Privacy Policy

1. Who We Are

KindRaise provides technology that enables charities, non-profit organisations, event organisers and other authorised organisations (“Organisers”) to operate fundraising campaigns, events, ticketing, donations, auctions, prize draws and related activities.

Depending on the circumstances, The Small Desk Limited and the relevant Organiser may have different responsibilities for your personal data.

For example, an Organiser may determine what information is required for its event and how it communicates with its participants, while KindRaise processes information necessary to provide and operate the technology platform.

Where appropriate, you should also review the privacy policy of the relevant Organiser.

2. Information We Collect

We collect personal information that is reasonably necessary to provide KindRaise and the fundraising or event services available through the Platform.

Depending on how you use KindRaise, this may include:

• first and last name;
• email address;
• telephone number;
• billing or delivery address;
• account information;
• event registration information;
• guest information;
• ticket information;
• donation information;
• auction bids and bidding history;
• prize draw or raffle entries;
• transaction and payment information;
• communication preferences;
• records of communications with us or an Organiser; and
• other information you voluntarily provide through the Platform.

We may also automatically collect certain technical information when you use KindRaise, such as:

• IP address;
• browser type;
• device type;
• operating system;
• pages or features accessed;
• date and time of access;
• referring pages; and
• technical logs relating to use of the Platform.

We aim to collect only information that is reasonably necessary for the relevant purpose.

3. Payment Information

Payments made through KindRaise may be processed by third-party payment service providers, including Stripe.

KindRaise does not directly store your complete credit or debit card number or card security code (CVC/CVV).

Your payment details are securely provided to and processed by the applicable payment provider.

The payment provider may retain payment information in accordance with its own terms, privacy policy and legal obligations.

KindRaise may receive limited information relating to a transaction, such as:

• payment status;
• transaction reference;
• payment amount;
• payment method type;
• limited card information, such as card brand and last four digits;
• refunds or disputes; and
• other information required to administer the transaction.

4. How We Collect Information

We may collect personal information when you:

• create a KindRaise account;
• register for an event;
• purchase or receive a ticket;
• provide guest information;
• make a donation;
• place a bid in an auction;
• participate in a prize draw or raffle;
• make a payment;
• redeem or receive an auction item or prize;
• contact us or an Organiser;
• subscribe to communications;
• use or interact with the KindRaise website or Platform; or
• otherwise provide information through our services.

We may also receive information from the relevant Organiser where necessary to provide services to you.

For example, an Organiser may upload an event guest list containing your name and contact information so that KindRaise can issue an invitation, ticket or event-related communication.

5. How We Use Your Personal Data

We may process your personal information for purposes including:

Providing the Platform

To create and manage accounts, registrations, tickets, donations, auction bids, prize draw entries and other activities conducted through KindRaise.

Processing Transactions

To facilitate payments, donations, purchases, refunds and other financial transactions through our payment providers.

Event and Fundraising Administration

To help Organisers manage events, attendees, donors, bidders, winners, guests and fundraising activities.

Communications

To send service-related communications such as:

• registration confirmations;
• tickets;
• payment receipts;
• donation confirmations;
• bidding notifications;
• outbid notifications;
• auction results;
• prize draw information;
• winner notifications;
• event reminders;
• check-in information; and
• important updates relating to an event or transaction.

These communications are operational communications and may be necessary for us or the Organiser to provide the relevant service.

Prize and Auction Fulfilment

Where you win an auction item or prize, your information may be used or shared as reasonably necessary to arrange fulfilment, delivery, booking, collection or redemption.

Customer Support

To respond to enquiries, investigate issues, process requests and provide technical or customer support.

Security and Fraud Prevention

To detect, investigate and prevent fraudulent transactions, misuse of the Platform, unauthorised access, manipulation of auctions or prize draws and other potentially unlawful activity.

Platform Improvement

We may analyse aggregated or appropriately de-identified information to understand how KindRaise is used, improve functionality and user experience, monitor Platform performance and develop new features.

Legal and Regulatory Requirements

We may process and retain information where reasonably necessary to comply with legal, regulatory, accounting, taxation, dispute-resolution or other obligations.

6. Organisers and Charities

When you participate in a fundraising campaign, event, auction, donation, prize draw or other activity, certain personal information may be shared with the relevant Charity or Organiser.

This may include information such as your:

• name;
• email address;
• telephone number;
• registration information;
• ticket information;
• donation information;
• bidding or purchase information; and
• information reasonably necessary for prize or item fulfilment.

The relevant Organiser may use this information for administering its event or fundraising activity and may have its own privacy policy governing its subsequent use of your information.

KindRaise is not responsible for an Organiser's independent use of personal information outside the KindRaise Platform.

7. Sharing Your Personal Information

We do not sell your personal information.

We may disclose personal information where reasonably necessary to provide KindRaise and related services, including to:

• the relevant Charity or Organiser;
• payment processing providers;
• cloud hosting and infrastructure providers;
• email delivery providers;
• SMS or messaging providers;
• event service providers;
• auction item or prize suppliers;
• analytics and security providers;
• professional advisers; and
• regulatory, governmental or law-enforcement authorities where required by law.

Service providers are provided only with information reasonably necessary for the services they perform.

Where appropriate, we require service providers to protect personal information and process it in accordance with applicable privacy and data protection requirements.

