Privacy Notice

Effective from 18th January 2021

We, Donorfy Limited are committed to protecting and respecting your privacy.

This Privacy Notice (formerly called the Privacy Policy) together with our Terms and Conditions or Terms of Use (as applicable) sets out the basis on which any personal data we collect from you, or you provide to us, will be processed by us. Pleased read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting donorfy.com you are accepting and consenting to the practices described in this Privacy Notice.

Data Controller

For the purpose of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, (“GDPR”), the Data Protection Act 2018 and any applicable national implementing laws, regulations and secondary legislation relating to the processing of personal data (together “Data Protection Law”), the data controller is Donorfy Limited of Amelia House, Crescent Road, Worthing BN11 1QR, England. We confirm that we have a data protection officer (“DPO”) who can be contacted as set out at the end of this Privacy Notice.

Legal Basis for Processing

We collect and use the personal data described below in order to provide you with access to our website and services in a reliable and secure manner. We also collect and use personal data for our legitimate business needs, to comply with our legal obligations and to fulfil our contractual obligations to you. To the extent we process your personal data for any other purposes, we ask for your consent in advance or require that our partners obtain such consent.

Information we may collect from you

This Privacy Notice tells you how and why we collect your personal information.

This Privacy Notice applies to information we collect about:

visitors to our websites
people who use our services
people who subscribe to our newsletter

We may collect and process the following information about you.

Information you give us

You give us information about you by filling in forms on our website or by corresponding with us by phone, email or otherwise. This includes information you provide when register to use our website, apps, subscribe to our services or newsletter, search for a product, place an order on our website, participate in discussion boards or other social media functions on our website, enter a competition, promotion or survey, fill in a contact form, use downloads and/or online tools for the purpose of providing you with further information about our services, materials, news or training and when you report a problem with our website or services.

The information you give us can identify you and may include your name, address, telephone number, email address, financial and credit card information, customers to whom you are linked and your company name.

Information we collect about you

If you interact with our website or services we may automatically collect information about your device and your usage of our website, services or emails (such as Internet Protocol (IP) addresses or other identifiers, which may qualify as personal information. Each time you visit our website or use our services we may automatically collect the following information using common information-gathering tools, such as cookies, web beacons, pixels, and similar technologies about your device, and your use of our website and services.

Technical information, including standard internet log information such as Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.

Information about your visit including details of your behaviour patterns in order to measure the number of visitors to our website, and to improve our website such as your URL, clickstream to, through and from our website (including date and time), length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods to browse away from the page.

Information from other online accounts to which you have given us permission to collect data from within your settings or the privacy policies of these other online services. For example, this can be via social media or by choosing to send us your location data when accessing our website from your smartphone; or it can be from the integrations and connections that you choose to install when using the services.

We collect this information in a way which does not identify you. We do not draw up user profiles or link such data to personally identifiable information.

Information we receive from other sources

We also collect information about you from publicly available sources. We may combine this information with personal information provided by you. This helps us update, expand, and analyse our records, identify new customers, and create more tailored advertising to provide services that may be of interest to you. We also use this for the purposes of targeted advertising, delivering relevant email content, event promotion and profiling, determining eligibility and verifying contact information. The personal information we collect includes:

Publicly available information about you; such as information published about you, for example by Companies House, including postal address, job title, email address, phone number, professional or employment-related information, education information and commercial information.
Internet activities: internet data (or user behavioural data), IP addresses, internet activity information and inferences about your preferences and behaviour.
Social media profiles: information published about you on social media profiles such as LinkedIn, Facebook, Twitter etc.

Information collected by third parties

We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.

Google Workspace / GSuite: to enable email communications with you.
Zendesk: our customer support portal
Facebook: our client community
HubSpot: to manage contacts and keep a record of communications/ interactions with customers.
Xero: our cloud accounting system that stores email and names of persons sent invoices by email.
GoCardless and Stripe: our payment processers

Use of cookies

We use cookies on our website and in our services to distinguish you from other users of our website or services. This helps us to provide you with a good experience when you browse our website or use our services and also allows us to improve the website and services.

