1. Introduction
Birahma (“we”, “our”, or “us”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website birahma.com and use our services.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.
2. Information We Collect
We may collect the following categories of personal information:
- Identity data: name, username, date of birth
- Contact data: email address, phone number, postal address
- Financial data: payment card details (processed securely via Stripe — we do not store card numbers)
- Transaction data: details of donations made through our platform
- Technical data: IP address, browser type, device information, cookies
- Profile data: your account preferences, saved campaigns, donation history
- Gift Aid declaration data: where you have opted in to Gift Aid
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Process donations and payments securely
- Send donation confirmations and receipts
- Process Gift Aid declarations and submit them to HMRC
- Communicate important updates about campaigns you support
- Comply with legal and regulatory obligations
- Improve our platform and user experience
- Detect and prevent fraud or misuse
4. Legal Basis for Processing
We process your personal data under the following legal bases under UK GDPR:
- Contract: processing necessary to fulfil our service to you
- Legal obligation: compliance with applicable laws and regulations
- Legitimate interests: fraud prevention, platform security, and service improvement
- Consent: where you have explicitly opted in (e.g. marketing communications)
5. Sharing Your Information
We do not sell your personal data. We may share it with trusted third parties only where necessary:
- Stripe — for secure payment processing
- Supabase — for secure data storage and authentication
- HMRC — for Gift Aid claim submissions
- Charity Commission — for charity verification purposes
- Legal authorities — where required by law
6. Cookies
We use cookies and similar tracking technologies to enhance your experience on our platform. These include session cookies (essential for login), preference cookies, and analytics cookies. You can control cookie settings through your browser. Disabling certain cookies may affect platform functionality.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Donation and Gift Aid records are retained for a minimum of 7 years to comply with HMRC requirements. You may request deletion of your account and associated data at any time, subject to our legal obligations.
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure of your data ('right to be forgotten')
- Object to or restrict certain processing
- Data portability — receive your data in a structured format
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with the Information Commissioner's Office (ICO)
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment data is handled by Stripe, which is PCI DSS compliant. However, no method of transmission over the internet is 100% secure.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: