Privacy Policy
Effective Date: 16 April 2025
1. Overview
PayPal Giving Fund Australia is a Public Ancillary Fund (ABN 65 106 950 945) registered with the Australian Charities and Not-for-profits Commission and endorsed by the Australian Taxation Office as a tax concession charity and deductible gift recipient (“PayPal Giving Fund”, “we” or “our”).
We use PayPal technology to enable users of websites and online services with which we partner (such websites and online services, “Partners”)to donate to PayPal Giving Fund. In making donations, donors may also recommend that we make a corresponding grant in support of an Eligible Charities.
PayPal Giving Fund is operated for the benefit of Eligible Charities. “Eligible Charities” includes the funds, authorities or institutions that:
- are charitable or would be a ‘charity’ within the meaning of the Charities Act 2013 (Cth) if it were not a ‘government entity’ as defined in that Act (with the exception of public and private ancillary funds); and
- gifts to which are deductible under item 1 of the table in section 30-15 of Income Tax Assessment Act 1997 (Cth); and
- have been verified as to their identity; and
- do not promote hate, violence, racial intolerance, or engage in money laundering or other illegal activities.
This Privacy Policy describes your privacy rights regarding our collection, use, storage, sharing and protection of your personal information. It applies to our website and all related sites, applications, services and tools regardless of how you access or use them.
2. Scope and consent
PayPal Giving Fund, as a data controller, has adopted and implemented this Privacy Policy as part of our commitment to protecting your Personal Data. This Privacy Policy aims to provide you with sufficient information regarding our use of your Personal Data when you donate to PayPal Giving Fund, enroll with PayPal Giving Fund as an Enrolled Charity, access PayPal Giving Fund’s materials, including but not limited to reports, handbooks, surveys and feedback about products and services (“Materials”), or otherwise access or use our content, features, donation functions, and services (collectively, the "Services").
You accept this Privacy Policy when you sign up for, access or use our Services. By accepting and consenting to this Privacy Policy, you expressly consent to our use and disclosure of your Personal Data and direct us to do so in the manner described in this Privacy Policy on our website.
Certain capitalised terms that are not otherwise defined in the Policy are explained in the “Definitions” Section at the end of this policy.
3. Personal Data Processed by PayPal and Third Parties
PayPal is a payment processor for donations made to PayPal Giving Fund. The PayPal Giving Fund website is also hosted by PayPal. When you make donations to PayPal Giving Fund using your PayPal account or your credit or debit card or interact with our website or other PayPal technology, PayPal is an independent data controller of data collected, used, and disclosed in connection with those interactions. Please visit the PayPal Privacy Statement to learn how your information is processed by PayPal and what privacy rights and choices you might have in connection with your use of the PayPal services.
Some of the third parties that we share Personal Data with, such as Enrolled Charities or authorities, are also independent data controllers. When your data is shared with independent data controllers, their data policies will apply. We encourage you to read their privacy policies and know your privacy rights before interacting with them.
4. Categories of Personal Data We Collect about You
In order to enable your access to and use of our Services, in particular to assist you in making donations to PayPal Giving Fund, we collect certain Personal Data to provide you with a secure, smooth, efficient and customised experience when you use the Services. This information is collected directly from you and other sources (such as our Partners) when you use our Services and make donations to PayPal Giving Fund.
- Categories of Personal Data collected from you, including from your interactions with us and use of the Services:
- Information you provide when you enroll with PPGF. When you enroll with PayPal Giving Fund, you may provide a contact to receive updates from PayPal Giving Fund. The information we collect includes a contact’s first and last name, job title, phone number, and email address.
- Information you provide when you respond to our surveys. If you decide to participate in our survey, you may be asked to provide certain personal data, such as first and last name, job title, and email address.
- Information you provide when you access our Materials or register for our events. When you access or download PayPal Giving Fund’s Materials or register for our events, you may be asked to provide certain personal data, such as your name and business contact information.
- Information you provide when you contact us. Information you disclose when you contact PayPal Giving Fund directly, such as your contact information. This may include information about others if you choose to share it with us.
- Categories of Personal Data collected from third parties:
- PayPal user profile information. When you enroll a charity with PayPal Giving Fund using a PayPal Confirmed Charity account, PayPal will link the account to PayPal Giving Fund and share the following account user profile information with us: first and last name and email address of the individuals who registered the charity with us.
