Data Security Protocol

This protocol describes the practical security and privacy safeguards used for the KMCC Care public website, applicant onboarding service, mobile app, and related Society services. It supplements the Privacy Policy and does not replace it.

The Privacy Policy, Account Deletion page, and applicable law explain the detailed rules for collection, retention, correction, and deletion.

• Membership, profile, and contact details submitted to the Society.
• Registration and welfare-request information, declarations, and related records.
• Documents and photographs uploaded for an application, profile, or request.
• Usage, device, browser, app-version, and diagnostic information needed to operate and protect the service.

We collect and use information only when it is relevant to applicant onboarding, Society administration, welfare support, communication, service security, or legal and record-keeping obligations.

Users should provide only the information and supporting material requested by the official flow for their request.

Access to records is limited to authenticated users and authorized Society personnel or service providers who need it for their roles. Applicants are limited to records linked to their own authenticated sessions, which are handled through the official service boundary and should not be shared.

The Society applies role-based access and least-privilege practices appropriate to the service; users must protect their devices, registered phone numbers, passwords, and one-time codes.

Use the official HTTPS website and app flows when submitting information. Private uploads are handled through authorized upload flows, and access to private files is limited to authorized service paths and time-limited download access where provided.

Published gallery and public content are reviewed and controlled separately from private application and welfare documents.

Authorized Society personnel and service providers may handle information only to operate the service, review requests, provide support, meet legal obligations, or protect users and the platform.

We do not sell personal information.

Information is retained only for the purposes described in the Privacy Policy, including application processing, Society records, dispute handling, audit, compliance, and legitimate administration.

You may ask the Society to review or correct submitted information, or request account and data deletion. The Account Deletion page explains the process and the records that may need to be retained.

Report a suspected security or privacy concern to careofauhkmcc@gmail.com. Include a clear description, the affected service or page, when the issue occurred, and any non-sensitive evidence that helps us investigate.

Do not email passwords, one-time passwords, full identity-document numbers, or complete sensitive documents. Use the official application flow for documents requested by the Society.

Keep your device and registered contact details secure, use official service routes, and report suspected misuse promptly. No online service can guarantee absolute security, so use care when submitting personal information.

We may update this protocol when services, safeguards, Society practices, or applicable law change. The current version will be published on this page with a revised date.