Donor Privacy in Online Auctions

Donor privacy in online auctions

Donors care about their privacy online. Many nonprofits have hurt trust by sharing donor lists, spamming donors, and announcing gifts without consent.

When donors bid or give on your auction page, they trust you with personal information. Names, emails, phone numbers, payment details, and donation amounts. Treating this data with respect is crucial for trust. It is also a legal requirement in many places.

This guide covers how to protect donor privacy in online auctions.

How to protect donor privacy

1. Comply with data privacy laws
2. Use privacy controls in your auction platform
3. Prevent donor list sharing
4. Track data exported from your auction platform

1. Comply with data privacy laws

Several laws protect donor data. They apply where your donors live, not where your organization operates.

• GDPR for European residents
• PIPEDA for Canadian residents
• State laws in the US like CCPA (California)

You can comply by:

• Getting consent for data collection and communications
• Being transparent about how you use data
• Deleting personal donor info promptly when asked
• Notifying donors if their data has been leaked
• Using secure software
• Training your staff about security

Communication privacy. Laws like the CAN-SPAM Act, Canada's anti-spam legislation (CASL), and the Telephone Consumer Protection Act give donors the right to limit how you contact them.

Comply with communication laws by:

• Offering easy opt out options
• Letting donors choose which types of messages they receive
• Obtaining consent before collecting data and sending communications

Charity auction software security covers what to look for in your platform.

2. Use privacy controls in your auction platform

When you set up your auction, look for these settings.

Anonymous donation options

Not all donors want public recognition. Some prefer to give quietly. Others have personal or professional reasons to stay anonymous.

Your platform should let donors:

• Remain anonymous to the public while you track donations and bids internally
• Choose whether their name appears on leaderboards

Administrative permission controls

Donor data should only be accessible to authorized staff.

In your auction platform:

• Set different permission levels for different staff
• Restrict access to sensitive info like payment details (if stored on the platform)

Easy data deletion

Privacy laws require you to delete data when donors request it.

Your platform should handle deletion requests without complicated processes. Some platforms let donors delete their own profiles.

Payment information. Payment processors may keep transaction records for tax and legal compliance. They use tokenization so they do not store full credit card numbers. They store encrypted tokens that cannot be used to obtain payment details.

Secure auction payment methods explains how tokenization works. Credit card processing in CharityAuctions covers CharityAuctions specific setup.

3. Prevent donor list sharing

A major complaint that drives donors away is receiving solicitations from organizations they have never supported. This happens when nonprofits share or sell donor lists.

Sharing donor lists is generally unethical. Selling donor lists is illegal under some privacy laws. Even sharing with similar nonprofits for free can violate donor trust. Do not do it without explicit donor consent.

To prevent donor list sharing in your auction software:

• Use admin permission controls
• Track who exports reports and where reports go
• Choose a platform you trust not to sell donor data

Team members who volunteer elsewhere may share donor info without you knowing. Limit and track access when you can. Make sure you trust your auction platform not to sell data to commercial organizations.

4. Track data exported from your auction platform

It is easy to lose track of data when different people access your software.

Example: Two volunteers export reports to two different locations. When you clean out donor lists, you delete from one location and forget the other. Or a volunteer exports reports to their personal device.

Create a protocol for exporting data. Ask:

• Who is in charge of data exports?
• Where should data be exported to?
• Who keeps track of auction software logins?

Keep a record of reports exported from your auction software.

Auction software security features covers admin controls and data protection.

How CharityAuctions protects donor privacy

CharityAuctions implements privacy controls including:

• Anonymous donation options
• Option to leave all bidding anonymous
• Administrative permission controls
• Ability for bidders to delete their bidder profiles
• Item donor visibility settings

Create your auction to get started. Charity auction software security for a full security guide.