Privacy Policy

1. Introduction

Kali Web Conversion SRL ("we", "our", "us"), VAT No. RO40667390, operates the website membership.bonsaiworld.org and is the data controller responsible for your personal information. We are committed to protecting your privacy and handling your data with transparency and respect.

This Privacy Policy explains what data we collect, how we use it, and what rights you have. By using our website or purchasing a membership, you agree to the practices described herein.

2. Data We Collect

When you register for a Bonsai World membership, we collect the following personal data:

• Identity data: first name, last name
• Contact data: email address, phone number
• Shipping data: street address, city, ZIP/postal code, state/province, country
• Payment data: card details are processed directly and securely by Stripe, Inc. We do not store full card numbers on our servers.
• Technical data: IP address, browser type, device information, pages visited, and time of access — collected via cookies and server logs.
• Member data: your unique Member ID, membership start and renewal dates.

3. How We Use Your Data

We use your personal data for the following purposes:

• To process your membership payment and issue your unique Member ID
• To produce and ship your physical Bonsai World Membership Card
• To send you membership confirmation, renewal reminders, and account-related communications
• To manage your membership account and handle cancellation or refund requests
• To comply with legal and regulatory obligations
• To improve our website and services through aggregated, anonymised analytics

4. Legal Basis for Processing

We process your data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract performance: to fulfil our membership obligations to you
• Legal obligation: to comply with applicable laws and tax regulations
• Legitimate interests: to improve our services and prevent fraud
• Consent: where you have explicitly opted in (e.g. marketing communications)

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share your data only with the following trusted third parties, solely as necessary to provide our services:

• Stripe, Inc.: for secure payment processing
• Postal and courier services: for physical card delivery
• Hosting and IT providers: who process data on our behalf under strict data processing agreements
• Legal authorities: when required by law or to protect our legal rights

6. Data Retention

We retain your personal data for as long as your membership is active and for a period of 7 years thereafter, as required by Romanian and EU accounting and tax regulations. After this period, your data will be securely deleted or anonymised.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: to request a copy of the data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data, subject to legal retention requirements
• Right to restriction: to request that we limit how we use your data
• Right to portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@membership.bonsaiworld.org. We will respond within 30 days.

8. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including by Stripe (USA). Such transfers are governed by Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. Payment data is encrypted using industry-standard TLS/SSL protocols and processed exclusively by Stripe.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this page. Continued use of our website after any changes constitutes acceptance of the updated policy.

11. Contact & Complaints

If you have any concerns about how we handle your data, please contact us at info@membership.bonsaiworld.org. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.