PRIVACY POLICY & STATEMENT
1. Introduction
1.1 GivingFridays Pte. Ltd. (“GivingFridays”, “we”, “us” or “our”) respects the privacy of individuals who visit, register with, donate through, apply to, communicate with or otherwise use GivingFridays.
1.2 This Privacy Policy & Statement (“Policy”) explains how GivingFridays collects, uses, discloses, stores, transfers, processes and protects Personal Data in connection with our websites, applications, donation scheduling platform and related services (collectively, the “Platform” or “Services”).
1.3 This Policy applies to GivingFridays-operated websites and Services, including givingfridays.com, givingfridays.id, and other GivingFridays websites, applications or country-specific services that refer or link to this Policy.
1.4 GivingFridays Pte. Ltd. is incorporated in Singapore. As GivingFridays may provide Services to users and organisations in multiple countries, Personal Data may be subject to the privacy and data protection laws applicable to the relevant processing activity or jurisdiction.
1.5 GivingFridays processes Personal Data in accordance with applicable data protection laws, including Singapore’s Personal Data Protection Act 2012 (“PDPA”) and, where applicable, relevant data protection requirements in other jurisdictions in which GivingFridays operates or provides its Services.
1.6 Nothing in this Policy is intended to limit any rights available to an individual under applicable law.
2. Who This Policy Applies To
2.1 This Policy may apply to donors and prospective donors, registered users of GivingFridays, representatives of mosques, foundations, charities, non-profit organisations, community organisations and other recipient organisations, organisations registering with or applying to join GivingFridays, prospective partners and service providers, persons submitting enquiries, feedback or support requests, webinar, programme or event registrants, visitors to our websites or applications, and other persons who interact with GivingFridays.
2.2 Organisations receiving, or seeking to receive, donations through GivingFridays may be referred to in this Policy as “Recipient Organisations” or “Organisations”.
3. Personal Data We May Collect
3.1 “Personal Data” generally means information about an individual who can be identified directly or indirectly from that information, whether alone or together with other information, as defined under applicable law.
3.2 Depending on how you interact with GivingFridays, we may collect or process the following categories of Personal Data.
3.3 Identity and Contact Information
3.3.1 This may include name, email address, telephone or mobile number, WhatsApp contact information, mailing or business address, account or user identifier, and other contact information voluntarily provided to us.
3.4 Account Information
3.4.1 Where you create or use a GivingFridays account, we may process information relating to your account, authentication, account preferences, Recipient Organisations you support, donation schedules, communication preferences, and account activity.
3.5 Donation and Transaction Information
3.5.1 Depending on the Services used, we may process information relating to selected Recipient Organisation, donation amount, donation frequency, scheduled donation dates or duration, transaction status, transaction reference, payment method category, successful, failed or cancelled transactions, and other information reasonably required to administer the donation or schedule.
3.6 GivingFridays does not necessarily receive or store all payment credentials used by a donor. Information such as full card details may be collected and processed directly by the applicable payment service provider or payment gateway.
3.7 Organisation and Representative Information
3.7.1 If you register, apply or act on behalf of an Organisation, we may collect or process your name, position, designation or role, business email address, telephone or WhatsApp number, information about the Organisation, registration, licensing or regulatory information, information necessary for onboarding, information submitted through applications, agreements or forms, and communications between you, the Organisation and GivingFridays.
3.8 Identity documents or other verification information may be collected where reasonably necessary for the relevant purpose or where required by GivingFridays, a payment service provider, regulatory requirements or applicable law.
3.9 Enquiries and Communications
3.9.1 When you contact GivingFridays, we may process information including your name, contact details, Organisation, category of enquiry, correspondence, messages, feedback, complaints, and information reasonably necessary to respond to or administer your enquiry.
3.10 Submitting an enquiry does not, by itself, subscribe you to GivingFridays marketing communications.
3.11 Technical and Usage Information
3.11.1 When you access our websites, applications or Services, we may automatically receive information such as IP address, browser type, device information, operating system, access time, pages visited, referring pages, session information, cookies and similar technologies, and information used for security, diagnostics, analytics and improvement of the Services.
4. How We Collect Personal Data
4.1 We may collect Personal Data directly from you, when you create, access or use an account, when you create or manage a donation schedule, when you make a donation, when you register or apply on behalf of an Organisation, during Organisation onboarding, when you submit applications, forms or agreements, when you communicate with us, when you register for webinars, programmes or events, automatically through our websites and applications, from payment service providers and other service providers, from an Organisation you represent, from an authorised representative, from publicly available sources where permitted by law, and from other sources where collection is permitted under applicable law.
