Privacy Policy

Last updated: 21 September 2026 · Version 2026-09-21

1. Who We Are

DonorNearby is a community-driven blood donor coordination platform operating across Karnataka, India. DonorNearby coordinates between people who need blood and willing donors. DonorNearby is not a blood bank, hospital, laboratory, or medical authority.

2. Personal Data We Collect

When you register as a donor, we collect:

  • Full name
  • Phone number
  • Email address, if provided
  • Blood group
  • State, district and area/taluk
  • Age and gender
  • Last blood donation date, if provided
  • Current availability status
  • Consent record, including consent status, timestamp, privacy-policy version and registration source

3. Why We Process It

  • Create and maintain a donor profile.
  • Identify potential donors for blood requests based on blood group and location.
  • Allow authorized coordinators/admins to contact potential donors about relevant blood requests.
  • Maintain coordination records and improve operational response.
  • Protect the platform from misuse, fraud, unauthorized access and security incidents.
  • Respond to privacy, support and grievance requests.

4. Privacy Notice and Consent

Donor registration includes a separate Privacy Notice and consent checkbox. We record consent status, timestamp, policy version and source. You may withdraw consent using our Privacy Request page. Withdrawal does not affect processing that may be required by law or necessary for security, fraud, disputes or other lawful obligations.

5. Who May Access Donor Information

Donor personal information is not publicly displayed. Access is restricted to authorized DonorNearby administrators and coordinators who need it to operate the donor-coordination service. The current system uses district-scoped administrator access, with master administrators able to manage the wider network. Contact details may be used by authorized coordinators to contact a potential donor for a relevant request. Donor information is not intentionally disclosed to the general public.

6. Third-Party Services and Processors

  • Website hosting: DonorNearby's website and database are hosted using Hostinger infrastructure.
  • Website analytics: Google Analytics 4 is used to understand website usage. The registration-completion event is configured to send only the event name and a generic method value; it is not configured to send donor name, phone, email, blood group or location to Google Analytics.
  • Communication: Authorized coordinators may use WhatsApp as a communication channel when contacting donors. WhatsApp is a separate service and its own privacy terms apply to that communication.

We may add or change service providers when required to operate DonorNearby. Where this materially changes how personal data is processed, this policy will be updated.

7. Security

DonorNearby uses reasonable technical and organizational safeguards, including access-controlled administrator accounts, district-scoped access for sub-admins, secure sessions, CSRF protection, password protection for admin accounts, HTTPS, server-side validation, rate limiting and audit logging. No internet-based system can be guaranteed completely secure. We maintain procedures for detecting, investigating and responding to suspected personal-data breaches.

8. Retention and Deletion

Donor data is retained while it is needed to operate the donor network and coordinate requests, or while another lawful reason requires retention. If you withdraw consent or request deletion, DonorNearby will review the request, verify it where reasonably necessary, and delete or irreversibly anonymize personal data that no longer needs to be retained, subject to applicable legal, security, fraud-prevention, dispute-resolution or audit requirements. Security/audit records may be retained separately where required for those purposes.

DonorNearby is implementing a formal internal retention schedule as part of its DPDP readiness work.

9. Your Privacy Rights

Subject to applicable law and verification requirements, you may request:

  • Access to personal data we hold about you and information about its processing.
  • Correction or updating of inaccurate or incomplete data.
  • Deletion/erasure of your personal data where applicable.
  • Withdrawal of consent for processing based on consent.
  • Resolution of a privacy-related grievance.

Submit these requests through Privacy Request. We may ask for information reasonably necessary to verify identity before disclosing or changing personal data.

10. Privacy Grievances

For a privacy complaint or grievance, use the Privacy Request page or contact support@donornearby.in. We will review and respond through the contact details provided. Where applicable, a Data Principal may pursue the grievance mechanism available under the Digital Personal Data Protection Act, 2023 and applicable rules.

11. Changes to This Policy

We may update this policy when our processing practices, services or legal requirements change. The version and date shown at the top indicate the current version published on this website.

12. Contact

Privacy and support: support@donornearby.in
Website: donornearby.in