EARTH/PERCENT privacy policy
Last updated: September 11, 2024
Welcome to www.earthpercent.org (hereinafter referred to as the "website"). This Privacy Policy applies to you (hereinafter referred to as the "user," "you," or "your") when you visit the website, contact us, purchase any items from the online store, or subscribe to receive marketing communication from us.
This Privacy Policy informs you how we collect, use, store, share, and safeguard your personal data. We process all personal data that we collect from our users in compliance with applicable privacy laws of the jurisdictions where we offer the website, including but not limited to the Data Protection Act 2018 (the "Act") and U.S. Privacy Laws (collectively, the "applicable laws").
Please read this Privacy Policy carefully before using our website. By accessing or using the website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, you are instructed not to access or use the website.
Table of Contents
3. Personal Data Collection and Use
6. UK, Switzerland and European Economic Area (EEA) Residents
1. About us
The website is operated by EarthPercent, a company limited by guarantee, registered in England and Wales with company number 12407439 and registered charity number 1188391 (hereinafter “EarthPercent UK”).
EarthPercent UK is the controller of personal data collected through the website.
If you are in the UK, Switzerland or the European Economic Area, please send any data subject requests in writing to EarthPercent UK at the following address:
EarthPercent UK Address
EarthPercent
3 Pembridge Mews
London
W11 3EQ
Email address
hello@earthpercent.org
Company number
12407539
Tax ID Number (EIN)
1188391
If you are in the United States, please send any privacy-related requests or queries in writing to EarthPercent U.S. at the following address:
EarthPercent U.S. Address
EarthPercent U.S.
235 Park Ave. S - 9th Fl|
New York, NY 10003
usa@earthpercent.org
Tax ID Number (EIN)
86-3830611
2. Definitions
The following words, whenever used in this Privacy Policy, shall have the meaning defined hereunder:
Controller,’ ‘Data Subject,’ ‘Personal Data,’ and ‘Processing,’ shall have the same meanings as those defined in the UK Data Protection Act 2018.
‘Data Subject Request’ means the exercise by a Data Subject of his/her data rights.
“We”, “us”, or “our” refers to EarthPercent UK as the controller of personal data.
‘Customer’ refers to a user who places an order through the website.
‘Product’ refers to an item offered for sale through the website.
3. Personal Data Collection and Use
Processing your personal data is crucial for us to be able to run our campaigns, keep you informed about our activities, fundraise and to recruit new team members. We appreciate the trust you place in us when giving us your personal data. The details below describe what we use different types of data for, and our legal basis for this.
3.1. What personal data do we collect from you?
Depending on the actions you perform on the website, we may collect the following personal data from you:
● First and last name,
● Email address,
● Phone number,
● Billing address,
● Shipping address,
● Employment history,
● Sensitive personal data including racial, ethnic, sexual, religious, and/or disability information and any other information contained within your CV,
● Content of any communication you send to us;
● Transaction information (the Product you purchase and the amount you pay for your order, etc);
● Information that you provide us when you participate in any email or website surveys or promotions;
● Information that we collect through the use of cookies and other tracking technologies.
3.2. How do we collect and use your personal data?
The personal data we collect from you is either voluntarily provided by you or automatically collected by us. We only process your personal data if we have a legal basis for processing, such as your consent, the performance of a contract, or our legitimate interest that does not override your data rights. You may decline to provide any personal data when requested; however, you understand that in such instances, we may be unable to provide you with some services.
Voluntarily submitted data
3.3. Purchase Data
When you place an order through our website, you will be required to provide us with your:
● First and last name,
● Phone number,
● Email address,
● Shipping address, and
● Billing address.
All payments on our website are processed through a secure third-party payment processor. We do not collect or store this data on our database. We use your personal data for purposes including:
● Processing your order,
● Contacting you regarding your order (if required),
● Processing any returns and refund requests (if applicable).
● Our accounting and tax compliance.
Our legal basis for processing your purchase data is the performance of our contract with you.
Retention Period
We may retain your purchase data for up to seven years from the date of your purchase.
3.4. Job Application Data
When you apply for an employment opportunity listed on the website, we will collect your personal data including your contact details, employment history, sensitive personal data and any other personal information contained in your CV.
We use this personal data only for the purposes of managing your job application.
Our legal basis for processing this personal data is our legitimate interest in identifying suitable candidates for advertised vacancies. Please note that your sensitive information is only processed with your consent.
Retention Period
We will retain this personal data for up to two years from the date we receive your application.
3.5. Marketing Data
When you subscribe to receive direct marketing communication from us, such as when you subscribe to our newsletter, you provide us with your full name and email address.
