Arbor Day Foundation Privacy Notice

Welcome! You have arrived at a website operated by the Arbor Day Foundation, or our affiliates (“Arbor Day Foundation,” “we”, “our” or “us”).

Founded in 1972, the Arbor Day Foundation is the largest 501(c)3 nonprofit membership organization dedicated to planting trees. Our vision is to help others understand and use trees as a solution to many of the global issues we face today, including air and water quality, a changing climate, deforestation, poverty, and hunger. We work to restore forests, increase tree cover in underserved communities, and inspire the next generation of tree planters to ensure this important work endures.

At Arbor Day Foundation, we take your privacy very seriously. This Privacy Notice (“Notice”) describes the types of personal information we collect, how we use it, how and when we share it, and the rights you have regarding privacy and access to your information. It also explains how we communicate with you and how you can make inquiries and requests for your information. Your trust is important to us. We strive to be transparent in how we use your information to improve all touchpoints, including products, services, marketing, and interactions.

This Notice applies when you use or access the websites, www.arborday.org, www.arbordayfarm.org, www.liedlodge.org, and their subdomains or portals (the “Sites”); or otherwise provide Personal Information or interact with us online or in person at our properties. For the purpose of this Notice, "Personal Information" means any personal information relating to an identified or identifiable individual that is protected by applicable privacy laws. We refer to all of the above as “Services.”

Where applicable, we indicate when and why you must provide us with your Personal Information, as well as the consequences of failing to do so. There will be times when our Services require Personal Information, or we are legally required to collect it. Withholding Personal Information means you may not be able to fully benefit from our Services.

If you have any questions about this Privacy Notice, please email us at Privacy@arborday.org.

This section describes the nature of the information we collect through our Sites and Services. We may receive information (including Personal Information) in the following ways:

Information That You Provide to Us

Visitors to Our Sites

As you interact with our Sites and Services, we collect Personal Information via the online chat box, webforms, and inputs/uploads on our Sites, and through telephone calls, letters, emails, and other forms of communications. We collect information such as the following:

• Contact and account information such as your first and last name, email address, home or business address, telephone numbers, mobile numbers, and password. We might also collect contact information about your friends, family, and loved ones to send and/or acknowledge gifts or donations on your behalf Please note that we do not use this information for any other purpose without the consent of the recipient
• Financial information such as credit card or debit card number, bank account information and your payment
• Service and purchase history when you make a donation, purchase a tree planting, or buy something in our ecommerce store transaction
• Social media information, such as social media handles, content and other data shared with us through third-party features that you use on our Sites
• Services(such as tools, payment services, widgets, and plug-ins offered by social media services like Facebook, Instagram, X, and Pinterest) or posted on social media pages (such as our social media page or other pages accessible to us)
• If you apply for employment with us, your current or past employment or educational information, as well as references and referrals provided to us in connection with your employment applications
• Other information that could reasonably be used to identify you personally or identify your household or device

Your decision to provide us with Personal Information is voluntary, but if you choose not to provide any requested information, you may not be able to take advantage of all the features of our Sites and Services.

Visitors to Our Properties

If you visit the Arbor Day Farm or another Arbor Day Foundation property, we might collect information such as:

• Contact and account information such as your first and last name, email address, home or business address, telephone numbers, or mobile numbers
• Identification, including driver’s license or passport numbers
• Information from video surveillance cameras used to monitor building security and assist in crime prevention, detection, and investigation, and to ensure the health and safety of our staff and visitors on our properties

Information That Is Automatically Collected

Like many businesses, we and/or our service providers may automatically collect and/or store certain information when you visit or interact with the Sites and Services (“Usage Information”). This Usage Information may be stored and/or accessed from your personal computer, laptop, tablet, mobile phone, or other device (a “Device”) whenever you visit or interact with our Site. Usage Information may include:

