Privacy Policy

1. Introduction

Canopy Nexus Ltd ("we", "us", "our"), trading as Where On Earth, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our whereonearth.net platform and services.

We are registered in England and Wales and comply with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Our Commitment to Your Privacy

We believe in minimal data collection. We only collect information that is necessary to provide our services effectively and to improve your experience.

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Company name (if provided)
• Password (stored securely using industry-standard encryption)

3.2 Payment Information

Payment processing is handled by our third-party payment processor. We do not store your full credit card details on our servers. We only retain the information necessary for billing purposes, such as the last four digits of your card and billing address.

3.3 API Usage Data

4. Analytics

4.1 Marketing Website (whereonearth.net)

We use Google Analytics on our marketing website (whereonearth.net) to understand how visitors interact with our site. This helps us improve our content and user experience. Google Analytics may collect:

• Pages visited and time spent on each page
• Referral sources (how you found our website)
• General geographic location (country/region level)
• Browser and device information

You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

4.2 Dashboard and API

5. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage your subscription
• Send you service-related communications (e.g., account verification, billing notifications)
• Respond to your inquiries and provide customer support
• Monitor and analyse usage patterns to improve our platform
• Detect and prevent fraudulent or unauthorized activity

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following limited circumstances:

• Service providers: With trusted third parties who assist us in operating our service (e.g., payment processors), bound by confidentiality agreements
• Legal requirements: When required by law or to respond to legal process
• Protection of rights: To protect our rights, privacy, safety, or property, or that of our users or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, and access controls.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you close your account, we will delete or anonymise your personal information within 90 days, except where we are required to retain it for legal or regulatory purposes.

9. Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your data to another service
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us using the details below.

10. Cookies

We use essential cookies to enable core functionality of our service. On our marketing website, we also use analytics cookies (Google Analytics) to understand site usage. You can control cookie preferences through your browser settings.

11. Children's Privacy

Our services are not directed to children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.