Donor Privacy in Online Auctions

What does donor privacy mean in a charity auction?

Donor privacy means a guest can bid and pay without their name, email, or gift being shared beyond the people who run your event. You keep the list. You do not sell it. You delete it if they ask.

Which privacy laws apply to charity auction donors?

These apply where the donor lives, not where you are:

• GDPR for European residents
• CCPA for California residents
• PIPEDA for Canadian residents

Communication laws sit next to those:

• CAN-SPAM Act for email in the US
• Canada's anti-spam legislation (CASL) for email in Canada
• Telephone Consumer Protection Act for phone and text in the US

How to protect donor privacy

1. Comply with data privacy laws
2. Use privacy controls in your auction platform
3. Prevent donor list sharing
4. Track data exported from your auction platform

1. Comply with data privacy laws

You can comply by:

• Getting consent for data collection and communications
• Being transparent about how you use data
• Deleting personal donor info promptly when asked
• Notifying donors if their data has been leaked
• Using secure software
• Training your staff about security

Comply with communication laws by:

• Offering easy opt out options
• Letting donors choose which types of messages they receive
• Obtaining consent before collecting data and sending communications

Charity auction software security covers what to look for in your platform.

2. Use privacy controls in your auction platform

When you set up your auction, look for these settings.

Anonymous donation options

Not all donors want public recognition. Some prefer to give quietly. Others have personal or professional reasons to stay anonymous.

Your platform should let donors:

• Remain anonymous to the public while you track donations and bids internally
• Choose whether their name appears on leaderboards

Administrative permission controls

Donor data should only be accessible to authorized staff.

In your auction platform:

• Set different permission levels for different staff
• Restrict access to sensitive info like payment details (if stored on the platform)

Easy data deletion

Privacy laws require you to delete data when donors request it.

Your platform should handle deletion requests without complicated processes. Some platforms let donors delete their own profiles.

Payment information. Payment processors may keep transaction records for tax and legal compliance. They use tokenization so they do not store full credit card numbers. They store encrypted tokens that cannot be used to obtain payment details.

Secure auction payment methods explains how tokenization works. Credit card processing in CharityAuctions covers CharityAuctions specific setup.

The same checkout and privacy rules apply when you list risk-free auction items. Guests pay through the processor. You do not send their emails to a travel vendor.

3. Prevent donor list sharing

A major complaint that drives donors away is receiving solicitations from organizations they have never supported. This happens when nonprofits share or sell donor lists.

Sharing donor lists is generally unethical. Selling donor lists is illegal under some privacy laws. Even sharing with similar nonprofits for free can violate donor trust. Do not do it without explicit donor consent.

To prevent donor list sharing in your auction software:

• Use admin permission controls
• Track who exports reports and where reports go
• Choose a platform you trust not to sell donor data

Team members who volunteer elsewhere may share donor info without you knowing. Limit and track access when you can. Make sure you trust your auction platform not to sell data to commercial organizations.

4. Track data exported from your auction platform

It is easy to lose track of data when different people access your software.

Example: Two volunteers export reports to two different locations. When you clean out donor lists, you delete from one location and forget the other. Or a volunteer exports reports to their personal device.

Create a protocol for exporting data. Ask:

• Who is in charge of data exports?
• Where should data be exported to?
• Who keeps track of auction software logins?

Keep a record of reports exported from your auction software.

Auction software security features covers admin controls and data protection.

How does CharityAuctions protect donor privacy?

According to CharityAuctions.com platform data, more than 50,000 organizations have used CharityAuctions since 2007. CharityAuctions implements privacy controls including:

• Anonymous donation options
• Option to leave all bidding anonymous
• Administrative permission controls
• Ability for bidders to delete their bidder profiles
• Item donor visibility settings

Create your auction to get started. See charity auction software security for a full security guide. See silent auction software for a full platform overview. See how to run a charity auction for a complete event planning guide.

---

This guide is maintained by CharityAuctions and is for informational purposes only. For legal guidance on donor privacy, consult your legal counsel. Questions about your auction? Talk to our team.