Privacy Policy

Donnate Technology Limited, (hereinafter, “Donnate,” “we,” “us,” or “our” ) owns and operates www.donnate.org and related applications and platforms (our “Platform” ) and provides products and services for buyers, sellers, and nonprofits through the Platform (together with our Platform, the “Services”). Please read the Donnate User Agreement for detailed information about our Services and your legal obligations.

This Privacy Policy (the "Policy") is intended to provide you with information on how we collect, use, and share your personal data. Personal data is any information that relates to you, an identified or identifiable natural person.

When we use the terms “you” or “your” in this Policy, we are referring to individuals who use our Services, such as:

• individual representatives of our nonprofit partners,
• individual buyers and sellers,
• individual representatives of organisational donors, and
• visitors to our Platform.

If, after reading this Policy you have additional questions or would like further information, please email us at support@donnate.org.

Personal Data We Collect and How We Use It

We collect and process personal data from you only for lawful reasons, such as our legitimate business interests, your consent, or to fulfil our legal or contractual obligations.

Information You Provide to Us

The personal data that you provide directly to us through our Services will be apparent from the context in which you provide the data, as described below. We do not request highly sensitive, special category data, such as information about medical or health conditions, and we ask that you refrain from sending us any special category data.

• Nonprofits:

When nonprofits want to set up an account through our Services, individual representatives of the nonprofit provide us with their name, email address, and other contact information. We use this information to set up a nonprofit account, process requests from nonprofits, communicate with nonprofits, and provide the Services.

• Buyers and Sellers:

When you use our Services, we collect your name, email, contact information, transaction amounts and dates, and payment information. You provide this personal data so we can set up your account, provide the Services, process your transactions, communicate with you about those transactions, and promote opportunities for future transactions.

• Visitors:

Our Platform has mechanisms for you to communicate with us, such as email. If you contact us through our Platform, you may provide us with your name, email, and any other information you choose. We use the information to contact you and answer your questions.

In addition to the above, we may use your personal data to send you marketing information about our Services and our nonprofit partners. You may opt out of these types of communications at any time by emailing us at support@donnate.org. We may also provide you the ability to register or otherwise link to, or integrate with the Platform, certain social media, such as Facebook®, Twitter®, Google®, and others, as part of the Services or in order to provide you additional venues in which you can leverage or share the giving opportunities of the Services. Please note that in any instance with which you provide us with your login credential for such social media platforms, Donnate will have access to all information related to such accounts, as permitted by the policies of such social media platforms and your current privacy settings.

Information We Collect by Automated Means

We collect certain information by automated means when you visit the Services, some of which may be personal data. The information collected may include usage information, such as the numbers and frequency of users to the Services, pages visited, web browsing histories, social networking activities, and similar data. If gathered, this data is aggregated and may be shared with third parties. In addition to third-party tracking services, we also collect this information through various other means, including “cookies,” “web beacons” and IP addresses, as further explained below.

• Cookies

A cookie is a piece of information that a web server may place on your computer when you visit a website. Cookies are commonly used by websites to improve the user experience. Many cookies last only through a single website session or visit. Others may have an expiration date or may remain on your computer until you delete them. We use “session cookies” in order to enhance the user experience and for other web-related purposes. These session cookies are not linked to and do not collect personal data. We also use cookies for other purposes, including to maintain continuity during a user session, to gather data about the usage of our Platform for research and other purposes, or to store a user name or related login credentials, so that you do not have to provide this information every time you return to our Platform. Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. Please note, however, that without cookies, you may not be able to take full advantage of all the features on our Platform. In some cases, Donnate may also use another company to operate web servers for our Platform. Donnate uses the cookie information gathered by these companies in the same manner as stated in this Privacy Policy.

• Web Beacons

Our Platform contains “web beacons” (also known as Internet tags, pixel tags, and clear GIFs). These web beacons allow third parties to obtain information such as the IP address of the computer that downloaded the page on which the beacon appears, the URL of the page on which the beacon appears, the time the page containing the beacon was viewed, the type of browser used to view the page, and the information in cookies set by the third party. Web beacons may also be used to track whether you have opened an HTML email. When the email is opened, a part of the code that makes up the HTML page calls a web server to load the web beacon, which then generates a record showing that the email has been viewed. Web beacons may also recognise when the email was opened, how many times it was forwarded, and which URLs (links within the email) were clicked.

• IP Addresses

When you visit and interact with the Services, Donnate and third parties with whom we have contracted to provide services for us collect Internet Protocol addresses (each an “IP Address” ), as well as browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and page navigation. An IP Address is a unique identification number that certain electronic devices use to identify and communicate with each other on the Internet. Your Internet Service Provider automatically assigns an IP Address to the computer that you are using. We gather this information to track Platform visitor movement in aggregate and to gather broad demographic information for aggregate use. Our goal in gathering this information is to learn how you are using our Service. We may use this information to enhance our Platform or for other lawful purposes.

