Privacy Policy
Our commitment
OrphanGive is operated by Children's Heaven Trust, a charitable organisation registered with the NGO Affairs Bureau of Bangladesh (Registration No. iv-98/2021). We hold your trust seriously. The information you share with us — your name, email, payment details, the records of your sponsorship — belongs to you, and we are its custodian, not its owner. This page explains what we collect, why, and what you can do about it.
What we collect
When you create an account with us, we collect:
Your full name and email address
Your country of residence (used for currency display and tax-receipt purposes only)
A password (stored as a one-way cryptographic hash; we never see your password in plain text)
When you sponsor a child, we additionally collect:
The name of the child or children you are sponsoring
The amount and frequency of your contributions
Records of all payments processed through our service
Any messages or notes you choose to send to the caretaker
We do not collect, store, or have access to your full payment card number, CVV, or bank account details. All payment processing is handled by Stripe, an internationally regulated payment processor. We receive only a token reference and the last four digits of the card for display purposes.
How we use what we collect
Your data is used solely for the operation of your sponsorship relationship with the child or children you support. Specifically:
To process your payments and renewals
To send you sponsorship updates, reports, and the messages and letters from your sponsored child
To send you receipts and other transactional emails
To respond to your questions when you contact us
To improve the service over time, anonymously and in aggregate
We do not sell your data. We do not share it with advertisers. We do not use it to build profiles for marketing purposes outside of OrphanGive. If we engage a service provider — for example, our email delivery partner Resend, or our hosting provider Hostinger — we share only the minimum data they need to perform their function, and they are bound by their own data-protection obligations.
Where your data lives
Our service is hosted in the European Union (Hostinger, Lithuania). Backups are encrypted and retained for fourteen days. Your data is processed under the laws of Bangladesh, where Children's Heaven Trust is registered. If you are resident outside Bangladesh, you should be aware that your data will cross international boundaries when you use our service. By using OrphanGive, you consent to this transfer.
Child data — a special note
The children listed on OrphanGive are minors. We hold their data — names, photographs, ages, locations, school reports — under exceptional care. Photographs and identifying details of children are visible only to sponsors who have an active sponsorship with that child, and only after a reveal request is approved. The public listing pages show only what is necessary to begin a sponsorship: first name, district, age, and a representative photograph cleared by their guardian.
We never publish a child's full address, school name, contact details, or medical records on the public site. These are held only for our internal use and shared with the child's active sponsor on a reveal-controlled basis.
If you believe child data is being mishandled on our service, please contact us immediately at hello@orphangive.org.
Your rights
You have the right to:
Request a copy of all data we hold about you
Correct any inaccurate data
Delete your account, which will anonymise your data on our service (records related to completed sponsorships are retained in anonymised form for our auditing obligations)
Withdraw consent for non-essential communications at any time
To exercise any of these rights, email hello@orphangive.org. We respond within fourteen days.
Cookies and tracking
We use only essential cookies — those required for the service to function, such as keeping you signed in and remembering your cart. We do not use advertising cookies, third-party tracking pixels, or analytics services that fingerprint individual users. See our [Cookie Policy](/cookies) for the full list.
Security
We hold our security obligations seriously. All connections to our service are encrypted via TLS 1.3. Passwords are hashed using industry-standard algorithms. Database backups are encrypted at rest. Access to our administration tools is restricted to authorised personnel of Children's Heaven Trust and protected by multi-factor authentication.
No system is perfectly secure, however. In the unlikely event of a data breach affecting your personal information, we will notify you within seventy-two hours of discovering it and inform you of the steps you can take.
Children and consent
OrphanGive is not directed at children. Sponsors must be at least eighteen years of age. If you are under eighteen and have created an account, please contact us at hello@orphangive.org and we will close it.
Jurisdiction
This privacy policy is governed by the laws of Bangladesh. Children's Heaven Trust is registered with the NGO Affairs Bureau of Bangladesh under Registration No. iv-98/2021. Any disputes regarding this policy are subject to the jurisdiction of the courts of Dhaka, Bangladesh.
We are not subject to the European Union's General Data Protection Regulation (GDPR) unless we specifically target services to EU residents. We are not a 501(c)(3) organisation in the United States. We are a Bangladesh-registered charity, and our regulatory framework reflects that.
Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the bottom of this page and, where the changes are material, send a notice to your registered email address. Continued use of our service after a change constitutes acceptance of the revised policy.
Contact
For any question about this policy, your data, or your account, write to us at:
Children's Heaven Trust & Goodverse Foundation Operating OrphanGive Email: support@orphangive.org
We are a small team and we read every message.
Last updated: May 2026