This Privacy Notice explains how Annie La (trading as "TimeGivers", "we", "us", "our") handles personal information when you use the TimeGivers volunteer coordination platform (the "Service").
1. Who we are
Annie La is the operator of TimeGivers and acts as the data controller for personal information about account holders (administrators, staff) collected through the Service. When an organisation uses TimeGivers to manage its volunteers, that organisation is the controller of its volunteers' personal information and TimeGivers acts as its processor.
2. Information we collect
- Account information — name, email, password hash, organisation name, role, contact details.
- Volunteer records you upload — names, contact details, availability, skills, group memberships, compliance status and expiry dates, reference numbers, notes.
- Scheduling & activity data — shifts, sign-ups, attendance, check-ins, messages, templates.
- Support communications — messages you send us.
- Technical data — IP address, device and browser information, approximate location, log data, usage/telemetry, cookies (see section 9).
Payment information (card details, billing address) is collected directly by our Merchant of Record, Paddle, and is not stored by us.
3. How we use personal information
| Purpose | Legal basis |
|---|---|
| Create and secure accounts, provide the Service | Performance of contract |
| Deliver scheduling, messaging and compliance features | Performance of contract |
| Customer support and account communications | Performance of contract / legitimate interests |
| Fraud prevention, abuse detection and security | Legitimate interests / legal obligation |
| Product analytics and improvement | Legitimate interests |
| Marketing about TimeGivers (opt-in where required) | Consent / legitimate interests |
| Comply with legal, tax and accounting obligations | Legal obligation |
4. Who we share it with
- Service providers and subprocessors that help us run the Service — hosting and infrastructure, authentication, database, email delivery, error monitoring, analytics and customer support tooling.
- Paddle.com, our Merchant of Record, for order processing, subscription management, payments, tax compliance and invoicing.
- Your organisation — if you're a volunteer, the administrators of the organisation that invited you can see the information about you they've put into TimeGivers.
- Professional advisers such as our lawyers and accountants, where reasonably necessary.
- Authorities where required by law, court order, or to protect rights, property or safety.
- A successor in connection with a merger, acquisition or sale of assets, subject to standard confidentiality protections.
We don't sell personal information.
5. International transfers
Personal information may be processed in countries outside your own, including Australia, the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
6. Data retention
We keep personal information only as long as needed for the purposes described above, to run our business, and to meet legal, tax and accounting obligations. When information is no longer needed, we delete or anonymise it. When an organisation closes its account, we delete or anonymise its volunteer records within 90 days, except where retention is required by law.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information; to portability; and to withdraw consent. To exercise these rights, email support.timegivers@gmail.com. We respond within 30 days (or as required by applicable law).
If you're a volunteer, please contact your organisation first — they control your record and we'll refer requests to them.
If you're in the UK/EEA, you can complain to your local data protection supervisory authority. In Australia, you can complain to the Office of the Australian Information Commissioner (OAIC).
8. Security
We use appropriate technical and organisational measures to protect personal information, including encryption in transit, access controls, role-based permissions, and secure hosting. No system is 100% secure — please use a strong, unique password and let us know immediately if you suspect any unauthorised access.
9. Cookies
We use a small number of cookies and similar technologies:
- Essential — required for login and to keep the Service running.
- Analytics — help us understand how the Service is used so we can improve it. You can decline these where a cookie banner is presented.
You can manage cookies through your browser settings.
10. Children
TimeGivers isn't directed to children under 16. Please don't upload records about under-16s unless your organisation has appropriate legal basis and parental/guardian consent where required.
11. Changes
We may update this Notice from time to time. When we do, we'll update the "Last updated" date above and, for material changes, give you notice through the Service or by email.
12. Contact
Annie La (TimeGivers) — Victoria, Australia.
Privacy contact: support.timegivers@gmail.com.
See also our Terms of Service and Refund Policy.