Privacy Notice
Last updated: 2026-06-06
This Privacy Notice explains how Organic Trails ("we", "us") collects, uses, and shares personal data when you use OrganicTrails. We act as data controller for the personal data described below.
1. Data we collect
- Account data: email address and authentication identifiers (e.g. Google account ID) when you sign in.
- Order data: the trails you have purchased, purchase status, and timestamps.
- Support data: any messages you send us.
- Usage and device data: IP address, browser type, pages visited, and basic telemetry needed to operate and secure the site.
Payment card data is collected and processed directly by Stripe. We do not see or store card numbers.
2. How we use it
- Provide the Service (delivering KML downloads, account management).
- Process orders and provide receipts (via Stripe).
- Customer support.
- Security, fraud prevention, and abuse handling.
- Product improvement based on aggregated, non-identifying usage data.
Legal bases (where applicable): performance of our contract with you, our legitimate interests in running and securing the Service, your consent (for optional cookies), and compliance with legal obligations.
3. Sharing
- Stripe – payment processor; handles card data, billing, and refund execution.
- Hosting and infrastructure providers – store and serve the Service.
- Professional advisers – legal and accounting, where required.
- Authorities – when required by law.
4. Retention
We keep account and order data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution requirements, then we delete or anonymise it.
5. Your rights
Subject to the laws of Brasil — São Paulo, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. To exercise any right, contact us at organictrailsadmin@gmail.com. If you are in the UK or EEA you also have the right to lodge a complaint with your supervisory authority.
6. Security
We use appropriate technical and organisational measures, including encryption in transit, access controls, and private storage for purchased files.
7. International transfers
Some of our service providers may process data outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
8. Cookies
We use only essential cookies needed for sign-in and language preferences. We do not run third-party advertising cookies.