Privacy Policy

Last updated: 10 October 2026

This policy explains how Help With Rob's Debt ("we", "us") uses your personal data. We comply with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018 and the ePrivacy Regulations (S.I. No. 336 of 2011). You can contact us at hola@helpwithrobsdebt.com.

Data We Collect

• Donations: amount, email address, full name, an optional public display name and message, acceptance of the terms, the payment references Stripe gives us, and the country of your billing address (shown on the donor wall). Card details go straight to Stripe; we never see them, and we do not record your IP address or browser.
• Updates sign-up: your email address, if you choose to receive updates.
• Contact form: your name, email address and message.
• Analytics and advertising data: only if you accept the relevant cookies (see below).

Why We Use It and Our Legal Basis

• Processing your donation and sending a receipt (contract, Art. 6(1)(b) GDPR)
• Keeping financial records (legal obligation, Art. 6(1)(c))
• Preventing fraud and spam, and answering your messages (legitimate interests, Art. 6(1)(f))
• Sending updates, analytics and advertising measurement (consent, Art. 6(1)(a))

Who We Share It With

• Stripe (payments)
• Microsoft Azure (hosting and donation records, EU data centres)
• Resend (email delivery and the updates list)
• Cloudflare (DNS and Turnstile spam protection)
• Google (Tag Manager, Analytics and Ads), only with your consent
• Meta Platforms Ireland and LinkedIn Ireland (advertising measurement), only with your consent

Some of these providers transfer data to the United States under the EU-US Data Privacy Framework or Standard Contractual Clauses. We never sell your data.

How Long We Keep It

• Donation records: for as long as the fundraiser runs, and then only as long as accounting and tax law require
• Updates list: until you unsubscribe
• Contact messages: as long as needed to deal with your enquiry
• Google Analytics data: up to 14 months
• Your cookie choice: 6 months, after which we ask again

Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

You can also complain to the Data Protection Commission at dataprotection.ie.

Subject Access Requests

To exercise your rights or submit a Subject Access Request, please email us. We will respond within one month.

Cookies

Strictly necessary cookies are always on. Analytics and marketing cookies are only used if you say yes in the cookie banner; until then Google Tag Manager is not loaded at all, and we use Google Consent Mode v2 so Google services respect your choice. You can change or withdraw your consent at any time in cookie settings, and you can block cookies in your browser.