Effective Date: January 1, 2026

Last Updated: March 30, 2026

1. Introduction

This Privacy Policy describes how Presentation Design Group LLC ("PDG Design," "we," "us," or "our") collects, uses, discloses, and protects personal information through the Giftmap interactive fundraising and donor recognition platform (the "Service") accessible at giftmap.giftmap.com.

By using the Service, you agree to the collection and use of information in accordance with this policy.

Contact Information:

Presentation Design Group LLC

Email: support@pdgdesign.net

2. Information We Collect

2.1 Account Information

When you create a Giftmap account, we collect:

  • Email address
  • Password (stored encrypted)
  • Two-factor authentication credentials (if enabled)
  • Account type designation (Administrator or other user types)

2.2 Donor and Fundraising Data

The Service allows you to manage donor recognition and fundraising information, including:

  • Donor names
  • Gift amounts
  • Campaign information
  • Custom data fields you define
  • Photos and videos
  • Project descriptions and narratives

Important: You are responsible for obtaining all necessary permissions and consents from donors before uploading their information to the Service. Donor data you upload is intended primarily for internal use by your organization, though you may choose to display selected information publicly through Giftmap Virtual Tour functionality.

2.3 Usage and Activity Information

We automatically collect information about your use of the Service:

  • Activity logs (creation, reading, updating, and deletion of donor records and content)
  • Authentication events and access logs
  • Technical information (IP address, browser type, operating system)
  • Session information

2.4 Single Sign-On (SSO) Information

If your organization uses SSO through an identity provider:

  • We receive authentication confirmation from your identity provider
  • We do not store your SSO credentials
  • Your identity provider's privacy policy governs their data practices

2.5 Giftmap Virtual Tour Public Interactions

If you enable public-facing features through Giftmap Virtual Tour:

  • Likes: We collect anonymized interaction data when visitors "like" content
  • Information Requests: We collect contact information voluntarily submitted through information request forms (name, email, phone number, message content)

2.6 Information from Third-Party Services

Google reCAPTCHA: During login and registration, Google reCAPTCHA analyzes browser and device characteristics to prevent automated abuse. Google's use of this data is governed by their Privacy Policy and Terms of Service.

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Authenticate your identity and prevent unauthorized access
  • Send transactional emails (password resets, account notifications, system updates)
  • Monitor system security and detect fraudulent activity
  • Process information requests submitted through Giftmap Virtual Tour
  • Comply with legal obligations
  • Enforce our Terms of Service

We do not use your information for:

  • Third-party advertising
  • Behavioral tracking across other websites
  • Sale or rental of personal information
  • Marketing or promotional purposes (without explicit consent)

Donor Data: We do not use donor data you upload for any purpose other than providing the Service to you as directed. We will not contact your donors, use their information for marketing, or share their data with third parties except as necessary to operate the Service.

4. Data Storage and Security

4.1 Data Location

Your data is stored on servers located in Amazon Web Services (AWS) data centers in the us-west-2 region (Oregon).

4.2 Security Measures

We implement industry-standard security measures including:

  • Encryption of data in transit (TLS/SSL)
  • Encrypted password storage
  • Two-factor authentication option
  • Regular security assessments and monitoring
  • Access controls and authentication logging
  • SOC 2-compliant security controls

4.3 Data Retention

  • Active Accounts: We retain your account information and donor data for as long as your account is active
  • Deleted Accounts: Following account deletion, data is retained for 90 days, then permanently deleted from production systems. Backup data is purged within 6 months.
  • Activity Logs: Authentication and activity logs are retained indefinitely for security and compliance purposes

5. Data Sharing and Disclosure

5.1 Service Providers

We share data with third-party service providers who perform services on our behalf:

  • Amazon Web Services (AWS): Cloud infrastructure and data storage
  • AWS Simple Notification Service (SNS): Transactional email delivery
  • Google reCAPTCHA: Automated abuse prevention during authentication

These providers are contractually obligated to protect your data and use it only for specified purposes.

5.2 No Data Sharing for Marketing

We do not share donor data with third parties for marketing purposes. We do not sell, rent, or trade your data or the donor information you manage through the Service.

