GivingToHelp Privacy Policy

1. What we collect

Donors and ticket buyers: your name, email address, street address, birth date, Google/Facebook sign-in data and the amount and frequency of your donation or ticket purchase, any message you leave, and the details needed to issue your receipt.

Fundraisers: your name, email address, phone number, profile photo, and the content you put on your page.

Organisations: the organisation's name, legal and charity registration details, donee status with Inland Revenue, bank details, bank statement and electronic signature and the name and contact details of the people who manage the account.

Payments: all payments, including recurring donations, are processed by our payment partner, AttractPay. We do not receive or store full card numbers or bank details. AttractPay tells us whether a payment succeeded, its amount, date and payment method type.

Automatically: your IP address, device and browser type, pages visited, and the date and time of visits, collected through cookies and similar technologies (see section 7).

We collect only what we need for the purposes in section 3. If you don't provide it, we may not be able to process your donation, publish your page or issue a receipt.

2. Information we receive from other people

Sometimes we receive information about you from someone other than you:

• a Fundraiser or Organisation may name or describe you as a Beneficiary on a page;
• an Organisation may add you as a representative on its account;
• AttractPay sends us payment confirmations and, where relevant, the outcome of its identity and anti-money-laundering checks on an Organisation.

We use this information only for the purposes in section 3. As Information Privacy Principle 3A requires, we take reasonable steps to let you know when we collect your information this way, unless an exception applies. Fundraisers and Organisations must have a Beneficiary's consent before publishing their personal information.

3. How we use your information

• to process donations, recurring donations and ticket purchases, and send confirmations and receipts;
• to publish fundraising and event pages;
• to approve Organisations and check that pages are genuine;
• to prevent fraud and misuse of the platform;
• to answer questions and resolve complaints;
• to improve the website and understand how it is used;
• to send you news and appeals, only if you have opted in. Every marketing email includes an unsubscribe link, as the Unsolicited Electronic Messages Act 2007 requires.

4. What is shown publicly

Fundraising pages may display information about donations, including the donor's name, donation amount and any message submitted with the donation, according to the options available at the time of giving. Please do not include sensitive personal information in a public message.

Information provided to GivingToHelp for payment processing, administration, security or legal purposes may be handled separately from information displayed publicly. The Organisation receiving your donation may also receive relevant transaction information.

5. Who we share your information with

• The Organisation you support, so it can thank you, keep records and meet its legal obligations.
• AttractPay, our payment partner, to process payments and pay out funds. AttractPay carries out the identity and anti-money-laundering checks required by the Anti-Money Laundering and Countering Financing of Terrorism Act 2009, under its own privacy policy.
• Service providers that host and run our website for us, who may use your information only to provide that service.
• Authorities, where the law requires or allows it, for example to prevent fraud or comply with a court order.
• A successor, if GivingToHelp is restructured or transferred, under the same privacy protections.

We do not sell personal information, and we do not share it with advertisers.

6. Where information is stored and how we protect it

We use third-party technology providers to host and operate GivingToHelp and to help protect the personal information we handle. These providers may store or process information in New Zealand or overseas, depending on the services used and their configurations.

We take reasonable steps to protect personal information against loss, unauthorised access, use, modification or disclosure. Our safeguards may include encrypted connections, access controls and other security measures appropriate to the information and the risks involved.

No method of storage or transmission is completely secure. If a privacy breach is notifiable under the Privacy Act 2020, we will notify the Privacy Commissioner and affected individuals as soon as practicable, as required by law.

7. Cookies

We use essential cookies to keep you signed in and keep the site secure; the site doesn't work without them. With your agreement, we also use analytics cookies to understand how the site is used. You can decline analytics cookies and still use the site. Embedded content, such as videos, may set its own cookies, which are governed by that provider's policy.

8. How long we keep information

• Donation and receipt records: 7 years, to meet tax record-keeping requirements.
• Accounts and fundraising pages: while your account is open, and 12 months after it closes.
• Marketing preferences: until you unsubscribe.

After that, we securely delete or anonymise the information.

9. Your rights

You can request access to personal information we hold about you and ask us to correct information that you believe is inaccurate. We will respond to your request within the timeframe required by the Privacy Act 2020. If an extension is permitted and necessary, we will notify you as required by law.

You may also request account closure or ask us to stop sending you marketing communications. We may need to retain certain information where required or permitted by law, or where necessary to resolve disputes, maintain required records or protect the platform.

10. Children

You must be 18 or older to create an account, fundraising page or event. People under 18 may donate or buy tickets only with a parent's or guardian's permission. Fundraisers and Organisations need a parent's or guardian's consent before featuring anyone under 18.

11. Changes to this policy

We will post any update on this page with a new "last updated" date, and email account holders about significant changes.

12. Contact and complaints

Please send privacy questions, requests and complaints to our Privacy Officer at info@givingtohelp.org or 18 Hadfield Avenue, Waterview, Auckland 1026, New Zealand.

If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz or on 0800 803 909.