White Horse Charity Foundation (“WHCF”, “WHF”, “we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you visit our website, engage with our programs, make donations, participate in our activities, volunteer with us, or otherwise interact with us.

We recognise the importance of maintaining the confidentiality, integrity, and security of personal information entrusted to us. This Privacy Policy is intended to provide transparency regarding our data practices and to ensure compliance with applicable privacy and data protection laws.

By accessing or using our website and services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. WHO WE ARE

White Horse Charity Foundation (WHCF), also referred to as White Horse Foundation (WHF), is a faith-inspired, community-focused humanitarian organization committed to supporting widows, elderly individuals, vulnerable persons, youths, and underserved communities through welfare programs, outreach initiatives, community development, and humanitarian interventions. Website Address: https://whitehorsefoundation.org

For the purpose of applicable data protection laws, White Horse Charity Foundation is the data controller responsible for processing your personal information.

2. INFORMATION WE COLLECT

We may collect, store, and process various categories of personal information depending on how you interact with us.

2.1 Information You Provide Directly

You may voluntarily provide us with personal information when you:

• Complete forms on our website;

• Make a donation;

• Register for events or programs;

• Subscribe to newsletters;

• Volunteer with us;

• Contact us through email, telephone, or contact forms;

• Apply for support programs;

• Submit testimonials, stories, photographs, or media;

• Register for an account on our website;

• Purchase merchandise or products through our online store;

• Leave comments on blog posts or articles.

The personal information collected may include:

• Full name;

• Email address;

• Phone number;

• Postal address;

• Billing address;

• Shipping address;

• Donation information;

• Payment-related information;

• Organization or employer details;

• Username and password;

• Profile information;

• Photographs and media submissions;

• Volunteer information;

• Event registration details;

• Communications and correspondence;

• Any other information you choose to provide.

2.2 Sensitive Information

Certain programs or humanitarian services may require the collection of sensitive information, including:

• Information relating to welfare support;

• Household circumstances;

• Financial hardship information;

• Age-related information;

• Information concerning vulnerable beneficiaries;

• Emergency support requirements.

We collect sensitive information only when necessary, with your consent or where otherwise permitted by law.

2.3 Information Collected Automatically

When you visit our website, we may automatically collect technical information including:

• IP address;

• Browser type and version;

• Device information;

• Operating system;

• Time zone settings;

• Referral URLs;

• Website usage data;

• Pages viewed;

• Date and time of access;

• Clickstream information;

• Session duration;

• User preferences.

This information helps us improve website functionality, security, performance, and user experience.

3. HOW WE USE YOUR INFORMATION

We use personal information for legitimate organizational purposes including to:

• Operate, maintain, and improve our website;

• Process donations and financial contributions;

• Deliver humanitarian programs and services;

• Respond to enquiries and requests;

• Communicate with supporters, donors, volunteers, and beneficiaries;

• Register participants for events and outreach activities;

• Process volunteer applications;

• Administer user accounts;

• Send newsletters and updates;

• Provide receipts and acknowledgements;

• Process purchases and orders;

• Deliver products and merchandise;

• Improve our programs and services;

• Conduct internal reporting and analytics;

• Prevent fraud and abuse;

• Maintain website security;

• Comply with legal and regulatory obligations;

• Protect our rights, beneficiaries, staff, volunteers, and communities.

We will only send marketing communications where you have consented or where permitted by applicable law. You may opt out of marketing communications at any time.

4. LEGAL BASIS FOR PROCESSING

Where applicable, we process personal information based on one or more of the following lawful grounds:

1. Consent: You have provided consent for us to process your personal information.
2. Contractual Necessity: Processing is necessary to fulfill a contract or transaction with you, including donations, purchases, volunteer engagements, or event registrations.
3. Legitimate Interests: Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
4. Legal Obligations: Processing is necessary to comply with legal, accounting, taxation, regulatory, and reporting requirements.
5. Vital Interests: Processing may be necessary to protect an individual’s vital interests, particularly in humanitarian or emergency circumstances.

5. COMMENTS

When visitors leave comments on our website, we collect:

• Information provided in the comments form;

• The visitor’s IP address;

• Browser user agent information.

This information is collected to assist with spam detection, website security, and moderation.

An anonymized string generated from your email address (known as a hash) may be provided to the Gravatar service to determine whether you use it.

The Gravatar service privacy policy is available at: https://automattic.com/privacy/

Once your comment is approved, your profile picture may become publicly visible alongside your comment.

Comments and associated metadata may be retained indefinitely to facilitate automatic approval of future comments.

