Privacy Policy (Version 1)

Effective date: [EFFECTIVE_DATE]

1. Data fiduciary

Maharashtra Aquatic Association (MAA), operating the SwimSetu platform, is the data fiduciary for personal data collected through this platform.

2. Data collected

We collect: name, date of birth, gender, district, parent names, contact details, address, identity documents (birth certificate, certifications), guardian details for minors, and login credentials for administrators.

3. Purpose

Data is processed for swimming registration, affiliation management, verification by district and state administrators, compliance with sporting body requirements, and communication about registration status.

4. Storage location

Application and database are hosted on a VPS in Mumbai, India. Registration documents are stored on Cloudflare R2 in the Asia-Pacific (APAC) region.

5. Retention

Approved registration records are retained for sporting and audit purposes. Rejected applications are retained as required by MAA policy. Documents are retained while registration is active and as required by MAA policy.

6. Sharing

We do not sell personal data. Data is shared only with authorized MAA district and state administrators for verification. Processors include Hostinger (hosting), Cloudflare R2 (document storage), and ZeptoMail (transactional email only).

7. Security

We use encryption in transit (TLS), access controls by role, and audit logging. Sensitive fields may be encrypted at the application layer.

8. Your rights (DPDP)

You may request access, correction, or erasure subject to sporting and legal retention requirements. For grievance redressal, contact our Grievance Officer at [GRIEVANCE_EMAIL].

9. Minors

Parent or guardian consent is required for minor athletes. See our Parental Consent document.

10. Contact

General inquiries: [CONTACT_EMAIL]