4.2 GivingFridays seeks to collect Personal Data that is reasonably relevant to the purposes for which it is processed.
5. How and Why We Use Personal Data
5.1 GivingFridays may collect, use, disclose or otherwise process Personal Data where reasonably necessary to provide and operate the Platform, create and administer user accounts, authenticate users and protect accounts, create and administer donation schedules, facilitate the processing of donations, communicate transaction and schedule status, provide Recipient Organisations with relevant donation information, process applications and onboard Organisations, establish and manage relationships with Organisations, configure, test and activate accounts and Services, respond to enquiries, requests, complaints and feedback, provide customer or technical support, communicate important operational or service information, administer webinars, programmes and events, detect, prevent, investigate and respond to fraud, spam, misuse, abuse, suspicious activity or security incidents, protect the security, integrity and availability of the Platform, maintain, improve, test and develop our Services, perform analytics and understand use of our Services, comply with applicable laws and regulatory requirements, enforce applicable agreements, policies and terms, establish, exercise or defend legal rights or claims, protect GivingFridays, its property, Services, users and Recipient Organisations, fulfil contractual or pre-contractual requirements, and carry out other purposes notified to you or otherwise permitted under applicable law.
5.2 Depending on the circumstances and applicable law, Personal Data may be processed on the basis of consent, deemed consent, contractual or pre-contractual necessity, compliance with legal obligations, legitimate interests or purposes recognised under applicable law, or another lawful basis.
6. Consent, Acceptance and User Choices
6.1 Where consent is required under applicable law, GivingFridays may obtain or recognise such consent through methods permitted by applicable law, which may include registration for or creation of a GivingFridays account, acceptance of applicable Terms & Conditions, this Policy or other agreements, submission of an application or form, provision of Personal Data for a stated purpose, selection of an applicable option or preference, another affirmative action, and another legally recognised method of consent or deemed consent.
6.2 GivingFridays is not required to obtain separate or repeated consent for every processing activity where the processing is reasonably connected with a purpose already notified to you, is necessary to provide the requested Services, is authorised by an applicable agreement, or is otherwise permitted under applicable law.
6.3 Where applicable law requires separate, specific or additional consent for a particular activity, GivingFridays will take reasonable steps to obtain such consent.
6.4 Withdrawal of consent does not affect processing that occurred lawfully before withdrawal and does not prevent GivingFridays from processing or retaining Personal Data where such processing or retention is permitted or required by applicable law.
6.5 Depending on the nature of the Personal Data and processing concerned, withdrawal of consent may affect GivingFridays’ ability to provide some or all of the Services.
7. Organisations Registering or Applying to GivingFridays
7.1 An Organisation may register with or apply to GivingFridays before a formal Onboarding Agreement, Service Level Agreement (“SLA”), payment-provider onboarding or other definitive documentation has been completed.
7.2 During this period, GivingFridays may perform preliminary onboarding activities, including reviewing the Organisation’s application, communicating with its authorised representatives, verifying information supplied by the Organisation, preparing and configuring an Organisation profile, conducting demonstrations, configuring or testing technical integrations, coordinating with payment and other service providers, preparing the Organisation for activation, and carrying out other reasonable onboarding activities.
7.3 Where an Organisation or its authorised representative registers with, applies to join, or submits onboarding information to GivingFridays, GivingFridays may process that information for purposes reasonably connected with evaluating, preparing, testing and administering the prospective relationship.
7.4 Preliminary Organisation Listings
7.4.1 During onboarding, GivingFridays may create and publish a preliminary Organisation profile or listing using information submitted to GivingFridays, information authorised for use by the Organisation, and appropriate publicly available Organisation-level information.
7.4.2 This may occur while GivingFridays is awaiting onboarding documentation, verification information, licensing or regulatory information, payment-provider onboarding, an Onboarding Agreement or SLA, technical configuration, additional information from the Organisation, and completion of other onboarding requirements.
7.4.3 A preliminary listing may include organisation name, logo, Organisation description, location, publicly available Organisation contact information, programmes or causes, website or social media information, and other Organisation-level information reasonably required for the listing.
7.4.4 Publication of a preliminary listing does not mean that the Organisation has completed onboarding, has been verified or approved by GivingFridays or a payment provider, or has been activated for donation processing.
7.4.5 Where appropriate, functionality may remain inactive or the listing may indicate that onboarding or activation is pending.
