G-32LGQJ7KHK

Privacy Policy

RiteGiving

Privacy Policy

www.RiteGiving.com

Driven by Kindness, United by Purpose

Last Updated: May 1, 2026

Effective Date: June 1, 2026


Welcome to RiteGiving (“we,” “our,” or “us”). RiteGiving is a Jamaican-based crowdfunding and community platform accessible at www.RiteGiving.com. Our platform enables individuals and organizations to create fundraising campaigns, volunteer for causes, and book community events.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights as a user. By accessing or using RiteGiving, you agree to the practices described in this Policy. If you do not agree, please do not use our platform.

This Policy is intended to comply with the laws of Jamaica, including the Data Protection Act, 2020 (the “DPA”) and any regulations made thereunder.

1. Who We Are

RiteGiving is operated by RiteGiving Ltd., a company incorporated under the laws of Jamaica. We act as the Data Controller in respect of personal information collected through www.RiteGiving.com.

Contact Details:

2. Information We Collect

We collect different categories of information depending on how you interact with our platform.

2.1 Information You Provide Directly

  • Account registration details: full name, email address, password, date of birth, and profile photograph.

  • Campaign information: campaign title, description, fundraising goal, images, videos, and bank or payment details for disbursements.

  • Volunteer information: areas of interest, availability, skills, and any supporting documents you choose to share.

  • Event booking information: name, contact details, ticket preferences, and payment information.

  • Communications: messages sent through our platform, support requests, and feedback forms.

  • Identity verification documents: where required for payment disbursements or fraud prevention (e.g., national identification, Tax Registration Number).

2.2 Information Collected Automatically

  • Device and technical data: IP address, browser type and version, operating system, device identifiers.

  • Usage data: pages visited, time spent on pages, links clicked, campaign pages viewed, search queries made on our platform.

  • Location data: approximate geographic location derived from your IP address.

  • Cookies and similar tracking technologies: see Section 10 (Cookies) for full details.

2.3 Information from Third Parties

  • Payment processors (e.g., NCB, JMMB, or international processors): transaction confirmation and fraud signals.

  • Social media platforms: if you choose to sign in using a social media account, we receive your name, email address, and profile picture from that platform.

  • Public sources: publicly available information to verify campaign legitimacy or comply with legal obligations.

3. Why We Collect Your Information

We use your personal information for the following purposes:

3.1 To Provide and Operate the Platform

  • Create and manage your user account.

  • Enable you to launch, manage, and promote fundraising campaigns.

  • Process donations, ticket purchases, and other payments.

  • Facilitate volunteer sign-ups and coordination with campaign organisers.

  • Enable event booking and send booking confirmations.

  • Disburse funds to campaign creators.

3.2 To Ensure Trust and Safety

  • Verify the identity of campaign creators and donors where required.

  • Detect, investigate, and prevent fraud, money laundering, and other prohibited activities.

  • Review campaigns for compliance with our Community Guidelines.

  • Comply with Jamaican anti-money laundering laws and financial regulations.

3.3 To Communicate With You

  • Send transactional emails (e.g., donation receipts, booking confirmations, campaign updates).

  • Notify you of changes to your account or our policies.

  • Respond to support requests and enquiries.

  • Send marketing communications where you have given consent.

3.4 To Improve Our Services

  • Analyze platform usage to improve features and user experience.

  • Conduct research and analytics to understand how campaigns perform.

  • Test new features before rolling them out to all users.

3.5 To Comply with Legal Obligations

  • Meet our obligations under Jamaican law, including the Data Protection Act, 2020, the Proceeds of Crime Act, and applicable financial regulations.

  • Respond to lawful requests from regulatory authorities, courts, or law enforcement.

4. Legal Bases for Processing

Under the Data Protection Act, 2020, we rely on the following lawful bases to process your personal information:

  • Performance of a contract: processing necessary to create your account, process payments, and deliver services you have requested.

  • Legal obligation: processing required to comply with Jamaican laws and regulations.

  • Legitimate interests: processing for fraud prevention, platform security, and analytics, where your interests and fundamental rights do not override those interests.

  • Consent: where you have given us explicit consent, such as for marketing emails. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. Sharing Your Information

We do not sell your personal information. We may share it only in the following circumstances:

5.1 With Service Providers

We work with trusted third-party service providers who process personal information on our behalf, including:

  • Payment processors (to handle donations, ticket purchases, and disbursements).

  • Cloud hosting providers (to store platform data securely).

  • Email delivery services (to send transactional and marketing emails).

  • Analytics providers (to help us understand platform usage).

All service providers are contractually required to protect your information and may only use it for the purposes we specify.

5.2 With Campaign Organisers

When you donate to a campaign or book an event, the campaign organiser will receive your name, donation amount, and any public message you choose to share. If you donate anonymously, your name will not be shared with the organizer.

5.3 With Other Volunteers

If you register as a volunteer for a campaign or event, your name and contact details will be shared with the campaign organizer responsible for coordinating volunteers.

5.4 For Legal and Regulatory Compliance

We may disclose your information where required by law, court order, or a lawful request from a Jamaican regulatory authority, including the Financial Investigations Division (FID) or the Office of the Director of Public Prosecutions (ODPP).

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred to the successor entity. We will notify you before such a transfer and inform you of any changes to this Policy.

6. Payments and Financial Information

When you make a donation or book an event, payment processing is handled by our licensed third-party payment processors. RiteGiving does not store your full payment card details on our servers. All payment transactions are encrypted using industry-standard SSL/TLS technology.

