GiveWP
WordPress donation plugin that processes donor and payment data and connects to gateways such as Stripe and PayPal.
What does GiveWP do?
What GiveWP is
GiveWP is a popular WordPress plugin that lets nonprofits and causes collect donations directly on their own website. It builds donation forms, manages donor records and connects to payment gateways such as Stripe and PayPal to take the actual payment. The site operator running the WordPress installation is the data controller for the donor records held in the site database.
What data and cookies it sets
GiveWP processes donor personal data such as name, email, postal address and donation amount, along with payment data that flows through the chosen gateway. It sets functional cookies that keep the donation session and form state working during checkout. The connected gateways may set their own cookies and transfer data to the United States as part of processing the payment.
GDPR and ePrivacy implications
The functional donation cookies are strictly necessary to complete a transaction, so they fall under the ePrivacy exemption. The donation and payment data, however, is governed by the GDPR and needs a lawful basis. Because payment gateways act as separate processors or controllers and may operate from outside the European Union, you must address those relationships and transfers in your documentation.
Consent requirements
You do not need consent for the essential cookies that make the donation form work, but you do need consent for any non essential cookies and for sending marketing messages to donors. Processing the donation itself usually rests on contract or legitimate interest. Keep the marketing opt in separate from the donation step so consent stays freely given and unbundled.
Data transfers and hosting
Donor records live in your WordPress database on your own hosting, but payment processing introduces an international transfer because Stripe and PayPal are United States based. These providers rely on safeguards such as standard contractual clauses and the relevant data privacy framework. Review their data processing terms, record the transfer in your documentation and tell donors in your privacy notice.
Practical compliance steps
Sign data processing agreements with your payment gateways and add them to your records of processing. Configure GiveWP to collect only the donor data you need, set a retention policy for old donation records and add a clear unbundled marketing opt in. Publish a privacy notice that names the gateways and the United States transfer, and keep WordPress and the plugin updated.
GiveWP and the GDPR
GiveWP is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Contract or legitimate interest for processing donations; consent for any non essential cookies and for marketing; the functional cookies rely on the strictly necessary exemption
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive, PSD2
Impact assessment (DPIA)
Assess the donor and payment data you collect, the lawful basis for processing donations and the role of each payment gateway as a separate processor or controller. Because gateways such as Stripe and PayPal are United States based, document the international transfer and the safeguards in place. A targeted assessment is sensible where you process large volumes of donations or sensitive cause related data.
Sample text for your banner
We use the details you enter to process your donation and issue your receipt, relying on the contract and our legitimate interest. Payments are handled securely by our gateway, which may process data outside the European Union under appropriate safeguards. Tick here only if you also want to receive news about our work.
What GiveWP sets and contacts
- Tracking method
- Functional cookies set by the WordPress plugin; payment gateways such as Stripe and PayPal may set their own cookies and process data
- Server location
- Runs on your WordPress hosting; donor data is stored in your site database, while payment data is handled by the connected gateway
- Data transferred outside the EU
- GiveWP itself stores data on your hosting, but connected payment gateways such as Stripe and PayPal are United States based and may transfer donor and payment data to the United States under their own safeguards such as standard contractual clauses
Cookies set (2)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| give_session | Functional | Session | Maintains the donor donation session and form state during checkout. Strictly necessary to complete a donation. |
| wp_give_donation | Functional | Session | Stores temporary donation form data so the donation can be processed correctly. Strictly necessary. |
Third-party domains contacted (2)
js.stripe.comwww.paypal.com
Frequently asked questions about GiveWP
Can't find your question? Write to us, we answer fast.
What cookies does GiveWP set?
GiveWP sets functional cookies that keep the donation session and form state working during checkout, such as a session cookie. These are strictly necessary. Connected gateways like Stripe and PayPal may set additional cookies of their own.
Do I need consent for GiveWP?
You do not need consent for the essential cookies that make the donation form work, but you do need consent for any non essential cookies and for marketing emails. Keep any marketing opt in separate and unbundled from the donation itself.
What is the legal basis for processing donations?
Processing a donation is usually based on contract or your legitimate interest, since you need the data to take the payment and issue a receipt. Marketing communications to donors require separate consent.
Does GiveWP transfer data to the United States?
GiveWP stores donor records on your own hosting, but the payment gateways do transfer data. Stripe and PayPal are United States based and process payment data there under safeguards such as standard contractual clauses.
Do I need a DPIA for GiveWP?
A targeted assessment is advisable where you process large volumes of donations, sensitive cause related data or rely on United States payment processors. Document the data flows, the gateway relationships and the international transfers.
How do I make GiveWP compliant?
Sign data processing agreements with your gateways, collect only the donor data you need, set a retention policy and add an unbundled marketing opt in. Publish a privacy notice naming the gateways and the United States transfer, and keep everything updated.
What are some alternatives to GiveWP?
Other WordPress donation tools include Charitable and Donation Forms by WPForms, while hosted platforms like Donorbox and HelloAsset offer alternatives. Choosing a European payment processor can reduce transfer concerns.
How should I describe GiveWP in my cookie policy?
List the GiveWP functional cookies as strictly necessary for processing donations, and describe the gateway cookies from Stripe or PayPal separately. Explain in your privacy notice how donor and payment data is handled and transferred.
Seko OmniReturns
Seko OmniReturns is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Seko OmniReturns supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Seko OmniReturns ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Expivi
Expivi is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Expivi provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Expivi helps deliver the right message to the right audience at the right time.
4Partners
4Partners is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. 4Partners integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, 4Partners helps organizations maintain robust websites that meet user expectations and technical requirements.
Visenze
Visenze is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Visenze integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Visenze helps organizations maintain robust websites that meet user expectations and technical requirements.
Plaid
Plaid is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Plaid supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Plaid ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Smile App
Smile App is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Smile App supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Smile App remains a leading web development choice.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.