Last Updated: July 12, 2025

The Buy A Brick initiative ("we," "us," or "our") is committed to protecting the privacy and personal data of visitors to our website fishturtlereef.com This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our Website, including when making donations, purchasing reef bricks, booking eco-tourism experiences, or engaging with other services related to our artificial reef projects in Cyprus. By using the Website, you consent to the practices described in this policy. If you do not agree, please do not use the Website.

1. Information We Collect

We may collect the following types of information:

1.1 Personal Data

• Contact Information: Name, email address, phone number, and mailing address provided when you make a donation, purchase a reef brick, book a tour, or contact us.

• Payment Information: Credit card details, billing address, or other payment-related data processed through secure third-party payment processors (e.g., Stripe, PayPal).

• Account Information: Username, password, and preferences if you create an account on the Website.

• Donation and Tour Details: Information about your contributions (e.g., brick dedications) or tour bookings (e.g., preferred dates, participant details).

1.2 Non-Personal Data

• Usage Data: Information about how you interact with the Website, such as IP address, browser type, device information, pages visited, and time spent on the Website.

• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance user experience, analyze Website performance, and personalize content. You can manage cookie preferences through your browser settings.

1.3 Information from Third Parties

• We may receive information from third-party platforms (e.g., social media or crowdfunding partners) when you engage with our campaigns or share content, subject to their privacy policies.

2. How We Use Your Information

We use your information to:

• Process donations, brick purchases, and tour bookings.

• Provide personalized certificates, virtual tours, or other rewards tied to your contributions.

• Communicate with you about your donations, bookings, project updates, or promotional campaigns (with your consent where required).

• Improve the Website’s functionality, user experience, and content.

• Analyze Website usage and campaign performance to optimize our services.

• Comply with legal obligations, such as tax reporting or environmental regulations in Cyprus.

• Prevent fraud and ensure the security of the Website.

3. Legal Basis for Processing (GDPR Compliance)

For users in the European Union, we process personal data based on the following legal grounds:

• Consent: For marketing communications or non-essential cookies, where you have given explicit consent.

• Contract: To fulfill donations, purchases, or tour bookings you have requested.

• Legitimate Interests: For improving Website functionality, analyzing usage, or preventing fraud, where our interests do not override your rights.

• Legal Obligation: To comply with applicable laws, such as financial or environmental regulations in Cyprus.

4. How We Share Your Information

We do not sell or rent your personal data. We may share your information with:

• Service Providers: Third-party vendors (e.g., payment processors, email marketing platforms, or tour operators) who assist with Website operations, strictly under data protection agreements.

• Partners: Organizations like dive shops or the Cyprus Department of Fisheries and Marine Research, solely for project-related purposes (e.g., tour coordination or reef monitoring).

• Legal Authorities: If required by law, such as for tax reporting or to comply with a court order.

• Public Recognition: If you opt in, your name or dedication may be displayed on the Website or physical reef markers as part of our "Buy A Brick" campaign.

5. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• Encryption of payment information and sensitive data during transmission (e.g., SSL/TLS).

• Secure storage of personal data with access restricted to authorized personnel.

• Regular security assessments of the Website and third-party services.

However, no online platform can guarantee absolute security. You use the Website at your own risk, and we encourage you to protect your account credentials.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, including:

• Donation and payment records: Retained for 7 years to comply with financial regulations in Cyprus.

• Account information: Retained until you request deletion or your account becomes inactive for 2 years.

• Usage data: Retained for up to 1 year for analytics purposes, unless anonymized.

7. Your Rights (GDPR and Applicable Laws)

As a user, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.

• Rectification: Correct inaccurate or incomplete data.

• Erasure: Request deletion of your data, subject to legal obligations (e.g., tax records).

• Restriction: Request that we limit the processing of your data in certain cases.

• Portability: Receive your data in a structured, machine-readable format.

• Objection: Object to processing based on legitimate interests or for direct marketing.

• Withdraw Consent: Revoke consent for marketing or non-essential cookies at any time.

To exercise these rights, contact us at trexdivesolutions@gmail.com. We will respond within 30 days, as required by GDPR. You may also lodge a complaint with the Cyprus Data Protection Commissioner or your local supervisory authority.

8. International Data Transfers

If you access the Website from outside the EU, your data may be transferred to Cyprus or third-party service providers in other countries (e.g., payment processors in the US). We ensure such transfers comply with GDPR through Standard Contractual Clauses or other safeguards.

9. Third-Party Links

The Website may contain links to third-party sites (e.g., payment processors, social media, or partner organizations). We are not responsible for their privacy practices. Please review their policies before providing personal information.

10. Cookies and Tracking

We use cookies to:

• Ensure Website functionality (essential cookies).

• Analyze usage and performance (analytics cookies).

• Personalize content and ads (marketing cookies, with your consent).

You can disable non-essential cookies via your browser or our cookie consent tool. Note that disabling essential cookies may affect Website functionality.

11. Children’s Privacy

The Website is not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us to request deletion.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a Website notice. The updated policy will be effective as of the “Last Updated” date above.

13. Contact Us

For questions, concerns, or to exercise your data rights, contact us at:

• Email: trexdivesolutions@gmail.com

• Address: [insert physical address in Cyprus, if applicable]

• Phone: Tony - 97807523 / Jerry - 99827735

Thank you for supporting our mission to enhance marine biodiversity through artificial reefs in Cyprus. We value your trust and are committed to protecting your privacy.