Privacy Policy

1.1. Personal Information: We may collect personal information that you provide to us when participating in the Program, including but not limited to your name, email address, phone number, date of birth, payment information, and other information you may choose to provide. We collect this information when you register an account via our website, or participate in the Program, submit inquiries, participate in promotions or surveys which we may conduct from time to time, register for attending any of our scheduled events, or otherwise interact with our service offerings. This information is necessary for the provision of our services and to ensure a smooth onboarding process. If you choose to gift the Program to a third party ("Gift Recipient"), please note the following: (a) You must provide accurate and complete information about the Gift Recipient, including their full name and email address, as required to deliver the gift and facilitate our services; (b) You are responsible for ensuring that you have the right or have obtained the necessary consent from the Gift Recipient to share their personal information with us; (c) You bear sole responsibility for the accuracy and legality of the information you provide about the Gift Recipient; (d) We will process the Gift Recipient’s personal information in accordance with this Privacy Policy and applicable data protection laws. We encourage you to inform the Gift Recipient that their information has been shared with us and direct them to this Privacy Policy for more information on how we handle their personal data. We are not responsible for any issues arising from the provision of inaccurate information or failure to obtain the necessary consents from the Gift Recipient.

1.2. Usage Information: We may automatically collect information about your use of the Program, such as your device information, browser activities, and other usage data. This information helps us analyze trends, administer the Program, improve user experience, and gather demographic information for aggregate use. It also helps us understand how users engage with our platform and improve its functionality.

1.3. Transaction Information: We may collect transaction details, including payment information, to process and complete your onboarding. This may include card details or other payment method information. If you choose the option to save your payment data (card or IBAN/SWIFT number), you expressly authorize us to process the indicated data as necessary for the activation and development of this functionality. The card security code (CVV or CVC) is used solely to complete the current purchase and will not be stored or processed afterward as part of your card data. Consent to activate this functionality allows your data to be auto-filled in future payments, so it will not be necessary to enter your payment details for each new transaction, and they will be considered valid and current for subsequent occasions. You may modify or delete your cards or account numbers at any time by writing to us at info@mytreehood.com. We store and transmit your card and bank account data in accordance with leading international confidentiality and security standards. For security reasons, the use of this functionality may require you to change your access password. Please remember that the security of using the Platform also depends on your proper use and safeguarding of certain confidential credentials.

1.4. Communication Information: When users contact our customer support or engage in communication with us, we may collect and store the content of those communications to address inquiries, provide assistance, and improve the Program.

2.1. We use and process the information we collect to provide and improve the Program, personalize your experience, and ensure the smooth functioning of our operations. The specific purposes for which we use and process your information include:

• 2.1.1. We use your information to facilitate your onboarding process and provide support as required. This includes verifying your identity, contacting you regarding updates to products or services that are offered by MyTreehood, and resolving any inquiries or complaints you may have. We also use your information to enhance and improve the Program, develop new features, and conduct research and analysis to optimize our operations.
• 2.1.2. Your information is used for managing your user account. This includes account setup, authentication, and security measures to protect your personal data. We may use your contact details to communicate with you about your products or services that are offered by MyTreehood, account-related matters, and support inquiries. These communications are essential for providing the Program, and you may not be able to opt out of them.
• 2.1.3. With your consent, we may send you updates and information about the environmental impact of your tree adoption, as well as related news and initiatives. You can manage your communication preferences by adjusting your account settings or following the opt-out instructions provided in our communications.
• 2.1.4. We may aggregate and anonymize your information to create statistical or aggregated data that does not personally identify you. This aggregated and anonymized data may be used for various purposes, such as analyzing usage patterns, improving the Program, conducting market research, or sharing with third parties for lawful purposes.
• 2.1.5. We may use cookies, web beacons, and other tracking technologies to collect information about your use of the Program. You can control cookies through your browser settings. For more information on how we use cookies, please refer to our Cookies Policy.

