oceaterraoceaterra
Donate
oceaterra

Privacy Policy

This privacy notice for OceaTerra Initiative Indonesia(informally referred to as "Yayasan OceaTerra"), doing business as OceaTerra ("we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

  • Visit our website at https://oceaterra.org, or any website of ours that links to this privacy notice
  • Make a contribution or donation to OceaTerra, directly (including by bank transfer) or through a partner organization
  • Submit a corporate partnership inquiry
  • Submit a conservation organization inquiry, as an organization seeking support
  • Engage with us in other related ways, including through WhatsApp, social media, sales, marketing, or events

We are committed to protecting your personal information and your right to privacy. We hope you take some time to read through it carefully, as it is important. If there are any terms in this privacy notice that you do not agree with, please discontinue use of our Services immediately. If you still have any questions or concerns about this privacy policy, or our practices with regards to your personal information, please contact us at contact@oceaterra.org.

1. The Data We Collect About You

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our programs, make a contribution, submit a partnership or organization inquiry, or otherwise contact us.

We may collect, use, store, and transfer different kinds of personal data about you, which consist of:

  • Identity Data includes first name and last name.
  • Contact Data includes email address and telephone number.
  • Organizational Data includes company/organization name, job title, website/social media, project location(s), and country/location (for corporate partnership or conservation organization inquiries).
  • Contribution Data includes details of donations or contributions made, donation amount, partnership type, and area of interest (e.g., marine or terrestrial conservation).
  • Verification Data includes bank transfer receipts or screenshots you upload to confirm a direct donation. These images may contain your bank name and account details, which we use solely to verify and process your contribution.
  • Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data includes information about how you use our website and Services.
  • Marketing and Communications Data includes your preferences in receiving communications from us and your communication preferences.

We also collect, use, and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law, as this data will not directly or indirectly reveal your identity. However, if we combine Aggregated Data with your personal data so that it can identify you, we treat the combined data as personal data in accordance with this policy.

IF YOU FAIL TO PROVIDE PERSONAL DATA

Where we need certain data to process a contribution, verify a bank transfer, issue a Certificate of Contribution, or respond to a partnership or organization inquiry, and you do not provide it, we may not be able to complete that request. We will notify you if this is the case.

2. How Is Your Personal Data Collected?

We use different methods to collect data from and about you, including:

  • Direct interactions. You may give us your Identity, Contact, and Organizational Data by filling in forms (such as our Corporate Partnerships inquiry form, Conservation Organization inquiry form, or Donation form) or by communicating with us by phone, WhatsApp, email, or otherwise. This includes personal data you provide when you:
    • make a direct contribution or donation to OceaTerra, including by bank transfer and receipt upload;
    • submit a corporate partnership inquiry;
    • submit a conservation organization inquiry;
    • subscribe to our newsletter or other communications;
    • give us feedback or contact us; or
    • contact us via social media (including Instagram or Facebook) or follow/like our social media pages.
  • Automated technologies or interactions. As you interact with our website, we automatically collect Technical Data about your equipment and browsing actions and patterns, using cookies, server logs, and similar technologies.
  • Third parties. We may receive Contact and Contribution Data about you from travel partner organizations (such as mytripology or True Indonesia) when a portion of your booking with them is contributed to OceaTerra, so that we can issue you a Certificate of Contribution. We may also receive Technical and Usage Data from analytics providers (e.g., Google Analytics) and email marketing service providers.

3. How We Use Personal Data and Why

We will only use your personal data when the law allows us to. Most commonly, we use your personal data to:

  • Process your contribution, including verifying bank transfer donations, and issue a Certificate of Contribution.
  • Respond to corporate partnership and conservation organization inquiries and follow up to discuss next steps.
  • Send administrative information, such as confirmations and receipts.
  • Send you updates on the conservation programs your contribution supports (where you have opted in).
  • Identify usage trends and improve our website and Services.
  • Comply with legal or regulatory obligations.
  • Keep our Services safe and secure, including fraud monitoring and prevention.

We do not rely on consent as a legal basis for most processing, but we will obtain your consent before sending marketing communications if you have not previously contributed or inquired with us, and before sharing your data with any third party for their own marketing purposes.

You have the right to withdraw consent to marketing at any time by contacting us or by unsubscribing from our communications.

THIRD-PARTY MARKETING

We do not share your personal data with any third party for their own marketing purposes. We would only do so with your express opt-in consent, as legally required.

OPTING OUT

You can ask us to stop sending you marketing communications at any time by following the opt-out link on any message, or by contacting us directly.

COOKIES

Our website uses cookies to distinguish you from other users and to improve your experience. You can set your browser to refuse cookies, though some parts of the website may become inaccessible if you do. By continuing to browse our site, you agree to our use of cookies. See our Cookie Policy for details.

CHANGE OF PURPOSE

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider we need to use it for another compatible reason. If we need to use it for an unrelated purpose, we will notify you and explain the legal basis for doing so.

4. Disclosures of Your Personal Data

We may share your data with third parties who perform services for us or on our behalf, including:

  • Partner conservation organizations, for the purpose of directing your contribution and reporting on program outcomes (described by conservation type rather than by name)
  • Travel company partners (mytripology, True Indonesia), where your contribution originated from a booking with them
  • Our bank, for the purpose of verifying and processing direct bank transfer donations
  • Cloud computing and data storage service providers
  • Data analytics services
  • Communication and collaboration tools
  • Website hosting service providers

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not permit third-party service providers to use your personal data for their own purposes.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. This includes uploaded verification documents, such as bank transfer receipts, which are stored securely and accessed only by personnel who need them to confirm your donation. We limit access to personal data to those employees, agents, contractors, and third parties who have a business need to know, and they are subject to a duty of confidentiality.

We have procedures in place to address any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

6. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including satisfying legal, regulatory, tax, or accounting requirements. We may retain data longer in the event of a complaint or anticipated litigation.

In some circumstances, you can ask us to delete your data — see "Your Legal Rights" below.

7. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to the personal data we hold about you.
  • Request correction of incomplete or inaccurate personal data.
  • Request erasure of your personal data, where there is no good reason for us to continue processing it.
  • Object to processing where we rely on legitimate interest, including for direct marketing.
  • Request restriction of processing in certain circumstances.
  • Request transfer of your personal data to you or a third party, in a structured, machine-readable format.
  • Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us at contact@oceaterra.org.

You will not usually have to pay a fee to exercise these rights, though we may charge a reasonable fee for requests that are clearly unfounded, repetitive, or excessive.

We may need to request specific information from you to confirm your identity before responding to a request. We try to respond to all legitimate requests within one month.

8. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Revised" date and will be effective as soon as it is accessible. If we make material changes, we will notify you by prominently posting a notice or sending a direct notification.