Privacy Policy

1 Overview

White Flower Foundation ("White Flower," "we," "us," or "our") operates an online charitable fundraising platform at whiteflowerfoundation.co that connects people in need with a community of donors across the United States. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over that information.

By accessing or using our platform, you agree to the practices described here. If you do not agree, please do not use the platform. We also encourage you to read our Terms of Use, Acceptable Use Policy, and Refund & Cancellation Policy, which together with this policy govern your use of White Flower Foundation.

2 Information We Collect

We collect information in three ways: information you provide directly, information collected automatically when you use the platform, and information we receive from trusted third parties acting on our behalf.

Information you provide

• Account and profile details such as your name, email address, phone number, and city/state when you create a fundraiser, donate, or contact us.
• Payment information processed securely by our payment processor — we do not store full card numbers or bank account details on our servers.
• Campaign content you publish, including your story, photos, videos, updates, and fundraising goal.
• Communications and supporting documentation you send to our Support or Trust & Safety teams (for example, when responding to a verification request or refund review).
• Optional information such as a comment with your donation or a public message of support.

Information collected automatically

• Device, browser, and operating system information.
• Your IP address and a derived approximate location (city/region/country).
• Usage data such as pages visited, time spent on the platform, referring URLs, and the actions you take on the site.
• Cookies and similar tracking technologies, as described in Section 6.

Information from third parties

• Confirmation details from our payment processor (transaction status, amount, currency, last four digits of the card or wallet identifier).
• Identity verification and fraud-screening signals from compliance partners when our Trust & Safety review requires them.
• Information you choose to share through a social media platform — for example, when sharing or signing up via a social profile.

3 How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the platform and the campaigns hosted on it.
• Process donations, manage withdrawals, and issue donation receipts.
• Verify the identity of campaign organizers and beneficiaries.
• Communicate with you about your campaigns, donations, receipts, and account.
• Provide customer support and respond to your questions or requests.
• Detect, prevent, and investigate fraud, abuse, and violations of our policies, including under the White Flower Guarantee.
• Comply with applicable laws and respond to lawful requests from public authorities.
• Send platform updates, policy notices, and — only where permitted — occasional promotional messages. You may opt out of marketing at any time.
• Conduct analytics and measure the effectiveness of our outreach to support our charitable mission.

4 Legal Bases for Processing

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases to process your personal data:

• Contract — to provide the services you request, including processing your donation or hosting your fundraiser.
• Legitimate interests — to keep the platform safe, prevent fraud, improve our services, and communicate with you in ways you would reasonably expect.
• Consent — where you have given consent, for example for non-essential cookies or marketing emails. You may withdraw consent at any time.
• Legal obligations — to comply with applicable laws, including tax, recordkeeping, and anti-fraud requirements.

5 How We Share Your Data

We do not sell your personal data. We share information only in the limited circumstances below, and only with parties bound by appropriate confidentiality and data protection obligations.

• Service providers who act on our behalf — including our payment processor, hosting and infrastructure providers, email and customer-support tools, analytics partners, and identity-verification or fraud-screening vendors.
• Campaign organizers — when you donate, the organizer of that campaign will see your name and donation amount unless you donate anonymously. They may also see any message you choose to post publicly with your donation.
• Legal and safety reasons — when required by law, regulation, court order, or government request, or where we believe disclosure is necessary to protect the rights, safety, or property of our users, our organization, or the public.
• Business transfers — if White Flower Foundation is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to the protections of this policy.

6 Cookies & Tracking Technologies

We use cookies, pixels, and similar technologies to operate the platform, remember your preferences, understand how visitors use the site, and measure the effectiveness of our outreach. We use four categories of cookies:

• Strictly necessary — required for the platform to function, including security and fraud prevention. These cannot be disabled.
• Preference — remember your settings (such as language) so the platform behaves the way you expect.
• Analytics — help us understand how visitors interact with the platform so we can improve it.
• Advertising and measurement — help us understand whether outreach about our cause is reaching the right audience. These may be set by trusted analytics or social platforms acting on our behalf.

You can control or block cookies through your browser settings, your device's privacy controls, and industry opt-out tools. Disabling some cookies may affect platform functionality.

7 Data Retention

We keep your personal data only for as long as necessary to fulfill the purposes described in this policy, to provide the services you request, and to comply with our legal, accounting, and tax obligations.

• Donation records are typically retained for at least seven years in line with U.S. nonprofit recordkeeping and tax reporting standards.
• Campaign content remains available while the campaign is active and for a reasonable period after, so donors can refer back to it.
• Support communications are kept for as long as needed to address the matter and any related follow-up.
• Information related to fraud prevention may be retained for a longer period where necessary to protect the platform and our community.

When personal data is no longer needed, we securely delete, anonymize, or aggregate it.

8 Security

We use industry-standard technical and organizational measures to protect your personal data, including TLS/SSL encryption in transit, encryption at rest where appropriate, access controls, continuous monitoring, regular security reviews, and least-privilege practices for our staff and vendors.

No method of transmission over the internet or method of electronic storage is 100% secure. If you believe your account, donation, or personal information has been compromised, please contact us immediately at support@whiteflowerfoundation.co.

9 Your Rights & Choices

Depending on where you live, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request that we delete your personal data, subject to legal and contractual exceptions (for example, donation records we must keep for tax purposes).
• Restriction or objection — ask us to limit or stop certain processing.
• Portability — request a portable copy of certain data you provided to us.
• Opt-out of marketing — unsubscribe at any time using the link at the bottom of our emails or by contacting us.
• Right to complain — EEA/UK residents may lodge a complaint with their local data protection authority.

State privacy rights (U.S.): residents of California, Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws have additional rights, including the right to access, correct, delete, and opt out of "sales" or "sharing" of personal information for cross-context behavioral advertising. White Flower Foundation does not sell your personal data. To exercise any of these rights, contact us through our Contact page or email support@whiteflowerfoundation.co. We will not discriminate against you for exercising your rights.

10 International Data Transfers

White Flower Foundation operates from the United States. If you access the platform from outside the U.S., your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect your information when it is transferred internationally.

11 Children's Privacy

White Flower Foundation is not directed to children. You must be at least 18 years old to make a donation or start a fundraiser on the platform. We do not knowingly collect personal information from anyone under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it promptly.

12 Third-Party Services and Links

The platform integrates with third-party services for payment processing, analytics, email delivery, fraud prevention, and similar purposes. These providers process information on our behalf under strict confidentiality and data-protection obligations. The platform may also link to external websites we do not control — for example, a campaign organizer's social media profile. Those sites are governed by their own privacy policies, and we encourage you to review them.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are material, take additional steps to notify you, such as posting a prominent notice on the platform or sending an email. Your continued use of the platform after the updated policy takes effect constitutes acceptance of the changes.

14 Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please reach out:

• Email: support@whiteflowerfoundation.co
• Contact form: Contact Us page
• EIN: 33-1335686