7.4.6 GivingFridays may modify, suspend or remove a preliminary listing where onboarding is not completed, required information is not provided, the Organisation withdraws its application, or GivingFridays determines that continued publication is no longer appropriate.
7.4.7 Personal contact information relating to an individual representative will not automatically be made public merely because an Organisation has registered or applied. Such information will only be published where appropriate and authorised or otherwise permitted under applicable law.
7.4.8 The contractual or other authorisation governing an Organisation’s listing may additionally be contained in the relevant registration, application, Onboarding Agreement, SLA, Terms & Conditions or other applicable agreement.
8. Donation and Payment Processing
8.1 GivingFridays provides technology that enables donors to create and manage donation arrangements, including scheduled and recurring donations.
8.2 GivingFridays operates on a non-custodial model and does not itself hold donation funds on behalf of donors or Recipient Organisations.
8.3 Payments are processed through applicable third-party payment service providers or payment gateways.
8.4 Depending on the country, Recipient Organisation and payment method, the payment provider may collect and process payment information directly.
8.5 GivingFridays may receive transaction-related information reasonably necessary to administer the Platform, including transaction reference, transaction amount, transaction status, payment method category, date and time, Recipient Organisation, and other information reasonably necessary to administer the donation or schedule.
8.6 Payment service providers may process Personal Data in accordance with their own legal obligations, terms and privacy policies.
9. Information Shared with Recipient Organisations
9.1 When a donor chooses to support a Recipient Organisation, GivingFridays may make relevant donor and donation information available to that Organisation where reasonably necessary, appropriate and permitted under applicable law.
9.2 Depending on the circumstances, this may include donor name, email address, contact information where provided, donation information, transaction information, donation schedule information, and information reasonably required for receipts, reconciliation or donation administration.
9.3 Recipient Organisations may use information lawfully made available to them for purposes connected with the donor relationship, including donation administration, reconciliation, receipts, donor communications, donor relationship management, responding to donor enquiries, and other purposes permitted under applicable law.
9.4 Where Personal Data is lawfully exported, downloaded, transferred or otherwise made available to a Recipient Organisation and thereafter comes within that Organisation’s possession or control, the Recipient Organisation is responsible for its subsequent collection, use, disclosure, storage, protection and other processing in accordance with applicable law and any applicable contractual restrictions.
9.5 Recipient Organisations are responsible for implementing appropriate safeguards for Personal Data within their possession or control.
9.6 GivingFridays is not responsible for the independent processing, use, disclosure or security of Personal Data undertaken by a Recipient Organisation outside GivingFridays’ systems, instructions or reasonable control, except to the extent that responsibility cannot lawfully be excluded or limited.
9.7 GivingFridays may impose contractual, technical or operational conditions governing access to, use of or export of donor information through the Platform.
10. Service Providers and Other Disclosures
10.1 GivingFridays may disclose, transfer or make Personal Data available to third parties where reasonably necessary to provide, administer, secure or protect the Services, conduct our business, or comply with applicable law.
10.2 These parties may include payment gateways and payment service providers, cloud hosting and database providers, authentication providers, email and communications providers, form and workflow automation providers, analytics providers, fraud, spam and security service providers, technical consultants and contractors, professional advisers, including lawyers, accountants, insurers and auditors, regulators, law-enforcement authorities, courts, tribunals and government agencies where required or permitted by law, and other parties authorised by you or otherwise permitted under applicable law.
10.3 Where third parties process Personal Data on our behalf, GivingFridays seeks to provide access only to information reasonably necessary for the relevant purpose and to apply appropriate contractual, organisational, technical or other safeguards where required.
10.4 Legal, Regulatory and Protective Disclosures
10.4.1 GivingFridays may collect, preserve, use or disclose Personal Data or related records where reasonably necessary or permitted to comply with applicable law, respond to a lawful request, notice, order, warrant, subpoena or other legal process, cooperate with a competent court, regulator, government authority, law-enforcement agency or other authority exercising lawful powers, investigate or prevent fraud, misuse, abuse or security incidents, protect the rights, property, systems or security of GivingFridays, protect donors, users, Recipient Organisations or other persons, enforce applicable agreements or policies, and establish, exercise or defend legal rights or claims.
10.4.2 Nothing in this Policy is intended to create an obligation for GivingFridays to disclose information to a private party where GivingFridays is not otherwise legally or contractually required to do so.
10.5 Corporate Transactions
10.5.1 GivingFridays may disclose or transfer Personal Data where reasonably necessary in connection with an actual or proposed investment or financing, merger or acquisition, corporate restructuring or reorganisation, joint venture, sale or transfer of shares, business or assets, insolvency or similar proceeding, and other corporate transaction.