We use this personal data to send you marketing material that we think you will find interesting.
Our legal basis for processing this personal data is your consent.
Retention Period
We will retain this personal data until you withdraw your consent.
3.6. Contact Data
When you contact us through the website or by email, we collect your name, email address, and the content of your message.
We process this data to reply to you and take other actions related to your request.
Our legal basis for processing this personal data is our legitimate interest, which does not override your rights as a data subject.
Retention Period
We will retain this personal data for up to six months from the date of the last communication. Thereafter, we will only retain the content of our communication with you by anonymising it so it cannot be linked back to you.
Automatically Collected Data
3.7. Cookies
When you access our website, we may automatically collect some personal data about you through cookies such as your IP address. We can also infer your location from your IP address.
Please note that except for strictly necessary cookies which do not require your consent (ePrivacy Directive 2002/58 EC), your personal data is only processed with your consent, which you grant us when you accept our cookies.
We use cookies to improve our understanding of our users and to provide you with detailed logs for tracking your account actions.
You can turn off cookies or remove them from your device by changing your browser settings at any time. To learn more about how you can manage cookies on your browser, please visit the applicable browser links provided hereunder:
● Opera
● Safari
Please note that blocking cookies may result in a poor user experience. To learn more about how to delete cookies, please visit https://www.aboutcookies.org/how-to-delete-cookies/.
4. Disclosure of Your Personal Data
We will never rent or sell your personal data. We may disclose your personal data in the following situations:
4.1. Third-party services
We make use of third-party services to perform some functions, including but not limited to payment processing on the website, fulfilment partner to process your order, web development, maintenance, marketing, and legal compliance. Your personal data will be disclosed to such third-party services only to the extent required for them to perform relevant functions on our behalf and in accordance with our written instructions. In no event will these services use your personal data for any purpose other than those specified in their privacy policy.
We currently use the following data processors:
Stripe Inc
Service: Payment Processing
Privacy Policy: https://stripe.com/gb/privacy
PayPal
Service: Payment Processing
Privacy Policy: https://www.paypal.com/uk/legalhub/privacy-full
MailChimp
Service: Email Marketing
Privacy Policy: https://www.intuit.com/privacy/statement/
Squarespace
Service: Contact Form
Privacy Policy: https://www.squarespace.com/privacy
4.2. Protection of Rights or Fulfilment of Legal Obligations
We will disclose your personal data to third parties in situations where we believe such disclosure is necessary to investigate or remedy any violations of our legal agreement with you or to protect our rights and the rights of others. We will also disclose your personal data in situations where we are required to do so by applicable law/regulation or legal process, such as to comply with a subpoena.
4.3. With Your Consent
We may share your personal data with third parties with your express consent.
5. Transfer of Personal Data
Although we aim to process all personal data within the United Kingdom, we may use some tools and services provided by entities domiciled outside of the UK, where data protection laws are not as stringent as those in the UK. When we use such tools/services, your personal data may be transferred and processed outside the UK. Whenever such data transfer takes place, we will ensure that it complies with the UK General Data Protection Regulation.
6. Data Subject Rights
As a user, you have the following rights relating to your personal data:
6.1. Right to access your personal data
You have the right to request access to your personal data or a copy of it by contacting us.
6.2. Right to rectification
If the personal data we process for you is incorrect, outdated, or incomplete, you have the right to request we rectify, update, or complete it.
6.3. Right to withdraw consent
To the extent the legal basis of our processing of your personal data is your consent, you have the right to withdraw your consent at any time. You may withdraw your consent from receiving direct marketing communication from us by clicking the unsubscribe link at the bottom of our marketing emails, and we will cease processing your personal data for direct marketing purposes.
6.4. Right to the erasure of personal data
In limited circumstances, you may exercise your right to request the erasure of your personal data, such as where your personal data is being processed unlawfully.
6.5. Right to data portability
This right entitles you to receive your personal data, which you have previously provided to us in a 'commonly used and machine-readable format,' and you have the right to transmit that data to another controller. This right only applies when the processing is based on your consent or for the performance of a contract and when the processing is carried out by automated means.
We will not charge any fees for the provision of data under your right to data portability unless the request is manifestly unfounded or excessive, in particular, because of its repetitive character.
6.6. Right to file a complaint
If you are in the UK, Switzerland or EEA, and you believe that your personal data rights are breached, you have the right to file a complaint with the relevant supervisory authority. The relevant authority in the UK is the Information Commissioner’s Office:
The Information Commissioner’s Office
Water Lane, Wycliffe House
Wilmslow - Cheshire SK9 5AF
Tel. +44 1625 545 745
Email: international.team@ico.org.uk
Please note that we may request that you provide proof of your identity before servicing your data subject requests.
