At EcoMatcher, we understand that the security of personal data is important. That’s why we take a holistic approach toward security and privacy by safeguarding the confidentiality, integrity, and availability of personal data in our systems and networks.

This Privacy and Cookie Policy (the “Policy”) is for all users. It considers the enhanced data protection rights required by the EU General Data Protection Regulation (GDPR) that has become effective May 25, 2018, for all EU-resident users. We explain in this Policy how we collect, process, and/or use information that we receive via our website, emails, and mobile applications (collectively, the “Platform”) that link to this Policy, as amended from time to time.

Information We Collect

When registering an EcoMatcher account, you will be asked to enter your email address and password. Your EcoMatcher account will give you easy access to all the trees you have bought or received and enables you to track your trees on the go with the free EcoMatcher App.

When using the Platform for sending trees to tree recipients, EcoMatcher stores the email address of the tree recipients only for the options “Send By Email” and “Redeem,” giving you great insights into your gifting campaign. For all other options, the email addresses will not be stored.

When ordering trees on our website in the TreeShop, like any webshop, you will be asked to enter your email address, name, address, and phone number.

How We Protect Your Information?

A. Our cyber security program

EcoMatcher takes security and privacy seriously, and we work together to handle your data responsibly. Our cyber security program is tailored to meet both legal requirements as well as your needs through the following pillars:

• Detailed analysis: we commit to carrying out periodical and independent Cyber Security Assessments to ensure proper security of data, in consultation with regulators where appropriate.
• Security by design: we integrate security by design into our products by integrating into the software development life cycle of the EcoMatcher platform.
• Regular training: EcoMatcher staff that access and process confidential, sensitive, and personal data are trained on handling it and are bound to maintain its confidentiality, integrity, and security.

B. Security and certifications

Protecting our customers’ information and their users’ privacy is extremely important. We have built security into every layer of the EcoMatcher platform following the internationally recognized NIST Cyber Security Framework. We devoted significant resources to comply with this standard. This standard mirrors security requirements and gives our customers a transparent framework to measure our software development and data management practices. More information about NIST Cyber Security Framework can be found here.

C. Incident management

Though rare, data incidents may happen. We will assist our customers with notifying regulators of breaches and promptly communicating any breaches to customers and users.

D. International data transfers

As a company with a global customer base and operations, EcoMatcher must be able to transfer and access data around the world. We understand and respect the rules for onward transfers of personal data.

An external PCI-compliant payment gateway handles all Credit Card transactions. At the moment of writing, those are PayPal, Stripe, Apple Pay, and Google Wallet. This may change in the future. All financial transactions are processed through a gateway provider and are not stored or processed on our servers.

Cookie Policy

Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow), enabling the site’s or service provider’s systems to recognize your browser and capture and remember certain information. We use cookies to:

• Help remember and process the items in the shopping cart.
• Understand and save user’s preferences for future visits.
• Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf.

You can have your computer warn you each time a cookie is being sent, or you can turn off all cookies. You do this through your browser settings. Since every browser is a little different, look at your Help Menu to learn the correct way to modify your cookies. If you turn cookies off, some features that make your site experience more efficient may not function properly.

How We Work With Third-Parties

We do not sell, trade, or otherwise transfer your personal information to outside parties unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety. Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We, therefore, have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

How Long We Keep Your Personal Information

Our users are the owner of their data. We keep this personal information only so long as we need it to provide the Platform to you and fulfill the purposes described in this Policy. Users can request the EcoMatcher website or the EcoMatcher mobile app to remove their data from our systems anytime. We process these requests within two working days. After two weeks, all personal user data has been removed from the EcoMatcher platform.

Contact Us

If you have any questions or suggestions regarding this Policy, please contact us here.

EcoMatcher Ltd | Paris 1 C | 41 Conduit Road | Hong Kong