Privacy Policy

What we collect, why we collect it, and how it's protected.

This Privacy Policy explains how NGO Desk and its Donation Management System (DMS) (together, the "Platform") collect, use, and protect the personal data of NGOs, donors, volunteers, and staff users on our donation management platform. It applies wherever you interact with the Platform — the public website, donor, volunteer, and NGO registration forms, online payments, and the DMS dashboard itself.

01 Information we collect

Who What we collect
Donors Full name, email, WhatsApp/phone number, address, CNIC (national ID) number and a copy of the CNIC document, and a screenshot/proof of payment when registering a sponsorship.
Volunteers Full name, email, phone number, profession, date of birth, a copy of your ID document, and your stated purpose for volunteering, collected when you apply through an NGO's volunteer registration page.
NGOs Organization name, contact email and phone, address, logo, package/plan selection, and — if provided — a payment proof for the subscription fee.
Card donors When paying by card, your name, email, and card details are collected directly by our payment processor (Safepay) — we never see or store your full card number.
Everyone Basic technical data such as IP address and browser information, used for security, error logging, and to detect your approximate country so we can display donation amounts in your local currency.

02 How we use it

We use this information to verify donor, volunteer, and NGO identity; process and record donations, sponsorships, and volunteer applications; activate and bill NGO subscriptions; send account and transactional emails (welcome emails, password resets, subscription reminders, donation confirmations, volunteer approval notices); respond to messages submitted through our Inquiry page and live chat; and to prevent fraud and abuse of the Platform.

03 How we share it

A donor's or volunteer's registration details, ID document, and payment proof are visible only to the NGO they registered with, so that NGO can verify and manage the relationship — we do not share donor or volunteer details across unrelated NGOs. Card payment details are handled directly by our payment processor, Safepay, under its own privacy and security standards; we receive only the payment result and amount, never your card number. Manual bank transfer and mobile wallet payments (JazzCash, Easypaisa, and similar) are verified from the proof you or the NGO upload, without sharing your banking credentials with us. We do not sell personal information to third parties.

04 Storage & security

Uploaded documents (CNIC copies, volunteer ID documents, payment proofs, logos) and account data are stored on secured servers with access restricted to authorized platform administrators and the relevant NGO's own staff. Passwords are stored using industry-standard hashing, never in plain text, and two-factor authentication is available for DMS accounts that want an extra layer of login security. As with any online service, no method of storage or transmission is 100% secure, but we take reasonable, industry-standard measures to protect your information.

05 Your rights

You may ask us to access, correct, or delete the personal information we hold about you by reaching out through our Inquiry page. Some information — such as records of a completed donation — may need to be retained for accounting and accountability purposes even after a deletion request.

06 Cookies & tracking technologies

The DMS uses a first-party session cookie to keep you signed in; it's essential to the service and carries no advertising data. On the public site, we use Microsoft Clarity to understand how visitors use our pages (aggregated behavior analytics, not used to identify you personally), and — where an NGO's SuperAdmin has enabled it — Google Analytics and/or Google Tag Manager for traffic reporting. Registration forms are protected by a self-hosted CAPTCHA that we generate ourselves, so solving it never sends your data to a third party. We do not use third-party advertising or retargeting cookies, and we do not sell browsing data.

07 Children's privacy & beneficiary records

The Platform is intended for use by NGOs, donors, and volunteers aged 18 and over. Beneficiary records — orphans, widows, institutions, and similar sponsorship categories an NGO supports — may include minors' information, entered and managed entirely by the NGO responsible for their care under its own safeguarding obligations; NGO Desk does not independently collect this data from the public.

08 Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

09 Inquiry

Questions about this policy or your data? Reach us via our Inquiry page.

NGO Desk Support
Connecting…