GivesSpark ("we", "us", "our") is committed to protecting the privacy of all users of our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
When a company registers for GivesSpark, we collect: full name, professional email address, company name, company size, phone number (optional), and payment information processed by our PCI-DSS compliant payment provider.
When an employee enters a draw, we collect: name, professional email address, and employment verification data (provided by SSO or email). We do not store passwords.
We never sell, rent, or share your personal data with third parties for marketing purposes.
All personal data is stored on servers located within the European Union. Data is encrypted at rest using AES-256 and in transit using TLS 1.3. We maintain SOC 2 Type II compliance.
Participant data is retained for the duration of the draw plus 12 months for audit purposes, after which it is permanently deleted. Administrators may request deletion at any time by contacting privacy@gives-spark.com.
Under the GDPR, you have the right to access, rectify, erase, restrict, or port your personal data. To exercise any of these rights, contact us at privacy@gives-spark.com. We will respond within 30 days.
We use essential cookies only (session management). We do not use tracking or advertising cookies. A full cookie policy is available at Cookie Policy.
Data Controller: GivesSpark SAS — 12 Rue de la Paix, 75002 Paris, France. For privacy inquiries: privacy@gives-spark.com.