This policy was last updated March 1, 2018.
The privacy and security of your personal information is very important to us. We do not share your personal information in ways not disclosed in our privacy statement or without your informed permission. We value your trust very highly, and we strive to protect the confidentiality and appropriate use of any personal information you provide to us.
What Personal Information We Collect
We collect personal information that you choose to provide voluntarily when using our web sites. You can use our site without creating an account, but you will need to create an account if you want to take advantage of certain features, such as participating in discussion boards and forums.
Once you have made a donation, this information is stored securely in our databases. We do not collect or store credit card information - this is done by our payment processor - PayPal . Squarespace provides us with the online e-commerce platform that allows us to collect donations. Your data is stored on a secure server behind a firewall. For more insight, you may want to read Squarespace's Terms of Service. We may also use Stripe Payments for some transactions services. The company adheres to strict industry standards for payment processing, including:
- 128-bit Secure Sockets Layer (SSL) technology for secure Internet Protocol (IP) transactions.
- Industry leading encryption hardware and software methods and security protocols to protect customer information.
- Compliance with the Payment Card Industry Data Security Standard (PCI DSS)
Please note that payment gateways and payment transaction processors have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
We use industry standard anonymous web and log file analytics to improve our website. These tools collect and analyze the Internet protocol (IP) address used to connect your computer to the Internet, computer and connection information such as browser type, version, and time zone setting, browser plug-in types and versions, operating system, and platform, the clickstream to, through, and from our website, including date and time. Our web sites do not intentionally solicit or collect personal information about children under the age of 18. If you are under 18 and would like to use our web site, please ask a parent or guardian for assistance.
How We Use Your Personal Information
Information we collect on our web sites may be used to enhance your experience in the following ways:
Your email address will be used to notify you of information regarding your transactions. We also may send you other email updates, which may be delivered via a third-party email marketing service. This service company may collect and store personal information you provide on our behalf and have agreed with us it will not share, rent, sell, trade or provide any of this information to other parties. Instructions for list removal are included at the bottom of every email we send you.
When and With Whom We Share Your Personal Information
We will not sell, trade, or share your personal information. All billing information is gathered only for the purposes of the transaction you complete with the ClimatePath Ecologic Fund on the ClimatePath.org website. The information may be used internally for the purposes of providing customer service.
Aside from the purposes described above, we do not share your personal information with any other third parties unless we have your permission or under special circumstances, such as when we believe in good faith that the disclosure is required by law. We reserve the right to disclose your personally identifiable information as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order or legal process. We may share aggregated demographic and statistical information in the course of our business with certain third parties. This sharing does not include any personal information that can identify any individual person.
Links to Other Sites
Our site may link to other sites which have privacy policies that may differ from ours. We advise you to check the privacy policies of other websites before disclosing any personal information.
Protecting your Personal Information
While no service is completely secure, our hosting provider SquareSpace has a security team dedicated to keeping your information safe. They employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it) and testing for and protecting against network vulnerabilities. Payment information is transmitted using HTTPS encryption, and they maintain a PCI DSS certification.
While we try our best to safeguard your personal information once we receive it, no transmission of data over the Internet or any other public network can be guaranteed to be 100% secure. We do not capture nor store your credit card information on our servers, except for the last 4 digits which are for identification purposes only.
As mentioned, website services are provided ClimatePath and The ClimatePath Ecologic Fund by SquareSpace, and we depend on their compliance for web related activities. Squarespace's policy includes compliance with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal information transferred from the European Union to the United States (“EU Personal Data”), and they have certified that they adhere to the Privacy Shield Principles. But we do not warrant that SquareSpace will stay in compliance.
ClimatePath reserves the right to change, modify or amend this policy at any time. If there are changes made to the use of users' information in a manner different from that stated at the time of collection we will notify you by posting a notice on our Web site for 30 days.