At EcoMatcher, we understand that the security of personal data is important. That’s why we take a holistic approach toward security and privacy by safeguarding the confidentiality, integrity, and availability of personal data in our systems and networks.

This Privacy and Cookie Policy (the “Policy”) is for all users. It considers the enhanced data protection rights required by the EU General Data Protection Regulation (GDPR) that has become effective May 25, 2018, for all EU-resident users. We explain in this Policy how we collect, process, and/or use information that we receive via our website, emails, and mobile applications (collectively, the “Platform”) that link to this Policy, as amended from time to time.

This privacy policy will explain how our organization uses the personal data we collect from you when you use the EcoMatcher platform.

Topics:

• What data do we collect?
• How do we collect your data?
• How will we use your data?
• How we work with third-parties
• How do we store your data?
• How do we protect your data?
• Marketing
• What are your data protection rights?
• What are cookies?
• How do we use cookies?
• What types of cookies do we use?
• How to manage your cookies
• Privacy policies of other websites
• Changes to our privacy policy
• How to contact us
• How to contact the appropriate authorities

What data do we collect?

EcoMatcher collects the following user data:

• Personal identification information (name, email address)

When registering an EcoMatcher account, you will be asked to enter your email address and password. Your EcoMatcher account will give you easy access to all the trees you have bought or received and enables you to track your trees on EcoMatcher’s desktop website, on the go with the free EcoMatcher iOS/Android App, and the free EcoMatcher App for Microsoft Teams. If the user login in EcoMatcher App for Microsoft Teams then EcoMatcher will also collect the Microsoft ID account and timezone of the user.

When using the Platform for sending trees to tree recipients, EcoMatcher stores the email address of the tree recipients only for the options “Send By Email” and “Redeem,” giving you great insights into your gifting campaign. For all other options, the email addresses will not be stored. When ordering trees on our website in the TreeShop, like any webshop, you will be asked to enter your email address.

How do we collect your data?

You directly provide EcoMatcher with most of the data we collect. We collect and process data when you:

• Register online or order any of our products or services.
• Subscribe to our newsletter.
• Use or view our website via your browser’s cookies.

EcoMatcher may also receive your data indirectly from the following sources:

• When someone sends trees to your email address, we collect your email address.
• Use third-party software to access the EcoMatcher platform.

How will we use your data?

EcoMatcher collects your data so we can:

• Process your order and manage your account.
• Email you to keep you informed about your account, the latest developments of EcoMatcher that may benefit you, and offers on other products and services we think you might like.

How we work with third-parties

We do not sell, trade, or otherwise transfer your personal information to outside parties unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety. Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We, therefore, have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.To process your order and use the EcoMatcher platform EcoMatcher will share your data with our technology partners.

When EcoMatcher processes your order, it may send your data to, and also use the resulting information from, credit reference agencies to prevent fraudulent purchases.

How do we store your data?

EcoMatcher securely stores your data at a global cloud infrastructure provider with security precautions taken that are in line with information security industry standards from the National Institute of Standard and Technology (NIST), a Cyber Security Framework. Personal information is stored in data centers located in Singapore. Data at rest is protected with encryption. All our databases that contain users’ information are configured with encryption. Data in transit is encrypted by TLS/SSL connections.

EcoMatcher will keep your account data (e-mail address) for the time period that your user account is active. Once this time period has expired, we will delete your data according to our user data deletion policy. Our data retention is 7 days for the backup of data.

A masked version of your e-mail address is stored on the EcoMatcher blockchain (“TreeChain”) and will be stored for an unlimited period of time. Your actual email address can never be traced back from a masked email address on the EcoMatcher blockchain.

How do we protect your data?

A. Our cyber security program

EcoMatcher takes security and privacy seriously, and we work together to handle your data responsibly. Our cyber security program is tailored to meet both legal requirements as well as your needs through the following pillars:

• Detailed analysis: we commit to carrying out periodical and independent Cyber Security Assessments to ensure proper security of data, in consultation with regulators where appropriate.
• Security by design: we integrate security by design into our products by integrating it into the software development life cycle of the EcoMatcher platform.
• Regular training: EcoMatcher staff that access and process confidential, sensitive, and personal data are trained on handling it and are bound to maintain its confidentiality, integrity, and security.

