Effective date: 3 November 2026
This Privacy Policy describes how ShopDonation, Vondelwende 52, 2182 VV Hillegom, the Netherlands (Chamber of Commerce number 63810573) ("we", "our", or "us"), collects, uses, and shares your personal data when you use our websites, mobile applications, and related services (collectively, the "Services").
We are committed to protecting your privacy and handling your data in a transparent, secure, and lawful manner, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable privacy laws.
1. Who We Are
ShopDonation
Vondelwende 52, 2182 VV Hillegom, the Netherlands, Chamber of Commerce (KvK) 63810573
Email: info@shopdonation.co.uk
We are the data controller of your personal data in accordance with applicable data protection laws.
2. What Data We Collect
When you register, we only ask for your email address and a username you make up yourself. Everything else is optional. Depending on how you use our Services, we may process the following personal data:
- Username
- Date of birth (optional, only if you choose to fill it in)
- Email address
- Profile photo (optional)
- Name and bank details (only if you receive a referral bonus yourself)
- Income level (optional, only if you choose to fill it in)
- Interests and hobbies (optional, only if you choose to fill it in)
We may also collect data automatically through cookies and other tracking technologies (see Section 8).
3. Legal Bases for Processing
We process your personal data based on one or more of the following legal bases:
- Your consent
- Performance of a contract
- Our legitimate interest in keeping the Services safe and preventing fraud and abuse
4. Purposes of Data Processing
We process your personal data for the following purposes:
- Creating and managing user accounts
- Providing and facilitating the sale of goods and services
- Sending marketing communications and newsletters
- Enhancing and personalizing user experience
- Performing analytics and service improvement
- Providing customer support
- Communicating with users regarding updates or service-related matters
- Ensuring the proper functioning and security of the website and apps
- Enabling interactive features such as commenting, messaging, user forums, and other forms of social interaction
- Only if you say yes: using the optional profile data you choose to fill in (such as date of birth, income level, interests and hobbies) to show you deals and promotions that fit your needs. Without your yes, we do not use this data for that. You can change your mind and remove this data at any time in your account.
We never sell, rent or share your personal data with advertisers or other third parties for their own use. We only share data with the service providers that help us run the Services, under our instructions (see Section 6).
5. International Data Transfers (Transfers to Third Countries)
To provide you with a seamless and efficient experience across our Services, it may be necessary to transfer your personal data to trusted service providers and partners located outside the EU/EEA. These transfers are essential for the international functionality of our Services.
We take your privacy seriously and only work with carefully selected partners who demonstrate a strong commitment to data protection. Where applicable, we implement appropriate safeguards to ensure that your data continues to be protected to a high standard, regardless of where it is processed.
Important Notices Regarding Transfers:
- To support the global visibility and functionality of our Services, certain limited profile information, such as your username and your profile photo, may be made publicly visible in countries both within and outside the EU/EEA. We understand the importance of privacy, so you can choose to make your username and profile image anonymous. This gives you full control over what you make visible publicly and allows you to use the platform without revealing your personal identity.
- We take appropriate and reasonable measures to protect your personal data. However, as with any data transmission or storage system, certain risks can always exist despite our efforts.
6. Data Sharing with Third Parties
To provide you with a seamless and efficient experience across our Services, it may be necessary to share your personal data with:
- Service providers and partners who perform services on our behalf (e.g., payment processing, analytics, hosting, email delivery)
- Other users, to the extent that your profile information is public or shared by you
- Legal and regulatory authorities, when required by applicable laws
These recipients may be located inside or outside the EU/EEA.
The service providers we use are, for example, for hosting, sending email, analytics and AI translation. When personal data goes to a country outside the EU/EEA, we use the safeguards required by law: an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or the EU standard contractual clauses.
We use AI services to translate and write texts on the Website. These services may process the texts entered, under our instructions.
7. Public Visibility
Some limited information from your profile, such as your username and your profile photo, may be visible to other users or the general public, including users outside the EU/EEA. This visibility helps enable social features or user identification in public-facing areas of the Service. We understand the importance of privacy, so you can choose to make your username and profile image anonymous. This gives you full control over what you make visible publicly and allows you to use the platform without revealing your personal identity.