• Your IP address, IDFA, Android/Google Advertising ID, IMEI, or another unique identifier
• Your Device functionality (including browser, browser language, settings and behavior, operating system, hardware, mobile network information)
• Referring and exit web pages and URLs
• The areas within the Sites that you visit and your activities there, including remembering you and your preferences
• Your Device location or other location information, including the zip code, state or country from which you accessed our Services
• Your device characteristics
• Certain other device data, including the time of day you visit our Sites or other information used to provide analytics or other usage information
• Your engagement with our email
• Statistical information about how both unregistered and registered users, collectively, use the Sites and Services. This aggregate information is derived from Personal Information but cannot be tied back to you or your web browser

For location information, some of our Services may include features based on users’ actual locations and may report on users’ current locations (“Location-Based Services”). To the extent you use any Location-Based Services, we may collect and store information about your location at the time you use those Location-Based Services (in addition to some automatically collected geolocation data). This information can come from a variety of sources depending on the device you use to access the Services; for example, a mobile phone may report its GPS location at the time Location-Based Services are used.

If you no longer wish for us or our service providers to collect and use location information, you may disable the location features on your device. Consult your device manufacturer's settings for instructions. Please note that if you disable such features, your ability to access certain services, content, promotions, or products may be limited or disabled.

Information Collected from Third Parties

The Sites may include functionality that allows certain kinds of interactions between the Sites and your account on third-party websites or applications. The use of this functionality may involve third-party Sites providing information to us. For example, we might also provide links to facilitate sending communication from the Sites, or we may use third parties to facilitate emails or postings to social media (like a “Share” or “Forward” button). These third parties also use cookies and other tracking technologies to capture information about your interactions with the Arbor Day Foundation. The Arbor Day Foundation does not have control over the information that is collected, used, and shared by these third parties. We encourage you to review the privacy statements of these third parties to understand their privacy practices. We also may obtain contact and demographic information in bulk from third-party data vendors for the purposes of expanding our outreach efforts, including marketing, fundraising, and mission-driven communication. This may include names, email addresses, postal addresses, and other contact details, provided in accordance with applicable data protection laws.

We use Fundraise Up as an online donation platform. All donation data collected is subject to the provisions of the General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act of 2018 (“CCPA”), and other applicable privacy laws. Non-Personal Information that is collected remains anonymous or non-personally identifiable. All Personally Identifiable Information (PII) is encrypted. Financial information, such as banking information or credit card number, name, CVV code, or expiration date, is collected and stored by a third-party payment processor. Financial information is not stored by Fundraise Up or the Arbor Day Foundation.

We use your information for business and commercial purposes, including to provide the products and services you request, to perform customer service functions, for security and fraud prevention, for marketing and promotional purposes, and to perform website and mobile application analytics.

We may use the information we collect about you in a variety of ways, including:

To Provide Our Services

We process certain personal information when you access our Sites or use our Services, including:

• Donations/gifts/memberships. We use your personal information and that of friends, family, loved ones, and corporate recipients to process your donations and purchases of or requests for products and services, and to send and/or acknowledge a gift, in accordance with your instructions
• Account registration. We use personal information to register and verify user account
• Farm reservations. We use personal information to reserve your stay at the Lied Lodge and for charges incurred while staying on the property
• Event registration. We use personal information to register you for events such as the Partners in Community Forestry Conference
• Website functionality. We use personal information to facilitate the functionality of our Sites, including payment-related functionality
• Customer experience. We use personal information to customize experiences s, or in and around our properties, if you have given permission for location sharing

To Communicate with You

We process certain information to communicate with you in relation to your accounts, our services, our marketing, and your requests, including to:

• communicate with you about orders, donations, memberships, purchases, returns, services, accounts, programs, contests, and sweepstakes
• communicate with you about your stay at the Lied Lodge 
• respond to your customer service inquiries and requests for information
• post your comments or statements on our sites
• send you personalized promotions, content, and special offers
• communicate with you about our brands, products, events, or for other promotional purposes
• implement your communications preferences, such as sharing information with our business partners so that they may email you about their promotions, products, and initiatives

We also use data acquired from third-party vendors to identify potential supporters and communicate with them about our mission, initiatives, and opportunities to engage, donate, or participate. All communications are conducted in compliance with applicable email marketing and data privacy laws.

