Contact Details to the Controller

Name of the company: Give Brite LTD
Country of operation: United Kingdom
E-mail address: support@givebrite.com
Postal address: 10 Abbey Hills Road, Greater Manchester, OL8 2BS

Contact our data protection officer at;

E-mail address to customer support: support@givebrite.com

What is personal data?

"Personal data" is any information relating to an identifiable or identified person (you as a user). An identifiable person is someone who can be identified, directly or indirectly, for example by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.

What data do we collect & why?

We don’t receive any personal data about you other than what you provide us, either by creating an account, using the Services, from Facebook or Google when you agree to connect your social media accounts to GiveBrite, or by signing up directly to GiveBrite via givebrite.com

We collect the following to allow you access to the full version of givebrite.com

• Email
• First Name
• Last Name
• Address is only collected in special cases. Bare in mind this is optional, and you have the full right not to provide or part with your address, the charity will process your data directly to claim gift aid which you (user-donor) have the full control to opt In or out. If in any instance you change your mind, then you can contact the charity directly from the campaign page or contact support@givebrite.com

Personal Data Explained

Your personal data may only be processed by us with your given consent, when it is necessary for the performance of a contract to which you are a party, or when it is necessary for our compliance with a legal obligation. The processing of the personal data, the specific purposes for the processing, the legal basis for the processing, and for how long we store your personal data, is described below.

We collect and process your name for the purpose of preventing fraud and money laundering, as well as making it possible for donors to know that any particular campaign is genuine. Your name is collected by us in order for us to perform on a contract to which you are a party, and because it is necessary for us to perform according to a legal obligation (anti-money laundering legislation).

Your email address is collected and processed by us and shared with the individuals who own the fundraising campaigns to which you contribute. Your email address is collected by us in order for us to perform on a contract to which you are a party.

Your address is collected by us only when tax relief (Gift Aid UK Only) is sought for a donation. The address is required for a campaign owner to submit to the UK government body Her Majesty’s Revenue and Customs department (HMRC). Your address is in such case collected by us in order for us to perform on a contract to which you are a party.

All of the above personal data is stored securely until you actively close your account. We send you reminders to close your account via email every twelve (12) months if you have become inactive.

We use Mixpanel in order to improve your user experience and the overall quality of our service. This is done by tracking and analyzing the traffic and general behavior on our website.

What happens if you don’t want us to have your data?

You are not required to provide personal data to us. Note, however, that your failure to do so may affect our ability to provide the Services you request.

• Fundraise
• Create campaigns
• Collect funds

On what legal bases do we process your data?

We process your personal data on a variety of legal bases depending on the use. For example, we will only process your personal data to send you direct marketing if we have your consent and you can withdraw this consent at any time by Clicking here or email us at support@givebrite.com

How do charity partners use my data?

We will share your personal data with those charities you donate to. When we pass your information to charities, they also become a controller with respect to such personal data. This means that they are responsible for their own compliance with data protection laws when they use your personal data, and all such use is subject to the charity’s own privacy notice. When charities receive your details, they are required to send you their privacy notice. GiveBrite is not responsible for charities’ use of your personal data or the charities’ compliance with applicable laws.

When you donate to or create a fundraising page, GiveBrite will ask whether or not you consent to receiving email from the charity about the impact of your donation and other ways to support them including future events, campaigns and appeals. If you opt in to receiving such emails, we will pass your consent preference on to the charity, if it is subscribed to receive such reporting from us. Note that the charity will need to receive your personal data to send you emails you consent to receive.

If you want to change your preferences for a charity to use your data (to contact you or otherwise), please contact the charity directly.

If contacting a charity regarding your preference in how you want to be contacted or not, you find it is not being resolved then contact us directly so we can help resolve the issue at support@givebrite.com

Note: You must contact the charity first.

Summary of your rights towards us:

You as a user have the possibility to claim several rights towards us. Such rights are listed here and thereafter described in detail below. You find our contact details at the top of this Privacy Notice.

Right to be forgotten

Right to withdraw con

Right to access

Right to rectification

Right to restriction of processing

Right to data portability

Right to object

Right to lodge a complaint with a supervisory authority

Right to be forgotten

You have the right to request that we delete any personal data that we process about you. We will delete the data as soon as possible, but at least within one month’s time. If the personal data is needed for fulfillment of our contractual duties towards you or to preserve it with legal ground, we will however not delete the information until the data is no longer needed. We will also, without your explicit demand, delete such personal data that we have collected but do not longer have a lawful right to process. We will inform you about this, if it would occur.

Right to withdraw consent

You have the right to withdraw your given consent at any time. If you do so, we will erase such personal data which is not subject to any other legal ground than your given consent. The erasure will be done as soon as possible. Please note that your withdrawal of consent does not oblige us to erase personal data which is processed based on a contractual relationship or any other legal ground

Right of access

You have, at any time, the right to receive confirmation from us as to whether personal data concerning you are being processed. You have also

1. The purposes of the processing
2. The categories of personal data concerned
3. The recipients or categories of recipients to whom personal data have been or will be disclosed
4. The envisaged period for which the personal data will be stored or the criteria used to determine that period
5. The existence of automated decision-making and profiling

Right to rectification

You have, at any time, the right to demand us to correct any inaccurate personal data within a month’s time. You have also the right to complete incomplete personal data, taking into account our purposes of the processing, by the means of providing a supplementary statement.

Right to restriction of processing

You have, instead of demanding us to delete any data, the right to demand us to restrict our processing of your personal data. This may be achieved if.

1. You have reason to believe that the accuracy of the personal data is not correct, and the restriction shall be in place during a period that allows us to verify the accuracy of the personal data
2. The processing is unlawful but you don’t want us to delete the personal data
3. We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims
4. You have objected to processing concerning profiling or automated decision-making, whereby a restriction shall be obtained during the period when we assess whether our legitimate ground for the processing override your legitimate ground.

Data portability

You have the right to receive the personal data concerning you that you have provided to us. The personal data is obtainable in a structured, commonly used and machine-readable format. You also have the right to transmit such personal data to another data controller if the personal data is collected based on your consent or if the processing of the personal data is carried out by automated means. If we deem it technically feasible, you have the right to us transmitting the personal data to another controller.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. This can be done when the personal data is processed as part of automated decision-making, including profiling, and direct marketing, if such processing would be carried out (see “Personal data that we process” above).

Right to lodge a complaint with a supervisory authority

You have, at any time, the right to lodge a complaint with a supervisory authority regarding our processing of your personal data. Regardless of where we carry out our business, even if it would not be in the member state which is your country of residence, you have the right to lodge your complaint to your national supervisory authority. Please follow to the link below to find the contact details to your national supervisory authority:

http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm

About this Privacy Policy

With regard to the General Data Protection Regulation (EU) 2016/679 (“GDPR”), we must disclose what personal data we collect and process about you, and for what purposes. In this Privacy Notice, you find all such information that we are obliged to inform you.

The Regulation in its entirety in your language, may be accessed by following this link:

http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG&toc=OJ:L:2016:119:TOC

Would you like to defend your rights, which are listed in this Privacy Notice, you may contact us using the contact information listed above.