For more information on cookies and similar technologies and how to disable them, please see allaboutcookies.org/cookies.

How We Share Your Information

We do not sell, rent, or lease your personal data to third parties. When we share your personal data, we only do so as described in this Policy.

We may disclose personal data to other third parties as follows:

1. to Stripe for donation payment processing (as described in more detail below); 
2. to our affiliates, service providers, and agents for our internal operations (like storage and data backup) and to provide, improve, and market our Services to you; 
3. to perform data analytics; 
4. in connection with a sale of all or substantially all of the assets of Donnate or the merger of Donnate into another entity or any consolidation, share exchange, combination, reorganization, or like transaction in which Donnate is not the survivor; 
5. for any or all of the following reasons: 
   1. to comply with a subpoena, to comply with a legal process, to comply with what we reasonably believe in good faith is a valid and enforceable warrant or subpoena, or to comply with any other legal obligation, 
   2. to prevent, investigate, detect, or prosecute criminal offenses or attacks on the technical integrity of our Services, 
   3. when we reasonably believe in good faith that disclosure is necessary to protect the rights, privacy, property, business, or safety of Donnate, their partners and employees, you, or the public, and/or to investigate fraud.

Donation Payment Processing

We partner with payment processors (like “Stripe”) to process your donations; therefore, some of the personal data you provide will be shared with them. We encourage you to review their privacy policy prior to providing us with payment information. Please note that the payment information that you provide at the time of payment is 1) never seen by Donnate or any of its nonprofit partners directly, and 2) is used only to process your payment and will not be stored or used for any other purpose.

Your Rights

If you live in the European Union ("EU"), European Economic Area ("EEA"), United Kingdom ("UK"), or Switzerland, you have certain rights regarding your personal data, including:

• You may request access to your personal data and obtain information about our processing of your personal data, with whom we share your personal data, and your rights.
• You may request that we restrict our processing of your personal data.
• You may object to our processing of your personal data.
• Where we process personal data based on your consent, you may withdraw your consent.
• You may correct personal data that is inaccurate and have incomplete personal data completed.
• You may request that we delete your personal data, return it, or provide a copy of it to you.
• You can deactivate your Donnate account at any time by sending us an email at support@donnate.org.

If you live in the EU, EEA, UK, or Switzerland and you are unsatisfied with our response, you have the right to lodge a complaint regarding your personal data with an applicable supervisory authority.

How We Protect and Store Your Information

We maintain reasonable administrative, technical, and organisational safeguards for the Services designed to protect against loss, misuse, or unauthorised access, disclosure, alteration, or destruction of the personal data that we collect from you. We restrict access to personal data collected about you on the Services to our employees, our affiliates’ employees, those who are otherwise specified in this Privacy Policy, or others who need to know that information to provide the Services to you or in the course of conducting our business operations or activities. Please note, however, that no website, including the Services, can guarantee 100% security.

We store your personal data for as long as required to provide the Services to you. We may retain personal data after we cease providing Services to you to the extent necessary to comply with our legal and regulatory obligations and for the purpose of fraud monitoring, detection, and prevention, including our tax, accounting, and financial reporting obligations. Where we retain data, we do so in accordance with any limitation periods and record retention obligations that are imposed by applicable law.

International Transfers and Privacy Shield

The personal data we collect within your country may be transferred outside of your country among our affiliates or with third parties for the purposes described in this Privacy Policy.  As required by applicable law, we utilise appropriate safeguards approved by applicable data protection authorities when we transfer personal data across international borders.

Links to Other Websites

We may provide links to other websites, including social media sites such as Facebook®, Twitter®, Google+®, and others, as a service to you or in order to provide you additional venues in which you can leverage or share the giving opportunities of the Services. Please be aware that we have no affiliation with these other parties and cannot control and are not responsible for the information collection, use, and disclosure practices of such sites. We encourage you to review and understand their privacy practices and policies, if any, before providing any personal data to them or using any of their services. We are not responsible for the content or information of these sites, any products or services that may be offered through them, or any other use of the sites.

Children

These Services are not intended for use by children, and we do not knowingly or intentionally solicit data from or market to children under the age of 18. Additionally, as specified in the Donnate User Agreement, those individuals who are less than 18 years of age are only permitted to use the Services with parental or guardian consent and supervision. If you are a parent or guardian and become aware that your child has provided us information without your consent, please contact us at support@donnate.org to request that we delete such information from our files within a reasonable amount of time from your request.

Changes to our Privacy Policy

We reserve the right to update this Policy at any time. It is your responsibility to check this page from time to time for updates. If we make any material changes to this Policy, then we will provide notice of such changes via the Services or will email you using the email you provided to us when you registered; your continued use of Donnate after such notice will indicate your acknowledgment and agreement with any and all such changes.

Contact us

If you have any questions, comments, or concerns regarding this Policy or our practices, please feel free to write to us at support@donnate.org.