2.2. In addition to the purposes described above, we may use and process your information for any other purposes disclosed to you at the time of collection or with your consent. Our legal basis for collecting, using, and processing your information may vary depending on the specific context and the nature of the information. In most cases, we rely on your consent, the performance of a contract, compliance with legal obligations, or our legitimate interests as the lawful basis for processing your information. We strive to limit the use and processing of your information to what is necessary to achieve the specified purposes and to retain your information only for as long as required to fulfill those purposes, unless a longer retention period is permitted or required by law.

3.1. We understand the importance of safeguarding your personal information and strive to limit the disclosure of your information to third parties. However, there are circumstances where we may need to disclose your information for the purposes outlined in this Privacy Policy or as required by law. We may disclose your information in the following situations:

• 3.1.1. Service Providers and Partners: We may disclose your information to trusted third-party service providers and business partners who assist us in operating our business and providing the Program. These entities may include payment processors, IT service providers, customer support providers, marketing agencies, and analytics providers. We enter into agreements with these third parties to ensure that they handle your information securely and in accordance with applicable privacy laws and regulations.
• 3.1.2. Legal Compliance: We may disclose your information if required to do so by law, regulation, or legal process, including to respond to a subpoena, court order, or government request. We may also disclose your information to exercise or defend our legal rights or to protect the rights, property, or safety of our users, employees, or others.
• 3.1.3. Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you via email or through a prominent notice on our website of any change in ownership or the use of your personal information. The acquiring entity will be required to comply with the terms of this Privacy Policy, unless you are provided with a new privacy policy and given the opportunity to opt-out.
• 3.1.4. Consent: We may disclose your information to third parties with your consent or at your direction. For example, if you choose to participate in a promotional campaign or engage in a transaction that involves third-party products or offerings, we may share your information with those third parties as necessary to fulfill your request or provide the requested service.
• 3.1.5. Aggregated and Anonymized Data: We may share aggregated and anonymized data that does not personally identify you with third parties for various purposes. This may include sharing statistical information, or demographic data for research, analytics, marketing, or other lawful purposes.
• 3.1.6. Data Transfers: As an international business, we may need to transfer your information to recipients located in countries outside of your own jurisdiction. These countries may have data protection laws that differ from those in your jurisdiction. As the data processor, we will take steps to ensure that any international transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.
• 3.1.7. Non-Personal Information: We may share non-personal information with third parties for various purposes, including business analytics, research, or improving the Program. This information does not personally identify you and cannot be used to contact or identify you individually.

Our website may contain links to third-party websites or resources. These links are provided for your convenience, and we are not responsible for the privacy practices or content of such third-party websites. If you are redirected to third-party websites through embedded links within the website or related materials such as our white papers, the collection of your information on those websites is not covered by this Privacy Policy. You should familiarize yourself with the terms, conditions, and privacy policy of the third-party website before submitting your information.

5.1. We take data security seriously and have implemented comprehensive measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. We utilize industry-standard security practices and continually strive to maintain the confidentiality, integrity, and availability of your data. Here are the key aspects of our data security practices:

• 5.1.1. Encryption: We employ strong encryption techniques to safeguard your personal information during transmission and storage. This includes using TLS or SSL protocols to encrypt data transmitted between your device and our servers.
• 5.1.2. Secure Storage: We store your personal information on secure servers with restricted access. Our data centers and infrastructure are designed to provide a high level of data security.
• 5.1.3. Access Controls: We maintain strict access controls to ensure that only authorized personnel can access your personal information on a need-to-know basis. We also adopt strong password policies and two-factor authentication.
• 5.1.4. Security Audits: We may conduct security audits and assessments occasionally to identify and address vulnerabilities in our systems and infrastructure. These audits are performed at our sole discretion by third-party security experts. We remediate any identified vulnerabilities promptly.
• 5.1.5. Incident Response: In the event of a data breach or security incident, we have established an incident response plan to promptly and effectively respond to and mitigate such incidents. This includes notifying affected individuals and relevant authorities as required by law.
• 5.1.6. Data Retention: We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We securely dispose of data using industry-standard methods when no longer needed.
• 5.1.7. User Responsibilities: While we implement stringent security measures, your cooperation is vital. You are responsible for keeping your account credentials secure and confidential. Please report any suspected unauthorized access immediately.
• 5.1.8. Data Protection Officer: In line with the GDPR, we have appointed a Data Protection Officer (DPO) who oversees our data protection practices and compliance. You may contact our DPO at privacy@mytreehood.com.

