GiftDrive Privacy Policy

Effective Date: February 09, 2026

1. Purpose; Your Acceptance; Updates.

GiftDrive, LLC, a Vermont limited liability company (hereinafter, "GiftDrive" "we" "us" "our") operates the donation drive and donor facilitation platform giftdrive.org and related services (collectively, the "Website"). GiftDrive is committed to respecting the privacy of individuals. This Privacy Policy (this "Privacy Policy" or this "Policy") describes the Information that GiftDrive collects from you, how we protect that Information, how we use and share your Information and our legal bases for doing so, and your rights regarding the Information you provide to us. "Information", as we use the term in this Policy, means any information relating to an identified or identifiable natural person.

By visiting or using our Website, you agree to the terms of this Policy, which is incorporated into and made part of the GiftDrive Terms of Use located at giftdrive.org/terms. Please review the Terms of Use and this Privacy Policy. If you do not agree to the Terms of Use or this Privacy Policy, please do not access or use the Website. Additionally, if you are located outside of the United States and choose to provide Information to us, please note that, per Section 11 of this Policy, the Information you provide is transferred to and processed in the United States. Your consent to this Privacy Policy followed by your submission of such Information represents your agreement to that transfer.

We may modify this Policy from time to time. When we do, we will provide notice to you by publishing the most current version on the Website and revising the date at the top of this page. If you use the Website following a change in this Privacy Policy, your use will constitute your acceptance of the updated Policy. Accordingly, we encourage you to review this Privacy Policy frequently for changes.

2. Scope.

Intended Users of the Website. Our Website is intended only for use by adults, either for themselves or on behalf of their organizations, and is not intended for use by anyone under the age of 18 (or the legal age of majority). We do not knowingly collect Information from anyone under the age of 18. If you have reason to believe that a child has provided us with Information, please contact us and we will endeavor to delete that Information from our databases.
Only Information Requested or Tracked by GiftDrive. This Policy applies to Information which we ask that you provide to us in order to use our Website, as well as Information which we obtain by tracking and analyzing your use of the Website. This Policy does not apply to information you disclose to us (whether through the Website, via email, or through any other means) without our asking for or tracking it.

This Policy also does not apply to Information that you provide or make accessible to parties other than GiftDrive. Disclosure of Information to any such third parties is subject to the relevant third party's privacy policy. We are not responsible or liable for any third party's privacy policy or practices, even if we link to the third party's services from our Website.

Additionally, please note that this Privacy Policy describes how GiftDrive handles Information as a "data controller", meaning all Information we process for our own purposes. Where GiftDrive is a "processor" or a "sub-processor" of Information, those activities are generally governed by a separate Data Processing Agreement. The terms "data controller", "processor", and "sub-processor" have the meanings given to them in the EU General Data Protection Regulation.

3. Information We Collect.

We collect various types of Information for the purposes set forth in Section 4, including:

Information You Provide Directly to Us:

Account Registration Data: When you create an account, we collect your name, email address, password (hashed), and potentially your phone number.
Page Creator Profile Data: If you register as a Page Creator, we collect additional Information, such as your organization's name, official registration details (e.g., EIN/Tax ID, 501(c)(3) status documentation), physical address, contact person's name and email, mission statement, and verification documents as required for eligibility. For individual Page Creators, this may include personal identification details to verify need.
Donation Information: When you act as a Donor, we collect your name, email address, billing address, and payment Information. Note that GiftDrive does not directly store full payment card details; these are securely transmitted to our Payment Processor (Rye Pay).
Requested Item Details: Page Creators provide descriptions, images, quantities, and other specifications for the physical items they need.
Communications: Records of your correspondence with us (e.g., support inquiries, feedback, bug reports) and communications with other users through the Website.
User Content: Any content you upload, post, or submit to the Website, including comments, reviews, and other interactive features.

