BRIDGE POLICY THINK TANK
Public Policy Advisory & Research, Advocacy, Capacity Building and Impact Assessment

PRIVACY POLICY

​

1. Bridge Policy Think Tank / https://www.bridgethinktank.com (“we,” “us,” or “our”) is committed to protecting your privacy and the security of your data on our website (the “Site”). To demonstrate this commitment, we have adopted this Privacy Policy (this “Policy”).

​

2. This Policy is based on the core principles of notice/awareness, choice/consent, access/participation, and integrity/security in the collection and use of all information regarding our users. By accessing or using the Site, you indicate your agreement to this Policy. We reserve the right to modify this Policy at any time, and changes will be effective immediately upon posting.

 

3. Data Fiduciary & Data Principal

For the purposes of this Policy, we act as the “Data Fiduciary” (the entity determining the purpose and means of processing personal data), and you, the website visitor or research contributor, act as the “Data Principal” under the Digital Personal Data Protection Act (DPDPA). All personal data processed by us is grounded upon your explicit, specific, unambiguous, and revocable consent, or for legitimate uses as defined under applicable law.

​

4. Information we collect

We gather two primary types of information about our users to enhance your experience and tailor our public policy resources to your interests:

 

4.1. Information You Voluntarily Provide: This includes personal identifiers submitted when you subscribe to our newsletters, register for events or forums, fill out a contact form, participate in surveys, or register a user profile. The data collected may include your name, title, organisation, country, email address, and phone number.​

4.2. Information Collected Automatically (Cookies & Tracking): We use standard website “cookies” and tracking tools to analyse traffic patterns, count page views, and remember your site preferences. These track overall technical statistics such as domain names, browser types, and search terms, but this automated data is aggregated and not correlated with your individual identity. You can choose to disable cookies in your browser settings, though some site functions may be limited.

 

5. How we use your information

We use the information we process under our legitimate interest to share research and execute our institutional operations. Specifically, we use it to:

​

5.1. Identify you as a registered user and accelerate your access to content or forums.

5.2. Deliver email newsletters, promotional content about new publication releases, or event invitations that you have explicitly opted in to receive.

5.3. Compile collective, anonymised user profiles and demographic trends to help our partners or funders understand our audience reach.

 

6. Information sharing and disclosure

Your privacy is of the utmost importance to us. We adhere to strict data-sharing boundaries:

6.1. No Commercial Selling: We never sell or rent individual user or donor information to outside parties for marketing or commercial promotional purposes.

6.2. Third-Party Service Providers: We may share data with trusted operational vendors who perform functions on our behalf (e.g., email distribution systems, database management). These partners have access only to the data needed to perform their exact tasks and are legally barred from using it for any other purpose.

6.3. Legal Compliance: We will disclose your personal information only when strictly required by a court order, valid legal process, applicable law, or to protect public safety.

 

7. Data Security

We operate secure data networks protected by industry-standard firewall, encryption, and password protection systems. Any account setup or transaction pages utilize secure encryption protocols (HTTPS) to safeguard data in transit.

​

8. Your Rights: Opt-Out and Choice

We believe in giving you absolute control over your digital footprint:

8.1. Email Unsubscribe: Every email communication we send includes an explicit, easy-to-use “Unsubscribe” link at the bottom. You may also adjust your account dashboard settings from "Yes" to "No" regarding electronic communications.

8.2. Children’s Privacy: We do not knowingly collect or request personally identifiable information from anyone under the age of 13 without verifiable parental consent.

​

9. Governing Law and Jurisdiction

This Policy is governed by and construed in accordance with the laws of India, without regard to conflict of law principles. Any legal claims arising out of this Policy shall lie exclusively within the competent courts of Delhi.

​

10. Independent Research and Funding Disclaimer

All interactions, research contributions, and data collected through this Site are handled independently. The acceptance of any institutional or corporate funding does not imply an endorsement of a sponsor's products, views, or policies. We do not conduct product-specific research for corporate sponsors, and user data is never shared with funders for commercial exploitation.

​

11. Cross-Border Data Processing

As our organization utilizes secure, cloud-based infrastructure and third-party communication platforms (e.g., mail relays and database management networks), your personal data may be processed or stored on secure servers located outside of India. Such cross-border transfers are undertaken strictly in accordance with applicable data protection laws and reasonable security practices.

 

12. Grievance Redressal and Data Corrections

If you believe any personal records we process are incorrect, you maintain the right to view, correct, or request the deletion of this data by contacting director@bridgethinktank.com. If you wish to raise a formal complaint regarding how your personal data has been handled, you may contact our designated Grievance Officer at the same address, who will investigate the matter promptly.

​

13. Specific Exclusions for Government-Mandated Disclosures

Notwithstanding anything contained in Section 5, we may disclose your personal records, digital footprints, or IP address logs to lawful Indian government authorities, law enforcement agencies, or the Computer Emergency Response Team (CERT-In) without seeking your prior consent, when such disclosure is explicitly requested via a formal statutory mandate for identity verification, cyber-security incident management, or investigative compliance.

​

14. Detailed Retention & Right to Erasure Framework

We will retain your personal information only for as long as necessary to fulfil the specific purposes outlined in Section 4, or as required to meet statutory compliance, financial auditing, and archiving mandates under Indian law. Upon the fulfilment of the processing purpose, or upon the withdrawal of consent by the Data Principal, we will permanently delete or anonymize your personal records within 30 days, unless retention is explicitly mandated by law.