The short version
- The checker runs entirely in your web browser. The donation files you load, and the HMRC files it builds, never reach us. We do not store, see or keep any donor data.
- The only personal data we hold is what you give us when you buy a licence or email us.
- This website uses no cookies, no analytics and no advertising trackers.
Who is responsible for your data
The data controller for the personal data described here is Chenflow Limited (CHENFLOW LIMITED), trading as Donor Schedule, registered in England and Wales, company number 12064784, registered office 5th Floor, 167-169 Great Portland Street, London, W1W 5PF. For any question about your data, email [email protected].
Donor data you load into the checker
When you open a file in the checker, your browser reads it from your own computer and does all the work in memory. The page's security settings only allow it to talk to this website, and it never sends your file anywhere. When you close the tab, the data is gone. Your organisation remains the controller of your donors' data, and we are not a processor of it because we never receive it.
The checker saves just one thing in your browser's local storage: your licence key, if you enter one, so you do not have to type it again. You can remove it by clearing your browser's site data.
Data we do hold
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Your name, email address, organisation name, licence key, plan, expiry date and order reference | To issue and check your licence and send you receipts and essential service emails | Contract | For as long as your licence is active, then six years for our accounting records |
| Emails you send us | To answer your questions | Legitimate interests | Up to two years after the conversation ends |
| Feedback you send us, and your permission to publish a quote | To improve Donor Schedule and, only if you say yes, to publish your quote with the name or role and organisation you choose | Consent for publishing, legitimate interests for improving the product | Until you withdraw permission. Email us and we will take the quote down |
| Basic server logs (IP address, page requested, time) | To keep the website secure and working | Legitimate interests | Kept by our web host for a short period, normally no more than 30 days |
Paddle
Payments are handled by Paddle.com, our online reseller and Merchant of Record. Paddle collects your payment details and billing address directly and is the controller of that data. We never see your card details. Paddle shares with us the information we need to issue your licence. See Paddle's privacy notice.
Who else sees your data
We use a small number of service providers to run Donor Schedule: our web host, our email provider and the service that issues licence keys. They act on our instructions only. Some may store data outside the UK, and where they do we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. We never sell your data.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Email [email protected] and we will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put things right first.