B. Security and certifications

Protecting our customers’ information and their users’ privacy is extremely important. We have built security into every layer of the EcoMatcher platform following the internationally recognized NIST Cyber Security Framework. We devoted significant resources to comply with this standard. This standard mirrors security requirements and gives our customers a transparent framework to measure our software development and data management practices. More information about NIST Cyber Security Framework can be found here.

C. Incident management

Though rare, data incidents may happen. We will assist our customers with notifying regulators of breaches and promptly communicating any breaches to customers and users.

D. International data transfers

As a company with a global customer base and operations, EcoMatcher must be able to transfer and access data around the world. We understand and respect the rules for onward transfers of personal data.

An external PCI-compliant payment gateway handles all Credit Card transactions. All financial transactions are processed through a gateway provider and are not stored or processed on our servers.

Marketing

EcoMatcher would like to send you information about our products and services that we think you might like.

You have the right at any time to stop EcoMatcher from contacting you for marketing purposes.

If you no longer wish to be contacted for marketing purposes, please click here.

What are your data protection rights?

EcoMatcher would like to ensure you are fully aware of your data protection rights. Every user is entitled to the following:

• The right to access – You can request EcoMatcher for copies of your personal data. We may charge you a small fee for this service.
• The right to rectification – You have the right to request that EcoMatcher correct any information you believe is inaccurate. You also have the right to request EcoMatcher to complete the information you believe is incomplete.
• The right to erasure – You have the right to request that EcoMatcher erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that EcoMatcher restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to EcoMatcher’s processing of your personal data, under certain conditions.
• The right to data portability – You can request that EcoMatcher transfer the data we have collected to another organization, or directly to you, under certain conditions.
• Rights in relation to automated decision-making including profiling – You have the right to not be subject to decisions based solely on automated processing, including profiling, that significantly affect you, and to request human intervention, express your point of view, and obtain an explanation of the decision and challenge it.
• The right to be informed – You have the right to be informed about the collection and use of your personal data, ensuring transparency regarding how and why we process your information.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: contact@ecomatcher.com.

Or write to us: EcoMatcher Limited, Paris 1 C, 41 Conduit Road, Hong kong

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technologies. For further information, visit allaboutcookies.org.

How do we use cookies?

EcoMatcher uses cookies to improve your experience on our website, including:

• Keeping you signed in.
• Understanding how you use our website.
• Remember your preferences.
• Identifying your managed brand when using Channel Partner tools.
• Help remember and process the items in the shopping cart.
• Compile aggregate data about site traffic and site interactions to offer better site experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf.

What types of cookies do we use?

There are a number of different types of cookies, however, our website uses:

• Functionality – EcoMatcher uses these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer, the area you are in to determine the currency that applies to you, and your tree’s information. A mix of first-party and third-party cookies is used.
• Advertising – EcoMatcher uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed, and information about your browser, device, and IP address.

How to manage cookies

You can have your computer warn you each time a cookie is being sent, or you can turn off all cookies. You do this through your browser settings. Since every browser is a little different, look at your Help Menu to learn the correct way to modify your cookies. If you turn cookies off, some features that make your site experience more efficient may not function properly.

Privacy policies of other websites

The EcoMatcher website contains links to other websites. Our privacy policy applies only to our website, so if you click a link to another website, you should read their privacy policy.

Changes to our privacy policy

EcoMatcher keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 22 March 2023.

How to contact us

If you have any questions about EcoMatcher’s privacy policy, the data we hold on you, or if you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Or e-mail us at contact@ecomatcher.com

Or write to us at: EcoMatcher Limited, Paris 1 C, 41 Conduit Road, Hong Kong

How to contact the appropriate authority

Should you wish to report a complaint, or if you feel that EcoMatcher has not addressed your concern in a satisfactory manner, you may contact the Information Security Officer.

Email: contact@ecomatcher.com

Address: EcoMatcher Limited, Paris 1 C, 41 Conduit Road, Hong Kong