6. MEDIA

Users who upload images or other media files to our website should avoid uploading files containing embedded location information (EXIF GPS data).

Uploaded media may be publicly accessible, and visitors to the website may download and extract location data contained in such files.

By uploading media to our website, you confirm that you have the necessary rights, permissions, and consents to share such content.

7. CONTACT FORMS

When you submit information through our website contact forms, we may collect:

• Name;

• Email address;

• Telephone number;

• Subject of enquiry;

• Message content;

• Any additional information voluntarily provided.

Information submitted through contact forms is used solely for responding to enquiries, providing support, administering programs, or facilitating communication. Contact form submissions may be retained for administrative, customer service, legal, security, and operational purposes.

8. COOKIES

Our website uses cookies and similar technologies to improve your browsing experience, enhance website functionality, analyse website traffic, and personalise content. Cookies are small text files placed on your device when you visit a website. You may control or disable cookies through your browser settings; however, disabling cookies may affect certain website features and functionality.

8.1 Comment Cookies

If you leave a comment on our website, you may choose to save your:

• Name;

• Email address; and

• Website address

in cookies for your convenience so that you do not need to re-enter these details when leaving future comments.

These cookies may remain on your device for up to one (1) year.

8.2 Login Cookies

When you visit our login page, we may place a temporary cookie to determine whether your browser accepts cookies.

This cookie:

• Contains no personal information;

• Is deleted when you close your browser.

When you log into your account, additional cookies may be used to:

• Save login information;

• Remember display preferences;

• Maintain account sessions.

Login cookies generally remain active for two (2) days.

If you select the “Remember Me” option, your login session may persist for up to two (2) weeks.

Logout actions automatically remove login cookies.

8.3 Publishing Cookies

If you edit or publish content on the website, an additional cookie may be stored in your browser.

This cookie:

• Contains no personal information;

• Records the ID of the article you edited;

• Expires after one (1) day.

8.4 Shopping Cart Cookies

If our website provides an online store, donation shop, or merchandise section, cookies may be used to:

• Remember cart contents;

• Maintain user sessions;

• Process transactions;

• Improve shopping functionality;

• Store customer preferences.

8.5 Analytics Cookies

We may use analytics cookies to understand how visitors interact with our website, including:

• Pages visited;

• Time spent on pages;

• User navigation patterns;

• Website performance metrics.

Analytics data helps us improve website functionality and user experience.

Where required by law, we will request your consent before placing non-essential cookies.

9. ANALYTICS

We may use website analytics services to better understand how visitors use our website.

Analytics services may collect information such as:

• IP addresses;

• Browser type;

• Device information;

• Geographic location (general);

• Pages viewed;

• Session duration;

• Referral sources.

Information collected through analytics is generally aggregated and anonymized where possible.

Examples of analytics providers that may be used include:

• Google Analytics;

• Website hosting analytics tools;

• WordPress analytics plugins.

You may opt out of certain analytics tracking through browser settings, cookie preferences, or provider-specific opt-out mechanisms.

For more information regarding Google Analytics, please visit: https://policies.google.com/privacy

10. EMBEDDED CONTENT FROM OTHER WEBSITES

Articles, blog posts, and pages on our website may include embedded content such as:

• Videos;

• Images;

• Audio files;

• Social media feeds;

• Maps;

• Articles;

• External publications.

Embedded content from third-party websites behaves exactly as if you visited the external website directly.

These third-party websites may:

• Collect information about you;

• Use cookies;

• Employ additional tracking technologies;

• Monitor your interaction with embedded content;

• Associate interactions with your account if you are logged into their platform.

We encourage users to review the privacy policies of any third-party websites they visit.

11. ONLINE DONATIONS, STORE PURCHASES, AND WOOCOMMERCE

If our website offers online donations, merchandise sales, ticket purchases, or other transactions through WooCommerce or similar e-commerce platforms, we may collect and process information required to complete such transactions.

11.1 Information We May Collect

During the checkout or donation process, we may request:

• Full name;

• Email address;

• Telephone number;

• Billing address;

• Shipping address;

• Donation amount;

• Order details;

• Payment information;

• Account credentials;

• Transaction history.

Additionally, while browsing our website, we may automatically collect:

• Products viewed;

• Shopping cart contents;

• Device information;

• Browser type;

• IP address;

• Approximate location.