For Improvement of Our Sites and Services

We want to ensure that our Sites and Services are continually improving and expanding so that we meet and exceed your needs and expectations. To do so, we may process certain personal information to:

• maintain, improve, and analyze our Sites, ads, and the products and services we offer
• detect, prevent, or investigate suspicious activity or fraud

To Comply with Applicable Laws

We may be required to process certain personal information under certain laws and regulations, such as tax laws, as well as to:

• maintain appropriate records for internal administrative purposes
• comply with applicable legal and regulatory obligations, and respond to lawful governmental requests, as needed

To Enforce our Terms, Agreements, or Policies

To maintain a safe, secure, and trusted environment on our Sites, and other services, we use your personal information to ensure our terms, policies, and agreements with you and any third parties are enforced.

To Evaluate Your Application for Employment

Personal information is used during our applicant evaluation process and employee benefit disbursement.

With Your Consent

We may process certain personal information to fulfill any other business or commercial purposes at your direction or with your consent.

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. 

We use cookies and other tracking technologies to personalize your experience, analyze user trends, and improve Services. These tracking technologies allow us to collect information such as your device type, browser type, interactions with our Sites, geographic location, your web request, the date and time of your web request, your Internet Protocol address, the domain name of your Internet service provider, and other data. If you can be identified from this information, for example in combination with other pieces of information, then we will treat this information as Personal Information. 

You can alter the configuration of your browser to refuse to accept cookies, but it is possible that doing so may cause limited functionality of the Sites. For example, we may not be able to recognize your computer or device, and you may need to log in every time you visit.

We may use cookies or similar technologies to record data. Many browsers default to accepting cookies. You may be able to change this setting in your browser. You can also clear your cookies. If you do, you may lose some of our site functionality. Check your browser’s help function to learn more about your cookies setting options. 

We may use the following types of cookies:

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our sites. They help us learn which pages are the most and least popular and see how visitors move around the sites. Information collected by cookies is aggregated and therefore anonymous. When you don't accept cookies, we're unable to keep track of when you visited our sites and monitor its performance.

Targeting Cookies

These cookies may be placed on our sites by our advertising partners. The information is used by those companies to build a profile of your interests and show you relevant adverts on other sites. They're designed to identify your browser and internet device but not to store your personal information. If you block these cookies, you will experience less targeted advertising.

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They are set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling forms. You can set your browser to block or alert you about these cookies, but in doing so, some parts of the site will stop working. These cookies do not store any personally identifiable information.

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, then some or all services may not function properly.

• Other data technologies that collect comparable information for security and fraud detection may be used

If you have any questions about cookies or to learn more about cookies, visit this site. 

On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when a new cookie has been added and how to turn cookies off. Please see the links below for guidance on how to modify your web browser’s settings on the most popular browsers:

• Internet Explorer
• Mozilla Firefox
• Google Chrome
• Apple Safari

Note, however, that if you reject our request to use cookies or turn cookies off, you may be unable to access certain parts of the Sites and will miss out on the benefits of some functionality. To learn more about cookies and similar technologies, including which cookies and similar technologies are used, and how to manage and delete them, visit www.allaboutcookies.org, and/or www.youronlinechoices.com. 

Communication Preferences

To help us make e-mails more useful and interesting, we often receive confirmation when you open an email from us if your computer supports such capabilities. You can opt out of receiving emails at any time. To manage your communications preferences with the Arbor Day Foundation — or to opt out of communications entirely — please unsubscribe at the bottom of our emails or contact us.

