This Policy describes the information we process to support both the website and application of TreeChange. You can find additional tools and information in the TreeChange settings. To provide the TreeChange social media service, we must process information about you. The type of information that we collect depends on how you use our service. You can access and delete information that we collect as well as contact our data controller / data controller representative by checking TreeChange settings.

Data we collect from you

Data you provide that we retain to deliver our service

We collect the content, communications and other information you provide when you use our service, including when you sign up to partner with us and when you make a direct donation.

Information that we obtain from these devices includes:

External: identifying data specifically the user's real name

Financial: transactional data specifically records of purchases

How do we use this information?

We use the information that we have (subject to choices you make) as described below, and to provide and support the TreeChange service described in the TreeChange Terms and conditions:

To provide our service

We use the information that we have to deliver our service, by retaining your log in credentials we are able to provide you with a unique account in our service from which other people can recognize.

Identifying data is needed in order to complete the user's financial transactions.

Registering data specifically email address is needed to communicate and authenticate your actions. While physical address is needed to complete transactions within our service.

We collect data about transactions made on our service. If you use our service for making purchases or donations, we collect information about the purchase or transaction. This includes partial payment information, such as your credit or debit expiry date and the last four digits of your credit or debit card as well as other account and authentication information, and billing, delivery and contact details. Records of your donations are specifically retained for 18 months for the accounting of the specific charity in question.

Content that others share related to you

New owner:

If the ownership or control of all or part of our service or their assets changes, we may transfer your information to the new owner.

Sharing with third-party partners

We work with third-party partners such as charities, local governments and law enforcement in specific situations detailed below. We don't sell any of your information to anyone and we never will. We also impose strict restrictions on how our partners can use and disclose the data we provide. Here are the types of third parties that we share information with:

Transactional information:

Data related to donations made is retained for a period of up to 18 months in order to facilitate the proper accounting of the third party Charites which TreeChange allows you to donate to on behalf of the deceased.

Law enforcement or legal requests.

We share information with law enforcement or in response to legal requests in the circumstances outlined.

What is our legal basis for processing data?

We collect, use, and share the data that we have in the ways described below:

As necessary to fulfil our TreeChange Terms of Service;

Consistent with your consent, which you may revoke at any time through the TreeChange settings;

As necessary to comply with our legal obligations;

As necessary to provide a personalized and safe service to our users and partners, unless those interests are overridden by your rights and freedoms that require protection of personal data.

How can you exercise your rights provided under the GDPR?

Under the General Data Protection Regulation, you have the right to access, rectify, delete and transfer your data. You can choose to exercise any of these rights by contacting our data controller. You also have the right to object to and restrict certain processing of your data. This includes:

The right to object to our processing of your data where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party.

Data retention, account deactivation and deletion

We store data until it is no longer necessary to provide our service or until your account is deleted. This is a case-by-case determination that depends on things such as the nature of the data, why it is collected and processed, and relevant legal or operational retention needs. For example when you make a donation, the record of the donation is retained for 18 months for the record keeping and accounting of the charity involved. If you submit a copy of your valid photo ID for account verification purposes, we delete that copy 30 days after submission.

When you delete your account your status updates and all records of pages you have liked will be deleted and you won't be able to recover this information later. Comments you post publically and Information that others have shared about you isn't part of your account and won't be deleted along with your account. To delete your account at any time, please contact the data controller through the settings section.

Data rights

In regards to your data right you are afforded the following rights:

1.  Rights to access

You have a right to obtain a clearly explained copy of any information relating to you kept on our computers.

2.  Right to data portability

You have the right to request a copy of all information you have provided to TreeChange as part of your registration and use of the site or application. This information will be sent to you or to a new data controller of your choice in a structured, commonly used and machine-readable format. We are obligated to ensure this data is sent within one month or in certain special circumstances with three months. Any data provided to the user, cannot be misused in such a way that would violate Our copyright doing so will render the requesting user and any subsequent data controllers involved in the copyright violation Liable. Data pertaining to users other then the one making a data portability request cannot be provided in such a request.

3.  Right to erasure

You have the right to request that we erase all personal data concerning you without undue delay where you withdraw your consent to us processing your data or where the data in question must be deleted to comply with union or member state law.

4.  Right to rectification

If at any time you notice that your personal information such as your name, data of birth, address or name are incorrect you have the right to tell us to correct this inaccurate personal data.

In the event the data subject desires to exercise their data rights they may go to settings to request deletion of their account and related non-transactional data or contact the data controller “insert name of data controller” at “email of data controller”.

How do we respond to legal requests or prevent harm?

We access, preserve and share your information with regulators, law enforcement or others:

We respond to legal requests when we have a good-faith belief that the response is required by law in that jurisdiction which affects users in that jurisdiction and is consistent with internationally recognized standards.

When we have a good-faith belief that it is necessary to: detect, prevent and address fraud, unauthorized use of our service, breaches of our Terms or Policies, or other harmful or illegal activity; to protect ourselves including our rights and service, you or others, including as part of investigations or regulatory enquiries; or to prevent death or imminent bodily harm. For example, if relevant, we provide information to and receive information from third-party partners about the reliability of your account to prevent fraud, abuse and other harmful activity on and off our services.

Information that we receive about you (including financial transaction data related to purchases made with TreeChange) can be accessed and preserved for an extended period when it is the subject of a legal request or obligation, governmental investigation or investigations of possible breaches of our Terms or Policies, or otherwise to prevent harm. We also retain information from accounts disabled for term breaches for at least a year to prevent repeat abuse or other term breaches.

How will we notify you of changes to this Policy?

We'll notify you before we make changes to this Policy and give you the opportunity to review the revised Policy before you choose to continue using our Products.

How to contact Tree Change with questions

If you have any questions over this you can contact us through the contact details below. We may resolve disagreements that you may have with data or privacy policies.

Data Control Officer: hello@treechange.ie

Data Protection Officer: hello@treechange.ie