Privacy policy

The short version: this site collects almost nothing, and the plugin stores donor data on your server, not ours.

Last updated: October 2026

This website (donormerchant.com)

  • Analytics. This site uses Google Analytics (GA4) to understand which pages are useful and how visitors find us. It sets cookies and processes data such as your approximate location, device/browser, and pages viewed; IP addresses are handled by Google and not used by us to identify you. We use this only in aggregate to improve the site. See Google's Privacy Policy; you can opt out with Google's browser add-on.
  • No advertising or selling of data. We don't run ads, build advertising profiles, or sell your information.
  • Server logs. Like virtually every website, our hosting provider keeps standard access logs (IP address, requested page, browser user-agent) for security and troubleshooting. They're retained briefly and not used for profiling.
  • Email. If you email us, we keep the correspondence so we can help you. We don't add you to marketing lists without asking, and we never sell or share your address.
  • The interactive demo on this site runs entirely in your browser. Nothing you type into it is transmitted or stored anywhere.

The Donor Merchant plugin

When you install the plugin on your WordPress site:

  • Donor data stays on your server. Donor names, emails, and donation records are stored in your own WordPress database. We have no access to them - the plugin sends nothing to donormerchant.com. No telemetry, no "phoning home."
  • Gift Aid and employer matching. If you turn on Gift Aid, the plugin also stores each declaration as the donor saw it, with their house name or number and postcode. If you turn on employer matching, it stores the employer name the donor enters.
  • Payment data goes to your payment processor. Card details are collected by Stripe (or PayPal) directly in the donor's browser and never touch your server or ours. Stripe's and PayPal's own privacy policies govern that data.
  • You are the data controller for your donors. The plugin helps you honor deletion requests (deleting a donor removes their donation history; Gift Aid declarations are kept, because HMRC expects them for 6 years) and data portability (CSV export).

Your rights

Want to know what we hold about you (for site visitors: almost certainly just email correspondence, if any), or want it deleted? Use the contact form and we'll sort it out promptly.

Changes

If this policy changes, the new version appears here with an updated date. We won't quietly weaken it.