Privacy and data handling

This section explains key terms used in this privacy notice so you can quickly understand what we mean by personal data, processing, service and cookies in the context of Contribute.digital.

We collect the minimum personal information required to provide advisory services, verify identity and meet legal obligations. Collection is based on contractual necessity, consent where applicable, and compliance with business regulations.

When you interact with Contribute we may collect information you provide directly so we can open accounts, manage preferences and deliver ethical commitment services tailored to your needs.

• Identity details: name, date of birth, nationality and identification numbers required for verification and compliance.
• Contact details: email address, postal address and phone number to communicate account, service updates and support.
• Business and commitment profile: risk tolerance, commitment objectives, revenue range, collection preferences and transaction history necessary to provide appropriate commitment paths.
• Payment and billing information: bank account or card details processed by our payment partners to enable purchases and subscriptions.
• Communications and preferences: messages, survey responses, marketing consents and support interactions to improve service and respect your choices.
• Verification and compliance data: documents and disclosures required to meet regulatory checks, anti-funds laundering and know-your-customer requirements.

Some information is collected automatically when you visit Contribute.digital to operate the service, analyze performance and protect accounts.

• Device and technical data: IP address, browser type, operating system, device identifiers and screen resolution.
• Usage data: pages visited, time spent, clicks, session data and feature usage to inform product improvements and personalization.
• Location data: coarse location derived from IP address when needed to comply with local rules and present relevant content.
• Analytics and performance data: aggregated metrics collected via analytics providers to measure service performance and user engagement.
• Security and fraud detection data: logs, authentication records and behavioral signals used to detect and respond to suspicious activity.
• Cookie data and identifiers: unique identifiers set by cookies or similar technologies to remember preferences and enable features.

We may receive data about you from trusted third parties to verify identity, process payments and improve service relevance. We limit the data we accept to what is necessary.

• Payment processors and banks that provide transaction confirmations and payment status.
• Identity verification and compliance providers who supply KYC/AML validation.
• Analytics and advertising partners that provide aggregated usage insights and performance data.

We use personal data for a limited set of purposes that support delivering commitment services with an ethical focus, comply with law and maintain secure operations.

• To create and manage your Contribute account and authenticate access to the platform.
• To provide commitment recommendations, collection management tools and personalized ethical commitment paths based on your profile.
• To process payments, subscriptions and billing through secure payment providers.
• To communicate service updates, regulatory notices and operational messages relevant to your account.
• To perform regulatory compliance checks including identity verification and anti-funds laundering screening.
• To detect and prevent fraud, abuse or security incidents affecting our systems or customers.
• To analyze service usage and improve features, content and the user experience of Contribute.digital.
• To send marketing communications where you have opted in and to manage your marketing preferences when you opt out.

Depending on your location and the nature of the processing, we process personal data on lawful grounds such as consent, contract performance, legal obligations and legitimate interests.

• Consent: where you have explicitly given permission for a specific processing purpose, such as marketing emails.
• Contract performance: processing necessary to deliver services you request, manage your account and process transactions.
• Legal obligation: processing required to comply with applicable laws, regulatory or tax requirements.
• Legitimate interests: processing to operate and secure the platform, prevent fraud and improve service, balanced against individuals' rights.

Contribute.digital uses cookies and similar technologies to ensure the platform functions correctly, to remember preferences and to collect analytics that help us enhance the service.

We use session cookies, persistent cookies, functional cookies, analytics cookies and optionally advertising cookies when you have given consent for targeted ads.

Essential cookies enable the site to work. Preference cookies remember settings. Analytics cookies measure usage. Advertising cookies support personalised offers when permitted.

You can manage cookie preferences through your browser settings and our cookie banner. Disabling certain cookies may affect site functionality and personalized features.

Read our Cookie Policy for a detailed list of cookies and how to manage them.

We share personal data only as needed to provide services, comply with law and operate the business, and we require partners to protect the data appropriately.