Information We Collect Automatically:

Usage Data: Information about how you access and use the Website, such as the pages you visit, the features you use, the time and date of your visit, the time spent on those pages, and other diagnostic data.
Device Data: Information about the device you use to access the Website, including your Internet Protocol (IP) address, browser type, operating system, unique device identifiers, mobile network Information, and referrer URLs.
Location Data: Depending on your device settings, we may collect general location Information (e.g., inferred from IP address) to provide localized content or features.

Information from Third Parties:

Payment Processor (Rye Pay): We receive transaction confirmations and limited payment data (e.g., last four digits of card, transaction ID) from Rye Pay to confirm successful payments and manage transactions, but not full payment card details.
Verification Services: We may receive Information from third-party services used to verify the legitimacy of Page Creators or users.
Analytics Providers: We receive aggregated and anonymized data from analytics providers regarding user behavior on the Website.

4. How We Use Your Information.

We and our service providers process Information about you where it is in our legitimate interests to do so and not overridden by your rights. We use your Information for the following purposes:

To Provide and Maintain the Website: To operate, manage, and facilitate the core functions of the GiftDrive platform, including displaying item needs, processing transactions, and connecting Donors with Page Creators.
To Process Transactions: To facilitate the purchase of Requested Items by Donors. This involves transmitting necessary payment details to our Payment Processor (Rye Pay) and order fulfillment details (Donor name, Page Creator's shipping address, item specifics) to our Fulfillment Partner.
To Verify and Validate Page Creators: To ensure the legitimacy and eligibility of organizations and individuals displaying needs on the platform, fostering trust and preventing fraud.
To Personalize User Experience: To tailor content, features, and recommendations based on your preferences and interactions with the Website.
To Communicate with You: To send transactional emails (e.g., account confirmations, password resets, order confirmations, shipping updates); to respond to your inquiries, provide customer support, and address technical issues; to send you updates, newsletters, and promotional materials about GiftDrive or related initiatives, where you have opted to receive such communications.
For Analytics and Website Improvement: To monitor and analyze usage patterns, diagnose technical problems, conduct research, and develop new features to enhance the functionality and user experience of the Website.
For Security and Fraud Prevention: To protect the integrity and security of the Website, detect and prevent fraudulent activities, unauthorized access, and other malicious conduct.
To Comply with Legal Obligations: To meet our legal, regulatory, and compliance requirements, including responding to lawful requests from government or law enforcement agencies.

If you are in a jurisdiction that requires a specific legal basis for processing Information, our legal basis for collecting and using the Information described in this Policy will depend on the type of Information and the specific context in which we collect it but will fall into one of the above categories.

5. How We Share Your Information.

We may share your Information with third parties in the following circumstances:

With Page Creators and Donors:

For Donors: Your name (and optionally, your email, if you consent or it's necessary for fulfillment communication) and details of your donation will be shared with the Page Creator to whom you've donated.
For Page Creators: Your public profile Information, including your organization's name, mission, and requested items, will be visible to Donors and other users on the Website. Necessary contact and shipping details will be shared with Fulfillment Partners.

With Service Providers:

We engage trusted third-party service providers to perform functions on our behalf and to assist us in operating the Website. These include:

Payment Processor (Rye Pay): Your payment Information is securely shared with Rye Pay for the purpose of processing transactions. GiftDrive does not directly process or store your full payment card details.
Fulfillment Partners: Necessary order details, including the Page Creator's shipping address and the Donor's name, are shared with our Fulfillment Partner(s) to facilitate the packing and shipment of Requested Items.
Hosting, cloud storage, analytics, customer support, email delivery, and identity verification services. These service providers are obligated to protect your Information and use it only for the purposes for which it was disclosed.

For Legal Reasons:

We may disclose your Information if required to do so by law or in the good faith belief that such action is necessary to: (i) comply with a legal obligation; (ii) protect and defend the rights or property of GiftDrive; (iii) prevent or investigate possible wrongdoing in connection with the Website; (iv) protect the personal safety of Users of the Website or the public; or (v) protect against legal liability.

