1 Who we are
HopeAlert ("HopeAlert", "we", "us", or "our") is a free
donor management and emergency blood coordination platform, built and operated independently by its
founder, based in Sunamganj, Bangladesh.
We operate the website at hopealert.org and the HopeAlert donor management platform,
including the donor tracker, emergency board, and self-registration system.
For the purposes of data protection law, HopeAlert is the data
controller of your personal information.
Our commitment: We collect only what we need, keep it only as long as necessary, and never
sell your personal data to anyone. Your data exists only to help connect blood donors with people who need
it.
2 What data we collect
We collect different types of information depending on how you interact with HopeAlert:
| Category |
Data collected |
Required? |
| Identity |
Full name, date of birth, gender |
Required |
| Health |
Blood type, weight, last donation date, donation history |
Required for donors |
| Contact |
Mobile phone number, WhatsApp number, email address, city |
Phone required |
| Social media |
Facebook username, Telegram handle, Instagram handle (if provided) |
Optional |
| Financial |
Donation amount, donor name (for the honour board) |
If you donate money |
| Emergency requests |
Patient name, blood type needed, hospital address, contact number |
If you post an emergency |
| Technical |
Browser type, IP address, pages visited (via cookies) |
Automatic |
We do not collect payment card numbers, national ID numbers, or passwords. We do
not require you to create an account to register as a blood donor.
3 How we use your data
We use your personal information for the following purposes:
- Managing your donor record β tracking your 90-day donation cycle and donation history so
we can send you accurate reminders.
- Sending donation reminders β contacting you via SMS and/or WhatsApp when your 90-day
waiting period is complete and you are eligible to donate again.
- Emergency blood matching β when an emergency blood request is posted that matches your
blood type and you are near or at eligibility, we may alert you directly.
- Improving our service β analysing aggregate (non-personal) data to understand donation
patterns and improve the platform.
- Legal compliance β retaining records as required by health regulations and nonprofit law
in the jurisdictions where we operate.
- Honour board display β if you make a financial donation and consent to public display,
your name and donation amount appear on our public donors page.
Legal basis (GDPR): We process your data under Article 6(1)(a) β consent
(you gave it when registering), and Article 9(2)(c) β vital interests (blood donation is a
matter of life and death). You can withdraw consent at any time by contacting us.
4 SMS & WhatsApp notifications
π± Notification consent
When you register as a donor you will be asked which types of notifications you want to receive:
- 90-day reminder SMS β sent automatically when your 90-day donation cycle completes.
- 90-day reminder WhatsApp β same as above via WhatsApp.
- Emergency alerts β sent when a patient urgently needs blood matching your type.
Messages are sent via Twilio, a third-party communications platform. Your phone number is
transmitted to Twilio solely for the purpose of sending these messages. Twilio does not use your number for
any other purpose. See Twilio's privacy policy at twilio.com/legal/privacy.
Every message we send includes the instruction: "Reply STOP to unsubscribe." Replying STOP
will immediately remove you from all future notifications. You can also unsubscribe by contacting us directly.
We will never send promotional, advertising, or fundraising messages to your phone without your explicit
separate consent.
5 Data sharing & third parties
We do not sell, rent, or trade your personal data. We share your information only in the
following limited circumstances:
- Twilio β your phone number is shared to send SMS and WhatsApp notifications (see Section
4).
- Partner hospitals β in a life-threatening emergency, limited contact information (name
and phone number) may be shared with a partner hospital to facilitate an urgent blood donation. We will
always tell you if this happens.
- Legal obligation β we may disclose your data to a government body or law enforcement
agency if required to do so by law.
- Organisation succession β if HopeAlert merges with or
transfers operations to another nonprofit, your data will be transferred only if the receiving organisation
agrees in writing to the same data protection standards as set out in this policy.
We will never share your health data (blood type, donation history) with insurance companies,
employers, or commercial organisations.
6 Data retention
We keep your personal data only as long as necessary:
| Data type |
Retention period |
Reason |
| Donor registration & health data |
7 years from last donation |
Health regulation compliance |
| Phone & contact details |
Until you unsubscribe or delete your record |
Notification delivery |
| Emergency request data |
90 days after request closed |
Operational record keeping |
| Financial donation records |
7 years |
Nonprofit accounting law |
| Website cookies |
12 months |
Analytics |
When your data reaches the end of its retention period, it is securely deleted or anonymised so it can no
longer identify you.
7 Your rights
Under GDPR and applicable data protection laws, you have the following rights:
- Right to access β you can request a copy of all personal data we hold about you.
- Right to rectification β if any information is incorrect, you can ask us to correct it.
- Right to erasure ("right to be forgotten") β you can ask us to delete your personal data.
We will do so unless we are legally required to retain it.
- Right to restrict processing β you can ask us to pause using your data while you raise a
concern.
- Right to data portability β you can request your data in a machine-readable format (CSV
or JSON).
- Right to object β you can object to us processing your data for notification purposes at
any time.
- Right to withdraw consent β you can withdraw consent at any time by replying STOP to any
message or contacting us.
To exercise any of these rights, please email contact@hopealert.site. We will respond within 30
days. There is no charge for making a request.
If you are unhappy with how we have handled your data, you have the right to complain to your national data
protection authority.
8 Cookies
Our website uses the following types of cookies:
- Essential cookies β required for the website to function (e.g. keeping your session
active). These cannot be disabled.
- Analytics cookies β help us understand how visitors use the site (e.g. which pages are
most visited). No personal data is shared with third parties through analytics.
- Preference cookies β remember your choices (e.g. language settings).
You can control cookies through your browser settings. Disabling non-essential cookies will not affect your
ability to use the donor registration or emergency features.
9 Children's privacy
HopeAlertβs services are intended for adults aged 18 and over. We do not
knowingly collect personal data from anyone under the age of 18. Our donor registration form requires a date
of birth and will not accept registrations from people under 18.
If you believe we have inadvertently collected data from a person under 18, please contact us immediately at
contact@hopealert.site and we will delete it without
delay.
10 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal
requirements. When we make significant changes, we will:
- Update the "Last updated" date at the top of this page.
- Send a notification to all registered donors via SMS or WhatsApp at least 14 days before the changes take
effect.
- Post a prominent notice on our website homepage for 30 days.
Your continued use of our services after the effective date of any changes constitutes your acceptance of the
updated policy. If you do not agree with the changes, you can withdraw your registration by contacting us.
11 Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact our
Data Protection Officer:
π PostSunamganj,
Bangladesh
π HoursMonβFri, 9amβ5pm (GMT+6)