11.2 How We Use Transaction Information

We use this information to:

• Process donations and payments;

• Fulfill merchandise orders;

• Send receipts and acknowledgements;

• Provide customer support;

• Respond to complaints and refund requests;

• Prevent fraud and unauthorized transactions;

• Comply with legal and financial obligations;

• Improve our offerings and services;

• Maintain transaction records.

Where you consent, we may also send updates, newsletters, or promotional communications.

11.3 Account Creation

If you create an account on our website, we may store:

• Name;

• Address;

• Email address;

• Telephone number;

• Username;

• Password (encrypted).

This information may be used to simplify future purchases or donations.

12. PAYMENT PROCESSING

WHCF does not directly store complete payment card information on its servers. Payments made through our website are processed securely through trusted third-party payment processors. These providers may include:

• PayPal;

• Flutterwave;

• Paystack;

• Stripe; or

• Other authorized payment gateways.

When processing payments, certain information may be shared with payment providers, including:

• Name;

• Billing information;

• Donation amount;

• Transaction value;

• Contact information.

Payment processors are responsible for safeguarding payment information in accordance with their own privacy and security standards.

Relevant privacy policies include:

Paystack Privacy Policy: https://paystack.com/privacy

13. WHO WE SHARE YOUR INFORMATION WITH

We do not sell, rent, or trade personal information. We may share information with trusted third parties only when necessary to operate our organization, provide services, or comply with legal obligations. Such parties may include:

• Payment processors;

• Website hosting providers;

• Cloud service providers;

• Email communication providers;

• Volunteer management systems;

• Event management platforms;

• Analytics providers;

• Customer support providers;

• Legal and regulatory authorities;

• Professional advisers, auditors, or accountants.

All third-party service providers are expected to process personal information securely and only for authorized purposes.

14. PASSWORD RESET REQUESTS

If you request a password reset, your IP address may be included in the password reset email for security purposes and fraud prevention.

15. WHO ON OUR TEAM HAS ACCESS TO YOUR DATA

Authorized members of White Horse Charity Foundation may access personal information strictly on a need-to-know basis.

Personnel who may access information include:

• Website Administrators;

• Organization Executives;

• Finance Personnel;

• Program Coordinators;

• Volunteer Managers;

• Customer Support Personnel.

Team members access personal information solely to:

• Deliver services;

• Process donations;

• Fulfill orders;

• Provide support;

• Manage programs;

• Maintain records;

• Comply with legal obligations.

All staff and volunteers with access to personal information are expected to uphold confidentiality and adhere to data protection standards.

16. WHAT THIRD-PARTY DATA WE MAY RECEIVE

We may receive information about users from third parties including:

• Payment providers;

• Social media platforms;

• Event registration platforms;

• Fundraising platforms;

• Referral partners;

• Publicly available sources.

Information received may include:

• Contact information;

• Donation confirmations;

• Event attendance details;

• Social engagement information;

• Public profile information.

Such information will be processed in accordance with this Privacy Policy.

17. HOW LONG WE RETAIN YOUR DATA

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, reporting, operational, and security requirements.

Retention periods may vary depending on the type of information collected.

Examples include:

Where retention is no longer necessary, information will be securely deleted, anonymized, or destroyed.

18. WHAT RIGHTS YOU HAVE OVER YOUR DATA

Depending on your location and applicable laws, you may have certain rights regarding your personal information. These rights may include:

1. Right to Access: You may request a copy of the personal information we hold about you.
2. Right to Rectification: You may request correction of inaccurate or incomplete information.
3. Right to Erasure: You may request deletion of your personal information, subject to legal and operational obligations.
4. Right to Restrict Processing: You may request that we limit the processing of your information under certain circumstances.
5. Right to Object: You may object to certain forms of processing, including direct marketing communications.
6. Right to Data Portability: You may request an electronic copy of your information in a structured format where applicable.
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at: info@whitehorsefoundation.org

We may require verification of identity before processing certain requests. Please note that some information may be retained where required for legal, security, accounting, safeguarding, or administrative purposes.

19. INTERNATIONAL DATA TRANSFERS

Our website and service providers may store or process information in countries outside Nigeria, including countries that may have different data protection laws.

These transfers may occur through:

• Website hosting providers;

• Cloud storage providers;

• Email service providers;

• Payment processors;

• Analytics providers;

• Security and anti-spam providers.

Where personal information is transferred internationally, we take reasonable measures to ensure appropriate safeguards are in place to protect such information in accordance with applicable data protection laws.

Such safeguards may include:

• Contractual agreements;

• Industry-standard security measures;

• Compliance certifications;

• Data processing agreements with service providers.

