GDPR compliance remains your organisation’s responsibility. Donorfy provides tools to help you record, manage, and apply consent accurately.
Understand the Preference Centre
GDPR permissions in Donorfy are managed through the Preference Centre on a constituent record.
Open a constituent record.
Go to the Preference Centre tab.
From here, you can manage Channels and Purposes, which together define consent.
Manage Communication Channels
Channels control how you are allowed to contact a constituent.
Set channels such as Email, Post, SMS, or Phone.
Mark each channel as allowed, not allowed, or undefined.
An undefined channel means consent has not yet been recorded.
Manage Communication Purposes
Purposes control why you are allowed to contact a constituent.
Select purposes such as Fundraising, News, Membership, Events, or Volunteering.
Leave purposes undefined if the constituent has not expressed a preference.
Purposes are configurable, allowing you to align them with your organisation’s communications strategy.
Record Consent Context and History
When updating permissions, Donorfy records important GDPR context.
Select the Consent Statement shown to the constituent.
Associate the update with a Campaign if applicable.
Save the changes.
Every change, including confirmations where no change is made, is recorded in a consent history log.
Enable Self-Service Preference Updates
On the Professional Plan, constituents can manage their own preferences.
Add the Donorfy Update Your Preferences widget to your website.
Allow constituents to confirm their email address.
Display the preference page where they can update channels and purposes.
Any changes made are:
Reflected immediately on the constituent record.
Logged in the consent history.
Use Permissions in Lists and Communications
Once permissions are set, they can be applied to communications.
Create a List in Donorfy.
Add filters based on Channels and Purposes.
Refresh the list results.
Export or use the list for communications.
Filtering by both channel and purpose helps ensure communications are sent only to constituents with valid consent.