Analytics

We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en. You can also optout of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Service Providers

We share your Personal Information with our third-party service providers who provide services such as websites hosting, payment processing, online chat functionality, data analysis, information technology, customer service, email delivery, online advertising, auditing, and event planning.

Other

Aside from the instances described above, we will only share your personal information: 

• to comply with the law.
• to respond to claims or comply with legal process served on Arbor Day Foundation (e.g., a lawful subpoena, warrant, or court order).
• to enforce or apply our policies or agreements.
• to protect and defend our rights or property or that of our customers, employees, visitors, or the public.
• in connection with a business transfer, sale, liquidation, or merger.
• if we reasonably believe that an emergency involving immediate danger of death or serious physical injury to any person requires disclosure.
• with your consent.

Our Sites may contain links to other websites such as social media platforms, and event and partner websites. These websites are not covered by this Privacy Notice. Please review the Privacy Notices or Policies of those websites to understand the privacy practices of these third parties.

This Sites is operated in the United States. If you are in another jurisdiction, please know that your information will be transferred to, stored, and processed in the United States. By using these Sites and providing us with information, you consent to the transfer, processing, and storage of your information in the United States. It is important to note that the privacy laws in the United States may not be as comprehensive as those in other countries such as those in the European Union (“EU”). Our service providers use appropriate safeguards to transfer your Personal Information to the United States. 

We use reasonable organizational, technical, and administrative measures to protect Personal Information including the following:

• All website traffic is encrypted with SSL/TLS v3.0,
• We do not store any credit card information. For any online donation or purchase your credit card information is securely transmitted to an independent payment processor which encrypts all sensitive financial information, and
• We employ modern CAPTCHA technology to protect your data and ensure the security of our services by verifying that interactions are performed by humans and not automated systems.

Unfortunately, no data transmission or storage system is 100% secure. When we have given you (or when you have chosen) a password to access certain areas of our site, you are responsible for keeping this password confidential. If you have reason to believe that your interaction with us is no longer secure(for example, if you feel that the security of your account has been compromised), please Contact Us. 

This section of our Privacy Notice applies if you are a data subject who is in the European Economic Area (“EEA”). We adopted this Policy to comply with European privacy laws, including the General Data Protection Regulation (“GDPR”). Any terms defined in the GDPR have the same meaning when used in this Section. In most instances, the Arbor Day Foundation is the data controller for processing Personal Information provided to us through the Site. 

Listed below are the rights that you may be able to exercise with respect to the processing of your Personal Information, subject to applicable law. We take every reasonable step to ensure that the Personal Information that we process is limited to the Personal Information that is reasonably required in connection with the purposes set out in this Privacy Notice.

If you are a resident of or located within the EEA, you have certain data protection rights. These rights include:

• The right to access, update, or delete the information we have on you. Whenever made possible, you can access, update, or request deletion of your Personal Information by contacting us at the contact information below
• The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete
• The right to object. You have the right to object to our processing of your Personal Information.
• The right of restriction. You have the right to request that we restrict the processing of your Personal Information
• The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable, and commonly used format
• The right to withdraw consent. You also have the right to withdraw your consent at any time where Arbor Day Foundation relied on your consent to process your Personal Information

Legal Basis for Processing Personal Information

We rely on the following legal basis for processing your Personal Information:

• Processing of your Personal Information that you provide to us when you interact with our Sites or Services, such as commenting on our blog, watching our videos, or making a purchase, is necessary to respond to or implement your request prior to entering into a contract
• When you apply for employment through our Sites, your contact details and data about your employment history and education (as needed to evaluate your job application, to conduct job interviews, and as is otherwise needed for recruitment) is necessary to process your application for employment. Without this data, we will not be able to process the application
• We use account-related data to set up accounts for users on our platform and to administer and support those accounts (such as usernames, email address, and billing information), provide you with access to the Services, contact you regarding your use of the Services, or to notify you of important changes to the Services. Such use is necessary for the performance of the contract between you and us
• We will send you information on new services and other promotions via email only if you opt in or provide consent to receive marketing communications. You have the right to withdraw your consent at any time as described below

