This sandbox implementation stores donation amount, currency, selected charity, donation reference, donation status and GoCardless identifiers needed to track a donation. An email address is stored only if the donor enters one. GoCardless OAuth tokens are encrypted by the server before being stored in Cloudflare D1.
Optional Gift Aid: If you choose Gift Aid, we also record your full name, home address, postcode, declaration type (this donation only or multiple donations), declaration wording and acceptance date, linked to your donation. These records are accessible to the connected charity through its authenticated dashboard for Gift Aid administration and export. Gift Aid is optional and does not change the amount you pay. HMRC guidance requires charities to retain declarations for 6 years after the most recent donation on which Gift Aid is claimed. Gift Aid information is not displayed on public receipts.
Payment and bank authorisation take place in GoCardless-hosted pages and the donor's bank. InstantDonate does not ask donors to enter online banking credentials on this website.
This page is a technical placeholder, not a complete legal privacy notice. Before public launch, the site operator must publish a reviewed notice identifying the controller, lawful basis, retention periods, rights contact, processors, and any charity-specific data sharing.