What are cookies?

A cookie is a data file stored on a computer hard drive, mobile phone or other device which contains information about the user of our website. Cookies can be “persistent” or “session” cookies. We use persistent cookies and session cookies.

Cookies we use on our website

Our website is built on the HubSpot platform. The cookies used by websites on this platform are described here. This includes information on their type and duration.

Persistent cookies

A persistent cookie is stored on a user’s device in between browser sessions which allows the preferences or actions of a user across the website (or in some cases across different websites) to be remembered. We use persistent cookies to save your login information for future logins to the website or services.

Session cookies

A session cookie allows the website or services to link your actions during a browser session. We use session cookies to enable certain features of the website or services, to better understand how you interact with the website or services and to monitor aggregate usage by users and web traffic routing on the website. Unlike persistent cookies, session cookies are deleted from your computer when you log off from the website or services and then close your browser.

Which cookies we use and why

We use cookies to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customise your browsing experience and for analytics and metrics about our visitors to our website.

You can decide whether or not to accept the use of cookies on our website by enabling or disabling cookies in your browser settings. If you do not accept cookies, however, you may not be able to use the whole of the website or all functionality of the services.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org. To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.

Uses made of your information

We use information held about you in the following ways.

Information you give to us

We use this information:

To carry out our obligations arising from any contracts entered into between you and us;
To provide you with the information, products and services that you request from us;
To provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you. If you are an existing customer, we will contact you by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale or negotiations of a sale to you. Where we permit selected third parties to use your data, we (or they) will contact you by electronic means only if you have consented to this by ticking the relevant box situated on the form on which we collect your data;
To notify you about changes to our website or services;
To ensure that content from our website or services is presented in the most effective manner for you and for your computer.

Information we collect about you

We will use this information:

To administer our website and services and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
To inform you about scheduled service downtimes and new features;
To improve our website and services to ensure that content is presented in the most effective manner for you and your computer;
To allow you to participate in interactive features of our services, when you choose to do so;

As part of our efforts to keep our website and services safe and secure;

To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
To make suggestions and recommendations to you and other users of our website and services about our goods or services that may interest you or them.

Information we receive from other sources

We may combine this information with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).

We will not sell or rent your personal data to anyone.

Disclosure of your information

Information we share with third parties

We may share your information with selected third parties:

For the performance of any contract we enter into with them or you to provide services such as IT and system administration, email communications, hosting services, backup services, credit card processing, research, development, marketing and customer support, including: Mailchimp – to deliver emails to you, Zendesk - who operates our online community, Squarespace - to host our website and your information on their servers.
Professional advisors acting as service providers to us in relation to the website or services - including lawyers, bankers, auditors, and insurers.
Other companies from within our corporate group who provide related services.
Our business partners, sub-contractors, payment and delivery services, advertising networks, analytics providers, search information providers and credit reference agencies in the performance of any contract we enter into with them or you.
Credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you.
We may share anonymous and aggregated usage data and reports in the normal course of operating our business; for example, we may share information with other website or service users, our customers or publicly to show trends or benchmark the general use of our websites and services.

Information we disclose to third parties

We may disclose your personal data to third parties:

In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
If we or a member of our group of companies or substantially all of their assets are acquired by a third party, in which case personal data held by them about their customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions or any other agreements; or to protect our rights, property, safety, our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Storage of your information

Information that we collect about you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA") or the UK. It may also be processed by staff operating outside the EEA or the UK who work for us or for one of our suppliers or partners. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your data, you agree to this transfer, storing or processing outside of the EEA or the UK.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice. In particular, this means that your personal data will only be transferred to a country that provides an adequate level of protection (for example, where the European Commission has determined that a country provides an adequate level of protection) or where the recipient is bound by standard contractual clauses according to conditions provided by the European Commission (“Standard Contractual Clauses”).

