Overview

Eden: People+Planet (“we,” “us,” “our,” or “Eden”) is committed to protecting your privacy and ensuring you have a positive experience on our website and when interacting with our organization. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (giving.eden-plus.org) and make charitable contributions.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our site. Your use of our website and services constitutes your acceptance of this Privacy Policy.

Information We Collect

Information You Provide Directly

When you make a donation or create an account on giving.eden-plus.org, we collect:

• Account Information: Name, email address, phone number (optional), mailing address
• Billing Information: Billing address, payment method details (processed securely through Stripe; we never see full card details)
• Donation Information: Donation amounts, frequency (one-time or recurring), campaign or designation, date
• Communication Information: Email preferences, newsletter subscriptions, campaign interests
• Optional Information: Comments, messages, or information you voluntarily provide through contact forms or donor communications

Information Collected Automatically

When you visit our website, we automatically collect certain information:

• Device Information: Browser type, operating system, device type
• Usage Information: Pages visited, time spent on pages, links clicked, referring website
• Location Information: General geographic location based on IP address (not precise)
• Cookies and Similar Technologies: We use cookies to improve your experience and remember your preferences

We do not intentionally collect sensitive information such as Social Security numbers, driver’s license numbers, or health information.

How We Use Your Information

We use the information we collect for the following purposes:

Essential Functions

• Process your donations and maintain donor records
• Send donation receipts and tax documentation
• Manage your account and recurring subscriptions
• Provide customer support and respond to inquiries
• Detect, prevent, and address fraud or security issues

Communication

• Send newsletters and impact updates (with your permission)
• Notify you about changes to our services or policies
• Provide campaign updates related to your donations
• Send email reminders about payment method updates or donation anniversaries

Improvement & Analytics

• Analyze website usage to improve user experience
• Monitor system performance and security
• Understand donor preferences and giving patterns
• Generate aggregate, anonymized reports on giving trends

Legal & Compliance

• Comply with tax laws and maintain required nonprofit records
• Fulfill legal obligations and respond to lawful requests
• Enforce our terms and conditions and other agreements
• Protect the rights, property, and safety of Eden, our donors, and the public

Donor Relationship Management

• Recognize and thank donors
• Cultivate long-term donor relationships
• Identify major gift opportunities
• Plan fundraising strategies and campaigns

Legal Basis for Processing (If Applicable)

Where applicable under privacy laws such as GDPR or CCPA, we process your information based on:

• Contractual Necessity: Processing is required to fulfill your donation and maintain your account
• Legal Obligation: We must comply with tax, nonprofit, and financial reporting requirements
• Legitimate Interest: We have legitimate interests in improving our services, detecting fraud, and managing our organization
• Consent: Where you have explicitly consented to communications, marketing, or data processing

Who We Share Your Information With

Third-Party Service Providers

We share information with trusted third parties who provide essential services:

• Stripe: Payment processor that securely handles all credit card and ACH transactions
• Email Service Provider: [VERIFY: Email platform name] for sending newsletters and communications
• Web Hosting Provider: Infrastructure support for our website
• Analytics Service: [VERIFY: Analytics platform if used] for understanding website usage

We only share information necessary for these providers to perform their services, and we require them to maintain confidentiality and security.

Implementation Partners

Implementation organizations do not receive individual donor personal information. Partners may receive:

• Aggregate donation totals supporting their projects
• Anonymized reporting about donor support levels
• Portfolio-level impact metrics (no individual donor details)

Legal Requirements

We may disclose your information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms and Conditions and other agreements
• Protect the security, safety, or rights of Eden, our supporters, or the public
• Prevent fraud or address security issues

Business Transfers

If Eden is involved in a merger, acquisition, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will provide notice of any such change and any choices you may have regarding your information.

No Sale of Personal Information

We do not sell, rent, lease, or share your personal information for marketing purposes to third parties. Your information is never sold to other organizations.

