Data Protection & Privacy Policy for cactusconservation.org

Our policy is in compliance with EU General Data Protection Regulations (GDPR) and relevant United Kingdom law.

Who We Are:
Cactus Conservation Institute is a recognized nonprofit organization (501c3 educational) that produces the cactusconservation.org website and is fully responsible for its contents: our contact information can be found at WHOIS but the best and fastest way to contact us is by emailing our data controller. If a phone conversation works better for you, please email our data controller to set up a phone appointment and we will be happy to speak to you.

Data Controller:
Keeper Trout; trout@cactusconservation.org

Any reference to “we”, “us” or “our” in this policy shall mean Cactus Conservation Institute. Throughout this policy “you” means the viewer.
Under the General Data Protection Regulation 2018, we constitute the “data controller and processor’ in relation to the personal information that we collect about you. As data controller we have legal responsibilities about how we collect, use and share your personal information. We are required to inform you about this, and it is important for you to be aware of the rights afforded to you.
We are do not sell, rent or trade email lists or any other information with other companies and businesses for marketing purposes. In this Privacy Policy are provided detailed information about when and why we might collect your personal information, how we use it, the limited conditions under which we may disclose it to others and how we keep it secure.

Types of Data we Collect:

Use of Cookies:
Cactusconservation.org does not employ “cookies” ourselves. However, third-party applications that we use do use cookies as will be detailed below. We use their collected stats for web improvement purposes only (such as knowing what pages are of the most interest to our visitors, what websites referred the traffic to us, who actually links to us and what search terms were used to find us) and we do no further analysis.

Mailing Lists
Our only use of mailing lists is limited to MailChimp. This requires that the visitor first deliberately opt-in and request that they be added to that list. No one will be added without having specifically made a request to be added to the list and removal is as simple as responding to the removal option that is present on any MailChimp mailing. Or you can contact us directly and request that your name be removed from MailChimp.

We do not share, rent or sell that list to any third-party. MailChimp’s privacy policy & cookie statement can be found at:
https://mailchimp.com/legal/

AWStats Analytics:
If someone visits cactusconservation.org we use a third party service, AWStats, to collect standard internet log information and details of visitor behavior patterns. We do this to find out things such as the number of visitors to the various parts of the site and determine which direction to direct our attention in order to provide a better experience to future visitors. The information may include the search terms used to find us, the URL of a website site containing a link that directed you to us, and the country you are in. This information is only processed in a way that does not identify anyone. We do not make and do not allow AWStats to make any attempt to find out the identities of those visiting our website. See a full discussion of their details at AWStats’s Privacy Policy – https://slashdotmedia.com/privacy-statement/

Google Analytics:
If someone visits cactusconservation.org we use a third party service, Google Analytics, to collect some details of visitor behavior patterns and to help us identify any problems with our site itself. This is intended to help us to provide better service to our visitors and we do not make any effort to identify you or to maintain records of who visits our website. We do this to find out things such as the number of visitors to the various parts of the site and determine which direction to direct our attention in order to provide a better experience to future visitors. The information may include the search terms used to find us, the URL of a website site containing a link that directed you to us and the country you are in. See a full discussion of their details at Google’s Privacy Policy: https://policies.google.com/privacy

Security:
If you attempt to gain unauthorized administrative access to our website or if you attempt to place malware on our website, WordFence will attempt to learn as much as possible about you and you will be blocked. This does not affect normal visitors to our website, only those who attempt to gain access to our site or our server for malicious or improper purposes.
Their privacy policy can be read here: https://www.wordfence.com/privacy-policy/

Paypal:
We use Paypal for accepting donations. Their Privacy Policy can be read here – https://www.paypal.com/us/webapps/mpp/ua/privacy-full

Information that We Collect
This is limited to any information that you provide to us by direct contact.  If you contact us, we may keep a record of that correspondence.

How Long We Keep Your Information
Other than email inquiries, which we retain indefinitely, we will not keep your personal information for longer than necessary for our business purposes or for legal requirements.

For example:
If you make a donation through PayPal we are required by the IRS to keep that information for 5 years for tax purposes. We may also keep communications you have with us that could potentially be used to address queries or complaints you may have, unless you have requested that we stop holding or sending your information sooner. In that case we would only keep what is required by the tax code as was mentioned above.
If you are a PayPal customer those records include your contact information as was originally given to PayPal. If you make a contribution using PayPal and are not a PayPal customer, the information which we retain for tax record purposes is limited to your email address and the contribution amount & date.
Children
Personal information will not knowingly be collected from children under sixteen years without parental consent. We have no content restrictions but none of our pages are aimed at children.
Your Rights in Relation to your Personal Information
If you have any questions in relation to our use of your personal information, you should first contact us. You have the right to request a copy of the information which we hold about you. This is called a Data Subject Access Request and can be in reference to any of the following:
To provide you with further details as to how we use your personal information.
To provide you with a copy of personal information we have collected about you.
To update any inaccuracies in the personal information we hold.
To request that we delete any personal information that we no longer have lawful grounds to use.
To object to our use of your personal information if our use of your personal information is causing you undue harm.
To notify you of any data breach in which your personal data may have been obtained.

International Data Transfers
CCI offices and hosting facilities are located in the United States.   However, by accessing the CCI website you acknowledge that the personal data that you submit in order to use our website, donate to CCI, or access other services, may be available, via the Internet, in other parts of the world.  While we take all reasonable precautions to ensure your privacy, you acknowledge that CCI cannot prevent the how your personal data may be used by others.
Amendments

Changes to this Privacy Policy may be made from time to time, in order to stay current with regulation and as our business practices change.  CCI will place notifications of such changes on its website and/or in its newsletters.
In the near future, CCI will begin using cookies with a new login function.  Cookies will be used for member authentication, to protect your user account, prevent fraudulent use of your login credentials, and protect the members-only areas of our website.  Please continue to check back here for changes to our our privacy policy as new features are added to the website.

Contact Us
If you have any questions, or you would like to find out more about this privacy notice, you can contact us through email.
Data Controller: Keeper Trout
Email: trout@cactusconservation.org

Third Party Links
Our sites may contain links to third party websites. If you follow a link to any of these websites, please note that these websites have their own terms and privacy policies and that we do not accept any responsibility or liability for them.

Changes to our Privacy Policy
We keep this privacy policy under regular evaluation and will place any updates on this webpage. This privacy policy was last updated on February 18, 2020.