Our website and services are accessible via the internet and may potentially be accessed by anyone around the world. Other users may access the website or services from outside the EEA or the UK. This means that where you chose to post your data on our website or within the services, it could be accessed from anywhere around the world and therefore a transfer of your data outside of the EEA or the UK may be deemed to have occurred. You consent to such transfer of your data for and by way of this purpose.

Protection of your information

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your information, we cannot guarantee the security of your information transmitted to our website. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Links to other websites

Our website may contain hyperlinks to other websites not operated by us. This Privacy Notice does not cover the links within this website or the services linking to other websites. We encourage you to read the privacy statements on any other websites you visit before providing any information about yourself.

Your rights

You have the right under Data Protection Law, free of charge to request:

Access to your personal data.
Rectification of your personal data.
A restriction on the processing of your personal data.
Object to the processing of your personal data.
A transfer of your personal data (data portability) in a structured, machine readable and commonly used format.
Withdraw your consent to us processing your personal data, at any time.

You can make a request in relation to any of the above rights by contacting us as set out at the end of this Privacy Notice. We will respond to such queries within 30 days and deal with requests we receive from you, in accordance with the provisions of Data Protection Law.

Marketing Communications

We will send you marketing emails if you “opt in” to receive marketing emails when registering on our Site, or if you have enquired about, or purchased any of our goods or services.

If you change your mind about being sent marketing emails you can opt out by clicking the “unsubscribe” link at the bottom of any marketing email. Once you do this, you will no longer receive any marketing emails from us. We will continue to communicate with you regarding your service billing and support via email.

We send push notifications from time to time in order to update you about any service updates, events and promotions we may be running.

Data Retention

After you have closed your account or ceased using the website for a period of at least 60 days, we usually delete personal data, however we may retain personal data where reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, maintain security, prevent fraud and abuse, resolve disputes, enforce our Terms and Conditions, Terms or Use, or fulfil your request to “unsubscribe” from further messages from us.

We will retain de-personalised information after your account has been closed.

Please note: After you have closed your account or deleted information from your account, any information you have shared with others will remain visible. We do not control data that other users may have copied from our website or services. Your profile may continue to be displayed in the services of others (e.g. search engine results) until they refresh their cache.

Minors

This website is not intended for and shall not be used by anyone under the age of 18.

Sub-processor List

The Company uses the following sub-processors to assist in providing the Services.

View the Sub-processor List

Complaints or queries

If you have any complaints about our use of your personal data please contact us as set out at the end of this Privacy Policy or contact your local data protection supervisory authority.

Changes to this Privacy Notice

This Privacy Policy was last updated on the 1st of January 2021 and replaces any other Privacy Policy previously applicable from this date.

How to contact us

Questions, comments and requests regarding this Privacy Notice are welcomed and should be addressed to:

dpo@donorfy.com
Donorfy Limited, The Stanley Building, 7 Pancras Square, London, England, N1C 4AG, England

Effective to 17th January 2021

(for reference only - see above for current version).

We, Donorfy Limited, are committed to protecting and respecting your privacy.

This Privacy Notice (formerly called the Privacy Policy) together with our Terms and Conditions or Terms of Use (as applicable) sets out the basis on which any personal data we collect from you, or you provide to us, will be processed by us. Pleased read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting donorfy.com you are accepting and consenting to the practices described in this Privacy Notice.

General Data Protection Regulation (GDPR) 2018

For the purpose of the GDPR 2018 or any subsequent amendment or replacement or supplementary legislation (“Data Protection Law”), the data controller is Donorfy Limited, The Stanley Building, 7 Pancras Square, London, England, N1C 4AG, England.

Legal Basis for Processing

We collect and use the personal data described below in order to provide you with access to our website and services in a reliable and secure manner. We also collect and use personal data for our legitimate business needs and to fulfil our contractual obligations to you. To the extent we process your personal data for any other purposes, we ask for your consent in advance or require that our partners obtain such consent.

Information we may collect from you

This Privacy Notice tells you how and why we collect your personal information.

This Privacy Notice applies to information we collect about:

visitors to our websites
people who use our services
people who subscribe to our newsletter

We may collect and process the following information about you.

Information you give us

Information we collect about you

Each time you visit our website or use our services we may automatically collect the following information.

Technical information, including standard internet log information such as Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.

Details of your behaviour patterns in order to measure the number of visitors to our website, and to improve our website such as your URL, clickstream to, through and from our website (including date and time), length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods to browse away from the page.

Information from other online accounts to which you have given us permission to collect data from within your settings or the privacy policies of these other online services. For example, this can be via social media or by choosing to send us your location data when accessing our website from your smartphone; or it can be from the integrations and connections that you choose to install when using the services.

We collect this information in a way which does not identify you. We do not draw up user profiles or link such data to personally identifiable information.

Information we receive from other sources

We may receive information about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected that data that it may be shared internally and combined with data collected on this website.

We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.

Use of cookies

What are cookies?

Persistent cookies

Session cookies

Which cookies we use and why

We use the following cookies on our website for the purposes set out below.

Google Analytics to collect information about how visitors use our website or services. The data collected includes how many times a visitor uses our website, the site they came from and their physical location. We use the analytics information to improve our website and services and to enhance the experience for our visitors.

Banners to control the appearance of the cookies information banner. This cookie is set on arrival to our website by default. It expires after a set time and is not set again unless a user changes their cookie settings.

Preferences to remember a user’s choice about cookies on our website and within the services. This cookie is, by default, set on arrival to our website.

Survey to prevent us asking individuals who have either already completed our survey, or indicated they do not wish to complete it, on subsequent occasions.

Notification for our online registration form used for you subscribing to our newsletter. This cookie is set only for individuals who complete the form.

YouTube for embedding videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally identifiable cookie information for playbacks of embedded videos using the privacy enhanced mode.

Facebook – for tracking the conversion and subsequent clicks in our website from ads placed on Facebook.

You can decide whether or not to accept the use of cookies on our website by enabling or disabling cookies in your browser settings. If you do not accept cookies, however, you may not be able to use the whole of the website or all functionality of the services.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org. To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.

Uses made of your information

We use information held about you in the following ways.

Information you give to us

We use this information:
· To carry out our obligations arising from any contracts entered into between you and us;
· To provide you with the information, products and services that you request from us;
· To provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about;
· To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you. If you are an existing customer, we will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale or negotiations of a sale to you. If you are a new customer, and where we permit selected third parties to use your data, we (or they) will contact you by electronic means only if you have consented to this by ticking the relevant box situated on the form on which we collect your data;
· To notify you about changes to our website or services;
· To ensure that content from our website or services is presented in the most effective manner for you and for your computer.

Information we collect about you

We will use this information:
· To administer our website and services and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
· To inform you about scheduled service downtimes and new features;
· To improve our website and services to ensure that content is presented in the most effective manner for you and your computer;
· To allow you to participate in interactive features of our services, when you choose to do so;
· As part of our efforts to keep our website and services safe and secure;
· To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
· To make suggestions and recommendations to you and other users of our website and services about our goods or services that may interest you or them.

Information we receive from other sources

Disclosure of your information

Information we share with third parties

We may share your information with selected third parties:

· Who deliver part of the services we provide to you such as Mailchimp – to deliver emails to you, Zendesk - who operates our online community, Squarespace - to host our website and your information on their servers.
· Other companies from within our corporate group who provide related services.
· Our business partners, sub-contractors, payment and delivery services, advertising networks, analytics providers, search information providers and credit reference agencies in the performance of any contract we enter into with them or you.

· Credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you.

Information we disclose to third parties

We may disclose your personal data to third parties:

In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
If we or a member of our group of companies or substantially all of their assets are acquired by a third party, in which case personal data held by them about their customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions or any other agreements; or to protect our rights, property, safety, our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Storage of your information

Our services are global and your information (including personal data) may be stored and processed in any country where we have operations or where we engage service providers, and we may transfer your information to countries outside of your country of residence, which may have data protection rules that are different from those of your country of residence.

Information that we collect about you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers or partners. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your data, you agree to this transfer, storing or processing.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice. In particular, this means that your personal data will only be transferred to a country that provides an adequate level of protection (for example, where the European Commission has determined that a country provides an adequate level of protection) or where the recipient is bound by standard contractual clauses according to conditions provided by the European Commission (“EU Model Clauses”).

Our website and services are accessible via the internet and may potentially be accessed by anyone around the world. Other users may access the website or services from outside the EEA. This means that where you chose to post your data on our website or within the services, it could be accessed from anywhere around the world and therefore a transfer of your data outside of the EEA may be deemed to have occurred. You consent to such transfer of your data for and by way of this purpose.

Protection of your information

All information you provide to us is stored on our secure servers. Any credit card information or payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share this password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your information, we cannot guarantee the security of your information transmitted to our website. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Links to other websites

Your rights

You have the right under Data Protection Law, free of charge to request:

Access to your personal data.
Rectification of your personal data.
A restriction on the processing of your personal data.
Object to the processing of your personal data.
A transfer of your personal data (data portability).

Consent

You have the right to withdraw your consent to us processing your personal data, at any time, by writing to us at the contact address given at the end of this Privacy Notice.

Where we process your personal data for marketing purposes, we will inform you and obtain your opt in consent (before collecting your personal data) if we intend to use your personal data for such purposes or if we intend to disclose your information to any third party for such purposes. If you change your mind about being contacted in the future, please opt out by clicking the “unsubscribe” link at the bottom of any email. Once you do this, you will no longer receive any marketing emails from us. We will continue to communicate with you regarding your service billing and support via email.

We send push notifications from time to time in order to update you about any service updates, events and promotions we may be running.

Data Retention

We retain personal data for as long as necessary for the relevant activity for which it was provided or collected. This will be for as long as we provide access to the website or services to you, your account with us remains open or any period set out in any relevant contract you have with us. However, we may keep some data after your account is closed or you cease using the website or services for the purposes set out below.

After you have closed your account or ceased using the website for a period of at least 60 days, we usually delete personal data, however we may retain personal data where reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, maintain security, prevent fraud and abuse, resolve disputes, enforce our Terms and Conditions, Terms or Use, or fulfil your request to “unsubscribe” from further messages from us.

We will retain de-personalised information after your account has been closed.

Please note: After you have closed your account or deleted information from your account, any information you have shared with others will remain visible. We do not control data that other users may have copied from our website or services. Your profile may continue to be displayed in the services of others (e.g. search engine results) until they refresh their cache.

Minors

This website is not intended for and shall not be used by anyone under the age of 18.

Complaints or queries

Our intention is to meet the highest standards when collecting and using personal data. For this reason, we take any complaints we receive very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate.

If you have any complaints about our use of your personal data please contact us as set out at the end of this Privacy Policy or contact our supervisory authority in the UK:
The Information Commissioner’s Office at, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England (“ICO”).

Changes to this Privacy Notice

Any changes we may make to our Privacy Notice in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Notice.

This Privacy Policy was last updated on the 25th of May 2018 and replaces any other Privacy Policy previously applicable from this date.

How to contact us

Questions, comments and requests regarding this Privacy Notice are welcomed and should be addressed to:

letstalk@donorfy.com or write to us at: Donorfy Limited, The Stanley Building, 7 Pancras Square, London, England, N1C 4AG, England.