We employ data to better understand how you use our Sites and/or Services to improve your overall experience. We have also a legitimate interest in aggregating and/or anonymizing the information that we collect through our Sites and/or the Services and using this information for our business purposes, as described above. When we process your Personal Information for our legitimate interests, we make sure to consider and balance any potential impact on you and your rights under data protection laws. Our legitimate business interests do not automatically override your interests – we will not use your Personal Information for activities where our interests are overridden by the impact on you, unless we have your consent, or those activities are otherwise required or permitted by law. You have the right to object to processing that is based on our legitimate interests, as further described below

Retention of Personal Information

The Arbor Day Foundation will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Notice. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, complying with applicable laws), resolve disputes, and enforce our legal agreements and policies.

All information you provide to us is stored on our secure servers or those of our third-party data storage providers.

Exercising Your Rights Under GDPR

If applicable, you may exercise any of your rights under the GDPR by submitting a verifiable data subject request by using the contact details below. You may make a request related to your Personal Information or on behalf of someone for which you have authorization. You must include your full name, email address, and attest to the fact that you are a citizen or resident of the EEA by including your country of citizenship or residence in your request. We may require you to confirm your identity and/or legal standing for the request as well as your residency in the EEA in order to obtain the information. We will respond to your request within 30 days or let you know if we need additional time. 

Please note that we will ask you to verify your identity before responding to such requests, and we may deny your request if we are unable to verify your identity or authority to make the request.

You have the right to raise a concern about your data (and without prejudice to any other rights you may have) with your local supervisory authority. However, we hope that we can assist with any queries or concerns you may have about our use of your Personal Information first by contacting us or as follows:

The Arbor Day Foundation 
211 North 12th Street 
Lincoln, NE 68508

Contact us

Email: Privacy@arborday.org

This section of our Privacy Notice applies to consumers who reside in California. We adopt this section to comply with the California Consumer Privacy Act (“CCPA”) and California Privacy Reform Act (“CPRA”).

If you are a California resident, you may be able to exercise the following rights. We will honor requests received to the extent required by applicable law and within the time provided by law.

Right to Access and Information Regarding Personal Information

You have the right to request that we disclose the categories and specific pieces of Personal Information we have collected about you. Specifically, you have the right to request that we disclose the following to you, in each case in the twelve-month period preceding your request:

• The categories of Personal Information we have collected about you
• The categories of sources from which the Personal Information is collected
• Our business or commercial purpose for collecting or selling Personal Information
• The categories of third parties with whom we share Personal Information
• The specific pieces of Personal Information we have collected about you
• The categories of Personal Information about you, if any, that we have disclosed for monetary or other valuable consideration and by category or categories of Personal Information we have disclosed to each one of our third parties
• The categories of Personal Information about you that we disclosed for business purposes

Right to Deletion of Personal Information

You have the right to request that we delete Personal Information about you collected from you. There may be certain exceptions to our obligation to delete your information such as if you have an existing account or transaction with us or if we have a legitimate business reason to keep your information.

Right to Opt Out

You have the right to opt out of the sale of Personal Information. We do not sell personal information, but we recognize that some privacy laws define “personal information” in such a way that making available identifiers linked to you for a benefit may be considered a “sale.” To opt out of this, please click on this link.

