Privacy Policy

The Uttar Pradesh Indian Speech & Hearing Association (UP ISHA) is a professional body representing audiologists and speech-language pathologists in Uttar Pradesh, India. Our registered office is located at 110 Raghu Raj Nagar, Patel Nagar, Lucknow - 226016, Uttar Pradesh, India.

For any privacy-related queries, you can reach us at office@upisha.org or by writing to the address above.

We collect the following categories of personal information depending on how you interact with us:

• •Contact form: your name, email address, and the message you send us through the Contact section.
• •Membership application (Apply / Join): your full name, email, phone number, address, professional qualifications, RCI (Rehabilitation Council of India) registration number, city, a profile photo, your RCI certificate, and your transaction number for renewal.
• •Newsletter subscription: your email address when you subscribe to our newsletter from the footer or other sign-up forms.
• •Webinar / Event registration: your name, email, phone number, qualification, and payment details.
• •Account data: if you register an account, we store your email, encrypted password, and your membership role to secure your session.
• •Payment receipts: we generate digital receipts for membership fees, webinar fees, and event fees (transaction type, status, amount, and date).
• •Analytics: we use Google Analytics to understand aggregate website usage patterns. This includes anonymized data such as pages visited and referral sources.
• •Local browser data (auto-save): when you fill in the contact or Join forms, we may locally (in your browser) save your partially-entered information so you don't lose it if the page reloads. This data is stored only on your device.

• •To process and manage your membership application and renewals.
• •To communicate with you about your membership, webinars, events, and updates you've subscribed to.
• •To respond to your enquiries submitted through the contact form.
• •To process webinar and event registrations and issue certificates or receipts.
• •To maintain the security of your account and of the website.
• •To improve our website and services through aggregated, non-identifying usage statistics.

We process your personal data only for legitimate purposes connected with the functioning of UP ISHA as a professional association, and only to the extent necessary. When you provide your details (for example, by submitting a form or registering for an event), you consent to our use of those details for the stated purpose. You may withdraw your consent at any time by contacting us; subject to applicable law, we will then stop processing your data and delete it where required.

Your consent to receive our newsletter is optional and separate from your membership. You can unsubscribe at any time using the link in our emails, or by writing to us.

We use a small number of cookies and browser storage to make the site work and remember your choices. For details, including how to manage them, please see our Cookie Policy.

In summary, we use:

• •A consent cookie to remember whether you accepted or declined our cookie banner.
• •Session cookies to keep you signed in to your member account (httpOnly, secure).
• •A short-lived CSRF token cookie to protect our forms from cross-site request forgery.
• •Local storage to autosave partially-filled contact and membership forms on your device.

Your information is stored securely using industry-standard practices. We use cloud-based infrastructure (including Google Firebase services) which is protected with transport-layer encryption (HTTPS), rate-limiting on our forms, CSRF protections, and strict Content-Security-Policy headers. Passwords are stored only in hashed form.

Access to membership information is limited to authorized personnel and to you through your secured account. We never store credit/debit card numbers—payment details are handled by the payment provider you use.

In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant authorities in accordance with applicable Indian law.

We keep your data only for as long as necessary for the purpose for which it was collected:

• •Membership records are retained while your membership is active and for a reasonable period afterwards for administrative and statutory purposes.
• •Newsletter subscriptions are retained until you unsubscribe.
• •Contact-form messages are retained as long as needed to respond and resolve your query.
• •Financial receipts are retained in accordance with applicable tax and accounting laws.

When the purpose is fulfilled, we delete or anonymize the data unless we are required by law to keep it.

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have rights over your personal data. You can exercise them by writing to us at office@upisha.org.

• •Right to access: ask for a summary of the personal data we hold about you and how it is being processed.
• •Right to correction: ask us to correct or update inaccurate or incomplete personal data.
• •Right to erasure: request deletion of your personal data, subject to legal retention requirements.
• •Right to grievance redressal: raise a grievance with us, which we will address promptly (we aim to respond within 30 days).
• •Right to nomination: you may nominate a person to exercise your rights on your behalf in the event of your death or incapacity.

UP ISHA is a professional body for audiologists and speech-language pathologists, and our membership is intended for qualified professionals. We do not knowingly collect personal data of children. If you believe a child's personal data has been provided to us, please contact us so we can delete it without delay.

We do not sell your personal information. We share data only with:

• •Our infrastructure providers (such as Google Firebase for authentication and storage), who process data on our behalf under appropriate agreements.
• •Analytics providers (Google Analytics) who receive aggregated, non-identifying usage data.
• •Government or law-enforcement authorities, where we are legally required to do so and to the extent permitted by law.

We may update this Privacy Policy from time to time to reflect changes in our services, or in applicable laws and regulations. When we make significant changes, we will update the "Last updated" date above and, where practical, notify members by email. Your continued use of the website after changes take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• •Email: office@upisha.org
• •Grievances: secretary@upisha.org
• •Address: 110 Raghu Raj Nagar, Patel Nagar, Lucknow - 226016, Uttar Pradesh, India