- PayPal transaction details. PayPal acts as our payment processor. When you make a donation, PayPal Giving Fund may also receive information about you from other sources. We collect your PayPal transaction details from PayPal Australia Pty Limited to make grants to Enrolled Charities and maintain records of transactions conducted through our Services. This information includes your name, address, email address, phone number, name of the charity that you support and the information about your donation.
- Information you provide when you contact PayPal customer support. When you contact PayPal customer support teams about PayPal Giving Fund Services, PayPal may share with us information you provided to PayPal, such as your name, PayPal Giving Fund Services you have used, information about your donor transaction, recorded conversations, chat conversations and email correspondence with customer support.
- PayPal-inferred risk assessments. PayPal shares with us risk assessment inferences drawn from donor’s Personal Data processed by PayPal.
- Our Partners, such as those who may operate websites or apps that enable donations to PayPal Giving Fund. Our Partners might share details of donations with us, such as donor’s name, email, the amount and date of the donation, and the charity selected by the donor.
- Categories of Personal Data automatically collected about you, including through cookies and similar tracking technologies, and your devices:
- Data collected from cookies and other tracking technologies, such as email open rate analytics.
5. Why and How Long Do We Retain Personal Data?
We retain Personal Data to fulfill our legal or regulatory obligations and for our business purposes. We may retain Personal Data for longer periods than required by law if it is in our legitimate business interests and not prohibited by law.
The criteria used to determine our retention period is as follows:- Personal Data used for the ongoing relationship between you and PayPal Giving Fund is stored for the duration of the relationship plus a period of 10 years.
- Personal Data in relation to a legal obligation to which we are subject is retained consistent with the applicable law, such as under applicable bankruptcy laws and AML obligations.
- We retain Personal Data for the least amount of time necessary where retention is advisable in light of litigation, investigations, audit and compliance practices, or to protect against legal claims.
6. How Do We Process and Use Personal Data?
We use Personal Data as necessary to provide and operate our Services and to fulfil our pre-contractual and contractual obligations to you. These activities include:
- to provide our Services, to fulfil relevant agreements with and to otherwise administer our relationship with you;
- to receive and manage donations;
- to provide donation and/or grant information to donors and Enrolled Charities;
- to provide donation receipts and appropriate tax documentation to donors;
- to perform customer service;
- to communicate with you in relation to our Services;
- to comply with our internal procedures;
- to administer our Services, and for internal operations;
- to comply with laws and enforce our agreements with you and other people who use our Services.
We have a legitimate interest in ensuring that PayPal Giving Fund’s Services are secure, that we continue to offer our Services in ways that are innovative and of interest to you, and that we promptly resolve any issues in connection with the donations and grants to Enrolled Charities.
These activities include:
- To manage and improve our Services. For example, we do user research to improve our products’ performance and abilities;
- To protect our Services and users from risk and fraud, including fraud that involves our partners;
- To contact donors to resolve issues with their donations, for example when we are unable to make a grant to the charity donors have recommended;
- To contact Enrolled Charities to resolve any difficulties with their enrollment with PayPal Giving Fund, for example if we are unable to pay a grant to a charity.
We have a legal obligation under applicable laws to conduct certain processing activities.
We do this where it is necessary to comply with applicable laws. These activities include:
- to provide our Services;
- to establish, exercise or defend a legal claim or collection procedures;
- to prevent misuse of our Services as part of our efforts to keep our Services safe and secure;
- to confirm with Enrolled Charities that the grants we make are used to further their charitable purposes;
- to disclose information collected through the PayPal Giving Fund Services to third parties to comply with our legal obligations in certain circumstances, such as crime prevention.
We rely on your explicit and voluntary consent to process your Personal Data for the following processing activities:- When you use our Services and choose an Enrolled Charity to be the intended beneficiary of a donation, we may, with your consent, disclose your name and email address to the Enrolled Charity that you have designated. We do not share that information with charities until they enroll with PayPal Giving Fund and accept our terms and conditions. When we share your contact information with the charity, we match it with the donation details we share with the charity, including the amount of your donation.
- At the point of enrollment, Enrolled Charities may nominate a contact and opt in to receive updates from PayPal Giving Fund. We use this data to contact Enrolled Charities about our Services, for example to make charities aware of new opportunities to benefit from funds raised by PayPal Giving Fund and to invite charities to participate in competitions and other initiatives that may benefit them.
- Enrolled Charities may opt in to share their contact information with our partners so that partners can contact them directly about charity campaigns that might benefit Enrolled Charities.
- To market to you about our Services. When you provide your contact information to access PayPal Giving Fund Materials, you may opt in to receive marketing communications from us. You may change your mind and withdraw your consent at any time by contacting us here. Note that withdrawing your consent will not affect the lawfulness of any processing we have conducted prior to your withdrawal. Please refer to Section 9 (What Privacy Choices Are Available to You?) for more information on your right to withdraw your consent.
7. Do We Share Information?
We may share your Personal Data or other information about you with others in a variety of ways as described in this section.
- With PayPal and PayPal Companies, to provide you with the Services and for our business purposes. The receiving PayPal company will process your Personal Data in accordance with this Privacy Policy.
- With service providers, that operate at our direction and on our behalf to perform services we outsource to them, such as compliance and audits.
- With authorities, to the extent we are under a legal obligation to do so. Such authorities include courts, tax authorities, police authorities, enforcement authorities, and supervisory authorities in relevant countries. We may also be required to provide competent authorities, such as revenue or tax authorities, information about your use of our Services, which may include your name and address.
- With Enrolled Charities, when we share donation details, such as the amount of the donation and the program and campaign through which the donation was made, with the benefiting charity.
- With Enrolled Charities, which have enrolled with PayPal Giving Fund, when donors consent to share their contact information with the Charity.
- With PayPal Giving Fund’s partners, whether and when the donated funds were granted to the benefiting charity. We may also share information to enable partners to transmit donation receipts to their users on behalf of PPGF.
- With PayPal Giving Fund’s partners, when Enrolled Charities opt in to share their contact information so that partners can contact them directly about charity campaigns that might benefit Enrolled Charities.
- With third parties that are independent data controllers, for example when we share Personal Data with authorities or acquirers. Please be aware that these parties’ privacy notices apply to the processing of Personal Data that you share directly with them.
- With buyers or acquirers in connection with a business transfer, for example if we merge with, or are acquired by another entity, we may share your Personal Data with an acquiring entity.
8. Use of Cookies and Tracking Technologies.
When you interact with our website and Services or open email we send you, we, PayPal, or our partners may use cookies and other tracking technologies such as pixel tags, web beacons, and widgets (collectively, “Cookies”) to recognise you as a website user, customise your online experiences and online content, including to serve you interest-based advertising, perform analytics; mitigate risk and prevent potential fraud, and promote trust and safety across PayPal websites and our Services. Certain aspects and features of our website and Services are only available through the use of Cookies, so if you decline certain Cookies, your use of our website and Services may be limited or not possible.
PayPal uses Cookies to collect your device information, internet activity information, and inferences as described in the PayPal Privacy Statement.
Cookies help us and PayPal to do the following:- Remember your information so you do not have to re-enter it
- Track and understand how you use and interact with our online services and emails
- Tailor our online services to your preferences
- Measure how useful and effective our services and communications are to you
- Otherwise manage and enhance our products and services
Do Not Track (DNT) is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third parties.
At this time PayPal websites are not designed to respond to DNT signals or similar mechanisms from browsers.
Please review PayPal Statement on Cookies and Tracking Technologies to learn more about the use of Cookies.
9. What Privacy Choices Are Available to You?
You have choices when it comes to the privacy practices and communications described in this Privacy Policy. Many of your choices may be explained at the time you sign up for or use our Services or in the context of their use. You may be provided with instructions and prompts within the experiences as you navigate the Services.
Your choices about how we communicate with you differ depending on the purpose of the message and how it is delivered. Some messages are considered optional, and some are necessary for us to provide our Services. We use email, phone, and paper mail, depending on the situation, to communicate with you.
You also have choices regarding disclosures we make that are considered optional. If you indicate that you would like to allow optional disclosures, third parties may contact you. For example, donors have a choice about whether we share their contact information with the charities they support. If you are a donor, you may, at the time of your donation, opt in to share your information with the benefitting charity.
Enrolled Charities, in turn, can choose whether to share their contact information with our partner organisations (websites and online services with which we partner with to donate to PayPal Giving Fund), so that they can be contacted about campaigns to benefit them on the partner platforms. If you are a Enrolled Charity, you can indicate your communication preferences at registration or change your communication settings in your profile. You may also contact us.
