Legal

Privacy Policy

Last updated: September 1, 2024

This Privacy Notice for Tenkile Conservation Alliance Ltd ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at help@tenkile.com.

Summary of key points

This summary provides key points from our Privacy Notice -- you can find out more detail about any of these topics in the full sections below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not process sensitive personal information (for example, racial or ethnic origin, sexual orientation, or religious beliefs).

How do we process your information? We process your information to provide and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.

How do we keep your information safe? We have reasonable organisational and technical measures in place to protect your personal information. However, no electronic transmission or storage technology can be guaranteed 100% secure.

What are your rights? Depending on where you're located, applicable privacy law may give you certain rights regarding your personal information.

How do you exercise your rights? The easiest way is by contacting us. We will consider and act on any request in accordance with applicable data protection laws.

1. What information do we collect?

Personal information you disclose to us

In short: we collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Services, make a donation or purchase, express interest in our work, or otherwise contact us. The personal information we collect may include:

Sensitive information. We do not process sensitive information.

Payment data. We may collect data necessary to process your payment if you make a donation or purchase. All payment data is handled and stored by Stripe. You may find their privacy notice at https://stripe.com/privacy.

All personal information you provide to us must be true, complete, and accurate.

Information automatically collected

In short: some information -- such as your IP address and browser and device characteristics -- is collected automatically when you visit our Services.

We automatically collect certain information when you visit or use the Services. This doesn't reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and information about how and when you use our Services. We use this to maintain the security and operation of our Services and for internal analytics.

The information we collect includes:

2. How do we process your information?

In short: we process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including to:

3. What legal bases do we rely on to process your information?

In short: we only process your personal information when we believe it is necessary and we have a valid legal reason to do so, such as your consent, compliance with laws, to provide you with a service or fulfil a contract, to protect your rights, or to fulfil our legitimate business interests.

If you are located in the EU or UK, the General Data Protection Regulation (GDPR) and UK GDPR require us to explain the legal bases we rely on, which may include:

If you are located in Canada, we may process your information with your express or implied consent, which you may withdraw at any time, or, in limited circumstances permitted by law, without consent (for example, for fraud detection and prevention, or where required by a court order).

4. Do we use cookies and other tracking technologies?

In short: we may use cookies and similar technologies to collect and store information, described in full in the Cookies section of this notice above the table of contents on our site.

We use cookies and similar tracking technologies to gather information when you interact with our Services. Some of these help maintain security, prevent crashes, save your preferences, and support basic site functions.

Google Analytics. With your consent, we use Google Analytics to understand how the Services are used. Unlike some sites, Google Analytics on tenkile.com only loads after you actively accept analytics cookies via the consent banner shown on your first visit -- it is never active by default, and you're never required to separately visit an opt-out tool, since simply declining, or never accepting, keeps it switched off. For more on Google's own privacy practices, see the Google Privacy & Terms page.

5. How long do we keep your information?

In short: we keep your information for as long as necessary to fulfil the purposes outlined in this notice, unless a longer period is required by law.

Account information is retained for as long as your account remains active. Donation and order records -- including those made without an account -- are retained for as long as required by applicable Australian tax and record-keeping law, since receipts and transaction records must be kept regardless of whether the person who made them holds an account with us. When we no longer have a legitimate business or legal need to retain your information, we will delete or anonymise it, or, where that isn't possible, securely isolate it from further processing until deletion is possible.

6. How do we keep your information safe?

In short: we aim to protect your personal information through a system of organisational and technical security measures.

We have implemented reasonable technical and organisational measures designed to protect any personal information we process. However, no electronic transmission over the internet or storage technology can be guaranteed 100% secure, so we cannot promise that unauthorised third parties will never be able to defeat our security. Transmission of personal information to and from our Services is at your own risk.

7. Do we collect information from minors?

In short: we do not knowingly collect data from, or market to, children under 18.

We do not knowingly collect, solicit, or sell personal information from children under 18 (or the equivalent minimum age in your jurisdiction). By using the Services, you represent that you are at least 18, or that you are a parent or guardian consenting to a minor dependant's use of the Services. If we learn we have collected information from someone under 18, we will deactivate the account and take reasonable steps to promptly delete that data. If you become aware of any such data, please contact us at help@tenkile.com.

8. What are your privacy rights?

In short: depending on where you live, including the EEA, UK, Switzerland, and Canada, you have rights that give you greater access to and control over your personal information.

These may include the right to request access to and a copy of your personal information; to request correction or deletion; to restrict processing; to data portability where applicable; and not to be subject to solely automated decision-making without the ability to request human review. You can exercise these rights by contacting us.

If you are located in the UK and are unhappy with how we've handled your information, you may complain directly to us, or to the Information Commissioner's Office:

If you are in the EEA and believe we are unlawfully processing your information, you have the right to complain to your Member State's data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent. Where we rely on your consent to process your information, you may withdraw it at any time by contacting us. This won't affect the lawfulness of processing carried out before your withdrawal.

Account information. You may review, update, or request deletion of your account at any time by contacting us. Upon request, we will deactivate or delete your account and information from our active systems, though we may retain some information where necessary to prevent fraud, troubleshoot issues, or comply with legal requirements.

9. Controls for Do-Not-Track features

Most browsers include a Do-Not-Track ("DNT") feature. As there is currently no uniform standard for recognising DNT signals, we do not currently respond to them. If a standard is adopted that we're required to follow, we'll update this notice accordingly.

10. Do United States residents have specific privacy rights?

In short: if you are a resident of certain US states, you may have rights to access, correct, delete, or obtain a copy of the personal information we hold about you, and to withdraw consent to certain processing.

Depending on your state, these rights may include the right to know whether we're processing your data, to access it, to correct inaccuracies, to request deletion, to obtain a copy, to non-discrimination for exercising these rights, and to opt out of the sale or sharing of personal information or certain profiling. To exercise these rights, please contact us. We have not sold or shared personal information with third parties for a business or commercial purpose, and do not intend to.

11. Do other regions have specific privacy rights?

Australia

We collect and process your personal information under the obligations and conditions set by Australia's Privacy Act 1988. You have the right, at any time, to request access to or correction of your personal information by contacting us. If you believe we are unlawfully processing your personal information, you have the right to lodge a complaint with the Office of the Australian Information Commissioner.

12. Do we make updates to this notice?

In short: yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. An updated version will be indicated by a revised "Last updated" date at the top of this notice. We encourage you to review it periodically.

13. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at help@tenkile.com, or write to us at:

Tenkile Conservation Alliance Ltd
PO Box 365
Ravenshoe, Queensland 4888
Australia

14. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we hold, details of how it's been processed, correction of inaccuracies, or deletion. You may also have the right to withdraw consent to our processing of your information. To make such a request, please visit https://tenkile.com/contact.php.