Privacy Policy.

Who We Are.

DIANA (Digital Infrastructure for Animal Networks and Advocacy) is a product of DRGM. We operate the DIANA mobile application and website at dianafortheanimals.org.

If you have any questions about this policy or how we handle your data, you can reach us at privacy@dianafortheanimals.org.

What We Collect.

We collect only the data necessary to operate the DIANA platform. This includes:

• Account data: your name, email address, and role (Advocate, Merchant, or Sanctuary).
• Transaction data: payment records, merchant interactions, and sanctuary contribution logs processed through our platform.
• Usage data: app interactions, feature usage, and performance diagnostics to improve the platform.
• Device data: device type, operating system version, and app version for compatibility purposes.
• Communications: messages you send to us directly, including support requests and application forms.

How We Use Your Data.

Your data is used to:

• Operate, maintain, and improve the DIANA platform and its features.
• Process and attribute sanctuary contributions from merchant transactions.
• Communicate with you about your account, transactions, and platform updates.
• Generate your personal Impact Profile and public impact ledger contributions.
• Maintain the security and integrity of the platform.
• Comply with legal obligations.

We do not sell your personal data. We do not use it for behavioural advertising. We do not share it with third parties except as described below.

Third Parties.

We share data with third parties only where necessary to operate the platform:

• Payment processors: to securely process transactions. These processors are bound by their own compliance obligations.
• Analytics providers: anonymised, aggregated usage data only (no personally identifiable information).
• Infrastructure providers: hosting and database services that store data on our behalf under data processing agreements.

All third-party processors are contractually required to handle your data in accordance with applicable privacy law and not to use it for any other purpose.

Data Retention.

We retain your personal data for as long as your account is active or as required to provide you with services. If you close your account, we will delete or anonymise your data within 90 days, except where we are required to retain it for legal, regulatory, or financial compliance purposes.

Your Rights.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at privacy@dianafortheanimals.org. We will respond within 30 days.

Cookies.

The DIANA website uses cookies only where necessary. Strictly necessary cookies keep the site and your session working. We also use Plausible Analytics, a privacy-first tool that collects no personal data and does not share data with advertising networks.

For a full breakdown of which cookies we set, their purpose, and how long they last, please read our Cookie Policy.

Security.

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. No method of transmission over the internet is 100% secure. We will notify you promptly if we become aware of a breach that affects your personal data.

Children.

DIANA is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

Changes to This Policy.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where the changes are material, notify you by email or through the app. Continued use of DIANA after changes are posted constitutes acceptance of the updated policy.