Privacy Policy

DonorBridge ("we", "our", or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit donorbridge.world or make a donation through our platform. By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our Services.

We collect information you provide directly to us when you: • Create a DonorBridge account (name, email address, password) • Make a donation (name, email, payment information processed via our payment processor) • Contact us through the contact form or by email • Subscribe to our newsletter or impact reports We also collect certain information automatically when you visit our website, including IP address, browser type, operating system, referring URLs, and pages viewed. This is used solely for security and analytics purposes. We do not collect payment card numbers directly — all payment processing is handled by PCI-DSS-compliant third-party processors.

We use the information we collect to: • Process your donations and send transaction confirmations • Create and manage your donor account • Send impact reports and updates on causes you support • Respond to enquiries and provide customer support • Detect and prevent fraudulent transactions • Comply with legal obligations and resolve disputes • Improve our platform and develop new features We do not sell, rent, or trade your personal information to third parties for marketing purposes.

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: • Contract performance: Processing necessary to fulfil your donation and provide our Services • Legitimate interests: Fraud prevention, platform security, and product improvement • Legal obligation: Compliance with applicable laws and regulations • Consent: Sending newsletters and marketing communications (you may withdraw consent at any time)

We share your information only in the following limited circumstances: • Service Providers: We engage trusted third-party companies to process payments, send emails, and analyse platform usage. These parties are contractually bound to handle your data securely and only for the purposes we specify. • Cause Organisations: When you donate to a specific cause, we share your name and donation amount with that organisation so they can send you direct updates. You may opt out of this sharing. • Legal Requirements: We may disclose information if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect the rights, property, or safety of DonorBridge, our users, or the public. • Business Transfers: In the event of a merger or acquisition, donor data would be transferred only to a successor entity committed to upholding this Privacy Policy.

We retain your personal information for as long as your account is active or as needed to provide our Services. Donation records are retained for seven (7) years to comply with financial and tax regulations. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the data we hold about you • Correction: Request correction of inaccurate data • Deletion: Request deletion of your personal data ("right to be forgotten") • Portability: Request your data in a machine-readable format • Objection: Object to processing based on legitimate interests • Restriction: Request restriction of processing in certain circumstances • Withdrawal of Consent: Withdraw consent at any time for consent-based processing To exercise any of these rights, please contact us at donation@donorbridge.world. We will respond within 30 days.

We use essential cookies necessary for the platform to function (session management, security). We also use analytics cookies to understand how visitors use our site. You can configure your browser to refuse cookies; however, certain features of our platform may not function properly without them. We do not use cookies for targeted advertising.

We implement industry-standard technical and organisational measures to protect your personal information, including: • 256-bit SSL/TLS encryption for all data in transit • Encrypted storage of sensitive data at rest • Access controls limiting who within our organisation can view donor data • Regular security audits and penetration testing No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

DonorBridge operates globally. Your information may be transferred to and processed in countries other than the country where you reside. When we transfer data from the EEA or UK, we rely on Standard Contractual Clauses or other approved transfer mechanisms to ensure adequate protection.

Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you are a parent and believe we have collected information from your child, please contact us immediately at donation@donorbridge.world and we will delete that information.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our website. Changes take effect immediately upon posting. Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.

For any questions or concerns about this Privacy Policy, or to exercise your data rights, please contact us at: DonorBridge Email: donation@donorbridge.world Website: donorbridge.world