8. Cookies and Similar Technologies
8.1 What are cookies?
Cookies are small text files that a website places on your computer, tablet or phone. Some are needed to make the website work, others help us improve it. We also use similar technologies, such as scripts and pixels from other companies. Where we write "cookies" below, we mean these technologies too.
8.2 Your choice
On your first visit, a cookie banner asks which cookies you allow:
- Only necessary: only the cookies needed to make the website work and to register your purchase.
- Accept all: all cookies listed in the banner at that moment.
- Settings: you choose per category. For each service you can read what it does, which company is behind it and how long the data is kept.
Even if you only allow necessary cookies, your purchases still generate free donations.
We remember your choice for 6 months. After that, or when we add a new service, we ask again. You can change or withdraw your choice at any time via "Cookie settings" at the bottom of every page. Withdrawing is as easy as giving consent.
8.3 Which cookies do we use?
We use four categories:
- Necessary (always on): needed to make the website work and to register your purchase with the webshop, so your cause receives the donation. These include our own session and security cookies, your cookie choice, spam protection for forms and the cookies of the affiliate networks (such as Awin, CJ, TradeTracker and Daisycon).
- Functional (only with your consent): extra features on the website, such as a chat window to ask us a question or reviews from other visitors.
- Analytics (only with your consent): help us understand how visitors use the website, for example which pages are viewed most, so we can improve it.
- Marketing (only with your consent): measure which ads bring new visitors to the website.
The complete and current list of services is always available in "Cookie settings" at the bottom of every page. There you can read for each service what it does, which company is behind it and how long the data is kept. This list is updated automatically when we add or remove a service.
The services in the Functional, Analytics and Marketing categories only start after you have given your consent. Without your consent, we do not load their scripts.
8.4 Proof of your consent
To be able to show that you gave your consent, we store your choice: which categories you allowed, the version of the banner, the language and the date. This is done with a random code, without your IP address or other data that could identify you. We keep this for 2 years and then delete it automatically.
8.5 Data outside the European Union
Some of these companies are part of an American group (such as Google) or process data outside the European Union. Data may therefore also end up in the United States. The safeguards described in Section 6 apply, such as the EU-US Data Privacy Framework or the EU standard contractual clauses.
8.6 Deleting cookies
You can also delete or block cookies yourself in your browser settings. Please note: if you block all cookies, your purchase may not be registered by the webshop and your cause will not receive a donation.
9. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce agreements.
When data is no longer needed, it will be deleted or anonymized.
10. Your Rights
Depending on your location, you may have the following rights under GDPR:
- Right to access – You can request access to the data we hold about you.
- Right to rectification – You may request correction of inaccurate or incomplete data.
- Right to erasure – You may request deletion of your personal data.
- Right to restrict processing – You may request restriction of how your data is processed.
- Right to object – You may object to processing based on legitimate interests or direct marketing.
- Right to data portability – You may request your data in a structured, commonly used format.
You may withdraw your consent at any time where processing is based on consent.
To exercise these rights, please contact us at: info@shopdonation.co.uk
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). If you live or work in another country of the European Union, you can also complain to the data protection authority of that country.
11. Children’s Privacy
Our Services are not intended for children under the age of 16. We do not knowingly collect data from children under 16 without parental consent.
12. Security of Your Data
We take reasonable organizational and technical measures to secure your personal data from unauthorized access, disclosure, alteration, or destruction.
However, no system is 100% secure, and we cannot guarantee absolute security.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top. If changes are material, we will notify you by posting a notice or via email.
14. Additional Information for UK Users (UK GDPR)
If you are located in the United Kingdom, your personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Your rights under the UK GDPR mirror those under the EU GDPR and include:
- The right to access your data
- The right to rectify inaccurate data
- The right to erase your data
- The right to restrict or object to processing
- The right to data portability
- The right to lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise these rights or raise concerns, please contact us at: info@shopdonation.co.uk
15. Additional Information for California Residents (CCPA/CPRA)
If you are a resident of California, you have certain rights under the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA).
Categories of Personal Information Collected:
We may collect the following categories of personal information, as defined under the CCPA:
- Identifiers (e.g., email address, username, IP address; name only if you receive a referral bonus yourself)
- Commercial information (e.g., purchase history)
- Internet or other electronic network activity (e.g., browsing history, device information)
- Profile data you choose to fill in (e.g., interests, hobbies), only if you say yes
- Financial information (bank details, only if you receive a referral bonus yourself)
- Personal characteristics you choose to fill in (e.g., date of birth, income level), only if you say yes
Your Rights:
- Right to Know – Request information about the categories and specific pieces of personal data we have collected about you.
- Right to Delete – Request deletion of your personal data, subject to certain exceptions.
- Right to Opt Out of Sale/Sharing – Request that your personal information is not sold or shared.
- Right to Non-Discrimination – You will not be discriminated against for exercising your CCPA rights.
To submit a request, please contact us at: info@shopdonation.co.uk
We do not sell or share personal information as defined under the CCPA, and we never give your personal data to advertisers.
If you are an authorized agent making a request on behalf of a California consumer, you must provide written authorization and proof of your identity.
16. Social Networks
Our website contains links to our pages on social networks such as Facebook, Instagram, X and LinkedIn. A link alone does not share any data with that network. Only when you click it do you go to the network's website, where that network's own privacy policy applies.
If we later add features from social networks to the website, such as embedded posts or videos, they only load after you have given your consent through the cookie banner (see Section 8). If we offer logging in with an account from another service, such as Google, we only receive data if you choose that option yourself: your name and email address, which we use to create your account.
17. Privacy Contact
If you have any questions, requests, or complaints regarding how we process your personal data or wish to exercise your rights, you may contact us at:
Privacy contact
Email: info@shopdonation.co.uk
Address: ShopDonation, Vondelwende 52, 2182 VV Hillegom, The Netherlands
We will review your inquiry and respond within one month.
18. Contact Us
For general inquiries related to this Privacy Policy, our Services, or the use of your information, you may contact us at:
ShopDonation
Email: info@shopdonation.co.uk
Address: Vondelwende 52, 2182 VV Hillegom, The Netherlands
For privacy-specific questions or to exercise your data protection rights, please refer to Section 17 (Privacy Contact).
19. Public Information
Our Services may allow users to post content or information publicly, including but not limited to photographs, status updates, comments, blogs, articles, or other personal contributions. Please note that any such content you choose to make public will be accessible to other users and, in some cases, to the general public.
We do not guarantee the privacy or confidentiality of information that you choose to publish or make visible via public features. You are solely responsible for the content you share publicly, and we encourage you to exercise caution when posting personal information.
20. Opting Out of Communications
From time to time, we may send you informational or marketing communications, including announcements, promotional materials, or updates about our Services. You may opt out of receiving such communications by:
- Clicking the “unsubscribe” or “opt-out” link included in the footer of our emails, or
- Contacting us directly at: info@shopdonation.co.uk
Please note that opting out of marketing or promotional emails will not affect our ability to send you important communications related to your use of our Services, such as account notices, service updates, or transactional emails.
21. Our App
When you use our app, we also process: the type and operating system of your device, the app version, crash reports and, if you allow notifications, a code to send you push notifications. The app asks your permission before it sends notifications; you can switch them off at any time in the settings of your phone. Analytics in the app only start after you have given your consent, in the same way as the cookie banner on the website (see Section 8). If you only delete the app from your phone, your account remains. You can delete your account and data in the app or on the website via Account > Delete account. Apple and Google process data when you download the app from their app store, under their own privacy policies.
22. Our Browser Extension
Our browser extension recognises on your own device whether a webshop you visit, or a search result, is part of the Website. Your browsing history is not sent to us and is not stored. Only when you click on a reminder from the extension do we record that click, so that your purchase can be registered for your Cause.