Business Transfers:

In the event that GiftDrive is involved in a merger, acquisition, asset sale, or other corporate transaction, your Information may be transferred as part of that transaction. We will provide notice before your Information is transferred and becomes subject to a different Privacy Policy.

With Your Consent:

We may share your Information with third parties when we have your explicit consent to do so.

Aggregated or Anonymized Data:

We may share aggregated or anonymized data that does not directly identify you for research, analytics, marketing, or other business purposes. Such information is not subject to this Policy.

6. Data Security

We implement reasonable technical and organizational measures designed to protect your Information from unauthorized access, use, alteration, or disclosure. These measures include:

Encryption of data in transit and at rest where appropriate.
Access controls and authentication protocols.
Regular security assessments and updates.
Secure processing of financial data through our PCI-compliant Payment Processor (Rye Pay).

However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account password and for all activities that occur under your account. If you have reason to believe that your Information is no longer secure (for example, your GiftDrive account password may have been compromised), please immediately email us at support@giftdrive.org.

7. Data Retention

We retain your Information for as long as necessary to fulfill the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements. This typically includes the period during which you maintain an active account with us. We may also retain certain Information for a longer period as required by law or to prevent fraud or abuse. Please note that, except as required by applicable law, we are not obligated to retain your Information for any particular period and we are free to securely delete it for any reason and at any time, without notice to you.

8. Your Data Rights

Depending on your jurisdiction, you may have certain rights regarding your Information. These rights may include:

Right to Access: You have the right to request access to the Information we hold about you.
Right to Rectification: You have the right to request correction of inaccurate or incomplete Information we hold about you.
Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your Information, subject to certain legal exceptions (e.g., necessity for legal compliance, fraud prevention).
Right to Restrict Processing: You have the right to request that we limit the way we use your Information.
Right to Data Portability: You have the right to receive your Information in a structured, commonly used, and machine-readable format.
Right to Object: You have the right to object to the processing of your Information for certain purposes, such as direct marketing.
Right to Withdraw Consent: Where we rely on your consent to process your Information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the contact information provided in Section 13 of this Policy. We will respond to your request in accordance with applicable data protection laws.

9. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to track activity on our Website and hold certain Information.

Cookies: Small data files stored on your device that enable us to recognize your browser and capture certain Information.
Web Beacons (or pixels): Small electronic files that permit GiftDrive to count users who have visited certain pages or opened emails.

We use these technologies for:

Essential/Strictly Necessary Cookies: Required for the operation of the Website (e.g., for account login, security).
Analytical/Performance Cookies: To collect Information about how you use the Website, helping us to improve its functionality.
Functional Cookies: To remember your preferences and choices (e.g., language selection).
Targeting/Advertising Cookies: To deliver relevant advertisements to you based on your interests.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website.

10. Children's Privacy

The Website is not intended for use by individuals under the age of eighteen (18), or the age of legal majority in their jurisdiction. We do not knowingly collect Information from anyone under the age of 18. If you are a parent or guardian and you become aware that your child has provided us with Information, please contact us. If we become aware that we have collected Information from a child without verification of parental consent, we will take steps to remove that Information from our servers.

11. International Data Transfers

GiftDrive is based in the United States. If you are accessing the Website from outside the United States, your Information will be transferred to, stored, and processed in the United States. By using the Website, you consent to such transfer and processing of your Information. We implement appropriate safeguards to ensure that your Information receives an adequate level of protection when transferred outside your jurisdiction, such as standard contractual clauses where applicable.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Policy. Your continued use of the Website after any modifications to this Policy constitutes your acknowledgment and acceptance of the revised Policy.

13. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, or to exercise your data rights, please contact us by email: support@giftdrive.org. Additionally, as noted above, you also have the right to lodge a privacy-related complaint with your state or national data protection enforcement agency.