Privacy Policy

1. Introduction

Donivo (“the Platform”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). This Privacy Policy explains what information we collect, why we collect it, how it is used, and your rights as a data subject.

By using this Platform to make a donation, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

When you make a donation through Donivo, we may collect the following information:

• Name— optional, provided by you at the time of donation
• Email address— required for receipt delivery
• Donation details— amount, date, fund designation, and payment method
• IP address— recorded for consent audit records and geo-detection (determining your default currency)
• Browser user agent— recorded as part of the consent audit record

Payment card data: We do NOT collect or store credit card numbers, CVVs, or full card details. All payment data is processed securely by Paystack, a PCI-DSS compliant payment processor. Donivo never has access to your raw card information.

3. How We Use Your Information

Your information is used only for the following purposes:

• To process your donation securely
• To send you a donation receipt at the email address you provided
• To manage recurring giving subscriptions if you have set up a recurring gift
• To provide donation records to the organisation you are donating to
• To maintain consent audit records as required under POPIA

We will not use your information for marketing purposes without your explicit consent.

4. Who We Share Your Data With

We share your information only with the following parties, and only to the extent necessary:

• Paystack— our payment processor. Paystack processes all card and EFT transactions. By making a donation, you also agree to Paystack’s Privacy Policy.
• Resend— our email delivery provider. Your email address and name are passed to Resend solely to deliver your donation receipt.
• The organisation you are donating to— your name, email address, and donation details are shared with the receiving organisation so they can maintain their donation records.

We do not sell your information to third parties. We do not share your information with advertisers or data brokers.

5. Data Retention

Donation records are retained for 7 years for financial and tax compliance purposes, in line with South African legal requirements. After this period, records are anonymised or deleted.

You may request deletion of your personal data at any time by contacting us at [email protected]. Where deletion is not possible due to legal retention obligations, we will inform you and anonymise your data to the extent permitted.

6. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act, 2013, you have the following rights:

• Right to access— you may request a copy of the personal information we hold about you
• Right to correct— you may request that inaccurate or incomplete information be corrected
• Right to request deletion— you may request that your personal data be deleted, subject to legal retention obligations
• Right to object to processing— you may object to the processing of your personal information in certain circumstances
• Right to lodge a complaint— you may lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated

7. Contact Us

For privacy-related queries, access requests, or complaints, contact us at:

Privacy Officer, Donivo
Email: [email protected]

You may also contact the Information Regulator of South Africa:
inforegulator.org.za