5.3 Legal Requirements

We may disclose information if required to:

  • Comply with legal process (subpoenas, court orders)
  • Enforce our Terms of Service
  • Protect rights, property, or safety of PDG Design, users, or the public
  • Investigate security incidents or fraud

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred. We will notify you via email and/or prominent notice on the Service of any change in ownership or use of your personal information.

5.5 Public Content Through Giftmap Virtual Tour

Content you choose to make publicly accessible through Giftmap Virtual Tour may be visible to:

  • End users you designate
  • Public website visitors (if you configure public access)
  • Individuals who submit information requests through public forms

You control which donor information is made public and are responsible for ensuring you have appropriate permissions to publicly display donor data.

6. Your Rights and Choices

6.1 Access and Export

You can access and export your donor data and content at any time through the Service interface.

6.2 Account Deletion

You may request account deletion by contacting support@pdgdesign.net. Upon deletion:

  • Your account will be deactivated immediately
  • Data will be retained for 90 days, then permanently deleted
  • Backup data will be purged within 6 months
  • Activity logs may be retained for security purposes

6.3 California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, and sell
  • Delete your personal information (subject to exceptions)
  • Opt-out of sale of personal information (we do not sell personal information)
  • Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@pdgdesign.net. We will verify your identity before processing requests.

Information We Collect (CCPA Categories):

  • Identifiers (email address, IP address, donor names)
  • Commercial information (account and subscription details, gift amounts)
  • Internet activity (usage logs, access patterns)
  • Inferences (fundraising patterns based on usage)

Sources: Directly from you when you create accounts or upload donor data, automatically through Service use, and from Google reCAPTCHA.

Business Purpose: As described in Section 3.

Third Parties We Share With: Service providers listed in Section 5.1.

6.4 Donor Rights

If you are a donor whose information is managed through Giftmap:

  • Contact the organization that collected your information to exercise your privacy rights
  • We act as a service provider to that organization and process data on their behalf
  • The organization that collected your information controls how your data is used

6.5 Email Communications

You will receive transactional emails necessary for Service operation (password resets, security alerts). You cannot opt out of these essential communications while maintaining an active account.

7. Data Security and Breach Notification

While we implement robust security measures, no system is completely secure. In the event of a data breach affecting your personal information or donor data you manage, we will:

  • Notify you via email within 72 hours of discovery
  • Describe the nature of the breach and affected data
  • Provide steps you can take to protect yourself and your donors
  • Report to relevant authorities as required by law

You are responsible for notifying your donors if their information is affected by a breach.

8. Healthcare Considerations

Many of our clients are healthcare organizations managing donor information. While the Service does not store or process Protected Health Information (PHI) as defined by HIPAA, donor data may include personally identifiable information (PII) that requires appropriate safeguards.

You are responsible for:

  • Ensuring compliance with your organization's privacy policies
  • Obtaining necessary consents from donors
  • Not uploading PHI or other regulated health information to the Service
  • Following applicable healthcare fundraising regulations

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

Note on Minor Donors: While the Service itself is restricted to adult users, organizations may choose to display information about minor donors (pediatric patients, scholarship recipients, etc.) through Giftmap Virtual Tour. Organizations are solely responsible for obtaining appropriate parental/guardian consent and complying with applicable child privacy laws.

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via:

  • Email notification to account holders
  • Prominent notice within the Service

Continued use of the Service after changes constitutes acceptance of the updated policy.

11. International Users

The Service is operated in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

12. Contact Us

For privacy-related questions, requests, or concerns:

Presentation Design Group LLC

Email: support@pdgdesign.net

For California residents exercising CCPA rights, please include "CCPA Request" in your email subject line.

If you are a donor whose information is managed through Giftmap, please contact the organization that collected your information directly.

Ready to see
Giftmap in action?

In your 30-minute Giftmap demo we'll show you how our dynamic data and mapping tool can help you plan and manage funding opportunities and recognition inventories. We can also cover on-site donor recognition audits, consultative valuation of your named spaces, and set up timeline and pricing.