Privacy statement

• Account data: name, email address, password hash, country, your bio if you add one.
• Membership data: level, billing interval, status, membership number, trees allocated.
• Payment data: handled by our payment provider. We store customer and subscription references, never your card details.
• Invite data: your referral code and which memberships came from it.
• Legal records: the terms version and time of acceptance, and whether you requested performance during the withdrawal period.
• Certificate data: the requested holder name, amount, reporting year, purpose, and your separate public-name consent record if you give it.

An organisation name may appear on a public record where this is necessary to identify a business claim. We publish a consumer's personal name only after separate, explicit consent. The consent box is optional and not preselected; refusing does not affect the purchase or private certificate record.

You can withdraw public-name consent at any time from the certificate area or by emailing us. We then remove or anonymise the name on the public page. We may retain the private transaction and audit record where contract, accounting, fraud-prevention or legal obligations require it.

To run your membership and dashboard (performance of a contract), to handle payments and bookkeeping (legal obligation), and to keep the invite programme and the platform working (legitimate interest). We only send marketing email if you ask for it.

Our hosting and database provider, our payment provider, and our email provider act as processors under agreements with us. Planting partners receive aggregated planting volumes, not your personal data. We do not sell data.

Google Ads measures completed gift payments and helps optimise gift advertising. Google receives browser and click identifiers, payment amount, currency and a payment transaction reference. We do not send names, email addresses or customer matching data and personalised advertising is disabled. In consent-required or unresolved regions the Ads tag and events are blocked until you accept the separate Google Ads choice. Elsewhere ordinary measurement can run without a banner choice, but an explicit refusal is always honoured. Canada remains consent-required because our country lookup cannot distinguish Quebec. You can change or withdraw Ads permission through Cookie settings; we retain the notice version, time and choice history in your browser.

With your separate analytics consent, Google Analytics receives browser identifiers, device information, page views and events for signup, checkout, verified purchases and member-feature views or actions. This helps us understand where visitors leave and which benefits they use. Names, emails, passwords and form contents are not sent. Google advertising signals and personalised advertising are disabled.

With your separate marketing consent, Apollo.io receives website-visit and browser information to recognise visiting companies for business outreach. Google and Apollo may process data outside the EEA, including the USA, under their applicable transfer safeguards. These statistics are not anonymous simply because names are omitted.

Analytics and Apollo stay off until you accept their separate choices. Your browser retains the notice version, time and choice history. You can withdraw each choice through Cookie settings; withdrawal stops future optional reporting but does not erase information already received by the provider. Google Analytics cookies are limited to one year; provider report retention depends on the account settings. Cookie settings

Account and membership data for as long as your account exists, plus the periods required for tax and accounting records. You can ask us to delete your account at any time.

You can access, correct, export or delete your data, object to processing, and complain to the Dutch Data Protection Authority. Email us and we respond within one month. See also our cookie statement.