10.5.2 Any such processing or transfer will remain subject to applicable law and, where appropriate, confidentiality, data protection or other safeguards.
11. Security, Assurance and Private Requests for Information
11.1 GivingFridays takes reasonable administrative, organisational and technical measures designed to protect Personal Data and the Platform.
11.2 Nothing in this Policy grants any donor, Recipient Organisation, user or other private party a general right to audit or inspect GivingFridays, access GivingFridays’ systems or infrastructure, inspect source code, obtain security configurations or credentials, obtain penetration-testing or vulnerability information, inspect internal records, inspect third-party or vendor arrangements, and access information relating to other donors, users or Recipient Organisations.
11.3 GivingFridays may, at its discretion and subject to confidentiality, security, legal and third-party restrictions, provide reasonable information concerning its privacy or security practices where GivingFridays considers such information appropriate.
11.4 Nothing in this Section limits GivingFridays’ obligations under applicable law or its obligation to comply with a competent authority lawfully exercising its powers.
12. Service Communications and Marketing
12.1 GivingFridays may send communications reasonably necessary to operate, administer and provide the Services, including account notices, donation and transaction information, schedule notifications, security notifications, service changes, responses to enquiries, onboarding communications, and other administrative, contractual or operational information.
12.2 Such communications are distinct from marketing communications.
12.3 Where applicable law requires consent for marketing communications, GivingFridays will obtain or rely upon an appropriate lawful basis as permitted by applicable law.
12.4 Where available, you may unsubscribe from marketing communications through the method provided in the communication or by contacting GivingFridays.
12.5 Unsubscribing from marketing communications does not prevent GivingFridays from sending communications reasonably necessary for transactional, security, legal, contractual or service purposes.
13. Cookies and Similar Technologies
13.1 GivingFridays websites and applications may use cookies and similar technologies to provide essential website functionality, maintain sessions, support authentication, protect against fraud and abuse, remember preferences, understand how our websites and Services are used, perform analytics, diagnose technical problems, and improve our Services.
13.2 Where required under applicable law, GivingFridays will provide appropriate notices or choices concerning non-essential cookies or similar technologies.
13.3 You may also be able to control cookies through your browser or device settings. Disabling certain cookies may affect the functionality of parts of our websites or Services.
14. International Processing and Transfers
14.1 GivingFridays operates across multiple markets and uses technology infrastructure and service providers that may process or store Personal Data in countries other than the country in which the individual is located.
14.2 Accordingly, Personal Data may be transferred to, stored in, accessed from or processed in another jurisdiction where reasonably necessary to provide, administer, secure or protect the Services or conduct GivingFridays’ operations.
14.3 Where applicable law imposes requirements concerning international transfers of Personal Data, GivingFridays will take reasonable and appropriate measures designed to meet those requirements and protect the Personal Data concerned.
15. How We Protect Personal Data
15.1 GivingFridays takes reasonable administrative, organisational and technical measures designed to protect Personal Data against risks including unauthorised access, unauthorised collection, unauthorised use or disclosure, unauthorised modification, accidental or unlawful loss, destruction, and other similar risks.
15.2 Access to Personal Data is intended to be limited to persons and service providers who reasonably require access for authorised purposes.
15.3 However, no electronic transmission, online platform, third-party service or data-storage system can be guaranteed to be completely secure.
15.4 While GivingFridays takes reasonable measures to protect Personal Data, GivingFridays does not guarantee absolute security and is not responsible for security incidents occurring within systems, devices, accounts or infrastructure outside GivingFridays’ reasonable control, except to the extent responsibility cannot lawfully be excluded or limited.
16. Data Security Incidents and Personal Data Breaches
16.1 GivingFridays will assess suspected or confirmed Personal Data breaches affecting Personal Data within its possession or control in accordance with applicable law.
16.2 Where GivingFridays is legally required to notify a competent authority or affected individuals, GivingFridays will take reasonable steps to make the required notification in accordance with applicable legal requirements.
16.3 Recipient Organisations and other independent parties remain responsible for security incidents and Personal Data breaches involving Personal Data within their own possession or control, subject to applicable law and contractual arrangements.
16.4 Nothing in this Policy requires GivingFridays to publicly disclose confidential security information, system architecture, vulnerabilities, investigation materials or other sensitive information except where disclosure is required by applicable law or a competent authority exercising lawful powers.
