How we look after your details.
This notice explains what Canopy collects when you use this website, why, where it is kept and how to have it removed. It is written to match exactly what the site does; when the site changes, so does this page.
Last updated 29 August 2026.
Canopy, Cambridge.
Canopy directs giving to climate projects in Pakistan, starting with our own planting on the Lahore Canal Bank in the Indus basin. We were founded at the University of Cambridge. For anything about your personal data, write to [email protected].
Only what each form asks for.
- Pledges: your name, email address, the amount you pledged and the trees it funds, the page you pledged from, and the time.
- Donor list and newsletter: your email address, the page you joined from, and the time. If you unsubscribe we keep the address marked as unsubscribed so we do not write to it again.
- Messages to us: your name, email address and the message.
- Donations (when giving opens): your name, email address, the amount, whether it is Zakat or Sadaqah, and a Stripe payment reference. Card details go to Stripe only; we never see or store them.
- Delivery records: if an email to you bounces or you report it as unwanted, we record your address as one not to write to.
- Technical: your connection’s address is used briefly to limit repeated requests and to check a form was sent by a person (Cloudflare Turnstile). It is not kept with your details.
To do what you asked, and nothing else.
We use your details to record your pledge or gift, send the acknowledgement or receipt you asked for, tell you when giving opens if you asked to be told, answer your message, and send the newsletter if you joined it. We do not sell or share your details for marketing. Our lawful basis is your consent for the newsletter and donor list, and the performance of your request (contract) for pledges, gifts and messages; keeping delivery records is our legitimate interest in sending only wanted mail.
With three services, under contract.
- Railway hosts the website and the database where the records above live.
- Resend sends our email; it holds the address and content of each message for a short time to deliver it and report bounces.
- Stripe handles payments and holds the payment data required by law.
- Cloudflare carries the website’s traffic and provides the human check on forms; it sees your connection’s address in passing.
As long as the purpose lasts.
Pledges and messages are kept until we have acted on them and for up to two years after. Newsletter and donor-list addresses are kept until you unsubscribe, and then only as a mark not to write to you. Donation records are kept for six years after the gift, as UK charity and tax rules require. Delivery records are kept while the address remains undeliverable.
Ask, and we will do it.
You can ask to see what we hold about you, have it corrected, have it deleted where the law allows, or withdraw consent at any time. Every newsletter carries an unsubscribe link; for anything else, email [email protected] and we will reply within a month. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.
None for tracking.
The site sets no advertising or analytics cookies. Stripe and Cloudflare may set cookies strictly needed for payment security and the human check on forms. Your planting-order selection is kept in your own browser only, until you clear it.