Effective date: 1 August 2026. This Policy explains how Donaify collects, uses, shares, and protects personal
information.
1. Controller and scope
Omni Spectrum Technologies (SMC-Private) Limited is responsible for the personal information processed
through https://donaify.com, except where a payment, identity, banking, or other provider acts as an
independent controller under its own notice. This Policy applies to visitors, donors, organizers, beneficiaries,
representatives, and payout recipients.
2. Information we collect
Account and contact information
Name, email address, telephone number, username, password hash, communication preferences, and
account history.
Organization name, role, authority, registration information, tax identifier where applicable, and business
contact details.
Identity and verification information
Date of birth, nationality, residence, government-issued identity document, document number and expiry
date.
Selfie, video, liveness result, facial comparison result, or similar identity-verification information.
Proof of address, bank statement, utility bill, source-of-funds information, sanctions or politically exposed
person screening results.
For organizations: registration certificate, governing documents, ownership or control information,
representative authorization, and organization bank details.
Campaign and beneficiary information
Campaign story, purpose, goal, updates, images, videos, supporting evidence, beneficiary details, and
organizer-beneficiary relationship.
Potentially sensitive details voluntarily supplied for a campaign, such as health, hardship, religious, or
family information. Organizers must obtain lawful consent before providing information about another
person.
Donation, payment, and payout information
Donation amount, campaign, date, status, donor message, receipt details, refund or dispute history.
Billing name, billing address, card type, card issuer response, token, and masked card details supplied by
the payment processor.
We do not intend to store full card numbers or card security codes when checkout is hosted or tokenized
by a compliant payment processor.
Bank account, payout method, beneficiary name, transfer status, and reconciliation information.
Device, usage, and communications information
IP address, browser, device, operating system, language, time zone, referring URL, pages viewed, click
and session information, cookie identifiers, and security logs.
Emails, support requests, call records or notes, complaints, reports, survey responses, and other
communications.
3. How we use information
Create and operate accounts, campaigns, donations, receipts, ledgers, refunds, and payouts.
Verify identity, authority, bank ownership, campaign evidence, and eligibility.
Prevent fraud, money laundering, terrorist financing, sanctions breaches, abuse, account takeover, and
chargebacks.
Review, moderate, investigate, suspend, remove, or report campaigns and transactions.
Provide support, service notices, security alerts, and requested communications.
Improve platform reliability, accessibility, performance, and user experience.
Comply with law, court orders, regulatory requests, tax and accounting duties, bank or processor
requirements, and enforce our agreements.
Send optional marketing only where permitted; you can unsubscribe at any time.
4. Legal grounds
Depending on the country and context, we process information to perform a contract, take steps at your
request, comply with legal obligations, pursue legitimate interests such as fraud prevention and platform
security, protect vital interests, establish or defend legal claims, or based on consent. Where consent is the
legal basis, it may be withdrawn without affecting earlier lawful processing.
5. Sensitive and biometric information
Identity verification may involve selfies, liveness checks, facial comparison, or other information treated as
biometric or sensitive in some jurisdictions. We process it only for identity, security, fraud-prevention, and
compliance purposes, using consent or another lawful basis where required. Campaign organizers should
minimize sensitive information published publicly and obtain explicit permission from beneficiaries.
6. Public campaign information
Campaign titles, stories, goals, updates, organizer display information, images, and donor names or messages
selected for public display may be visible worldwide and may be indexed, copied, shared, or archived by third
parties. Do not publish information you or the beneficiary cannot safely make public.
7. How we share information
Payment processors, card networks, digital-wallet providers, acquiring banks, fraud tools, refund and
dispute services.
Identity-verification, sanctions-screening, liveness, and compliance providers.
Banks, payout providers, and financial institutions involved in transferring funds.
Cloud hosting, security, communications, analytics, customer support, professional advisers, auditors, and
insurers.
Campaign organizers or beneficiaries where needed to process a donation, receipt, refund, or payout.
Authorities, courts, regulators, law enforcement, banks, processors, or other parties where required by law
or reasonably necessary to protect rights, safety, or platform integrity.
A buyer, investor, successor, or adviser in connection with a genuine corporate transaction, subject to
appropriate safeguards.
We do not sell personal information for money. Some analytics or advertising technologies may be treated as
a sale or sharing under certain privacy laws; where applicable, we provide required choices through cookie
controls or privacy requests.
8. International transfers
Donaify is operated from Pakistan and uses service providers in multiple countries. Information may be
processed outside your country, where privacy laws may differ. We use contractual, technical, organizational,
and other safeguards required by applicable law.
9. Retention
We retain information for as long as reasonably necessary for the purposes described, including account
operation, campaign history, payment reconciliation, fraud prevention, disputes, chargebacks, tax, audit, and
legal compliance. Identity, transaction, and compliance records may be retained for the period required by
applicable law, banks, card networks, or providers, including after an account is closed. Public campaign
content may remain in backups or archives for a limited period and may persist on third-party services outside
our control.
10. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information,
such as access controls, encryption in transit where available, logging, provider due diligence, and restricted
access to verification records. No system is completely secure, and we cannot guarantee that unauthorized
access, loss, or misuse will never occur.
11. Your choices and rights
Access or receive a copy of personal information, where applicable.
Correct inaccurate or incomplete information.
Request deletion, restriction, objection, or portability where provided by law.
Withdraw consent and unsubscribe from optional marketing.
Manage non-essential cookies through the cookie banner or browser settings.
Complain to a competent privacy or consumer authority.
To submit a request, email support@donaify.com. We may verify your identity and may refuse or limit a
request where permitted, including where information must be retained for fraud, legal, tax, dispute, or
compliance purposes.
12. Children
Users under 18 may not create accounts or campaigns directly. A parent or legal guardian must manage a
campaign involving a child and must limit the child's personal information to what is necessary and lawful.
13. Third-party links and services
The platform may link to third-party websites or embed provider services. Their privacy practices are governed
by their own notices. Review those notices before providing information.
14. Changes and contact
We may update this Policy and will post the revised date. Privacy questions or requests may be sent to
support@donaify.com. Postal address: Main Commercial Market, PIA Society, Northern Bypass, Multan,
Multan Cantt., Bosan Town, Punjab, Pakistan. Phone: +44 7988 947060.