Privacy Policy

Who we are

Treeflights Ltd, trading as Climate Shop, is responsible for your personal information (the “controller”). Treeflights is a non-profit company limited by guarantee, registered at Companies House (company number 06462199). Its registered office is Cwrt Mawr, Llangeitho, Tregaron, SY25 6QJ, and Climate Shop's office is 10 Market Street, Aberystwyth, Ceredigion, SY23 1DL. ICO registration number 00014621619.

For anything about your data, email admin@climateshop.org or send us a message.

What we collect and why

• Your email address
  To send your sign-in codes and run your account. We need this to provide the service you asked for.
• Your user name and Treees page
  We give you a random user name, which you can change. It appears on your public Treees page with your tree totals and where your trees are planted. If you change it, old links to your page keep working.
• Parcel details
  Your name, phone number, collection address and postcode, the items you're sending and any note you add. We use these to book your parcel and to assess it when it arrives at the Climate Shop warehouse.
• Your location, only if you ask
  If you tap “Use my location” to find a drop-off shop, we send your location to Parcel2Go to search nearby shops. We don't store it.
• Parcel tracking
  Parcel2Go tells us when your parcel is dropped off and delivered, so we can award your trees.
• Your trees and updates
  Which trees you've earned, where they're planted, and the updates shown on My Treees.
• Invites
  If you sign up through a friend's invite link, we record that they invited you. When you join or donate, we tell them your user name and give them trees too.
• Declutter game
  If you play while signed in, we save your best score and show your user name on the public leaderboard.
• Emails
  We always email you sign-in codes and anything needed to complete a donation. Tree update emails (bookings, drop-offs, assessments, invites and Declutter wins) are on by default, and you can turn them off on My Treees.
• Waitlist
  If you join the waitlist while bookings are closed, we email you once when they reopen. You can ask us to take you off at any time.
• Messages to us
  Your name, email and message, so we can reply.
• Security
  To stop spam and abuse, our host Vercel checks technical browser signals when you sign in, join the waitlist or send us a message. We briefly use your IP address to limit repeated attempts, and our servers keep short technical logs.
• Site analytics
  We use Vercel Web Analytics to see which pages are used, in aggregated form only (page path, referrer, country, browser and device type). It does not use cookies and does not identify you as a person. Donation and invite identifiers are stripped from the paths we record.

We use your information to provide Treees, which you asked for; and, for invites, the leaderboard, tree update emails, site analytics and security, because we have a legitimate interest in running Treees well. We only email you about the waitlist because you asked us to. Treees never asks you for money.

What other people can see

Your user name, Treees page, tree totals, planting sites and Declutter leaderboard position are public. Your email, phone and address never are. If you'd rather not use your real name, keep the random user name or choose a nickname on My Treees.

Our planters

The trees are planted by farmers and community groups in Kenya, working with Climate Shop. We show planters' names, photos and planting locations so you can see where your trees grow. Our partners in Kenya (the Bore Green Umbrella Self Help Group) hold written records of each planter's consent. Giving consent to have their details held by us, and to have their photos used for publicity, is a condition of joining the planting scheme. A planter can ask to be removed at any time through Climate Shop or by contacting us.

Who we share it with

We never sell your information or use it for advertising. We only share it with these services, to run Treees:

• Vercel (USA)
  Hosts the website and its logs, and processes aggregated Web Analytics page views.
• Neon (London, UK)
  Stores our database.
• Resend (USA)
  Sends our emails.
• Parcel2Go and your courier (UK)
  Receive your name, phone, email and addresses to collect and deliver your parcel. They use them under their own privacy policies.
• Google (USA)
  Our team inbox, which receives your messages to us and alerts when someone signs up, downloads their data or closes their account.
• OpenStreetMap
  Supplies the map tiles on planting maps, and sees your IP address when they load.

Where information goes to the USA, our providers take part in the UK–US Data Bridge (the UK Extension to the EU–US Data Privacy Framework), or otherwise protect the transfer with the UK International Data Transfer Addendum.

How long we keep it

• Sign-in codes expire after 15 minutes.
• Staying signed in lasts up to 30 days on each device.
• Your account stays until you close it.
• Everything else, including donation records, messages to us and your waitlist place, is kept for up to 6 years, as in Climate Shop's policy.
• Server logs: deleted automatically by Vercel after a short time.

When you close your account, we delete your details straight away and remove any copies left in backups or our team inbox within 60 days.

Downloading your data and closing your account

You can download a copy of your data, or close your account, at any time from My Treees.

Closing your account deletes your sign-in, profile, Treees page, updates and waitlist place, and removes your name, contact details and notes from your donations. We keep the donations and trees themselves, without anything that identifies you, so the tree totals still add up. If a parcel is still on its way or waiting to be assessed, you can close your account once it's been assessed.

Parcel2Go keeps its own record of your booking under its privacy policy.

Your rights

You have the right to:

• get a copy of your data (download it from My Treees)
• correct it (edit your profile on My Treees, or ask us)
• have it deleted (close your account on My Treees)
• ask us to limit how we use it, or object to how we use it
• take it to another service (the download is a standard file)
• withdraw consent, for example to leave the waitlist

To use any of these, contact us. We'll reply within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.

Age

Treees isn't for children under 13, and we don't knowingly collect their information. If you think a child under 13 has given us their details, contact us and we'll delete them.

Keeping it safe

You sign in with a one-time code sent to your email, so there's no password to steal. Everything is sent over encrypted connections, and only a small team can see donor details. Nobody's parcel is judged by a computer: people assess every one.

Cookies and analytics

We only use the cookies and browser storage Treees needs to work. Our page-view analytics (via Vercel) does not use cookies. See our Cookie Policy.

Changes

If we change this policy, we'll update the date at the top. If the change is significant, we'll email everyone with an account.