17. Data Retention
17.1 GivingFridays retains Personal Data for as long as reasonably necessary to fulfil the purpose for which it was collected, provide and administer the Services, administer accounts, donations and transactions, administer relationships with Recipient Organisations, maintain appropriate business, accounting and financial records, comply with legal and regulatory requirements, resolve disputes, investigate or prevent fraud, abuse or security incidents, and establish, exercise or defend legal claims.
17.2 When Personal Data is no longer reasonably required for legal, regulatory, operational or legitimate business purposes, GivingFridays will take reasonable steps to delete, anonymise or otherwise cease retaining it as required under applicable law.
17.3 GivingFridays may retain information for a longer period where required or permitted by applicable law, including where reasonably necessary for legal proceedings, investigations, regulatory matters, fraud prevention or the protection of GivingFridays’ legal rights.
18. Your Privacy Rights
18.1 Depending on applicable law and the circumstances, you may have certain rights relating to your Personal Data.
18.2 These may include rights to request access to Personal Data held about you, request correction of inaccurate or incomplete Personal Data, withdraw consent where processing is based on consent, request deletion or erasure where legally applicable, object to or restrict certain processing where legally applicable, request information about how Personal Data has been used or disclosed, request data portability where such a right is legally applicable, and exercise other rights available under applicable data protection law.
18.3 These rights are subject to applicable legal exceptions, conditions and limitations.
18.4 To exercise an applicable privacy right, you may contact GivingFridays using the details in Section 22.
18.5 GivingFridays may request information reasonably necessary to verify your identity, authority or request before providing access to Personal Data or acting on a request.
18.6 GivingFridays may decline, limit or otherwise respond to a request as permitted under applicable law.
19. Accuracy and Correction
19.1 GivingFridays seeks to make reasonable efforts to ensure that Personal Data used or disclosed by us is accurate and complete where accuracy is relevant to the purpose for which the information is used.
19.2 Users and Organisation representatives are responsible for providing accurate information and are encouraged to update their information or notify GivingFridays where information they have provided materially changes.
19.3 GivingFridays may rely on information supplied by users, Organisations, authorised representatives, service providers or other lawful sources unless GivingFridays knows or reasonably should know that the information is inaccurate.
20. Children and Minors
20.1 GivingFridays’ Services are not directed primarily at children or minors.
20.2 Where GivingFridays processes Personal Data relating to a child or minor, GivingFridays will do so where appropriate and permitted under applicable law and subject to any consent, authorisation or safeguards required by applicable law.
20.3 If you believe Personal Data relating to a child or minor has been provided to GivingFridays inappropriately, please contact us so that we can assess the matter and take appropriate action.
20.4 This Section concerns Personal Data relating to identifiable individuals. It does not apply merely because GivingFridays uses illustrations, synthetic media or AI-generated imagery depicting fictional persons who are not identifiable real individuals.
21. Third-Party Websites and Services
21.1 GivingFridays websites or Services may contain links to, integrate with, or make use of third-party websites, platforms or services.
21.2 GivingFridays does not control the privacy, security or data-processing practices of independent third parties.
21.3 Where you interact directly with an independent third-party service, its own terms, privacy policy and security practices may apply.
21.4 GivingFridays is not responsible for the independent acts or omissions of third parties outside GivingFridays’ reasonable control, except to the extent responsibility cannot lawfully be excluded or limited.
21.5 Users are encouraged to review the applicable third party’s terms and privacy policy where appropriate.
22. Contact and Data Protection Officer
22.1 If you have questions, requests, complaints or feedback concerning this Policy or GivingFridays’ handling of Personal Data, please contact:
Data Protection Officer
GivingFridays Pte. Ltd.
Email: support@givingfridays.com
22.2 GivingFridays may request additional information where reasonably necessary to verify your identity, authority or properly process a privacy request.
23. Changes to This Privacy Policy
23.1 GivingFridays may amend or update this Policy from time to time to reflect changes to our Services, changes to our business model or operations, entry into new markets, changes in technology or service providers, changes in legal or regulatory requirements, changes in security or privacy practices, and other developments affecting GivingFridays.
23.2 The current version will be identified by its revision number and/or “Last Updated” date.
23.3 The updated Policy will take effect from the date stated in the updated version or from another date notified by GivingFridays.
23.4 Where applicable law requires additional notice or consent for a material change, GivingFridays will take appropriate steps to provide such notice or obtain such consent.
23.5 Continued use of the Services may be subject to the then-current Terms & Conditions, Privacy Policy and other applicable agreements, to the extent permitted by applicable law.
Last updated: 01 Sep 2026
