01Who we are
The International Process Excellence Council (IPEC) is a Section 8 not-for-profit company incorporated in India on 15 July 2025 under the Companies Act, 2013.
For the purposes of this policy, IPEC is the data fiduciary responsible for personal data collected through this website. ReviewConfirm the correct statutory terminology and the identity of the data fiduciary / grievance officer under the Digital Personal Data Protection Act, 2023 and its rules as in force.
This policy applies to www.ipecouncil.org and to any subdomain operated by the Council. It does not apply to third-party websites reached through links on this site.
02Information we collect
We collect only the information necessary to respond to you and to run our programmes. Depending on how you interact with the site, this may include:
Enquiry and partnership forms. Name, designation, organisation, department or ministry, institution type, state, district, email address, telephone number, area of interest, indicative budget or beneficiary numbers, your message, and any file you choose to attach.
Contribution forms. Name, email address, telephone number, postal address where required, PAN where you wish to claim a tax benefit, the amount and purpose of your contribution, and your consent records.
Newsletter subscription. Name, email address, organisation, role and selected interest areas.
Event and programme registration. Name, contact details, institution, role and any accessibility or dietary requirements you tell us about.
Resource downloads. Where a download requires registration, the details you provide and a record of the resource requested.
Volunteer and ambassador applications. Name, contact details, institution, domain of interest, relevant experience and availability.
Technical information. IP address, browser type, device type, referring page and pages visited, collected through server logs and analytics.
03Why we collect it
We use personal information for the following purposes and no others:
To respond to your enquiry and to maintain a record of the conversation.
To administer programmes, events, certifications and volunteer participation.
To process contributions, issue receipts and meet statutory reporting obligations.
To send communications you have asked to receive, and to allow you to stop receiving them.
To understand how the website is used so that we can improve it.
To meet legal, regulatory, audit and reporting obligations applicable to a Section 8 company.
04Contributions and payment information
Contributions made through this website are processed by a third-party payment gateway.
The Council uses ReviewConfirm the payment gateway — Razorpay Software Private Limited is the intended provider — and insert its legal name and privacy policy URL to process online contributions.
IPEC does not receive, process or store your card number, CVV, UPI PIN, net-banking credentials or any equivalent payment credential. These are transmitted directly to the payment gateway, which is responsible for their security under its own privacy policy and the applicable payment card industry standards.
What IPEC receives from the gateway is limited to the transaction outcome: a transaction reference, the amount, the date and time, the payment method category, and the contact details you supplied on the contribution form.
Where you provide a PAN in order to claim a tax benefit, that information is retained for the period required by tax law and is used only for issuing your receipt and for statutory reporting.
05Third parties who process information for us
We use a small number of service providers to operate the website and our programmes. Each is used only for the purpose stated:
Payment gateway. ReviewInsert provider name and link to its privacy policy — processing of online contributions.
Website hosting. ReviewInsert hosting provider and region in which data is stored.
Analytics. ReviewConfirm whether analytics is used, name the provider, and state whether IP anonymisation is enabled.
Email and newsletter delivery. ReviewInsert provider once selected.
Learning platforms. ReviewConfirm whether Google Workspace / Google Classroom are used for programme delivery, and add the relevant terms.
We do not sell personal information. We do not share it with third parties for their own marketing purposes.
06Cookies and similar technologies
The website uses cookies that are strictly necessary for it to function.
ReviewConfirm the full cookie inventory once analytics and any embedded media are finalised, and align this section with the Cookie Policy.
Where non-essential cookies are used, they will be set only with your consent, and you will be able to withdraw that consent at any time. Full detail is in the Cookie Policy.
07Communications
We will send you email only where you have asked us to, or where it is necessary to respond to your enquiry, administer a programme you have joined, or issue a receipt.
Every newsletter and bulletin includes a means of unsubscribing. Unsubscribing does not remove you from operational communications about a programme you are enrolled in.
08Data security
We apply administrative, technical and physical safeguards appropriate to the sensitivity of the information we hold, including access controls limiting personal data to those who need it, encryption of data in transit, and separation of payment credential handling from IPEC systems.
ReviewDescribe the actual technical and organisational measures in place once hosting, CRM and email infrastructure are finalised. Do not describe controls that are not implemented.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and we will not claim to.
09How long we keep information
We retain personal information only as long as necessary for the purpose it was collected for, or as required by law.
Enquiry records: retained while the relationship is active and for a reasonable period afterwards.
Contribution records: retained for the period required under tax and company law.
Newsletter subscriptions: retained until you unsubscribe.
ReviewSet specific retention periods for each category, in consultation with counsel and the Council's auditor.
10Your rights
Subject to applicable law, you may ask us to:
Confirm what personal information we hold about you and provide a copy of it.
Correct information that is inaccurate or incomplete.
Erase information we no longer have a lawful basis to hold.
Withdraw a consent you have given, without affecting the lawfulness of processing before withdrawal.
Restrict or object to certain processing.
Raise a grievance about how your information has been handled.
To exercise any of these rights, contact us using the details below. ReviewAppoint a named grievance officer and state the response timeframe required by applicable law.
11Children and minors
IPEC's programmes involve school students. Where a programme collects information about a person under the age of eighteen, it is collected through the participating institution, with the institution's consent processes and, where required, verifiable parental consent.
We do not knowingly collect personal information directly from children through this website. Registration forms on this site are intended for adults acting on behalf of themselves or an institution.
If you believe a child has provided personal information through this website, please contact us and we will delete it.
This policy should be read alongside the Council's Child Safeguarding Policy.
12External links
This website links to other organisations' websites, publications and resources. We do not control those sites and are not responsible for their content or their privacy practices. Reading their privacy notices before providing information to them is worthwhile.
13International visitors
This website is operated from India and is intended primarily for an Indian audience, though we welcome international visitors and collaborators.
If you access this website from outside India, your information will be transferred to, stored in and processed in India, where data protection law may differ from that of your own jurisdiction.
ReviewIf IPEC processes personal data of individuals in the EU/UK, obtain advice on GDPR/UK GDPR applicability, lawful basis, transfer mechanism and whether a representative must be appointed.
14Changes to this policy
We may update this policy as our programmes, systems or legal obligations change. The date of the most recent revision is shown at the top of this page.
Where a change materially affects how we use information you have already given us, we will tell you directly.
15Contact us
Questions about this document should be addressed to the International Process Excellence Council.
Registered office: ReviewIPEC to supply the registered office address
Email: ReviewIPEC to supply a monitored contact address, e.g. legal@ipecouncil.org
Telephone: ReviewIPEC to supply a contact number