Below is a concise and practical draft suitable for a Lumio website “Terms & Conditions / Privacy & Data Usage” page focused on PIA / PDPO-related requirements. It is written to be broad, protective, and neutral for SaaS donation platforms supporting NGOs.

Terms & Conditions and Privacy Notice

1. Introduction

Welcome to Lumio. By accessing or using this platform, you agree to comply with and be bound by these Terms & Conditions and applicable privacy requirements.

Lumio is a software platform that assists non-profit organizations in managing donation-related activities, campaigns, communications, volunteer management, and related operations.

2. Collection of Personal Data

Personal data may be collected through forms, donations, registrations, website interactions, imports, exports, and other platform functions.

The types of personal data collected may include:

• Name

• Contact information

• Donation and transaction details

• Volunteer or event participation information

• Communication preferences

• Technical and website usage information

  
  

3. Purpose of Data Collection

Personal data collected through the platform may be used for:

• Donation processing and administration

• Communication and customer support

• Receipt issuance and donor acknowledgment

• Event and volunteer management

• Statistical and operational analysis

• Sending updates, donation appeals, or promotional communications (subject to consent)

• Compliance with legal and regulatory obligations

  
  

4. Disclosure and Data Sharing

Personal data may be shared with authorized service providers, payment gateways, logistics providers, or affiliated parties solely for operational purposes related to the services provided.

Lumio does not sell personal data to unauthorized third parties.

Personal data may also be disclosed where required by applicable laws, regulations, court orders, or lawful authority requests.

5. Data Security

Reasonable administrative, technical, and organizational measures are implemented to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Access to personal data is restricted to authorized personnel and service providers on a need-to-know basis.

6. Data Retention

Personal data will be retained only for as long as necessary to fulfill operational, legal, accounting, audit, or regulatory requirements, after which it may be securely deleted or anonymized.

7. Direct Marketing

Where consent is provided, users may receive direct marketing communications, promotional materials, donation appeals, event updates, or related information.

Users may opt out of such communications at any time.

8. User Rights

Subject to applicable laws and regulations, individuals may request:

• Access to their personal data

• Correction of inaccurate personal data

• Deletion of personal data where applicable

• Withdrawal of consent for marketing communications

Requests may be submitted through the organization or designated contact channels.

9. Third-Party Services

The platform may integrate with third-party systems or services, including payment gateways, analytics tools, communication providers, or logistics providers. Such third parties may maintain their own privacy policies and terms.

10. Limitation of Liability

Lumio provides the platform on an “as-is” and “as-available” basis. While reasonable efforts are made to maintain system security, availability, and operational reliability, Lumio does not guarantee uninterrupted, error-free, or fully secure operation at all times.

Organizations using the platform remain solely responsible for ensuring their own compliance with all applicable laws, regulations, codes of practice, consent requirements, and internal governance obligations, including but not limited to the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and any related privacy or data protection requirements.

Lumio acts as a technology platform provider and does not assume responsibility for the organization’s specific legal, regulatory, or compliance obligations arising from its collection, use, disclosure, retention, or management of personal data.

11. Changes to Terms

Lumio reserves the right to update or amend these Terms & Conditions and privacy-related notices at any time. Updated versions will be published on the platform or website.

12. Contact

For questions regarding privacy, personal data handling, or these Terms & Conditions, please contact the respective organization or platform administrator.