8. Auction Items and Prize Fulfilment

If you successfully bid for an auction item, win a prize or otherwise become entitled to receive an item or experience, we may share relevant personal information with:

• the Organiser;
• the prize or item supplier;
• delivery or courier providers; or
• other parties reasonably required to fulfil the item or prize.

Only information reasonably required for fulfilment should be shared.

Third-party suppliers may process your information according to their own privacy policies when providing their services directly to you.

9. Email, SMS and Event Communications

KindRaise and the relevant Organiser may use your contact information to send communications necessary for the event, fundraising activity or transaction in which you are participating.

These may include email, SMS or other electronic communications relating to:

• account verification;
• event registration;
• ticket delivery;
• event reminders;
• bidding activity;
• outbid alerts;
• payment confirmations;
• auction results;
• prize draw results;
• donation confirmations; and
• important service updates.

Where we use third-party communication providers, your contact information may be processed by those providers solely as necessary to deliver the relevant communications.

10. Marketing

Where required, we will obtain your consent before using your personal information to send direct marketing communications.

Marketing communications may include information about:

• KindRaise services;
• future fundraising events;
• campaigns;
• charities;
• auctions;
• experiences; or
• other services that may be relevant to you.

You may withdraw your marketing consent at any time by:

• clicking the unsubscribe link in a marketing email;
• using any preference or opt-out functionality provided; or
• contacting us.

Withdrawing marketing consent will not prevent us from sending operational or transactional communications that are necessary in connection with your account, transaction or participation in an event.

11. Cookies and Similar Technologies

KindRaise may use cookies and similar technologies to operate and improve the Platform.

These technologies may be used to:

• maintain login sessions;
• remember user preferences;
• provide essential Platform functionality;
• improve security;
• prevent fraud;
• understand Platform usage; and
• measure performance.

Where required by applicable law, we will request consent before using non-essential cookies.

You may also control certain cookies through your browser settings.

Disabling certain cookies may affect the functionality of KindRaise.

12. How We Protect Your Information

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Depending on the relevant system and information, these measures may include:

• encryption of data transmitted over public networks;
• secure connections using HTTPS/TLS;
• access controls;
• authentication controls;
• restricted administrative access;
• monitoring and logging;
• software and infrastructure security measures;
• backups and recovery procedures; and
• limiting access to authorised personnel and service providers.

No internet-based service can guarantee absolute security. We nevertheless take reasonable steps appropriate to the nature of the information and services provided.

13. International Data Transfers

KindRaise may use technology and service providers that operate infrastructure in jurisdictions outside Hong Kong.

As a result, personal information may be processed or stored outside Hong Kong.

Where personal information is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards are used having regard to applicable data protection requirements.

The countries in which information is processed may have privacy and data protection laws that differ from those of Hong Kong.

14. How Long We Keep Your Data

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services and meeting legal, accounting, taxation, security and dispute-resolution requirements.

Different categories of information may therefore have different retention periods.

For example, transaction and accounting records may need to be retained for longer periods to satisfy legal or accounting requirements, while certain operational event information may be deleted or anonymised earlier when it is no longer required.

Where information is processed on behalf of an Organiser, retention may also depend on the Organiser's instructions and legal obligations.

Where you have consented to direct marketing, relevant contact and preference information may be retained until you withdraw your consent or the information is otherwise no longer required.

15. Your Privacy Rights

Subject to applicable law, you may have the right to request access to personal information we hold about you and request correction of inaccurate information.

Depending on the circumstances and applicable law, you may also request that we:

• provide information about how your personal data is being used;
• correct incomplete or inaccurate information;
• stop using information for direct marketing;
• delete information where we are not legally required to retain it; or
• address another concern regarding the processing of your personal information.

We may need to verify your identity before processing a privacy request to help ensure that personal information is not disclosed to an unauthorised person.

Certain requests may also need to be directed to the relevant Organiser where that Organiser controls the relevant information.

16. Children's Privacy

KindRaise is not intended to enable children to independently participate in activities that legally require participants to be adults.

Where an event permits information relating to children or minors to be provided, the person providing that information must have appropriate authority to do so.

We encourage Organisers to minimise the collection of children's personal information and collect only information reasonably necessary for the relevant event.

17. Third-Party Websites and Services

KindRaise may contain links to websites, services or platforms operated by third parties.

These third parties have their own privacy practices and policies.

KindRaise and The Small Desk are not responsible for the privacy practices of independent third-party websites or services.

We encourage you to review the applicable privacy policy before providing personal information to a third party.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to KindRaise;
• new functionality;
• changes to our service providers;
• operational requirements; or
• applicable legal or regulatory requirements.

The latest version will be published through KindRaise together with the date it was last updated.

Where a change materially affects how we use personal information, we may provide additional notice where appropriate.

19. Questions, Requests and Complaints

If you have questions about this Privacy Policy, wish to exercise a privacy right or have concerns about how personal information has been handled, please contact us through the contact information published on the KindRaise website.

For matters relating specifically to an Organiser's use of your information, you may also contact the relevant Charity or Organiser directly.

We will use reasonable efforts to investigate and respond to privacy-related requests and complaints.

20. Contact Us

KindRaise
Powered by The Small Desk Limited
Hong Kong SAR

For privacy enquiries, please use the contact details published on the KindRaise website.

Where your enquiry concerns a particular charity event, donation, auction, prize draw or ticket, please identify the relevant event or Organiser so that we can handle your request appropriately.