Privacy Policy
This Privacy Policy explains how we collect, share and use your personal data, and how we protect your right to privacy. We ask that you read and accept the terms of this Privacy Policy before signing up to our service.
Overview
Charitable organisations of all sizes use our technology products and services to accept donations via online, in person points of donation, and peer-to-peer, to establish and manage fundraising campaigns, organise volunteers and supporters, to track and reconcile donation revenues, and administer these fundraising activities.
Give A Little (we/our) is a trading name of Caution Your Blast Ltd., (registered in England under company number 07203051). Read the Legal Notice and our commitment to Trust, Security, and Compliance for more information.
To make it easier for you to review the parts of this Privacy Policy that apply to you, we have divided up the information into sections that are specifically applicable to all Fundraisers and Group Licensees (Section 1), Supporters (Section 2), and Donors (Section 3). The rest of this policy is applicable to everyone.
If we make material changes to this Privacy Policy we will email you or post a notification on our website or app.
How we collect and use personal data
We only gather and hold the minimum information from you that we need in order to provide our services legally and securely.
Most of the personal data that we collect and use is provided directly by you. Either when you share your information via our website when signing up (if you represent a Fundraiser), when requesting optional service such as a receipt (if you are a donor), or when managing your personal profile details inside your online account. If you have contacted us directly via email we will also have any associated personal information which you have chosen to share.
When you access or interact with our website or mobile apps, we automatically collect technical network and device information. This includes your IP (Internet Protocol) address, User-Agent string (details regarding your device type, operating system, and browser version), access dates and times, and system interaction logs. We process this personal data based on our legitimate interests to secure our platform, protect against unauthorised access or fraudulent transactions, and maintain technical performance.
Your email address is used to identify you and constitutes a single person record. Hence if you share your email address with another user then your records and personal data will be merged. If you choose to update your email address via your account, we will issue a time-sensitive verification email to your new address to confirm the request before updating your account record.
Your rights
You may, at any moment, exercise your rights under data protection law. These rights include your right to access the data which we hold on you, the right to rectification where the information we hold on you is incorrect. You can ask us to restrict or, erase your personal information. You may also object (at any time and for free), to the processing of your personal data for marketing or object to processing based on legitimate interests. You have the right to withdraw your consent to any further processing or retention of your personal data.
If you have a Give A Little donor account, you can directly access, review, and rectify your profile details (including your name, address, phone number, and email address) at any time by logging into your donor portal. You can also review which Fundraisers your data is shared with through your online donation history.
Please contact us on hello@givealittle.co. if you would like to exercise any of these rights directly through our support team.
If you are unhappy with how we have dealt with your request you have the right to lodge a complaint with the Information Commissioner's Office (the UK Data Protection Authority) here or by visiting www.ico.org.uk.
Data retention
You have the right to request the deletion of any personal data which we hold and if we are legally able to, we will delete data in accordance with your wishes.
We are required by law to retain records of the payment information we have collected for a period of at least five years after you have closed your account. We are also obliged by HM Revenue and Customs to hold some personal data for 7 years. After this time we reserve the right to permanently erase your data.
Data Security
We take our obligation to keep your data safe from loss, misuse, unauthorised access, disclosure, alteration, and destruction very seriously. We have in place policies and processes along with a series of physical and technological controls to keep your data safe. All donor data and fundraiser user details are encrypted at rest and in transit. This applies whether that data is held by Give A Little or by a trusted third party. Where data is held by Give A Little, it is stored in the United Kingdom and EEA only. Where data is held by a trusted third party, their privacy policy applies. Links to all applicable third party privacy policies are set out in this information.
Security logs containing technical indicators (including IP addresses and User-Agent details) are stored in encrypted form and retained strictly for operational security and fraud prevention purposes. These technical logs are routinely erased or anonymised after 90 days, unless a longer retention period is necessary to investigate a confirmed security incident, prevent fraud, or satisfy legal audit requirements.
Our accounts require a username and password to log in. You must keep your username and password secure, and never disclose it to a third party. We provide Fundraisers with Multi-factor authentication and recommend that all account administrators implement this level of security.
Section 1 – What Fundraisers/Group Licensees need to know about how personal data is used by the Give A Little Service
By "Fundraiser", we mean a charitable organisation, registered charity, association, educational institution, church, mosque, or other organisation which enables donors to give using the Give A Little service and associated technology products.
