GlobalGiving

GlobalGiving is a crowdfunding and donations platform for non-profits.

4.5/10

How we calculate ratings →

Handling

Does the policy allow personally-targeted or behavioral marketing? Yes, but you may opt-out

4/10

Does the service allow you to permanently delete your personal data? Yes, by contacting someone

3/5

Does the service allow third-party access to private personal data? Yes

0/10

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Score

Yes

The policy allows sharing personal data with third parties (not just critical service providers), and does not explicitly list the third parties.

Yes, all parties specified (including non-critical service providers such as advertisers)

30%

Yes, not all parties specified (but only to critical service providers)

70%

Yes, all parties specified (only to critical service providers)

80%

100%

Citation

We will share your personal data with our agents, representatives, service providers and contractors in order to process your donations, offer you services in connection with our Website, communicate news and information about GlobalGiving, provide customer service, mail gift cards, notify the project(s) you elect to support about your donation, claiming Gift Aid from UK government, marketing and advertising, and complete financial transactions. These service providers are authorized to use your personal data only to the extent necessary to serve these purposes, or as otherwise authorized by this policy. Except for the purposes outlined herein, we will not trade, share, or sell a donor's personal data with anyone else.

Unless you ask us not to, we share your personal data under the following circumstances:

When you donate to a project, we share your name and contact information and the amount of your donation with the project leader and organization running that project.
When you donate to a fundraiser, we share your name and the date and amount of your donation with the person who created the fundraiser.
When you make a donation that is part of a campaign sponsored by your employer, and/or when your employer is being asked to match your donation, we will share your name, email address and the amount of you donation with your employer.
When you decide to post a comment or share why you supported a cause, we will share and attribute your comment on our site publicly and with the cause you have supported;
Each time you make a donation, however, we will give you the opportunity to tell us not to share your personal data in the ways described above (except in the case of employer matched donations) by selecting to be "anonymous" during the checkout process.

If GlobalGiving merges with, or becomes an affiliate of another organization, we will ensure the confidentiality of any personal data involved in such transactions and provide notice before personal data is transferred and becomes subject to a different privacy policy.

We may also be required to disclose your personal data in the following circumstances: (1) we need to respond to a subpoena, court order or legal process, including to meet national security or law enforcement requirements; (2) an emergency situation requires disclosure before your permission can be obtained (e.g., situations involving potential threats to personal safety), or; (3) we determine that disclosure is needed to protect our rights or property, or the rights or property of another person, in which case we will implement appropriate safeguards to ensure that your personal data continues to be protected.

We may share aggregated demographic and statistical information with our other partners. This is not linked to any personal data that can identify any individual person.

We may partner with third-party advertising networks and exchanges to manage and serve our advertising on other sites and may share personal information of visitors with them for this purpose. We and our third-party partners may use cookies and other tracking technologies, such as pixels and web beacons, to gather information about your activities on our Websites and other sites in order to provide you with targeted advertising based on your browsing activities and interests. For more information about cookies and other tracking technologies, please see our Cookie Policy.

When does the policy allow law enforcement access to personal data? Only when required by a court order or subpoena

4/5

Score

Always

This includes cases in which law enforcement either runs the service or has a known backdoor into (or relationship with) the service.

Not specified

When reasonably requested

60%

Only when required by a court order or subpoena

80%

N/A (no personal data to share)

The service would have no personal data to share with law enforcement.

100%

Never (special legal jurisdiction)

The service operates in a jurisdiction in which sharing data with law enforcement is never required.

100%

Citation

Transparency

Does the policy outline the service's general security practices? Somewhat

1/3

Score

Somewhat

The policy provides only a very vague overview of its security practices.

30%

Yes

60%

Yes, including audits

"Reviews," "monitoring," etc. also count as audits.

80%

Yes, including independent audits

Independent "reviews," "monitoring," etc. also count as independent audits.

100%

N/A

The service doesn't collect any personal information.

100%

Citation

We also collect (but do not retain) credit card numbers which are processed by a third-party payment vendor subject to the Payment Card Industry Data Security Standards.

[…]

GlobalGiving understands the importance of keeping your information secure and confidential. We take reasonable and appropriate measures to protect personal data from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of the personal data.

