A clear framework for your CSR
      Back to home
      1. Help Center
      2. Best practices for companies
      3. A clear framework for your CSR

      GDPR & Privacy Policy: How We Handle Data

      How we handle data protection (GDPR)

      Here is an extract from our Privacy Policy explaining how we process recipient data when sending tree gifts:

      If you offer a tree to a recipient, you can choose to do so anonymously by not providing their email and sending the tree-gift URL yourself.

      If you use our email-sending system, we require the recipient's full name and email address. These details are stored in our database for the following purposes:

      • Identifying the recipient of the tree gift.
      • Sending up to two reminder emails (one 48 hours after the initial email and another 10 days later).

      After these reminders, recipient data is not used further, except to allow registered users to collect previously gifted trees.

      The 2 email reminders are optional and can be canceled from your settings section.

      GDPR Compliance & Third-Party Data Processing

      Since Tree-Nation processes client data for email communications, companies using our system must include Tree-Nation as a third-party data processor in their GDPR documentation.

      Please review your own data policy to ensure compliance with ours. You can read our full Privacy Policy here

      Alternative: Send Tree-Gift URLs Directly

      If you prefer to avoid GDPR concerns, we offer solutions that allow you to send tree-gift URLs using your own email system. In this case, Tree-Nation does not process client data.

      Our Internet of Trees (IoT) system is the most advanced option for this, but it requires coding. We also provide simpler alternatives to integrate tree-gifting into your workflow.

      If you're unsure which method is best for your company, please contact us via chat or reach out to your Forest Success Manager for guidance.