By "Group Licensee", we mean the overarching organisation established as a Group on the Give A Little service and under which a group of group member Fundraisers are linked or associated.
Section 2 – What Supporters need to know about how personal data is used by the Give A Little Service
By “Supporter” we mean a public user of the Give A Little Champion app.
We will store and use your personal information, specifically your email address, solely for the purpose of making the app available to you, for securing your access to the app, and to support you if you contact us.
Section 3 – What Donors need to know about how personal data is used by the Give A Little Service
We take the responsibility of managing your personal data very seriously. Please note as set out above in the 'How we collect and use personal data section', your email address is used to identify you and constitutes a single donor record. Hence you must not share your email address with another donor. If you do then your donation records and personal data will be merged.
The information we collect is limited to your name (first name and surname), email address, contact phone number, full street address (address line 1, address line 2, town/city, county/region, postcode, country). This personal data is voluntary and if preferred your donations can be made solely anonymously. Where it is required is for optional situations as outlined here:
- Where you have requested that we send you a receipt for your donation:If you request a receipt for your donation we will require your email address and send you a receipt via email which includes details of your payment including the time and date, amount, currency, and the last four digits of your card number. Receipt emails will also contain a link allowing you to manage your online donor record.
- Recurring monthly donation:Where you choose to make a monthly donation to a charitable organisation (Fundraiser) we will require your email address and we'll send you a receipt email which also includes instructions on how to stop the donation.
- To notify you of payment failures or security updates:We may send you notifications, such as confirming recurring payment updates or email address change verification requests.
- If you have chosen to enable the fundraiser to reclaim Gift Aid (UK):If you've chosen to allow the fundraiser to claim Gift Aid, we'll ask you to provide your name and address for your declaration, and we'll share these details along with the donation amounts, times and dates with the Fundraiser so that they can claim the Gift Aid.
- Donor Records:If you voluntarily populate your donor profile details (name, postal address, and contact phone number) via your donor account, these details will be made available to the applicable Fundraiser(s) solely to enable them to maintain formal donor records and fulfil their obligations to you.
How we share personal information
In order to provide our services, we work with trusted third parties to process payments, to communicate with you efficiently and to keep your data safe. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely within the EEA and will only retain it for the period we instruct.
We use Amazon Web Services (Amazon Web Services data privacy faq) for data storage. All data stored using Amazon Web Services is stored either in the European Economic Area or the UK. Data is encrypted both in transit and at rest.
When you send us an email, your email address and the email is stored by Google, our mailbox tool. Google’s privacy policy is here.
We use Help Scout as our communications and customer support tool so that we can deal with your emails efficiently. Help Scout’s privacy policy is here.
We also use Mailjet, an email service provider for donor receipts and for service notifications to fundraisers. You can access their privacy policy using the following link (Mailjet privacy policy).
We will not share your information with any third parties for the purposes of direct marketing.
In some circumstances we are legally obliged to share information, for example under a court order.
Privacy Information For Fundraisers When Processing Donor Payment Data
When you use Give A Little to process donor payments, you are the data controller, and we are your data processor managing data on your behalf, under your instruction. Please see our Data Processing Addendum (“DPA") that explains both our rights and obligations.
How we work with Payment Service Providers
When you create an account with your payment service provider you’ll need to consent to their privacy policy and agree to them sharing your account information with Give A Little.
In order to provide you with fully integrated reporting, when a donation is made we receive a payment summary. The payment summary which we receive consists of a payment success or failure notice, the amount, currency, a unique transaction code, a time and date stamp, a geolocation (latitude and longitude) if the payment was made via a card machine we also receive an identifier of the fundraisers mobile phone or tablet.
We do not ever receive personal information and in particular we do not have access to any usable card or bank account information.
By law payment service providers verify fundraisers. Details of their search and the information used is not shared with Give A Little.
Gift Aid (UK and Jersey)
Where you offer Donors the possibility of Gift Aid, we process additional data. The data we process will include the Donor's name, first line of address and postcode, email address and confirmation that the relevant individual is a UK or Jersey taxpayer.
Gift Aid data can be accessed via our administration platform.
Policy addendums
Please see the following addendums extending this policy: