1. Who we are
OliveGiving (Pvt) Ltd is the data controller for personal data processed on this platform.
2. What we collect
Account details (name, email, phone), identity/KYC information (national ID, date of birth, address) for donors and campaign organisers, and transaction records. We never store full card numbers — card data is handled by our payment providers.
3. Why we process it
To operate the platform, process donations and payouts, meet AML/CFT and tax obligations, prevent fraud, and communicate with you. We rely on your consent and on our legal obligations.
4. Consent
We record your consent to these terms, including the version accepted and the date. You may withdraw consent by closing your account, subject to records we must retain by law.
5. Retention
Financial records and donor identities are retained for at least five years as required by the Money Laundering and Proceeds of Crime Act.
6. Security
Data is transmitted over encrypted connections and access is restricted by role. In the event of a data breach we will notify POTRAZ within 24 hours as required.
7. Your rights & contact
You may request access to or correction of your data at privacy@olivegiving.org.