• Service providers: cloud hosting, analytics, identity verification and customer support partners who process data under contract.
• Payment processors and banks to complete transactions and verify payment status.
• Regulatory and law enforcement authorities when required by law or to respond to legal requests.
• Professional advisors and auditors for legal, compliance and accounting services.
• Acquirers or partners in the event of a business reorganization, merger or sale, subject to confidentiality obligations.
• Other users only in limited interactive features where you explicitly consent to share information with third parties.

To deliver services, we may transfer personal data to countries with different data protection laws. Transfers are limited to trusted providers and required operational locations.

When transferring data we rely on appropriate safeguards such as standard contractual clauses, data processing agreements and technical measures like encryption to protect information.

We retain personal data only as long as necessary for the purposes described, taking into account legal obligations and legitimate business needs.

Account data is retained for the active life of the account and for a reasonable period after account closure to meet legal, tax and fraud prevention requirements.

Records of communications, support tickets and transactional messages are retained for a period necessary to resolve issues and to comply with regulatory retention rules.

System logs and security monitoring data are retained for operational troubleshooting and security contribute in line with internal policies.

When retention periods expire we securely delete or anonymize data. You may request deletion subject to legal and operational constraints that require certain records to be retained.

Protecting personal data is a priority. We implement technical and organizational measures designed to reduce risk, detect incidents and limit unauthorized access in a manner appropriate to the sensitivity of the data.

• Encryption in transit and at rest for sensitive data and secure key management practices.
• Access controls, multi-factor authentication and role-based permissions for internal systems.
• Regular security assessments, monitoring, logging and incident response procedures to identify and remediate vulnerabilities.

Depending on your location, you have rights over your personal data. We make it straightforward to exercise these rights and will respond within the timeframes required by applicable law.

• Right of access: request a copy of personal data we hold about you.
• Right to rectification: correct inaccurate or incomplete data.
• Right to deletion: request erasure of personal data where lawful and appropriate.
• Right to restriction: request that we limit how we process your data in certain circumstances.
• Right to portability: request a machine-readable copy of data you provided to transfer to another provider.
• Right to object: object to direct marketing or processing based on legitimate interests.
• Right to withdraw consent: if you have provided consent, you may withdraw it at any time without affecting processing before withdrawal.
• Right to lodge a complaint with a supervisory authority if you consider your data is not being processed lawfully.

If you are located in the European Economic Area, this section explains how we meet GDPR requirements and how EU data subject rights are handled by Contribute.

We apply GDPR principles to processing that concerns EU residents. This includes lawful bases, transparency, data minimization and respecting rights such as access and portability.

• Data protection officer contact and internal processes to respond to EU data subject requests in compliance with GDPR.
• Documentation of processing activities, security measures and data transfers where EU protections are required.
• Coordination with EU-based subprocessors and use of appropriate transfer mechanisms for data leaving the EEA.
• Procedures to respond to data subject rights requests within legally required timeframes and to provide transparency on processing.

If you are an EU resident and have concerns about our processing of your personal data, you may contact us or file a complaint with an EU supervisory authority.

To exercise any privacy rights, please contact our privacy team at [email protected] or by mail at the address below. Provide sufficient details to help us locate your records and verify your identity.

[email protected]

We aim to respond to valid requests within applicable legal timeframes, typically within 30 days; complex requests may take longer and we will inform you if an extension is needed.

We may send promotional content about commitment opportunities, educational resources and product updates where you have opted in. Communications are tailored to your interests while respecting your preferences.

You can unsubscribe from marketing messages at any time using the unsubscribe link in emails or by contacting [email protected]. Unsubscribing will not affect service-related messages.

Contribute services are intended for adults and are not directed to children under 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, contact us to request deletion.

Our site may contain links to third party websites. We are not responsible for their privacy practices. Review third party privacy notices before providing any personal data to them.

We share personal data only as needed to provide services, comply with law and operate the business, and we require partners to protect the data appropriately.

Read our Cookie Policy for a detailed list of cookies and how to manage them.

We periodically update this privacy notice to reflect changes in our practices or legal requirements. The policy effective date is 29-03-2026. Material changes will be communicated via Contribute.digital or email.