Legal

Privacy Policy

How What3Trees collects, uses, and protects your data when you sponsor trees and use our platform.

Effective: 02 April 2025 Last updated: 02 April 2025

Overview

This Privacy Policy explains how what3trees.org (“What3Trees”, “we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website, create an account, or sponsor trees through our platform.

By using What3Trees, you agree to the collection and use of information in accordance with this Policy.

Information We Collect

We collect the following categories of information:

  • Account details: first name, last name, email address, and a password you choose.
  • Transaction data: number of trees sponsored, timestamps, and related allocation metadata (e.g., planting area, tree type).
  • Payment information: processed securely by our payment partner Stripe. We do not store your full card details on our servers.
  • Technical data: IP address, browser type, device information, and basic usage analytics (e.g., pages visited, referral sources).

How We Use Your Information

We use your information to:

  • Create and maintain your What3Trees account
  • Process tree sponsorships and generate planting allocations
  • Provide you with tree locations, gallery views, and impact metrics
  • Send transactional emails (e.g., confirmations, receipts, important updates)
  • Improve our services, website performance, and user experience
  • Comply with legal obligations and prevent fraud or misuse

Cookies and Analytics

We use cookies and similar technologies to remember your preferences, keep you logged in, and understand how visitors interact with our site.

We may also use privacy-respecting analytics tools (such as Google Analytics or similar services) to measure traffic and usage patterns. These tools may collect anonymised or pseudonymised technical data about your visit.

You can adjust your browser settings to refuse cookies, but some features of the site may not function properly without them.

Location and Mapping Data

The What3Trees platform is built around map-based planting allocations. We use third-party services such as What3Words, Google Maps, and in future SkyFi to display tree locations and project areas.

These services may receive technical information such as your IP address when map tiles or embedded content are loaded. We do not provide your personal identity data (e.g., name or email) directly to these mapping providers for advertising purposes.

Payment Processing

All payments on What3Trees are processed by Stripe. When you sponsor trees, your payment details are handled by Stripe in accordance with their own terms and privacy policy.

We receive limited information from Stripe (such as payment status, last four digits of the card, and transaction IDs) to reconcile your sponsorship with your account and impact metrics.

Data Sharing

We do not sell your personal information. We may share data with trusted third-party providers only when necessary to:

  • Process payments (Stripe)
  • Send transactional emails or notifications
  • Provide mapping and imagery services (What3Words, Google Maps, SkyFi)
  • Comply with legal obligations or respond to lawful requests

Where possible, we share only the minimum information required for the specific purpose.

Data Retention

We retain your account and sponsorship information for as long as your account remains active, and for a reasonable period thereafter for reporting, audit, and legal compliance.

If you request deletion of your account, we will remove or anonymise personal identifiers where feasible, while retaining essential financial and operational records we are required to keep.

Your Rights

Depending on your location, you may have certain rights over your personal data, such as the right to:

  • Access the personal information we hold about you
  • Request corrections to inaccurate or incomplete information
  • Request deletion of your account and associated data (where legally possible)
  • Object to or restrict certain types of processing

To exercise any of these rights, contact us at support@what3trees.org.

Data Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS) and access controls on internal systems. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's Privacy

What3Trees is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use of the site after any changes indicates your acceptance of the updated Policy.

Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, please contact:

Email: support@what3trees.org