DigiDonate is the trading name of MBGGo Pty Ltd (ABN 49 654 888 712). We help Australian businesses find DGR-endorsed charities and give to them directly. This policy explains what personal information we collect, why, who we share it with and how you can access or correct it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Terms used in this policy. ABN means Australian Business Number. ACNC means the Australian Charities and Not-for-profits Commission. AI means artificial intelligence. ATO means the Australian Taxation Office. DGR means deductible gift recipient, a charity the ATO has endorsed to receive tax-deductible gifts. GST means goods and services tax. IP address means the number that identifies your device on the internet. OAIC means the Office of the Australian Information Commissioner.
1. What we collect
| Who you are | What we collect |
|---|---|
| A business, or someone at one | Your name, role, email, phone and suburb or state; your business name and ABN, plus what ABN Lookup shows for it (registered name, state, postcode, GST status); the causes you care about; whether you already give, and to which charity; your plan, billing details and invoices; for Monthly Giving, your giving plan, the amount and date of each payment you record, the receipts your charity issues, your “Show our name” choice and any referral partner code. |
| A charity contact | Your name, role, email and phone; your charity’s name, ABN, DGR and ACNC details; the bank details you enter to receive gifts; payment confirmations and monthly updates you post. |
| A referral partner | Your name, ABN, GST status, contact details, the kind of businesses you work with, the bank or PayPal account we pay you into, and the details of businesses you introduce (with their consent). |
| An investor or partner enquiry | Your name, email, phone, organisation and what you’re interested in. |
| A website visitor | Device and browser details, pages visited, and approximate location from your IP address, through cookies and analytics tools. |
We don’t collect card numbers ourselves. If you pay by card, our payment provider handles your card details.
We don’t ask for sensitive information, such as health or religious information. Please don’t send it to us.
2. How we collect it
- From you, when you fill in a form on our website, sign up, email or call us.
- From public registers: ABN Lookup and the ACNC Charity Register, to check businesses and charities.
- From referral partners, who may pass on your details only with your consent.
- From charities, when they confirm a payment from your business.
- From our payment provider, which tells us whether a payment went through.
You can browse our website without telling us who you are. We can’t match you with charities, run a plan or pay a referral fee without identifying you.
3. Why we use it
We use personal information to:
- match businesses with charities and send those matches;
- run Find Your Cause, Monthly Giving and Enterprise Giving, including reminders, receipts, reports, reshare kits and video scripts;
- check charities’ DGR endorsement and ACNC registration;
- bill businesses and pay referral partners;
- answer enquiries, including from investors and potential partners;
- send service emails, and marketing emails if you’ve opted in;
- protect against fraud and scams, including verifying bank details by phone; and
- meet our legal obligations, including tax and record-keeping.
We don’t sell personal information, and we never use a business’s giving or revenue figures for anything except that business’s own reports.
4. Who we share it with
- The charity you choose. We share a business’s details with a charity only with the business’s permission, so the charity can confirm payments and issue receipts.
- The public, through a charity’s monthly update. A charity’s update names a business only if the business ticked “Show our name”. Otherwise it says “a business supporter”. Updates never show what percentage a business gives.
- Referral partners. If a partner introduced your business, we tell them whether you’re on Monthly Giving. We never tell them what you give or to which charity.
- Service providers who help us run DigiDonate: website and app hosting, email and customer records, office software, accounting, payments, e-signature, AI and script-writing tools, and virtual assistants. They may use the information only to provide their service to us.
- Our professional advisers, such as lawyers and accountants.
- Regulators and law enforcement, where the law requires or allows it. We name a business in an ATO ruling application only with its written agreement.
- A buyer of our business, if we sell all or part of it, under the same protections.
5. Overseas
Some of our service providers store or process information outside Australia, in:
- the United States, for email and office software, accounting, payments and AI tools; and
- the Philippines, where our virtual assistants work. Their employer is bound by contract to follow the Australian Privacy Principles.
We take reasonable steps to make sure every provider protects your information in line with the Australian Privacy Principles. If we start operating in other countries, we’ll update this policy before we collect information there.
6. Automated tools and AI
Our charity matches, and content such as reshare kits and video scripts, are produced by AI. The AI works only from public information, such as the ACNC Charity Register, ABN Lookup and charities’ published monthly updates, plus what you tell us in your form. It never uses anything a charity gave us privately. Figures in anything we draft come from confirmed payment records, never from AI. Matches are suggestions: we don’t use AI to make decisions that have a legal or similarly significant effect on you. If you think a match or a draft is wrong, contact us.
7. Public record of charity updates
We may record a cryptographic hash of each charity monthly update on a public blockchain to show the update hasn’t been changed. A hash contains no readable information about you. It can’t be deleted, but the readable update can be amended, for example if a business withdraws its name.
8. Marketing emails
We send the monthly giving tips email and other marketing only if you opt in. Every marketing email has an unsubscribe link, and we act on it within 5 business days. While you have an account or an open enquiry, we’ll still send service emails about it.
9. Cookies and analytics
Our website uses cookies and similar tools for three things:
- Essential: to keep the site and its forms working and secure.
- Analytics: to see how people use the site, such as which pages they visit and for how long, using tools such as Google Analytics. This tells us how the site is used, not who you are.
- Advertising: if we run ads, to measure how they perform and show relevant ads on other sites, using tools such as the Meta Pixel, Google Ads and LinkedIn Insight Tag.
You can block or delete cookies in your browser settings, and opt out of Google Analytics with Google’s browser add-on. The site may not work properly without essential cookies.
10. Keeping it safe
We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including access controls and encrypted connections. We verify bank details by phone before anyone relies on them. We will never ask for bank details or passwords by email. If someone claiming to be us does, it isn’t us: please tell us.
If a data breach is likely to cause serious harm, we’ll tell the people affected and the Office of the Australian Information Commissioner (OAIC), as the law requires.
11. How long we keep it
We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. Financial and tax records are kept for at least seven years. After that we delete or de-identify it.
12. Accessing and correcting your information
You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing us. We’ll respond within 30 days, at no charge. If we can’t give you access or make a correction, we’ll tell you why in writing.
13. Complaints
If you think we’ve mishandled your personal information, email us with the details. We’ll acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you’re not satisfied with our response, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.
14. Children
DigiDonate is for businesses and charities, and isn’t directed at anyone under 18.
15. Changes to this policy
We may update this policy. We’ll post the new version here with its date, and email account holders about significant changes.
16. Contact us
Privacy contact, DigiDonate (MBGGo Pty Ltd)
Email: connect@digidonate.au