Privacy policy

You may have had a WhatsApp message from us without ever having given us your number. There are only two places it can have come from.

• Publicly listed contact details — a number published on your organisation's own website, its social media profile, a public directory or a press release.
• Previous engagement with ICUC or Carter Clean Up — you or your organisation registered for, attended, spoke at, partnered with or volunteered at an earlier edition or clean-up.

We do not buy contact lists and we do not scrape personal phone numbers. What we hold are organisational contact points, and the message is an invitation to ICUC 3.0 — it is not advertising for anyone else, and your number is not passed on.

If you would rather not hear from us, one reply is enough. See “How to make it stop” below.

Contact details we sourced ourselves, for outreach: your organisation's name, a contact person's name where it is published, a phone number, and sometimes an email address.

What you type into this website, if you choose to:

• Registering for ICUC 3.0 — your name and email, and optionally your phone number, city, organisation, your role there, the kind of delegate you are, and anything else you want to tell us.
• Applying to Mentor Matchmaker — answers about your organisation: when it started, what it does, how it is funded, how you would turn it into a business, and how to reach whoever is pitching.
• The Red Fort clean-up tick box — whether you would like to join, which is a head count and nothing more.
• The contact form — your name, email, what your enquiry is about and your message.

We run no analytics, no advertising pixels and no tracking on this website, and we set no cookies of our own. Our hosting provider keeps standard server logs, including the IP address a request came from, so the site can be kept running and secure.

• Sending WhatsApp invitations and information about ICUC 3.0.
• Processing registrations, and writing to delegates about the schedule, the venue and the logistics.
• Reading Mentor Matchmaker applications and selecting the five NGOs who pitch.
• Counting heads for the Red Fort clean-up and telling those people where to be.
• Replying to enquiries sent through the contact form.

That is the entire list. We do not sell or rent personal data, and we do not give it to anyone else to market their own things to you.

We cannot send a message or take a registration without a few service providers, so it would be untrue to tell you your data never leaves us. These are all of them.

• Meta Platforms — every WhatsApp message we send you is delivered by WhatsApp and handled under WhatsApp's own privacy policy.
• Google — registrations are written to a Google Sheet in an account we control, and the confirmation emails you receive are sent from our Gmail account, both covered by Google's privacy policy.
• Web3Forms — the site's forms post through Web3Forms, which emails a copy of each submission to our inbox. See Web3Forms' privacy policy.
• Vercel — this website is hosted on Vercel, which keeps the server logs described above. See Vercel's privacy policy.

There is no payment step anywhere on this website, so no payment processor receives anything about you. If that ever changes, the processor will be named here before it does.

You can tell us to stop contacting you, or to delete what we hold, at any time. You do not need to give a reason and you do not need to fill anything in.

• On WhatsApp — reply STOP to any message from us, or simply block the number. Either one is enough.
• By email — write to indiacleanupconfluence@gmail.com and say “stop contacting me” or “delete my data”.

We stop sending messages within 7 days of hearing from you, and we delete what we hold within 30 days of a deletion request. We will email you to confirm when it is done. If there is a record the law requires us to keep, we will tell you which record and why rather than quietly keeping it.

Deleting your data also cancels your registration, because your registration is that data. If you have registered and then ask us to delete everything, we will check that is what you meant first.

• Contact details we sourced for outreach — kept until you ask us to remove them. Numbers that never responded to the ICUC 3.0 invitation are deleted within six months of the event.
• Registrations — kept for the event and for two years afterwards, so we can invite you to the next edition and keep a record of who came. Ask sooner and we delete sooner.
• Mentor Matchmaker applications — kept for the same two years, because the mentorship the panel awards carries on well past the event.
• Contact-form enquiries — kept in the ICUC inbox for two years.

The Digital Personal Data Protection Act, 2023 gives you rights over the data we hold. The Information Technology Act, 2000 and the SPDI Rules, 2011 also apply to us.

• Access — ask what personal data we hold about you and what we have done with it.
• Correction and completion — have anything wrong or out of date corrected, and anything missing filled in.
• Erasure — have your data deleted, as described above.
• Withdraw consent — as easily as you gave it. We then stop processing your details for anything except what the law requires us to keep.
• Nominate — name someone to exercise these rights for you if you die or become unable to exercise them yourself.
• Grievance redressal — complain to us, and escalate to the Data Protection Board of India if we do not resolve it.

To use any of these, email indiacleanupconfluence@gmail.com. We respond within 30 days.

If you think we have done something wrong with your data, write to indiacleanupconfluence@gmail.com and put “Grievance” in the subject line. We acknowledge within 7 days and respond within 30.

Grievance Officer: Suraj Shah — indiacleanupconfluence@gmail.com

If our answer does not resolve it, you can take the complaint to the Data Protection Board of India under the DPDP Act.

ICUC is based in India and your data is processed here. If you are in the UK or the EEA, our basis under the GDPR is legitimate interests for the outreach messages — inviting organisations that work on environmental clean-ups to a convening about their own field — and your consent for anything you submit through this website.

Your practical route is the same as everyone else's: reply STOP, or email indiacleanupconfluence@gmail.com. You can also object to the processing, or ask for a copy of what we hold, at that address.

We are a small team, so here is the honest version. The website is served over HTTPS. Registrations sit in a Google Sheet and in an email inbox, protected by the passwords and two-factor authentication on the ICUC accounts. Only the organising team members who need access have it.

We hold no security certification and we have not been audited. WhatsApp messages are encrypted in transit by WhatsApp itself; we add no encryption of our own beyond what our providers give us. Nothing is completely secure, so please don't send us anything sensitive — identity documents, bank details — through this site. We will never ask you for them.

We do not knowingly collect the data of anyone under 18 without verifiable parental consent, which is what the DPDP Act requires. School and college groups should register through a teacher, a coordinator or another adult. If you believe we hold a child's data, email indiacleanupconfluence@gmail.com and we will delete it.

We may update this policy. The effective date at the top says when it last changed, and if a change materially affects how we use data we already hold, we will say so on this page.

INDIA CLEANUP CONFLUENCE (ICUC) LLP 302, 3rd Floor, Rustomjee's La Solita 28th Road, TPS 3, Off Turner Road Near Gurunanak Park, Bandra (W) Mumbai 400050, Maharashtra, India

Email: indiacleanupconfluence@gmail.com