Data Security

Encryption & Protection

• HTTPS Encryption: Our website uses HTTPS encryption (TLS 1.2+) to protect data in transit
• SSL Certificate: Our site is secured with a trusted SSL certificate
• Secure Payment Processing: Payment information is never stored on Eden’s servers; Stripe handles all sensitive data with PCI DSS Level 1 compliance

Access Controls

• Limited Access: Only authorized Eden staff who need access can view donor information
• Authentication: Accounts are protected by passwords (we recommend strong, unique passwords)
• Regular Updates: We maintain updated security systems and patch vulnerabilities regularly

Data Retention

• Tax Records: Maintained for 7 years (IRS requirement for nonprofit record-keeping)
• Donor Contact Information: Retained while you remain an active supporter; retained for 2 years after your last donation
• Payment Information: Deleted after each transaction (Stripe handles retention per their policy)
• Account Information: Can be deleted upon request, except where retention is required by law

Limitations

No security system is completely foolproof. While we implement strong security measures, we cannot guarantee absolute security of your information. You use our website at your own risk.

Your Privacy Rights & Choices

Communication Preferences

You control all communication:

• Newsletter: Opt in or out anytime through your account dashboard
• Campaign Updates: Choose which campaigns to follow
• Impact Reports: Opt in or out of annual impact communications
• Promotional Messages: Choose whether to receive campaign announcements

Update your preferences anytime through your account or by emailing info@eden-plus.org.

Account Management

• Access: You can access and view your personal information through your account dashboard
• Correction: You can update or correct your information anytime
• Deletion: You can request deletion of your account and information (except where retention is required by law)

Data Subject Rights (GDPR/CCPA)

If you are located in a jurisdiction with data protection rights (such as the EU under GDPR or California under CCPA), you may have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (right to be forgotten)
• Portability: Request your information in a portable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing

To exercise these rights, contact us at info@eden-plus.org with “Data Subject Request” in the subject line. We will respond within the timeframe required by applicable law (typically 30 days).

Opt-Out

You can opt out of email communications by:

• Clicking the “unsubscribe” link in any email from us
• Updating your preferences through your account dashboard
• Emailing info@eden-plus.org with your request

Cookies & Tracking Technologies

What Are Cookies?

Cookies are small files stored on your device that help us recognize you and improve your experience. We use cookies to:

• Remember your login information
• Track preferences and site usage
• Personalize your experience
• Understand which features are most popular

Types of Cookies We Use

• Essential Cookies: Required for the website to function (login, security)
• Preferences Cookies: Remember your choices and preferences
• Analytics Cookies: Track usage patterns to improve the site
• Marketing Cookies: Track interactions for retargeting [VERIFY: if applicable]

Managing Cookies

You can control cookies through your browser settings:

• Most browsers allow you to refuse cookies or alert you when cookies are being sent
• If you disable cookies, some website functions may not work properly
• Deleting cookies will remove your saved preferences

We do not track you across other websites for marketing purposes unless you opt in.

Third-Party Links

Our website may contain links to third-party websites (such as partner organizations or external resources). This Privacy Policy applies only to giving.eden-plus.org. We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing personal information.

Children’s Privacy

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 13, we will delete such information immediately. Parents or guardians who believe we have collected information from a child should contact us at info@eden-plus.org.

International Data Transfers

If you are accessing our website from outside the United States, your information may be transferred to, stored in, and processed in the United States. US data protection laws may not provide the same level of protection as those in your home country. By using our website, you consent to such transfers.

Privacy Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page and update the “updated_date” at the top of this document. Your continued use of our website constitutes acceptance of the updated Privacy Policy.

For significant changes, we may provide additional notice (such as a prominent notice on our website or email notification).

Contact Us About Privacy

If you have questions about this Privacy Policy, our privacy practices, or how we handle your information:

• Email: info@eden-plus.org with “Privacy Policy” in the subject line
• Phone: (626) 872-3770
• Mailing Address: 40960 California Oaks Rd Unit 845, Murrieta, CA 92562

Data Protection Officer / Privacy Concerns

If you have specific privacy concerns or wish to file a complaint:

• Email: info@eden-plus.org with “Privacy Concern” in the subject line
• Include: Your name, account email, and specific concern
• Response Time: We will respond within 3 business days

GDPR Data Protection Authority (if applicable)

If you are located in the EU and believe our processing violates GDPR, you have the right to lodge a complaint with your local data protection authority.