Thanks. Aaron. I realize that it isn't a very secure way to handle things, which is why I'm trying to come up with a better solution. I agree that we should ask them to set it up online but I think I'll have a hard time convincing my bosses that we should just stop these monthly gifts if the donors don't go and set them up online after we ask. Also, I'd have to convince them to remove the ask for monthly credit card donations from all of our physical mail solicitations, and I don't think they'll go for that either. Not sure how else we can accommodate these few folks without keeping it locked up in a binder.
------------------------------
Tioga Anderson
Database Administratror
Good Shepherd Rehabilitation Hospital
tandersontb@gmail.com------------------------------
Original Message:
Sent: 09-15-2022 11:51 AM
From: Aaron Forrest
Subject: Moving monthly Credit Card Charges to Online Giving Site
Storing credit card numbers written on a piece of paper in the way you describe is naughty. Even if you have armed guards and lasers protecting that binder around the clock, you are putting your donors and the organization at risk. You should call the donors, tell them you need them to go online and setup a recurring charge, and then shred the contents of the binder. Also, never speak of it again around an auditor.
Aaron Forrest CPA
Senior Director Gift and Donor Services
University of Rochester Office of Advancement
585.275.2799 | aaron.forrest@rochester.edu
Original Message:
Sent: 9/15/2022 12:20:00 PM
From: Isaac Shalev
Subject: RE: Moving monthly Credit Card Charges to Online Giving Site
It's not PCI-compliant to use the front-end website form to enter gifts from customers. The payment gateway is intended for customers, not merchants. You need to use your virtual terminal for merchant transactions, it's not a donor permission issue.
Thank you,
Isaac Shalev
Data Strategy Expert
Sage70, Inc.
(917) 859-0151
isaac@sage70.com
Schedule a 30-minute consultation now:
Original Message:
Sent: 9/14/2022 3:20:00 PM
From: Tioga Anderson
Subject: Moving monthly Credit Card Charges to Online Giving Site
Hello,
At our shop we have some donors (less than 15) who at some point gave us credit card info through the mail or over the phone to be charged monthly. We had been storing this information in a locked up binder and then the gift processor would use the info in the binder to charge the cards each month on the appropriate dates. The donors get a tax receipt at the end of the year. I don't love the idea of keeping this credit card info in a binder and it's manual process which also creates issues. Sometimes the gift processor forgets to charge them or they are out sick that day, etc. Relatively new at this organization so I'm trying to come up with a better way to handle these.
So my question is, since we have an online giving website with the ability to setup recurring payments, can I just enter the info into our online site as a recurring payment for the donors? That way they would just be charged automatically and we wouldn't have to store the info anywhere. Or would folks here recommend that I get permission from the donors before going this route? I'd think they would be okay with this as its much safer for them to have their info stored on a secure site than having it in binder to be processed manually every month. Thoughts?
Thanks,
Tioga
------------------------------
Tioga Anderson
Database Administratror
Good Shepherd Rehabilitation Hospital
tandersontb@gmail.com
------------------------------