Privacy Policy

Stichting International Refugee Humanitair Help (Stichting IRHH) is the controller for personal data processed on DonoryHelp.org. Registered office: Kepplerstraat 9, 2562 VE 's-Gravenhage, Netherlands. KvK 66378966. Email: info@donoryhelp.org.

Depending on how you use the platform we process:

• Account data: name, email, role (donor, organizer, admin), session tokens.
• Campaign content: story, media, location, budgets, updates, YouTube links you add.
• Organizer verification: legal name, date of birth, identity and mission documents stored in an encrypted vault. Document bytes are not kept in the application database.
• Payment records: gift amount, currency, receipt id, Stripe payment and Connect identifiers. We do not store full card numbers or CVC.
• Support messages, appointment requests, and audit logs needed to operate the desk.
• Technical logs: IP address, browser type, and security events.

We process data to create and secure accounts, run campaigns, complete legal and trust review, take and receipt gifts, pay organizers via Stripe Connect, prevent fraud, meet bookkeeping and AML-related duties, and answer support requests. Legal bases are contract (providing the service you asked for), legitimate interests (security, abuse prevention, product integrity), and legal obligation where Dutch or EU law requires a record.

Payments and connected-account onboarding are handled by Stripe. Stripe acts as an independent controller or processor under its own terms for card data and Connect KYC. See stripe.com/privacy. We receive confirmation of payment, fees, and Connect status so we can credit campaigns and release payouts.

We share data with service providers that host the site, send email (OTP and notices), store encrypted documents, and process payments (Stripe). Admins review campaigns and cases. We may disclose data if required by law, a payment network, or to protect users from fraud. We do not sell personal data.

Account and gift records are kept for as long as the account is active and thereafter as needed for receipts, disputes, and statutory retention. Verification documents stay in the vault while a campaign or review requires them, then are deleted or locked according to our retention schedule. You may ask us to erase data that we are not required to keep.

Our primary operations are in the Netherlands / EEA. Some processors (including Stripe) may process data outside the EEA under Standard Contractual Clauses or another lawful transfer tool.

Under the GDPR you may request access, correction, erasure, restriction, portability, or object to certain processing. Write to info@donoryhelp.org. You may lodge a complaint with the Autoriteit Persoonsgegevens in the Netherlands.

We use essential cookies and local storage for sign-in, security, and remembering wizard progress on your device. We do not run third-party advertising cookies on the public site. Analytics, if enabled later, will be described here before they are switched on.

Privacy questions: info@donoryhelp.org. Support desk: donoryhelp.org/support. Terms: Terms of Service.