In this policy
1. Data Controller & contact
For the purpose of the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) and equivalent laws, the data controller is CharityGlow. You may reach our Data Protection Officer at any time via the Data Subject Request form or by emailing privacy@charityglow.com.
2. Information we collect
We collect only the minimum information necessary to deliver the software and services you requested. We never sell personal data, and we never build contact lists from visits to our marketing site.
When you create an account
- ●Full name & email address
- ●Password (bcrypt-hashed; we never see the plaintext)
- ●Organization name (optional)
When you purchase Pro / Theme / Services
- ●Billing name, address & tax ID (VAT / EIN)
- ●Card token (Stripe or PayPal — we never touch raw PANs)
- ●Email, phone & chat content for support
Plugin usage (self-hosted WordPress sites)
- ●Opt-in diagnostic telemetry (toggleable)
- ●Activation key hash + domain registered
- ●PHP/WP version + server OS for debug (opt-in)
Website visitors (charityglow.com)
- ●Anonymized IP (last octet stripped in Plausible)
- ●Referrer, country, device & browser
- ●Necessary cookies for preference memory only
3. How we use your data
We use personal information solely to deliver CharityGlow products and services, to comply with tax/legal obligations, and — only when you opt in — to send you product release emails. We never repurpose donor data collected via the plugin installed on your site; that data stays on your WordPress install and belongs to you.
4. Legal bases under GDPR
Processing activities rely on one of five lawful bases: (a) Contract — to deliver Pro / Theme licenses and paid services; (b) Consent — marketing emails and opt-in telemetry; (c) Legitimate interest — anonymized web analytics and anti-fraud checks; (d) Legal obligation — tax invoices, accounting records, valid court orders; (e) Vital interest — rare cases of safety-related communications.
5. Cookies & similar tracking technologies
We use cookies sparingly. We run privacy-first analytics (Plausible, privacy badge visible in the footer) and only set a cookie when you log in, start a checkout, or save a consent preference. Full breakdown by category and cookie duration is available in our Cookie Policy.
6. Third-party data processors
We share personal data only with vetted sub-processors bound by written data-processing agreements (DPAs). Processors include: Stripe & PayPal (payments), Plausible (analytics, no third-party cookies), DigitalOcean (hosting — Frankfurt & New York regions), Help Scout (support tickets), Mailchimp (transactional & opt-in marketing emails), Cloudflare (DNS/CDN), QuickBooks (accounting).
7. International data transfers
Some sub-processors operate outside the EU / UK / EEA. Where adequacy decisions do not apply, transfers are safeguarded by the European Commission Standard Contractual Clauses (SCCs) 2021/914 and equivalent UK IDTA clauses. A copy of our SCC matrix is available on request to privacy@charityglow.com.
8. Your data subject rights
Subject to applicable law, you have the right to: Access · Rectification · Erasure · Restriction of processing · Data portability · Objection to legitimate-interest processing · Withdraw consent at any time. To exercise any of these rights in a single form, please visit our GDPR / CCPA Data Request page. Response time is within 30 calendar days.
9. Data retention periods
| Category | Retention |
|---|---|
| Account data | While account active + 12 months after closure |
| Invoices & billing records | 10 years (tax & audit requirements) |
| Support tickets & email history | 3 years after last interaction |
| Activation keys + domain logs | License validity + 6 months |
| Anonymized web analytics | 12 months rolling window |
10. Children · Policy changes · Questions
CharityGlow services are not directed at children under 16 and we do not knowingly collect data from minors. This policy may be updated from time to time; material changes will be announced by email to the account contact on file and the Last Updated date at the top of this page will be revised.
If you have questions, reach the DPO at privacy@charityglow.com or use the Data Request form for fastest routing.