What we collect, why we collect it, who else sees it, how long we keep it, and the choices you have.
Last updated 27 October 2026The National Positive Psychology Association (“NPPA”, “we”, “us”) runs nppassociation.org. We decide how the personal information described here is used, and we are responsible for it.
This notice is given under India’s Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. It is available in English and, on request, in any language listed in the Eighth Schedule to the Constitution of India. See also how NPPA follows the DPDP Act.
This policy covers the website, NPPA membership, conference registrations and the emails we send. When you leave our website for another (for example Razorpay’s payment pages or YouTube), that website’s own policy applies.
| When | What |
|---|---|
| You register or update your profile | Title, name, email address, phone number, postal address and PIN code, affiliation, profession and programme of study, membership type, the activities you are interested in, whether you would like to volunteer, and your password (stored only in scrambled, “hashed” form). |
| You add a backup email | The second email address you give us. |
| You fill in your directory profile (optional) | If you choose, a profile photo, short bio, areas of interest, institution, city, role and LinkedIn link for the Members Directory, visible only to signed-in active members. You can change or remove them at any time. |
| You use My Journey | Your quiz results, the monthly challenges you join and complete, your learning credits and level, and any reflections you write. Your reflections are private: only you can see them. |
| You suggest an idea | Your idea, its category, and the status and reply we give it. |
| You use the Professional tools (Professional members) | Your expert listing (what you are open to, such as supervision or mentoring, and a one-line note); the entries in your CPD record (date, activity, type, hours, organiser); the CPD statements you download (for each one we keep the details shown on its verification page, see section 4); your responses to calls from NPPA; and whether you want emails about new calls. |
| You send a request to a Professional member, or receive one | Your message is emailed straight to the Professional member and is not stored on our website. We keep only who wrote to whom, when, and what about (for example “mentoring”), to apply the limits that prevent spam. |
| You upgrade from Student to Professional | The price we worked out for you (the credit for your unused Student membership and the amount to pay), when the payment link was created and whether it was paid. If an NPPA administrator emails you an upgrade offer, we record when it was sent and the price in it. If you open the upgrade page, start an upgrade or a payment for it fails, we note when, so we can send you one reminder (at most one a month; none if you have unsubscribed). |
| You pay a membership or conference fee | Razorpay’s payment reference, the amount, date and what it was for. We never receive or store your card, UPI or bank details; Razorpay handles those. |
| You register for a conference or event | The details on the registration form, such as your name, contact details, affiliation and any abstract you submit. |
| You sign in | The time, your network (IP) address, your approximate country, and your browser and device type. We use these for the login codes, to spot suspicious sign-ins and to keep your account safe. |
| You open links in our emails | Which link was clicked and when, so we know which news and updates are useful. |
| You visit the website | Pages viewed and general usage, through the analytics described in section 6. |
| You write to us | Your message and contact details. |
When you register, you tick a box to agree to us using your information for these purposes, and we keep a record of when you agreed. You can withdraw your consent at any time, as easily as you gave it: in the Privacy Centre (“Withdraw consent and delete my account”), or by writing to us. We then stop using your information, except what the law requires us to keep. Withdrawing consent does not affect what we did before.
Cookies are small files your browser keeps for a website. We use:
You can change your choice at any time with “Cookie settings” at the bottom of every page. You can also block or delete cookies in your browser; if you block essential cookies, you will not be able to sign in.
We send two kinds of email:
We never send emails on behalf of other organisations.
| Information | How long |
|---|---|
| Your account and profile | While you are a member, and for 3 years after your membership ends (or 3 years after you register, if you never become a member). We then email you, and delete your account 48 hours later unless you log in. You can ask us to delete it sooner. |
| Directory profile and photo | Until you change or remove them, or your account is deleted (they are deleted with it). |
| My Journey, your ideas, expert listing and CPD record | Until you delete them or your account is deleted (they are deleted with it). |
| CPD statement verification details | Until your account is deleted, so that statements you have given to others can still be checked. |
| Record of requests between members (who, when, topic; not the message) | Until the account of either member is deleted. |
| Upgrade prices, offers and reminders | Upgrade payments are kept as payment records (below); offers, reminders, unpaid price quotes and the note of when you looked at upgrading until your account is deleted. |
| Payment records and receipts | As long as Indian accounting and tax law requires. |
| Sign-in records (IP address, browser) | One year, as the DPDP Rules require, then deleted automatically. |
| Email link clicks | Kept with our email statistics; ask us and we will delete yours. |
| Records of your consent and of your requests to us | As long as needed to show we handled your data lawfully. |
| Backups | Nightly backups are replaced on a rolling basis (the copies on our server are kept for 7 days). |
Every page is encrypted (HTTPS). Every member sign-in needs a one-time code sent by email. Passwords are stored only in hashed form, and nobody at NPPA can read them. Phone numbers and postal addresses are stored encrypted, and profile photos are kept outside the public website. Administrator access is limited and also uses two-step sign-in. The website is monitored for unexpected changes and backed up every night.
No website can be completely secure, but we work to keep your information safe. Read more on our Security & Your Account page.
You can ask us to:
Members can do most of this themselves in the Privacy Centre: download your data, stop news emails, name a nominee, make a request or complaint, and withdraw consent and delete your account. Anyone can also make a request there, or write to us at admin@nppassociation.org from your registered email address. We will reply within 30 days. Records we must keep by law (for example payment records) are kept for as long as the law requires, even after you leave.
Grievances: if you are unhappy with how we have handled your information, contact our Grievance Officer: Prof. Kamlesh Singh, Secretary & Treasurer, NPPA, at admin@nppassociation.org or through the Privacy Centre. We answer within 90 days. If you are still not satisfied, you may complain to the Data Protection Board of India.
Online NPPA membership is for people aged 18 and over: everyone confirms this when registering. We do not knowingly collect personal data from anyone under 18, and we do not track children’s behaviour or show them advertising. Students under 18 who want to take part in NPPA activities can do so through their school, college or teacher. If you believe someone under 18 has registered, please tell us and we will delete the account.
We may update this policy as the website or the law changes. The date at the top shows the latest version. If we make an important change, we will tell members by email.
National Positive Psychology Association, IIIrd Floor, A-87, Naraina Vihar, New Delhi 110028
admin@nppassociation.org