Privacy Policy

Last updated: July 2026

This page explains what happens to your information when you donate through our website. We're a small, volunteer-run community group — we only collect what we need to process your donation and keep proper records, and we never sell your information to anyone.

Who's behind this

This site is run by Castletown Community Development Association CLG, a company limited by guarantee registered in Ireland (CRO number 771432). If you have any question about your information, email us at castletowncda@gmail.com — that's the quickest way to reach us.

We're a registered charity with the Charities Regulator — Registered Charity Number (RCN) 20207069. We don't yet hold charitable tax-exemption status from Revenue; we'll update this page when that changes.

What we collect

When you donate, we ask for:

• Your name
• Your email address
• Your phone number (optional — fine to leave blank)
• The amount and how often you'd like to give (one-time, monthly or yearly)
• Whether you're an Irish taxpayer (see below)
• Your consent choices — whether you're happy with this policy, and whether you'd like occasional updates from us

Your card details

Your card number is entered directly into a secure field provided by Stripe, our payment processor. It never passes through or gets stored on our website or our systems — Stripe handles the payment and just sends us back a reference so we can match it to your donation. Stripe meets the highest card-industry security standard (PCI-DSS Level 1).

Why we use it this way

• To process your donation and send a receipt — this is the whole point of you giving us your details.
• To keep accurate financial records — Irish companies are legally required to keep proper books of account.
• To manage recurring donations — setting up, maintaining, and cancelling them if you ask.
• To send project updates — only if you've ticked the box for it. You can ask us to stop any time.
• For tax relief on donations — only with your agreement, and only once we have charitable tax-exemption status (see below).

The "Irish taxpayer" question

Once a charity has tax-exemption status, it can reclaim tax on donations of €250+ a year from Irish taxpayers — at no cost to the donor. That's the only reason we ask.

Who else sees your information

We don't sell or rent it out. It only goes to the providers who help us run the donation process:

• Stripe — processes the card payment
• Supabase — stores your donation record, on EU (Ireland) servers
• Netlify — hosts the website and the code that handles your donation
• Revenue — only if you've opted into the tax-relief scheme above

Each of these has their own data protection obligations to us. We'd also share information if the law required it.

Cookies

We don't use advertising or analytics cookies. Stripe sets a few essential ones to keep payments secure and catch fraud — the donation form needs these to work. Our fonts load from Google Fonts, which means your browser talks to Google's servers when the page loads.

Where your data lives

Your donation record is stored within the EU. A couple of our providers (Stripe, Netlify) are international companies, so some information may be processed outside the EU under their standard data-protection safeguards.

How long we keep it

We keep donation and financial records for as long as Irish company law requires — generally six years — and longer where tax relief applies. If you've opted into updates, we keep your contact details until you ask us to stop.

Keeping it safe

The site uses HTTPS throughout. Card details never reach our systems — that's all Stripe. Access to donation records is limited, and our database runs on secure EU infrastructure. No system is perfectly secure, but we take this seriously.

Children

This donation site is meant for adults. We don't knowingly collect information from children — if you think a child has given us information, let us know and we'll remove it.

Your rights

You can ask us at any time to:

• See what information we hold about you
• Correct anything that's wrong or out of date
• Delete your information (in most circumstances)
• Limit or object to how we use it
• Get a copy of it in a portable format
• Withdraw consent — for example, to stop receiving updates

Just email castletowncda@gmail.com and we'll sort it out, usually well within a month. We may need to confirm it's really you first, to keep your information safe.

If something's not right

Please talk to us first — email castletowncda@gmail.com and we'll do our best to put it right. You can also raise a concern with Ireland's data protection regulator, the Data Protection Commission, at www.dataprotection.ie.

Updates to this page

We'll update this page if things change — for instance, once our charitable status comes through. We'll update the date at the top when we do.