contractual necessity / Consent |
We do not sell personal data. We share data only with:
We retain personal data only as long as necessary for the purposes for which it was collected. Website enquiry data is retained for 3 years. Farmer programme data is retained for 7 years for audit and impact verification purposes. Newsletter subscriber data is retained until unsubscribed.
Under GDPR and applicable Indian data protection law, you have the right to: access your data, correct inaccuracies, request deletion, restrict processing, data portability, and to object to processing. To exercise any right, contact dpo@cgfoundation.org. We will respond within 30 days.
We use essential cookies required for site functionality and, with your consent, analytics cookies (Google Analytics) to understand site usage. You can manage cookie preferences at any time using our cookie preference centre. See our full Cookie Policy.
We implement technical and organisational measures to protect your data including: AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, regular security audits, and staff data protection training. Despite these measures, no internet transmission is completely secure.
CGF's primary servers are located in India (AWS Mumbai). Some service providers may process data in the EU or US. Where data is transferred internationally, we ensure appropriate safeguards are in place (Standard Contractual Clauses, adequacy decisions).
We may update this policy periodically. Material changes will be communicated by email to registered users and by prominent notice on this page. The current version date is shown at the top of this document.
For any privacy-related questions or to exercise your rights:
Email: dpo@cgfoundation.org
Post: Data Protection Officer, CG Foundation, 14th Floor, BKC, Mumbai 400 051