By using our website, you acknowledge that your information may be transferred and processed outside your country of residence.

20. HOW WE PROTECT YOUR DATA

White Horse Charity Foundation is committed to protecting personal information through appropriate technical, organizational, and administrative safeguards.

Security measures may include:

• Secure Socket Layer (SSL) encryption;

• Secure hosting environments;

• Password protection;

• Firewall protection;

• Malware monitoring;

• Access controls;

• User authentication procedures;

• Regular software updates;

• Restricted administrative access;

• Data backup procedures;

• Staff and volunteer confidentiality obligations.

Despite our efforts, no transmission over the Internet or electronic storage system can be guaranteed to be completely secure. Users transmit information at their own risk.

21. DATA BREACH PROCEDURES

WHCF maintains procedures to identify, investigate, and respond to actual or suspected data breaches.

Our breach response procedures may include:

• Internal reporting mechanisms;

• Immediate containment measures;

• Risk assessment and investigation;

• Notification of affected individuals where required;

• Notification to regulators or authorities where legally required;

• Remediation and corrective actions;

• Ongoing monitoring and review.

Individuals affected by significant breaches may be notified as soon as reasonably practicable where required by applicable law.

22. LITESPEED CACHE & QUIC. CLOUD SERVICES

Our website utilizes LiteSpeed Cache technology to improve website performance and user experience.

Caching may temporarily store duplicate copies of web pages to facilitate faster loading times. Cache files:

• Are temporary in nature;

• Are automatically deleted according to predefined schedules;

• Are generally not accessible to unauthorized third parties.

We may utilize QUIC.cloud services for content delivery, optimization, and caching.

For additional information, please review the QUIC.cloud Privacy Policy: https://quic.cloud/privacy-policy/

23. AKISMET ANTI-SPAM SERVICE

Our website may use the Akismet Anti-Spam service to protect the website against spam, malicious comments, and abuse.

Akismet may collect information including:

• IP address;

• Browser user agent;

• Referrer information;

• Website URL;

• Comment content;

• Name;

• Email address;

• Username.

Information processed by Akismet is governed by Automattic’s Privacy Policy. For additional information, please visit: https://automattic.com/privacy/

24. AUTOMATED DECISION-MAKING AND PROFILING

WHCF does not generally engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Where automated systems are used for:

• Spam detection;

• Fraud prevention;

• Website security;

• Analytics processing;

such systems are intended solely to support operational efficiency and security.

Important decisions concerning beneficiaries, volunteers, donors, or supporters are ordinarily made with meaningful human involvement.

25. CHILDREN’S PRIVACY

Protecting children’s privacy is important to White Horse Charity Foundation. Our website is not intended to knowingly collect personal information directly from children under the age of thirteen (13) without appropriate parental or guardian consent. Where programs involve minors, information may be collected only:

• With appropriate consent;

• For legitimate humanitarian or program purposes;

• In accordance with applicable safeguarding requirements.

If you believe that a child has provided personal information without appropriate authorization, please contact us immediately.

26. INDUSTRY REGULATORY DISCLOSURES

As a humanitarian and charitable organization, WHCF may be subject to applicable laws, regulations, and reporting requirements relating to:

• Non-profit organizations;

• Charitable activities;

• Financial reporting;

• Anti-money laundering obligations;

• Fraud prevention;

• Tax compliance;

• Child safeguarding obligations;

• Data protection regulations.

We cooperate with lawful requests from regulatory, governmental, and law enforcement authorities where legally required.

27. LINKS TO OTHER WEBSITES

Our website may contain links to third-party websites or services.

We are not responsible for:

• The privacy practices;

• Security measures;

• Content; or

• Policies

of external websites.

Users are encouraged to review the privacy policies of all third-party websites they visit.

28. CHANGES TO THIS PRIVACY POLICY

White Horse Charity Foundation reserves the right to update, modify, or revise this Privacy Policy at any time.

Any changes will become effective immediately upon publication on this page unless otherwise stated.

We encourage users to periodically review this Privacy Policy to remain informed about how we protect personal information.

The “Last Updated” date at the top of this policy will indicate when revisions were made.

29. CONTACT US

If you have questions, concerns, complaints, or requests relating to this Privacy Policy or our handling of personal information, please contact us:

White Horse Charity Foundation (WHCF)

Website: https://whitehorsefoundation.org

Email: info@whitehorsefoundation.org

By using our website, programs, services, or interacting with White Horse Charity Foundation, you acknowledge that you have read, understood, and agreed to this Privacy Policy.