5.2. Please note that while we strive to protect your personal information, no method of transmission or storage can guarantee absolute security.

6.1. As a global service provider, MyTreehood may transfer, store, and process your personal information in jurisdictions outside of your country of residence. These international transfers may be necessary for the purposes described in this Privacy Policy, including providing the Program, processing payments, and storing data.

6.2. When we transfer your personal information to other countries, we ensure that appropriate safeguards are in place to protect your data and comply with applicable data protection laws. These safeguards may include:

• 6.2.1. Adequacy Decisions: We may transfer personal information to countries deemed to provide an adequate level of data protection by the European Commission or other relevant authorities.
• 6.2.2. Standard Contractual Clauses: For transfers to countries without an adequacy decision, we may use standard contractual clauses approved by regulatory authorities to ensure lawful and secure data transfers.
• 6.2.3. Consent: In some cases, we may rely on your explicit consent to transfer your information to countries with different data protection laws. We will inform you of the risks and obtain your consent before doing so.

6.3. By using our Offerings and providing your personal information, you consent to the transfer, storage, and processing of your information outside of your country of residence. If you have any questions about our international data transfer practices, please contact us using the details in the “Contact Information” section below.

6.4. Please note that data protection laws in some countries may differ from those in your jurisdiction. However, we take all reasonable steps to ensure your data remains secure and protected in line with this Privacy Policy and applicable laws.

7.1. Unless otherwise mandated by applicable law, we will retain your personal information for the duration of your relationship with us, including the provision of the Program and any necessary follow-up actions. This may include retaining your information to comply with our legal obligations, resolve disputes, enforce our legal agreements, and protect our rights.

7.2. If you have registered an account with MyTreehood, we will retain your personal information as long as your account remains active. If you wish to delete your account, you may do so by contacting us as described in the "Contact Information" section of this Privacy Policy. However, please note that certain information may be retained in our backup systems for a limited period of time or as required by law.

7.3. Even if you delete your account or request the deletion of your personal information, please be aware that residual copies of your information may remain in our backup systems or archives for a period of time as necessary for our legitimate business purposes, such as ensuring the integrity of our data or complying with legal obligations.

7.4. We may also retain aggregated, anonymized, or de-identified data that does not directly identify you for statistical analysis, research, and other purposes, as long as it is lawful to do so.

7.5. We regularly review our data retention practices to ensure that we only retain personal information for as long as necessary. If you have any questions about our data retention practices or wish to request the deletion of your personal information, please contact us using the contact details provided in the "Contact Information" section of this Privacy Policy.

7.6. Please note that certain legal or regulatory requirements may require us to retain your personal information for a longer period of time. In such cases, we will ensure that your personal information is protected in accordance with this Privacy Policy and applicable laws.

8.1. Right to Access and Rectification: You have the right to request access to the personal information we hold about you and to correct any inaccuracies. If you would like to exercise this right, please contact us using the contact details provided in the "Contact Information" section of this Privacy Policy.

8.2. Right to Erasure: You have the right to request the deletion of your personal information under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent and there is no other legal basis for processing. To request the erasure of your personal information, please contact us using the contact details provided.

8.3. Right to Restrict Processing: You have the right to request the restriction of processing of your personal information under certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful. To request the restriction of processing, please contact us using the contact details provided.

8.4. Right to Data Portability: If you reside in a jurisdiction that provides for data portability rights, you may have the right to receive a copy of your personal information in a commonly used and machine-readable format and to transmit it to another data controller. To request data portability, please contact us using the contact details provided.

8.5. Right to Object: You have the right to object to the processing of your personal information on grounds relating to your particular situation, including for direct marketing purposes. If you would like to exercise this right, please contact us using the contact details provided.

8.6. Marketing Communications: If you have provided your consent to receive marketing communications from us, you can opt-out at any time by following the instructions provided in the communications or by contacting us.

8.7. Cookie Preferences: You can manage your cookie preferences and opt-out of certain tracking technologies by adjusting your browser settings or by using the opt-out mechanisms provided by third-party analytics and advertising providers. Please note that disabling cookies or opting out of certain tracking technologies may affect the functionality of our website.

8.8. Withdrawal of Consent: If you have provided your consent for the processing of your personal information, you have the right to withdraw your consent at any time. Please note that the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

8.9. Exercising Your Rights: To exercise any of your rights described in this section, or if you have any questions or concerns about our data practices, please contact us by email at info@mytreehood.com or using the contact details provided in the "Contact Information" section of this Privacy Policy. We will respond to your request and address your concerns in a timely manner and in accordance with applicable data protection laws. We would request that you contact us first before lodging any complaints to the relevant data protection authorities.

8.10. Right to Lodge a Complaint: If you believe that we have not adequately addressed your privacy concerns or that we have violated your rights under applicable data protection laws, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. You may also contact the Spanish Data Protection Agency, either through the electronic headquarters of its website (www.agpd.es), or by sending a written request to its postal address (Calle Jorge Juan, 6, 28001 Madrid).

All information collected by MyTreehood is stored on secure servers. When you register an account with us, you will be asked to choose a password to access the website, and it is your responsibility to keep this password confidential. Additionally, we may store or process your information in countries outside the UK or the European Economic Area (EEA), which may have different data protection standards. We have implemented technical and organizational security measures to protect your personal information. However, while we strive to ensure the security of your data, it is your responsibility to make an informed decision regarding the use of our Offerings and investment offerings based on your concerns about data handling.

10.1. General Compliance Statement: MyTreehood is committed to complying with applicable data protection laws and regulations, including but not limited to, Organic Law on Protection of Personal Data and Guarantee of Digital Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter DPA 2018) and Regulation (EU) 2016/679, of April 27, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR). This section outlines specific provisions related to each of these laws, but please note that it may not cover all aspects of the laws.

10.2. MyTreehood complies with all applicable data protection laws in the UK, including but not limited to the DPA 2018, which incorporates the provisions of the GDPR into UK laws post-Brexit.

10.3. We ensure that there is a lawful basis for processing personal information in accordance with the GDPR. The legal basis for processing may include the necessity of processing for the performance of our Client Agreement, compliance with a legal obligation, protection of vital interests, consent, performance of a task carried out in the public interest or in the exercise of official authority, and legitimate interests pursued by MyTreehood or a third party.

10.4. MyTreehood complies with the GDPR requirements for transferring personal data outside the EEA by implementing appropriate safeguards such as the use of standard contractual clauses, adequacy decisions, and other mechanisms as required by the GDPR.

10.5. MyTreehood has appointed a Data Protection Officer responsible for overseeing compliance with data protection laws and regulations. You may contact our Data Protection Officer at the contact details provided in this policy.

10.6. MyTreehood retains personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

10.7. MyTreehood respects and upholds the rights of individuals as provided under applicable Data Protection Laws, including the right to access, rectification, erasure, restriction of processing, data portability, and objection.

10.8. If you believe that MyTreehood has violated your rights under applicable data protection laws or if you have any concerns regarding our data practices, you have the right to lodge a complaint with the relevant data protection authority. The contact details of the supervisory authority may vary depending on your jurisdiction.

11.1. MyTreehood understands the importance of maintaining the privacy and security of your personal information. When engaging third-party service providers to assist in operating our business and providing Offerings to you, we ensure that they share our commitment to privacy and adhere to appropriate data protection practices.

11.2. Where required, MyTreehood enters into contractual agreements with its third-party service providers that may have access to or process personal information on our behalf. These agreements typically include provisions that require the service providers to implement appropriate technical and organizational measures to protect our clients’ personal information and to use it only for the purposes specified by MyTreehood.

11.3. MyTreehood requires all third-party service providers to maintain the confidentiality and security of your personal information. They are obligated to implement appropriate safeguards to protect your information from unauthorized access, disclosure, alteration, or destruction.

11.4. Compliance with Applicable Laws: Our agreements with third-party service providers include clauses that require them to comply with all applicable data protection laws and regulations. This ensures that they handle your personal information in accordance with the same level of protection and privacy as provided by MyTreehood.

