> How GiveWP handles donor data, cookies and payment gateways under the GDPR and ePrivacy rules, with practical compliance guidance for WordPress sites.
>
> Canonical: https://www.flowconsent.com/en/services/ecommerce/givewp

E-commerce

# GiveWP

Analytics · [Official website](https://givewp.com)

WordPress donation plugin that processes donor and payment data and connects to gateways such as Stripe and PayPal.

[Block GiveWP until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [E-commerce](https://www.flowconsent.com/en/services/ecommerce)

- Consent

  Analytics

- Prior consent

  Required

- Documented cookies

  2

- Third-party domains

  2

- Servers

  Runs on your WordPress hosting; donor data is stored in your site database, while payment data is handled by the connected gateway

Overview

## What does GiveWP do?

## **What GiveWP is**

GiveWP is a popular WordPress plugin that lets nonprofits and causes collect donations directly on their own website. It builds donation forms, manages donor records and connects to payment gateways such as Stripe and PayPal to take the actual payment. The site operator running the WordPress installation is the data controller for the donor records held in the site database.

## **What data and cookies it sets**

GiveWP processes donor personal data such as name, email, postal address and donation amount, along with payment data that flows through the chosen gateway. It sets functional cookies that keep the donation session and form state working during checkout. The connected gateways may set their own cookies and transfer data to the United States as part of processing the payment.

## **GDPR and ePrivacy implications**

The functional donation cookies are strictly necessary to complete a transaction, so they fall under the ePrivacy exemption. The donation and payment data, however, is governed by the GDPR and needs a lawful basis. Because payment gateways act as separate processors or controllers and may operate from outside the European Union, you must address those relationships and transfers in your documentation.

## **Consent requirements**

You do not need consent for the essential cookies that make the donation form work, but you do need consent for any non essential cookies and for sending marketing messages to donors. Processing the donation itself usually rests on contract or legitimate interest. Keep the marketing opt in separate from the donation step so consent stays freely given and unbundled.

## **Data transfers and hosting**

Donor records live in your WordPress database on your own hosting, but payment processing introduces an international transfer because Stripe and PayPal are United States based. These providers rely on safeguards such as standard contractual clauses and the relevant data privacy framework. Review their data processing terms, record the transfer in your documentation and tell donors in your privacy notice.

## **Practical compliance steps**

Sign data processing agreements with your payment gateways and add them to your records of processing. Configure GiveWP to collect only the donor data you need, set a retention policy for old donation records and add a clear unbundled marketing opt in. Publish a privacy notice that names the gateways and the United States transfer, and keep WordPress and the plugin updated.

Compliance

## GiveWP and the GDPR

GiveWP is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Contract or legitimate interest for processing donations; consent for any non essential cookies and for marketing; the functional cookies rely on the strictly necessary exemption

- Risk level

  medium

- Applicable regulations

  GDPR, ePrivacy Directive, PSD2

### Impact assessment (DPIA)

Assess the donor and payment data you collect, the lawful basis for processing donations and the role of each payment gateway as a separate processor or controller. Because gateways such as Stripe and PayPal are United States based, document the international transfer and the safeguards in place. A targeted assessment is sensible where you process large volumes of donations or sensitive cause related data.

### Sample text for your banner

> We use the details you enter to process your donation and issue your receipt, relying on the contract and our legitimate interest. Payments are handled securely by our gateway, which may process data outside the European Union under appropriate safeguards. Tick here only if you also want to receive news about our work.

Cookies and trackers

## What GiveWP sets and contacts

- Tracking method

  Functional cookies set by the WordPress plugin; payment gateways such as Stripe and PayPal may set their own cookies and process data

- Server location

  Runs on your WordPress hosting; donor data is stored in your site database, while payment data is handled by the connected gateway

- Data transferred outside the EU

  GiveWP itself stores data on your hosting, but connected payment gateways such as Stripe and PayPal are United States based and may transfer donor and payment data to the United States under their own safeguards such as standard contractual clauses

### Cookies set (2)

| Name               | Type       | Duration | Purpose                                                                                                         |
| ------------------ | ---------- | -------- | --------------------------------------------------------------------------------------------------------------- |
| give\_session      | Functional | Session  | Maintains the donor donation session and form state during checkout. Strictly necessary to complete a donation. |
| wp\_give\_donation | Functional | Session  | Stores temporary donation form data so the donation can be processed correctly. Strictly necessary.             |

### Third-party domains contacted (2)

- `js.stripe.com`
- `www.paypal.com`

Questions

## Frequently asked questions about GiveWP

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does GiveWP set?

GiveWP sets functional cookies that keep the donation session and form state working during checkout, such as a session cookie. These are strictly necessary. Connected gateways like Stripe and PayPal may set additional cookies of their own.

### Do I need consent for GiveWP?

You do not need consent for the essential cookies that make the donation form work, but you do need consent for any non essential cookies and for marketing emails. Keep any marketing opt in separate and unbundled from the donation itself.

### What is the legal basis for processing donations?

Processing a donation is usually based on contract or your legitimate interest, since you need the data to take the payment and issue a receipt. Marketing communications to donors require separate consent.

### Does GiveWP transfer data to the United States?

GiveWP stores donor records on your own hosting, but the payment gateways do transfer data. Stripe and PayPal are United States based and process payment data there under safeguards such as standard contractual clauses.

### Do I need a DPIA for GiveWP?

A targeted assessment is advisable where you process large volumes of donations, sensitive cause related data or rely on United States payment processors. Document the data flows, the gateway relationships and the international transfers.

### How do I make GiveWP compliant?

Sign data processing agreements with your gateways, collect only the donor data you need, set a retention policy and add an unbundled marketing opt in. Publish a privacy notice naming the gateways and the United States transfer, and keep everything updated.

### What are some alternatives to GiveWP?

Other WordPress donation tools include Charitable and Donation Forms by WPForms, while hosted platforms like Donorbox and HelloAsset offer alternatives. Choosing a European payment processor can reduce transfer concerns.

### How should I describe GiveWP in my cookie policy?

List the GiveWP functional cookies as strictly necessary for processing donations, and describe the gateway cookies from Stripe or PayPal separately. Explain in your privacy notice how donor and payment data is handled and transferred.

Same category

## More services: E-commerce

[See the whole category](https://www.flowconsent.com/en/services/ecommerce)

### [Seko OmniReturns](https://www.flowconsent.com/en/services/ecommerce/seko-omnireturns)

[Seko OmniReturns is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Seko OmniReturns supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Seko OmniReturns ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/seko-omnireturns)

[E-commerce](https://www.flowconsent.com/en/services/ecommerce/seko-omnireturns)

·

### [Expivi](https://www.flowconsent.com/en/services/ecommerce/expivi)

[Expivi is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Expivi provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Expivi helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/ecommerce/expivi)

[Marketing](https://www.flowconsent.com/en/services/ecommerce/expivi)

·

### [4Partners](https://www.flowconsent.com/en/services/ecommerce/4partners)

[4Partners is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. 4Partners integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, 4Partners helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/4partners)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/4partners)

·

### [Visenze](https://www.flowconsent.com/en/services/ecommerce/visenze)

[Visenze is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Visenze integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Visenze helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/visenze)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/visenze)

·

### [Plaid](https://www.flowconsent.com/en/services/ecommerce/plaid)

[Plaid is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Plaid supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Plaid ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/plaid)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/plaid)

·

### [Smile App](https://www.flowconsent.com/en/services/ecommerce/smile-app)

[Smile App is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Smile App supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Smile App remains a leading web development choice.](https://www.flowconsent.com/en/services/ecommerce/smile-app)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/smile-app)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)