7. California Users
This section pertains specifically to California residents and their rights under the California Consumer Privacy Act (CCPA). If you fall under the definition of "resident," as defined in the CCPA, the following rights and obligations apply.
7.1. Your Rights Regarding Your Personal Data
7.1.1. Right to request deletion of your data
You have the right to request the deletion of your personal data. Subject to the exceptions provided by law, we will honour your requestfor deletion of your data.
7.1.2. Right to Information
Under various circumstances, you have the right to know:
7.1.2.1. Whether we collect and use your personal data (described in this Privacy Policy);
7.1.2.2. The categories of personal data we collect (provided in Section 3 of this Privacy Policy);
7.1.2.3. The purposes for which we use collected personal data (provided in Section 3 of this Privacy Policy);
7.1.2.4. Whether we sell or share personal data with third parties (provided in Section 4 of this Privacy Policy);
7.1.2.5. The categories of personal data we have sold, shared, or disclosed for business purposes (provided in Section 4 of this Privacy Policy);
7.1.2.6. The categories of third parties with whom we have shared or disclosed personal data for business purposes (provided in Section 4 of this Privacy Policy);
7.1.2.7. Any business or commercial purpose behind collecting, selling, or sharing personal data (provided in Section 4 of this Privacy Policy);
7.1.2.8. The specific pieces of personal data collected about you (provided in Section 3 of this Privacy Policy);
In compliance with applicable law, we are not required to provide or delete consumer information that has been de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.
7.1.3. Right to Non-Discrimination for Exercising Privacy Rights
We will not discriminate against you for exercising your privacy rights.
7.1.4. Right to Limit Use and Disclosure of Sensitive Personal Data
We do not process any sensitive personal data.
7.1.5. Verification Process
7.1.5.1. Upon receiving your request, we will verify your identity to ensure your request relates to your own personal data in our system. This verification process may require you to provide information that matches with our records. We may also contact you through a previously provided communication method (e.g., phone or email). Additional verification methods may be employed as needed. We will solely use the personal data provided in your request for verification purposes. If additional information is necessary for verification and security reasons, we will request it and promptly delete it upon completing verification.
7.1.6. Other Privacy Rights
7.1.6.1. You may object to the processing of your personal data.
7.1.6.2. You may request correction of your personal data if it is inaccurate or no longer relevant or ask to restrict the processing of the information.
7.1.6.3. You can appoint an authorised agent to make a CCPA request on your behalf. If you choose to do so, we may reject a request from an authorised agent without valid proof of authorisation in accordance with CCPA guidelines.
7.1.6.4. You may request to opt out of future sales or sharing of your personal data with third parties. Upon receipt of an opt-out request, we will promptly act on it no later than fifteen (15) days from the date of submission.
To exercise these rights or voice a complaint about our data handling practices, please contact EarthPercent U.S. using the contact details provided in Section 2 of this Privacy Policy.
8. Security of Personal Data
The security of your personal data is important to us. We take all reasonable and financially viable steps to safeguard your personal data from unauthorised access, use, modification, destruction, or loss. We have integrated various security measures into the design of our website and our day-to-day business operations. Although we make our best effort to safeguard your personal data, you acknowledge that no mode of transmission over the Internet is one hundred percent secure; therefore, we cannot offer you any guarantees as to the absolute security of your personal data. By using the website, you understand and accept that the transmission of data through the website is carried out at your own risk.
9. Third-Party Links
The website may contain links that will redirect you to third-party websites. Such third-party websites are not owned or operated by us. These third-party websites are governed by their own legal terms and conditions and privacy policy. We advise our users to review all third-party legal agreements before making use of such websites. You understand that the presence of any third-party links on our website does not constitute an endorsement of such a third party, and we cannot be held responsible for such a third party’s actions. Your decision to visit these third-party sites is entirely at your own risk.
10. Children’s Privacy
We are committed to protecting children’s privacy. The website does not allow individuals under the age of 13 years to submit any personal data. If you believe that a child has provided his/her personal data to us, please contact us, and we will investigate the matter and take appropriate action.
11. Amendments
We reserve the right to make changes to this privacy policy by inclusion, modification, or removal of any part at any time. When we make any material changes to this privacy policy, we will notify you by email or by changing the last modified date on top of this privacy policy. You agree that it is solely your responsibility to review this privacy policy when you revisit the website. Your continued use of the website after we post the updated privacy policy will constitute your acceptance of such changes.