Privacy Policy for Maple Forest Registry

Effective Date: October 26, 2023
Website: www.mapleforestregistry.com

Maple Forest Registry ("we," "us," "our," or "the Registry") is committed to protecting your privacy. This comprehensive Privacy Policy ("Policy") explains in detail how we collect, use, disclose, and safeguard your personal information when you visit our website, www.mapleforestregistry.com (the "Site"), and use our services related to the registration, verification, and celebration of maple trees and forests (collectively, the "Services").

By accessing or using our Site and Services, you consent to the data practices described in this Policy. If you do not agree with the terms of this Policy, please do not access the Site or use our Services.

This Policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union and European Economic Area, and other global privacy regulations.

1. Information We Collect

We collect several types of information from and about users of our Site and Services, including:

1.1. Personal Information You Provide Voluntarily

This is information that identifies you personally and that you provide directly when you interact with our Services. This may include:

Identity and Contact Data: Your full name, email address, postal address, telephone number, country of residence, and, if applicable, organization name.
Account and Registration Data: Username, password, and other credentials used to create an account on the Site.
Tree and Forest Data: Information you provide when registering a tree or forest, such as tree species (e.g., sugar maple, red maple), location data (GPS coordinates, general location descriptions), photographs, historical significance, planting date, size measurements, and personal stories or dedications associated with the tree.
Transaction and Payment Data: If you purchase certificates, plaques, or other products, we collect billing information, shipping address, and payment card details (which are processed directly by our secure third-party payment processors; we do not store full payment card numbers on our servers).
Communications Data: Records of your correspondence with us (e.g., support inquiries, feedback, survey responses).
Profile Data: Your interests, preferences, and publicly shared dedications or stories you choose to include in your registry profile or public listings.

1.2. Information Collected Automatically

When you visit our Site, we may automatically collect certain information about your device and browsing actions. This information may include:

Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Site.
Usage Data: Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through, and from our Site (including date and time); pages you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
Location Data: General geographic location derived from your IP address. Precise location data (GPS) is only collected if you explicitly provide it for tree registration.

We collect this automatically-collected information using cookies, web beacons, log files, and similar tracking technologies. Please see our Cookie Policy (Section 8) for more details.

1.3. Information from Third Parties

We may receive limited personal information about you from third parties, such as:

Social media platforms (if you choose to link your account or log in via a social media service).
Payment processors to confirm your transaction.
Analytics providers (like Google Analytics) and advertising networks.
Publicly available sources to verify or supplement tree or landowner information, where applicable and lawful.

2. How We Use Your Information

We use the information we collect for various business purposes, including:

To Provide and Manage Our Services: To create and manage your account; process your registrations; issue certificates; fulfill orders for products; display your registered trees/forests (according to your privacy settings); and facilitate communication between users (e.g., for dedications).
To Communicate with You: To send you service-related communications (e.g., account verification, transaction confirmations, technical notices, updates, security alerts); respond to your comments and questions; and provide customer support.
To Personalize Your Experience: To tailor content, recommendations, and features on our Site based on your preferences, interests, and past activities.
For Marketing and Promotions (with your consent where required): To send you promotional communications about new features, products, services, or events we believe may interest you. You can opt-out of marketing communications at any time.
For Research and Development: To analyze usage trends and preferences to improve, optimize, and develop new features, products, and services for the maple forestry community.
To Ensure Security and Prevent Fraud: To monitor and protect the security of our Site, network, and information; detect, investigate, and prevent fraudulent transactions and other illegal activities; and protect the rights and property of Maple Forest Registry and others.
To Comply with Legal Obligations: To comply with applicable laws, regulations, legal processes, or governmental requests.

Legal Basis for Processing (For EEA/UK Users): Our legal basis for collecting and using your personal information depends on the context in which we collect it. We typically rely on: (a) Contractual Necessity (to perform our contract with you); (b) Legitimate Interests (to operate our business, provided your interests do not override ours); (c) Consent (where you have given clear consent, e.g., for marketing); or (d) Legal Compliance (where processing is required by law).

