Privacy Policy

Last updated: September 5, 2025

1. Introduction

Magic Forest Association ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and make donations.

2. Information We Collect

2.1 Information You Provide

• Donation Information: Name, email address, payment details
• Account Information: Email address for user accounts
• Communication: Messages sent through our help system

2.2 Information Automatically Collected

• Technical Data: IP address, browser type, device information
• Usage Data: Pages visited, time spent on site
• Session Data: Temporary data for site functionality

3. How We Use Your Information

We use your information for:

• Processing donations and managing subscriptions
• Providing customer support and responding to inquiries
• Sending donation receipts and updates about our projects
• Maintaining and improving our website
• Complying with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: For marketing communications (where applicable)
• Contract Performance: To process donations and provide services
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with tax and financial regulations

5. Data Sharing and Third Parties

We share your information with:

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Clerk: Authentication services (subject to Clerk's privacy policy)
• Legal Authorities: When required by law

We do not sell, trade, or rent your personal information to third parties.

6. Data Retention

We retain your information for:

• Donation Records: 7 years (tax and legal requirements)
• Account Information: Until account deletion is requested
• Technical Data: 24 months maximum

7. Your Rights (GDPR)

You have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is 100% secure.

9. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area. We ensure appropriate safeguards are in place for such transfers.

10. Cookies and Tracking

We use essential cookies for website functionality. Third-party services (Stripe, Clerk) may set their own cookies. See our Cookie Policy for more details.

11. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.