Privacy Policy

1. Overview

The DDRC Sarvekshan Portal ("Portal", "we", "us") is operated by the District Disability Rehabilitation Centre (DDRC), Ahilyanagar, under the Government of Maharashtra. This Portal is used for conducting disability surveys, managing beneficiary data, and coordinating field officers.

This Privacy Policy describes what personal information we collect, why we collect it, how it is used, and the rights available to you. By using this Portal or its associated mobile application, you agree to the terms of this policy.

2. Information We Collect

We collect the following categories of information:

Category	Examples	Purpose
Identity	Full name, date of birth, gender, photograph	Beneficiary identification
Contact	Mobile number, address, village, taluka, district	Communication & location verification
Government IDs	Aadhaar number, disability certificate number	Eligibility & scheme verification
Health & Disability	Disability type, disability percentage, medical history relevant to the survey	Scheme assessment & report generation
Survey Responses	Answers to survey sections (Sections 1–11), uploaded documents, photographs	Disability assessment & government reporting
Account	OTP-verified mobile number, role (Admin / Field Officer / Beneficiary)	Authentication & access control
Device & Usage	IP address, browser type, pages visited, timestamps	Security & system monitoring

3. How We Use Your Information

Your information is used exclusively for government and public-service purposes:

Conducting disability surveys and assessments under government schemes (RVY, ADIP, PMDK, etc.)
Verifying eligibility for assistive devices, certificates, and benefits
Generating assessment reports, receipts, and official certificates
Coordinating field officers and tracking survey progress
Sending OTP-based authentication messages via SMS
Sending notifications about camp schedules, scheme updates, and status changes
Statistical reporting to government departments (anonymised where possible)
Detecting fraud and ensuring data integrity

We do not use your data for advertising, profiling, or any commercial purpose.

4. Information Sharing

We do not sell or rent your personal information. Data may be shared only in the following circumstances:

Government departments: Ministry of Social Justice and Empowerment, State Disability Commissioner, district administration — for scheme implementation and auditing.
Authorised DDRC staff: Admins and field officers have role-based access limited to data necessary for their function.
Legal obligation: If required by law, court order, or regulatory authority.
Service providers: Third-party providers (e.g., SMS gateway, cloud storage) who process data solely on our behalf under strict confidentiality agreements.

5. Data Retention

We retain your data for as long as necessary to fulfil the purpose it was collected for and to comply with legal obligations:

Beneficiary records: Retained for the duration of active government scheme enrolment, and for a minimum of 7 years thereafter for audit purposes.
Survey responses: Retained for the life of the survey project and archival period defined by the government.
Account data (field officers / admins): Retained while the account is active. Deleted within 30 days of an approved account deletion request.
Device/usage logs: Retained for 90 days for security monitoring.

6. Your Rights

You have the following rights regarding your personal data:

Access: Request a copy of the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request permanent deletion of your account and associated data. See our Account Deletion page.
Portability: Request your survey data in a readable format.
Objection: Object to processing of your data where it is not required by law.

To exercise any of these rights, contact us at ddrcnagar@gmail.com. We will respond within 7 working days.

7. Data Security

We implement technical and organisational measures to protect your data:

All data is transmitted over HTTPS (TLS encryption).
Passwords are never stored — authentication is OTP-based.
Access to data is role-based and logged.
Server infrastructure is hosted in a secured environment with regular backups.
Sensitive fields (Aadhaar numbers) are not displayed in full within the Portal interface.

While we take all reasonable precautions, no system is completely secure. In the event of a data breach affecting your rights, we will notify affected users as required by applicable law.

8. Children's Privacy

This Portal may collect data about children under 18 as part of disability surveys conducted by authorised field officers or parents/guardians. Such data is collected solely for the purpose of government scheme assessment and is not used for any commercial purpose. A parent or guardian may request correction or deletion of a child's data by contacting us.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or data practices. The "Last updated" date at the top of this page will be revised accordingly. Continued use of the Portal after changes are posted constitutes acceptance of the updated policy.

For significant changes we will attempt to notify registered users via SMS or in-app notification.

DDRC Sarvekshan Portal

Contents