Privacy Policy: Donations
1. Who we are
The Social Amplify Ltd is the data controller responsible for the personal information you provide when you support Amplify through our donation page.
Amplify is a concept-stage application. Contributions made through our donation page help fund the development of Amplify. This policy explains how your information is handled when you make a contribution. It should be read alongside our main Privacy Policy, which covers the rest of our website.
2. How donations work
We use Donorbox to host our donation page and manage contributions, and Stripe to process payments. When you click a “Support” button on our website, you are redirected to our standalone donation page hosted on Donorbox's website (donorbox.org). Your payment is then processed securely by Stripe.
We never see or store your full card or bank details. These are entered directly into Stripe's secure payment system.
3. Information we collect
When you make a contribution, we receive (through Donorbox):
- Your name
- Your email address
- The amount, currency, date and frequency (one-off or recurring) of your contribution
- Your billing address or country, where requested on the form
- Limited payment information, such as card type, the last four digits of your card and its expiry date
- Any comment or message you choose to leave, and whether you asked to remain anonymous
Donorbox and Stripe may also automatically collect technical information, such as your IP address, device and browser details, to process your payment and help prevent fraud.
4. How we use your information
We use the information you provide to:
- Process and record your contribution
- Send you a receipt and a thank-you message
- Manage recurring contributions, including failed or cancelled payments
- Respond to questions or requests about your contribution, including refunds
- Keep accurate financial records and meet our legal, tax and accounting obligations
- Detect and prevent fraud or misuse of our donation page
- Produce anonymised totals (for example, total amount raised or number of supporters) to share with potential investors, partners or stakeholders
We do not sell personal information.
We do not share your name or email address with investors.
If you choose to remain anonymous, we will not name you publicly as a supporter.
5. Third-party processors & international transfers
5.1 Donorbox
We use Donorbox, a third-party donation platform, to host our donation page, collect contribution details, send receipts and manage recurring contributions. Donorbox processes this information on our behalf.
Because the donation page is hosted directly on donorbox.org (not embedded on our website via an iframe), your interaction with that page (including any cookies or tracking technologies set during your visit) is governed by Donorbox's cookie and privacy settings.
Donorbox is based in the United States, so personal data submitted through our donation page may be transferred to and stored in the United States. Where personal data is transferred outside the UK, we take steps to ensure appropriate safeguards are in place. According to Donorbox, it relies on European Commission Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA) and other lawful mechanisms for international data transfers.
Further information about how Donorbox processes personal data, safeguards international data transfers, and uses cookies can be found in Donorbox's Privacy Policy.
5.2 Stripe
We use Stripe to process card and other online payments made through Donorbox. When you make a contribution, your payment details are sent directly to Stripe, which processes the payment and returns confirmation of the transaction to Donorbox and to us.
Stripe processes your payment on our behalf. Stripe also uses some information independently, as a data controller in its own right, for purposes such as fraud prevention, meeting its own legal and regulatory obligations (including anti-money laundering checks) and improving its services. Stripe may set cookies and collect device information on the payment form to help detect fraud.
Stripe may process data on servers outside the UK, including in the United States, and relies on appropriate safeguards for these transfers, including EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (UK Addendum) issued by the Information Commissioner's Office (ICO). Further information can be found in Stripe's Privacy Policy.
6. Legal basis for processing
We process your contribution details because this is necessary to take and manage the payment you have asked us to make (performance of a contract).
We keep financial records of contributions because we are required to do so by law (legal obligation), for example for UK tax and company accounting purposes.
We send thank-you messages, handle queries, prevent fraud and produce anonymised totals because we have a legitimate interest in running and funding the Amplify project responsibly.
7. Data retention
We keep records of contributions, including your name, the amount and date, for up to 6 years after the end of the financial year in which you contributed, as required for UK tax and accounting purposes. After this, records will be deleted or anonymised.
Any comments or messages you leave will be retained only for as long as reasonably necessary to support the Amplify project.
Donorbox and Stripe may keep certain information for longer where they are legally required to do so. Please refer to their privacy policies for details.
8. Recurring contributions & refunds
If you set up a recurring contribution, you can cancel it at any time through your Donorbox donor account, or by contacting us at the email address below. If you believe a payment was made in error, please contact us to resolve the issue.
9. Your rights
Under UK data protection law (UK GDPR, Chapter 3), you have rights regarding your personal data, including:
- Right of access: Request access to the personal data we hold about you.
- Right to data portability: Request the transfer of personal data you provided to us (where processing is based on contract or consent) to you or a third party in a structured, commonly used, and machine-readable format.
- Right to rectification: Request correction of inaccurate or incomplete information.
- Right to restrict processing: Request that we limit how we use your personal data in certain circumstances.
- Right to erasure: Request deletion of your personal data in certain circumstances. Please note that we may need to keep some records of contributions to meet our legal obligations.
- Right to object: Object to us processing your personal data where we rely on legitimate interests. If you object, we will stop processing your information unless we have compelling legitimate grounds to continue, or need it to meet a legal obligation.
- Right to withdraw consent: Where you have given consent to receive updates, you can withdraw it and unsubscribe at any time.
9.1 How to make a complaint
If you have concerns about how we handle your personal data, you have the right to complain directly to us. Please email us at enquiries@thesocialamplify.co.uk with details of your complaint. We will acknowledge your complaint within 30 days and provide a formal response without undue delay. If you remain unsatisfied with our response, you retain the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
10. Age requirement
Our donation page is intended for individuals aged 18 and over. If you are under 18, please ask a parent or guardian before making a contribution. If we become aware that we have received a contribution from someone under 18 without appropriate consent, we may refund it and delete the associated personal data, except where we must keep records by law.
11. Contact
If you have questions about this policy, your contribution, or wish to exercise your data protection rights, please contact:
Email: enquiries@thesocialamplify.co.uk
Back to Amplify