Right to Non-Discrimination

We may not discriminate against you because you have exercised any of the aforementioned rights by:

• Denying you goods or services
• Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties
• Providing you a different level or quality of goods or services
• Suggesting that you will receive a different price or rate for goods or service or at a different level or quality of goods or services

However, as permitted by the CCPA, we may offer you certain financial incentives by signing up for our newsletter or completing one of our surveys. Any CCPA-permitted financial incentive we offer will reasonably relate to your Personal Information’s value. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Personal Information We Collect about California Consumers

We collect certain types of Personal Information about you during your relationship with us, as stated above. In particular, we collected the following categories of Personal Information from California consumers within the last twelve (12) months:

Request to Exercise Your Rights

You or your authorized agent can make a request to access, correct, delete, or opt out of the disclosure of your Personal Information for business purposes. You may also make a verifiable consumer request on behalf of your minor child if you believe we have received their information inadvertently. You may request to exercise the aforementioned rights by:

• Submitting a request here
• Calling us at 1-888-448-7337

Please note that we may take steps to verify your identity and residency before granting access to information or acting on your request to exercise your rights, as required or permitted by law. If you use an authorized agent, we may require proof of written authorization to make the request. We may limit our response to your exercise of the above rights as permitted by law. We will confirm receipt of the request within 10 business days describing our verification process. We will respond to your request within 45 days or let you know if we need additional time. 

Data Sharing for Direct Marketing Purposes

California Civil Code § 1798.83 further permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. If you are a California resident, you may ask us to refrain from sharing your personal information with certain affiliates and other third parties for their marketing purposes. Please share your preference by contacting us.

This section of our Privacy Notice applies to consumers who reside in Colorado. We adopt this section to comply with the Colorado Privacy Act (“CPA”). Under the CPA, residents of Colorado have certain personal data rights. Specifically, you have the right to the following:

• To opt out of the processing of your personal data for purposes of:
  • Targeted advertising
  • Sale of personal data
  • Profiling that produces legal or significant effects on you
• To access your data and to confirm that your data is being processed by us
• To request deletion of your data held by us
• To request correction of your data held by us
• To receive your requested data in a usable and transferable form
• To non-discrimination or retaliation for exercising any of these rights
• To designate an agent to exercise your rights on your behalf
• To appeal if your request is denied

Responding to Requests

We are required to respond without undue delay but within 45 days of receipt of your request. Depending on factors such as the type and complexity of the request, we may extend the time of response once for 45 additional days, as long as we notify you within the original 45 days.

If we decline to take action regarding your request, we must notify you without undue delay, but within 45 days of the receipt of the notice and provide information on our appeal process. We are required to provide justification and information on the appeal process within a reasonable time after the communication of the decision to decline.

You can request information under the CPA free of charge once per year. For a second or subsequent request within a 12-month period, we may charge an amount that is the same for the provision of a public record, which is $0.25 per standard page, or a fee not to exceed the actual cost of providing a copy, printout, or photograph of the record in a format other than a standard page.

How to Exercise Your Rights

If you would like to exercise your opt-out rights, designate an agent to exercise your rights, or are a guardian or conservator exercising consumer rights on behalf of another, you can call us at 888-448-7337 or [email/write to] us at:

Privacy@arborday.org

The Arbor Day Foundation 
211 North 12th Street 
Lincoln, NE 68508

If you choose to exercise the above rights, you will need to provide us with:

•  Enough information to identify you [(e.g., your full name, address and customer or matter reference number)]
•  Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill)
•  A description of what right you want to exercise and the information to which your request relates

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person's behalf. Any personal data we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Our Sites and Services are not directed at children under 18years of age, and we do not knowingly collect or receive Personal Information from them. If we learn that we have received Personal Information from a child who is under 18, we will delete the data. If you believe that we have received Personal Information from a child under the age of 18, you may contact us to request deletion of that information.

We may change this Privacy Notice at any time. We will post all changes to this Privacy Notice on this page and will indicate at the top of the page the modified notice's effective date. We therefore encourage you to refer to this page on an ongoing basis so that you are aware of our current privacy notice. If required by the applicable law, we will notify youof the changes. By continuing to use the Sites and/or the Services or providing us with information following such a replacement Notice being uploaded, you agree that you will be deemed to have agreed to be bound by the Privacy Notice as changed.