At EcoMatcher, we understand that the security of personal data is important. That’s why we take a holistic approach toward security and privacy by safeguarding the confidentiality, integrity, and availability of personal data in our systems and networks.
Information We Collect
When registering an EcoMatcher account, you will be asked to enter your email address and password. Your EcoMatcher account will give you easy access to all the trees you have bought or received and enables you to track your trees on the go with the free EcoMatcher App.
When using the Platform for sending trees to tree recipients, EcoMatcher stores the email address of the tree recipients only for the options “Send By Email” and “Redeem,” giving you great insights into your gifting campaign. For all other options, the email addresses will not be stored.
When ordering trees on our website in the TreeShop, like any webshop, you will be asked to enter your email address, name, address, and phone number.
How We Protect Your Information?
A. Our cyber security program
EcoMatcher takes security and privacy seriously, and we work together to handle your data responsibly. Our cyber security program is tailored to meet both legal requirements as well as your needs through the following pillars:
B. Security and certifications
Protecting our customers’ information and their users’ privacy is extremely important. We have built security into every layer of the EcoMatcher platform following the internationally recognized NIST Cyber Security Framework. We devoted significant resources to comply with this standard. This standard mirrors security requirements and gives our customers a transparent framework to measure our software development and data management practices. More information about NIST Cyber Security Framework can be found here.
C. Incident management
Though rare, data incidents may happen. We will assist our customers with notifying regulators of breaches and promptly communicating any breaches to customers and users.
D. International data transfers
As a company with a global customer base and operations, EcoMatcher must be able to transfer and access data around the world. We understand and respect the rules for onward transfers of personal data.
An external PCI-compliant payment gateway handles all Credit Card transactions. At the moment of writing, those are PayPal, Stripe, Apple Pay, and Google Wallet. This may change in the future. All financial transactions are processed through a gateway provider and are not stored or processed on our servers.
You can have your computer warn you each time a cookie is being sent, or you can turn off all cookies. You do this through your browser settings. Since every browser is a little different, look at your Help Menu to learn the correct way to modify your cookies. If you turn cookies off, some features that make your site experience more efficient may not function properly.
How We Work With Third-Parties
We do not sell, trade, or otherwise transfer your personal information to outside parties unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety. Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We, therefore, have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
How Long We Keep Your Personal Information
Our users are the owner of their data. We keep this personal information only so long as we need it to provide the Platform to you and fulfill the purposes described in this Policy. Users can request the EcoMatcher website or the EcoMatcher mobile app to remove their data from our systems anytime. We process these requests within two working days. After two weeks, all personal user data has been removed from the EcoMatcher platform.
If you have any questions or suggestions regarding this Policy, please contact us here.
EcoMatcher Ltd | Paris 1 C | 41 Conduit Road | Hong Kong