Privacy Policy — Ancient Roots Alberta

1. Introduction

Ancient Roots Alberta ("ARA", "we", "us") is a platform for documenting and sharing heritage tree records across Alberta, accessible via our website and mobile app. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

By using the ARA website or app, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Tree records: Species, measurements, notes, and location data you submit when documenting a tree.
• Account information: If you create an account, your name and email address.
• Contact forms: Any information you submit through our website contact form.

2.2 Location Data

If you use the ARA app, we request access to your device's GPS to geotag tree records. Location data is collected only when you actively submit a tree record. We do not track your location in the background.

On the website, tree record locations are displayed on a map. Browser location may be requested for optional map or route features, such as finding nearby trees, but that location is used for the active feature and is not saved unless you actively submit a tree record.

2.3 Automatically Collected Data (Google Analytics)

Where Google Analytics is enabled on the ARA website, app, or public demo, it may collect usage data, including:

• Pages and features visited
• Time spent on the site and session frequency
• General geographic region (country/province level)
• Device type, browser, and operating system
• Referral source (how you found our site)

This data is used in aggregate and is not intended to identify you personally. It is processed by Google LLC under their own privacy policy, available at https://policies.google.com/privacy.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.

2.4 Cookies

Our website may use cookies to support Google Analytics where enabled and basic site functionality. You can disable cookies in your browser settings, though some site features may not function correctly as a result.

3. How We Use Your Information

We do not sell your personal information to any third party.

4. Data Sharing

We share data only in the following circumstances:

• Google (Analytics): Usage data as described in Section 2.3, where Google Analytics is enabled.
• Legal requirements: If required by law or a valid government request.
• With your consent: For any other sharing, we will ask you first.

Tree records you submit may be publicly visible on the ARA website as part of the heritage tree database. Do not include personal information in tree record notes or descriptions.

5. Data Storage and Retention

Tree records and account data are stored on secure servers. Analytics data is retained by Google in accordance with their data retention policies.

You may request deletion of your account and associated personal data at any time by contacting us (see Section 9). Anonymized or aggregated tree record data may be retained for research and conservation purposes even after account deletion.

6. Children's Privacy

ARA is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information through ARA, please contact us and we will delete it promptly.

7. Your Rights Under PIPA (Alberta)

As an Alberta resident, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Withdraw consent to the collection or use of your personal information (subject to legal or contractual limitations)
• Request deletion of your personal information

To exercise any of these rights, contact us using the information in Section 9. We will respond within 30 days.

8. Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or disclosure. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Contact

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact:

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the date at the top of this page. Continued use of the ARA website or app after changes are posted constitutes acceptance of the updated policy.