Cookie Policy

1. Introduction

IAC Patrons Foundation (hereinafter referred to as “IAC,” “we,” “our,” or “us”) uses cookies and similar tracking technologies on its website to enhance user experience, ensure website functionality, analyze performance, and support relevant communications and fundraising activities.

This Cookie Policy explains what cookies we use, why we use them, how long they are retained, and the choices available to users regarding cookie management.

2. Scope

This policy applies to:

• All users visiting or interacting with the IAC website, including donors, trainees, job applicants, research participants, and general visitors.
• All cookies and similar technologies deployed on the website, including first-party and third-party cookies, embedded scripts, pixels, and tracking identifiers.

3. Types of Cookies

Cookie Category	Description	Purpose	Retention	First / Third Party
Necessary Cookies	Essential for core website functionality	Enable forms, donations, logins, security, and navigation	Session-based or up to 12 months	First-party
Functional Cookies	Enhance user experience	Store preferences such as language, accessibility, or layout	Up to 12 months	First-party
Analytics / Performance Cookies	Collect aggregated usage data	Improve website content, usability, and performance	Up to 24 months (anonymized where feasible)	Third-party
Marketing / Targeting	Personalized communications, retargeting, and social media integration	Enable fundraising campaigns, newsletters, and ads	24 months	Third-party

4. Third-Party Cookies

Certain cookies are placed by third-party service providers to support website operations and services, including but not limited to:

• Payment gateways for processing donations
• Analytics providers (e.g., Google Analytics, Matomo)
• Social media platforms for content sharing and outreach

These third parties process data in accordance with their own privacy and cookie policies. IAC does not control or assume responsibility for third-party cookie practices. Users are encouraged to review the respective third-party policies.

5. User Consent and Control

• Users are informed about cookie usage through a cookie consent banner upon their first visit to the website.
• Non-essential cookies (functional, analytics, and marketing) are deployed only after obtaining explicit user consent, where required by law.
• Consent records are logged and securely maintained for audit, compliance, and regulatory purposes.

Users may, at any time:

• Accept all cookies
• Reject non-essential cookies
• Modify cookie preferences via the cookie settings interface

Consent may be withdrawn at any time, and changes take effect immediately.

6. Data Collected via Cookies

Cookies may collect:

• Device and browser information (browser type, operating system, device category)
• Internet Protocol (IP) address (anonymized where technically feasible)
• Pages visited, time spent, navigation paths, and interaction patterns
• Interactions with forms, downloads, links, and embedded content

Cookie data is not used to directly identify individuals unless explicitly stated and consented to.

7. Retention of Cookie Data

• Necessary and Functional Cookies: Session-based or up to 12 months
• Analytics and Marketing Cookies: Up to 24 months, anonymized where feasible
• Consent Logs: Retained indefinitely for regulatory and audit purposes

8. Legal and Regulatory References

This Cookie Policy is aligned with applicable data protection and digital compliance frameworks, including:

India:

• Digital Personal Data Protection Act, 2023
• Information Technology Act, 2000
• SPDI Rules
• RBI and payment gateway compliance requirements for online donations

International:

• EU General Data Protection Regulation (GDPR)
• EU ePrivacy Directive
• UK GDPR and PECR

IAC acts as a Data Fiduciary / Data Controller, as applicable, and maintains appropriate records, safeguards, and audit trails to ensure accountability and transparency in cookie usage.

9. Relationship with Privacy Policy

This Cookie Policy must be read in conjunction with the Privacy Policy. In the event of any inconsistency, the Privacy Policy shall prevail with respect to personal data processing.