Your data will be stored on servers of our hosting service providers in the United States (Amazon Web Services, which is certified to the Privacy Shield). We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and US and EEA data protection legislation.

Is the policy's history made available? Only the date it was last modified

3/5

Does the policy require users to be notified in case of a data breach? Yes, eventually

5/7

Will affected users be notified when the policy is meaningfully changed? Yes

5/5

Collection

Does the service collect personal data from third parties? Yes

0/10

This includes the use of data brokers and independent verification authorities (such as background check providers).

Score

Yes

Yes, but for critical data only

For example, a blog providing user avatars or a bank conducting identity verification would count.

70%

100%

Citation

We also collect (but do not retain) credit card numbers which are processed by a third-party payment vendor subject to the Payment Card Industry Data Security Standards.

[…]

We use several tools to collect information about use of this Website. These tools collect information such as how often you visit this Website, what pages you visit when you do so, what elements you interact with, what other sites you used prior to coming to this Website, or 3rd-party audience data (such as age, gender and interests). We use the information we get from these tools to improve our Website, for website analysis and statistics and respond to service requests you make.

Is it clear why the service collects the personal data that it does? Mostly

7/10

Score

Somewhat

30%

Mostly

70%

Yes

100%

N/A

The service doesn't collect any personal information.

100%

Citation

We collect information from you when you visit and take actions on our website. We use this information to provide the services you've requested. We use cookies (such as Google Analytics) to provide a better experience and improve our website and web beacons and similar technologies to track usage patterns and conduct marketing.

[…]

GlobalGiving uses the personal data that you provide or we obtain, and the technical information logged by our servers to process your donations, to:

Process your donations, contact you regarding any questions related to your donation, mail gift cards related to your donation (if applicable), and ensure that Gift Aid can be claimed (if you are eligible). Use of this data is necessary for the performance of the contract between you and us in connection with your donation. If you do not provide the necessary data to us or our payment service provider, we will not be able to process your donation.
Comply with our legal obligations (for example, we are required to pass relevant data to the HMRC or other competent authority for Gift Aid claims, to review organizations to comply with OFAC regulations).
Send you updates on how your donation has been used, project appeals, newsletters, events, matching opportunities, information about GlobalGiving, and projects we think we think will be of interest to you. We will we will only send you this information by email if you consent to us doing so at the time you provide us with your personal data. You may opt out of receiving such emails by following the instructions contained in each email we send you. You can also unsubscribe from GlobalGiving communications by logging into your account and editing your preferences (general account settings can be accessed at https://www.globalgiving.org/dy/v2/user/account/; email preferences can be accessed at https://www.globalgiving.org/dy/v2/user/email/).

As necessary for certain legitimate interests, which include the following:
Notify your friends and family about your donation in their honor if you ask us to;
Using the technical information logged by our servers when you visit our Website (described above) to improve your experience on our Website (such as remembering your name, the items in your Cart, or your preferences) and preventing fraudulent activity;
If you ask us to delete your data or to be removed from our marketing lists and we are required to fulfil your request, we will keep basic data to identify you and prevent further unwanted processing;
We may anonymize the information that we collect and use such anonymized data for statistical and market research purposes, including sharing it with affiliates, business partners, and academic researchers;
Operate the Website, market and advertise our services, and operate our business; and
Compile aggregate statistics that allow us to understand how visitors or registered users use our Website, and to make improvements in design and content to better serve you.

Notes

See the PrivacySpy rating for Google.

Does the service allow the user to control whether personal data is collected or used for non-critical purposes? On an opt-out basis, but only for some non-critical data/uses

3/10

Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.

Score

On an opt-out basis, but only for some non-critical data/uses

30%

On an opt-out basis, for all non-critical data/uses

60%

On an opt-in basis

60%

N/A (no data used for non-critical purposes)

100%

Citation

Right to restrict processing: You may ask us to restrict or 'block' the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to us processing it (please read below for information on your right to object). We will tell you before we lift any restriction on processing. If we shared your personal data with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your personal data so you can contact them directly.

[…]

Right to object: You may ask us at any time to stop processing your personal data, and we will do so:

If we are relying on a legitimate interest (described in this Privacy Policy) to process your personal data -- unless we demonstrate compelling legitimate grounds for the processing; or
If we are processing your personal data for direct marketing.