11.5. We encourage you to review the privacy practices of our third-party service providers, which may have their own privacy policies governing the use and disclosure of your personal information.

At MyTreehood, we take the security of your personal data seriously. We implement appropriate technical and organizational measures designed to protect your information from unauthorized access, accidental loss, destruction, or damage. We use secure servers, encryption protocols, access controls, and industry-standard safeguards to help ensure the confidentiality and integrity of your personal and payment information. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. All payment transactions made via MyTreehood are processed through secure, third-party payment processors. We do not store or retain your full payment card details on our servers. Any transmission of payment data is encrypted and subject to the security and privacy practices of the respective payment processor. In the unlikely event of a data breach that affects your personal information, we will take all reasonable steps to investigate, mitigate the impact, and, where required by applicable law, notify you and any relevant authorities. Notification will occur as promptly as possible, considering the nature and extent of the breach. You are responsible for maintaining the confidentiality of any account credentials or passwords associated with your use of MyTreehood. We strongly encourage you to use strong, unique passwords and to notify us immediately at privacy@mytreehood.com if you suspect unauthorized access to your account. While we take all reasonable steps to secure your data, MyTreehood shall not be liable for any direct or indirect loss, damage, or harm arising from a security incident or unauthorized access, except to the extent required by applicable law. Users are advised to exercise caution when sharing personal or financial information online.

If we transfer personal information from the European Union or Switzerland to the United States, we comply with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the EU and Switzerland to the United States

If you choose to submit or post user-generated content on our website, such as reviews, comments, or photos, please be aware that this content may be publicly accessible. We are not responsible for any personal information you include in your user-generated content, so please use caution when sharing personal information in public forums.

In the event of a change in ownership or control of MyTreehood, such as through a merger or acquisition, your personal information may be transferred to the new owners. We will notify you of any such change and provide choices regarding your personal information.

MyTreehood's website is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will promptly delete it from our records.

Our website uses cookies, which are small files stored on your computer's hard drive to collect personal information. You may choose to refuse cookies, but this may affect the functionality of the website. For more information about cookies and how to manage them, please refer to our Cookies Policy.

18.1.MyTreehood may use your personal information to provide you with marketing communications about our products, Offerings, promotions, and events, subject to your consent and in compliance with applicable laws. These communications may be sent via email, SMS, or other electronic means.

18.2.We will obtain your explicit consent before sending you any marketing communications. You have the right to withdraw your consent at any time by following the instructions provided in the communications or by contacting us directly.

18.3.If you no longer wish to receive marketing communications from us, you can opt-out by clicking the "unsubscribe" link provided in the email or by contacting us. Even if you opt-out of receiving marketing communications, we may still send you non-promotional messages related to your use of the Program.

18.4.MyTreehood will not sell or rent your personal information to third parties for their marketing purposes without your explicit consent. However, we may share your information with our trusted partners or affiliates for their own marketing purposes if you have provided consent for such sharing.

18.5.You have the right to control how your personal information is used for marketing purposes. You can manage your communication preferences by updating your account settings or by contacting us. You can choose to opt-in or opt-out of receiving marketing communications, and you can modify your preferences at any time.

18.6.We may engage in targeted advertising efforts to reach our audience with relevant offers and promotions. These efforts may involve using cookies, pixels, or other tracking technologies to collect information about your browsing behavior and interests. You can manage your cookie preferences through your browser settings or opt-out of targeted advertising by visiting the relevant advertising network's opt-out page.

18.7.Our marketing practices comply with applicable data protection laws, including the GDPR, the DPA, and other relevant regulations. We respect your rights and choices regarding marketing communications and ensure that your personal information is processed in accordance with these laws.

We reserve the right to modify or update this Privacy Policy at any time. Changes to the Privacy Policy will be communicated through our website or occasionally by e-mail. You will be asked to review and accept the updated Privacy Policy before continuing to use the Program. Continued use of the Program after the effective date of any changes to the Privacy Policy will constitute acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
email: info@mytreehood.com or support@mytreehood.es