For campaign creators receiving disbursements, we collect and verify banking information to ensure funds are transferred to legitimate account holders. This information is treated with the highest level of security and confidentiality.

We comply with applicable anti-money laundering requirements under the Proceeds of Crime Act (Jamaica). We may request identification documents before processing disbursements above certain thresholds.

7. Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law.

  • Account data: retained for the duration of your account and for 7 years after account closure, to comply with financial and tax obligations.

  • Campaign data: retained for 7 years from campaign closure, in accordance with Jamaican financial record-keeping requirements.

  • Transaction records: retained for a minimum of 7 years as required by Jamaican law.

  • Marketing preferences: retained until you withdraw consent or request deletion.

  • Support communications: retained for 3 years from the date of the communication.

After the applicable retention period, we securely delete or anonymize your personal information.

8. Your Rights Under the Data Protection Act, 2020

As a data subject under the Data Protection Act, 2020 of Jamaica, you have the following rights in respect of your personal information:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will respond to your request within 30 days.

8.2 Right to Rectification

You have the right to request that we correct inaccurate or incomplete personal information about you.

8.3 Right to Erasure

You may request that we delete your personal information where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to our legal obligations to retain certain records.

8.4 Right to Restrict Processing

You may request that we restrict the processing of your personal information in certain circumstances, for example while a dispute is being resolved.

8.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, you may request that we provide your personal information in a structured, commonly used, and machine-readable format.

8.6 Right to Object

You have the right to object to processing based on our legitimate interests, including for direct marketing purposes.

8.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing, you may withdraw consent at any time by contacting us at privacy@ritegiving.com or adjusting your account settings.

8.8 How to Exercise Your Rights

To exercise any of the above rights, please contact our Privacy Team at:

We will verify your identity before processing any request. We will respond within 30 days. If we are unable to fulfil your request, we will explain why.

9. International Data Transfers

RiteGiving is based in Jamaica and our primary operations and data storage are located within Jamaica. However, some of our third-party service providers (such as cloud hosting and email platforms) may be located outside Jamaica.

Where we transfer personal information internationally, we take steps to ensure that adequate protections are in place, including contractual safeguards consistent with the Data Protection Act, 2020. By using RiteGiving, you acknowledge that your information may be transferred to and processed in countries outside Jamaica.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our platform. Cookies are small text files placed on your device when you visit our website.

10.1 Types of Cookies We Use

  • Essential cookies: required for the platform to function. These cannot be disabled without affecting core functionality (e.g., maintaining your login session).

  • Functional cookies: remember your preferences (e.g., language, currency) to personalize your experience.

  • Analytics cookies: help us understand how users interact with the platform (e.g., which pages are most visited). We use anonymized or aggregated data for this purpose.

  • Marketing cookies: used to show you relevant content and advertisements, where you have given consent.

10.2 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect your ability to use certain features of the platform. For detailed guidance on managing cookies, visit www.aboutcookies.org.

11. Security of Your Information

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, destruction, or alteration. These measures include:

  • Encryption of data in transit using SSL/TLS technology.

  • Secure storage of passwords using industry-standard hashing algorithms.

  • Access controls limiting employee access to personal data on a need-to-know basis.

  • Regular security assessments and audits of our systems.

  • Incident response procedures for detecting and responding to data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant Jamaican regulatory authority as required by the Data Protection Act, 2020, without undue delay.

12. Children’s Privacy

RiteGiving is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at privacy@ritegiving.com. We will take steps to delete the information promptly.

Campaign creators and event organizer's who create content or events that may involve minors are required to comply with all applicable Jamaican child protection laws.

13. Volunteers and Event Participants

If you register as a volunteer or book an event on RiteGiving, the following additional provisions apply:

  • Your volunteer profile, including your name, skills, and availability, will be visible to campaign organizers who are recruiting volunteers. Your contact information will only be shared with organizers after you have been matched to a campaign or event.

  • For events, your booking information (including your name and contact details) may be shared with the event organizer to facilitate attendance.

  • In some cases, event organizers may be required to comply with their own privacy obligations (e.g., where they collect additional registration details on-site). RiteGiving is not responsible for the privacy practices of independent event organizers beyond what is collected through our platform.

14. Public Campaign Pages

Campaign pages on RiteGiving are publicly accessible. Information you include on a campaign page — including your name, campaign description, images, and fundraising progress — will be visible to any visitor to our platform and may be indexed by search engines.

Donors may choose to make their donations publicly visible or anonymous. If you choose to donate publicly, your name and any message you include will appear on the campaign page.

We encourage campaign creators and donors to carefully consider what personal information they include in public-facing content.

15. Third-Party Links

Our platform may contain links to third-party websites, social media pages, or payment processors that are not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We accept no responsibility for the privacy practices of third parties.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

  • Post the updated Policy on this page with a revised “Last Updated” date.

  • Notify registered users by email at least 14 days before the changes take effect.

  • Display a prominent notice on our platform.

Your continued use of RiteGiving after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated Policy, you must stop using the platform and may request account deletion.

17. Complaints and Regulatory Authority

If you have concerns about how we handle your personal information, we encourage you to contact us first so we can resolve the matter directly.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Jamaican data protection authority. As of the date of this Policy, the Data Protection Act, 2020 is administered in Jamaica under the Office of the Information Commissioner (OIC) or such authority as designated by the relevant ministry.

18. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please contact us:

RiteGiving Ltd.