If you opt into receiving marketing communications from us, you may opt out by following the instructions in the communications you receive.
10. What Are Your Rights?
You have certain rights in respect of your Personal Data. In particular, you have a right of access and correction.
If you are a donor and have a PayPal account, you can exercise your rights by accessing “Data and Privacy” from Account Settings in the PayPal app. Even if you do not have a PayPal account, you can submit your request by contacting us. You can submit a request related to someone else’s information, if you are their authorised agent, by contacting us. Please note that we may require you to provide additional information for verification.
If you are an individual associated with an Enrolled Charity or have submitted your information to access PayPal Giving Fund Materials, you may exercise your rights by contacting us.
11. How Do We Protect Your Personal Data?
We maintain technical, physical, and administrative security measures designed to provide reasonable protection for your Personal Data against loss, misuse, unauthorised access, disclosure, and alteration.
The security measures include firewalls, data encryption, physical access controls to our buildings and files, and information access authorisation controls.
While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of any password(s) and account/profile registration information and verifying that the Personal Data we maintain about you is accurate and current.
12. Can Minors Use Our Services?
Our Services are not directed to and should not be accessed by children under the age of majority. We do not knowingly collect information, including Personal Data, from minors or other individuals who are not legally able to use our Services. If we obtain actual knowledge that we have collected Personal Data from a minor, we will promptly delete it, unless we are legally obligated to retain such data. Contact us if you believe that we have mistakenly or unintentionally collected information from a minor.
13. What Else Should You Know?
Notification of changes
We may amend this Privacy Policy at any time by posting a revised version on our website. The revised version will be effective at the time we post it and in no event later than 7 days from the date of posting. Your continued use of the Services following the posting of amendments will be considered consent to all amendments to this Privacy Policy. If you disagree with the terms of this Privacy Policy, please do not use the PayPal Giving Fund Service.
Transfers of Your Personal Data to Other Countries.
Our operations are supported by a network of computers, cloud-based servers, and other infrastructure and information technology, including, but not limited to, third-party service providers. We and our third-party service providers store and Process your Personal Data outside of Australia, in the United States of America and elsewhere in the world. If your Personal Data is transferred to other countries, we will protect your information as described in this Privacy. By using our websites and Services, you consent to your personal information being transferred to other countries, including countries that have different data protection rules. We do not represent that our website and Services are appropriate or available in any particular jurisdiction.
Accessing and changing your information
You can review the personal information you have provided us and make any desired changes to such information at any time by contacting us.
14. Our Contacting Information
If you have any questions or concerns regarding this Privacy Policy, please contact us. Alternatively, you can contact us at:
Email: auexecutiveescalations@paypal.com
Mail:
Privacy Officer
PayPal Giving Fund
GPO Box 351
Sydney NSW 2001
15. Definitions
- PayPal means PayPal, Inc., PayPal Australia Pty Ltd or their affiliates.
- PayPal Companies means companies or separate brands, affiliates or subsidiaries of PayPal who process Personal Data in accordance with their terms of service and privacy policy. PayPal Companies include PayPal Charitable Giving Fund, a parent company of PayPal Giving Fund, and its subsidiaries.
- PayPal Giving Fund, “we”, “our” or “us” means PayPal Giving Fund Australia, a Public Ancillary Fund (ABN 65 106 950 945) registered with the Australian Charities and Not-for-profits Commission and endorsed by the Australian Taxation Office as a tax concession charity and deductible gift recipient.
- Enrolled Charities means as defined in the Charity User Agreement.
- Partner means businesses that provide websites or applications to enable donors to make donations to the PayPal Giving Fund and as defined in Section 1.
- Personal Data means information that can be associated with an identified or directly or indirectly identifiable natural person. “Personal Data” can include, but is not limited to, name, postal address (including billing and shipping addresses), telephone number, email address, payment card number, other financial account information, account number, date of birth, and government-issued credentials (e.g., driver’s license number, national ID, passport number).
- Processing means any method or way that we handle Personal Data or sets of Personal Data, whether by automated means, such as by collection, recording, categorisation, structuring, storage, adaptation or alteration, retrieval, and consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of Personal Data.
- You in this policy means an Enrolled Charity, a donor, or an individual whose Personal Data we collect to provide access to PayPal Giving Fund Materials and Services.