3. How We Share and Disclose Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

With Your Consent: We share your information when you direct us to, such as when you choose to make a tree registration public or share a dedication.
Service Providers: We engage trusted third-party companies and individuals to perform services on our behalf ("Processors"). These include hosting providers, payment processors, email delivery services, analytics providers, and customer support platforms. They have access to personal information only to perform their tasks and are contractually obligated not to disclose or use it for other purposes.
For Legal Reasons: We may disclose information if we believe it is necessary to: (i) comply with a law, regulation, or legal request; (ii) protect the safety, rights, or property of Maple Forest Registry, our users, or the public; (iii) enforce our Terms of Service; or (iv) detect, prevent, or otherwise address fraud, security, or technical issues.
Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company, your information may be transferred as a business asset. We will notify you via email and/or a prominent notice on our Site of any change in ownership or uses of your personal information.
Aggregated or Anonymized Data: We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, statistical analysis, or public outreach about maple forest conservation.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.

For example, we retain account data for as long as your account is active. Transaction data is retained as required by tax and accounting laws. If you request account deletion, we will securely delete or anonymize your data in accordance with our internal policies and applicable law, though we may retain certain information where necessary for legitimate business interests or legal compliance.

5. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information. These may include:

Right of Access: The right to request copies of the personal information we hold about you.
Right to Rectification: The right to request correction of any inaccurate or incomplete personal information.
Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal information under certain conditions.
Right to Restrict Processing: The right to request that we restrict the processing of your personal information under certain conditions.
Right to Data Portability: The right to request transfer of your data to another organization or to you in a structured, machine-readable format.
Right to Object: The right to object to our processing of your personal information, particularly for direct marketing or where we rely on legitimate interest as our legal basis.
Right to Withdraw Consent: Where we rely on your consent, you have the right to withdraw it at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.
Right to Opt-Out of Marketing: You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any marketing email or by contacting us.

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request in accordance with applicable law. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with your local data protection authority.

6. International Data Transfers

Maple Forest Registry is operated from Canada. If you are located outside Canada, please be aware that information we collect, including personal information, will be transferred to, processed, and stored in Canada. Canada's data protection laws may differ from those in your country.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland: When we transfer your personal information to Canada or other countries, we do so using appropriate safeguards as required by data protection laws. These safeguards may include the European Commission's Standard Contractual Clauses or reliance on a service provider's Privacy Shield certification (where applicable).

7. Data Security

We implement appropriate technical and organizational security measures designed to protect the security of your personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction. These measures include encryption (SSL/TLS) for data in transit, secure servers, access controls, and regular security assessments.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account password and for any activity under your account.

8. Cookies and Similar Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Site and hold certain information to enhance functionality and user experience.

Essential Cookies: Necessary for the Site to function and cannot be switched off. They are usually set in response to your actions (e.g., logging in).
Performance/Analytics Cookies: Allow us to count visits and traffic sources to measure and improve Site performance. They help us know which pages are popular.
Functional Cookies: Enable enhanced functionality and personalization (e.g., remembering your login or preferences).
Targeting/Advertising Cookies: Set by our advertising partners to build a profile of your interests and show relevant ads on other sites.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the Site may become inaccessible or not function properly. For more detailed information, please see our dedicated Cookie Policy page (link provided in website footer).

9. Children's Privacy

Our Site and Services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we learn we have collected personal information from a child under 16 without verification of parental consent, we will take steps to delete that information from our servers.

10. Third-Party Links

Our Site may contain links to third-party websites, plug-ins, and applications (e.g., conservation organizations, maple product retailers). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. We will post the updated Policy on this page and update the "Effective Date" at the top. We may also provide you with additional notice (such as adding a statement to our homepage or sending you a notification) for material changes. Your continued use of the Site after the effective date of the revised Policy constitutes your acceptance of the terms.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Maple Forest Registry
Attn: Data Protection Officer
Email: privacy@mapleforestregistry.com
Postal Address: [Insert Registered Business Address]

We will endeavor to respond to your inquiry within a reasonable timeframe.