Notes

The policy acknoledges rights granted by the European Union General Data Protection Regulation.

Does the policy list the personal data it collects? Yes, generally

7/10

Score

The policy does not claim to not collect personal data, but it also doesn't provide any meaningful insight into the types of personal data it collects.

Only summarily

The policy uses overly vague language to provide a summary of the types of collected personal data.

30%

Yes, generally

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

70%

Yes, exhaustively

All types of collected personal data are listed specifically

100%

N/A (no personal data is collected)

100%

Citation

Information Collected from Website Visitors

As a visitor to our Website, GlobalGiving's servers automatically record certain information, such as your Internet Protocol ("IP") address (so we understand which country you are connecting from when you visit the Website), your operating system, your browser ID, your browsing activity on our site, and other information about how you interacted with our Website, which can be used to identify you. We may collect this information also through the use of cookies or other tracking technologies (please read the "Cookies" section below for more information).

You may choose to interact with our Website by entering data into form fields and providing personal data to GlobalGiving, such as giving us your name, email address, and password when signing up for an account, filling out an application, making a donation, or creating an account to post comments on pages, projects, or our blog.

We only collect personal data that is reasonable or necessary to accomplish the purpose of your interaction with GlobalGiving as a visitor to our Website. You may choose not to provide this information but you need to understand that as a result, you may not be able to engage in certain activities on the Website. Any personal data provided by you as a visitor to the Website will be used only as described in this Privacy Policy.
Information Collected from Registered Users

We collect information when you create an account on our Website, edit your account information, donate to a project, apply to join GlobalGiving as an organization, or send or use a gift card, as described below.

Creating an Account:
When you create an account on our Website, we collect basic information about you - your name and email address. You can choose to provide additional information, such as your mailing address, a photo, favorite projects, etc., if you create a profile or create a GlobalGiving fundraiser.

Making a Donation:
When you make an online donation on globalgiving.org, we collect personal data such as your name, billing address, and email address, if you have not previously provided these details during a prior session. We collect information about your donation, including the project you are donating to and the amount of your donation. We also collect (but do not retain) credit card numbers which are processed by a third-party payment vendor subject to the Payment Card Industry Data Security Standards. If you use PayPal, Apple Pay, M-PESA/M-Changa, or a similar service, their use of your information is based on their terms of service and policies, not ours, so we encourage you to review those policies carefully.

We may also ask you to share a brief description about why you decided to donate to your selected cause(s) along with your name and general location. If you elect to provide this optional information, we will share your comments with the organization(s) you have donated to and may also publicly share this information to inspire other visitors to follow your generous example.

Gift Cards:
When you give a GlobalGiving Gift Card, we collect payment and contact information from you, as well as the name, email address, and mailing address of your recipient. You may create a personal message to the recipient, which is stored on our servers. Except in the limited circumstances described below, we do not read or use your personal messages.

If you are the recipient of a GlobalGiving Gift Card, we collect information from you when you redeem the Card to make a donation. Please note that we may share this information with the individual or entity who gave you the gift card.

Donations in Honor/Memory of Someone:
When you make a donation in honor or memory of a loved one, we collect payment and contact information about you, as well as the name, email address, and mailing address of the recipient. You may create a personal message to the recipient, which is stored on our servers. Except in the limited circumstances described below, we do not read or use your personal messages.

Contests, Promotions, and Surveys:
Periodically, GlobalGiving may invite you to participate in contests, take advantage of special promotions, and complete online surveys. If you have created a GlobalGiving account or profile, information we collect from these contests, promotions, and surveys may be associated with you personally.

Creating a Fundraiser:
When you create a fundraiser for a project on GlobalGiving, we collect information about projects you propose or wish to support. GlobalGiving notifies the project leader when a fundraiser is established for their project, but does not share your personal data with the project leader or the project. Remember, however, that anything you post on your fundraiser site will be seen by visitors to the Website.

If you donate to a fundraiser, then we will also share your name and the date and amount of your donation with the person who created the fundraiser unless you elect to be anonymous.
Information Obtained From Other Sources

We may obtain information about you from public records and from databases like OFAC when conducting due diligence on nonprofit organization or conducting fraud prevention checks on donations.

Last Updated

June 24, 2020

Sources

Source #1 ↗

Contributors

4Iufy