Windy Hill Foundation, Inc. (“Windy Hill”) values your trust and respects your privacy interests and preferences. We are committed to full transparency in outlining what information we collect about donors and visitors, how it is used, and how you can opt-out of those programs (online or by traditional communications). This privacy statement (“Privacy Statement”) describes what information we collect about you, including when and how we collect it; how we use it; with whom we may share it; and what choices you have regarding our use of your information so that you can make informed decisions about how you use the website.
This Privacy Statement applies to all information collected through your communications with Windy Hill, whether electronic, written, or oral; information collected through Windy Hill websites (“Sites”) that include a link to this Privacy Statement; as well as any other information about you that we may collect offline or receive from third-parties (collectively, Sites, and offline or third-party information are referred to as the “Services”). By accessing our Services or providing your information to us, you accept and agree to the practices described in this Privacy Statement.
What types of personal information we collect about you
When you engage with Windy Hill or visit or use our Services, we collect a variety of information. In general, the type and amount of information we collect on you will depend on how you choose to interact with Windy Hill. Our website does not collect any personal information unless you voluntarily provide it to us. Any time that you provide information to our website, you will be asked to provide consent to the collection of information.
Windy Hill collects information that identifies you as an individual or information which is linked or linkable to you as an individual, which will collectively be referred to throughout this Privacy Statement as “Personal Information”: including contact information, demographic information, financial information, as well as call recordings and transcripts. We may use this contact information to provide you with a receipt or financial report; to contact you to clarify or obtain additional information about a donation you made, or to send you additional information about Windy Hill.
Categories of information collected
The categories of information collected include: contact information, demographic information, sensitive personal information (including health information), and financial information. These categories are explained further below. Subject to confidentiality requirements, and for the sole purpose of assisting Windy Hill with its mission, each of these categories of information may be shared with third parties.
Contact Information and Preferences. We may request contact information such as your name, mailing address, telephone number, e-mail address, and your preferences for how you would like to be contacted by Windy Hill. We may also use third-party services to supplement or to ensure accuracy of contact information.
Demographic Information. We may request limited demographic information such as your gender, race or ethnicity, marital status, geographic location, and/or primary language. We may also use publicly available data or third-party services to supplement this information.
Sensitive Personal Information (other than Health Information). Unless we specifically request or invite it, we ask that you not send or otherwise disclose to us your political opinions, religion or other beliefs, passport or national identity number, criminal background, or trade union membership. In those cases where we may request or invite you to provide the foregoing information, we will only do so with your express consent or where there is a clear reason for doing so—such as where Windy Hill is arranging your travel and accommodations for your participation in a sponsored event—and then only to the extent such data is required to ensure that we provide appropriate facilities or support to enable you to participate in the event.
Financial Information. If you make a donation to Windy Hill, we will collect payment information, such as your credit card number, to process your transaction. We may also collect the name of your employing company if you would like for that company to make a matching donation. We use PayPal as a third-party payment service to process payments made through the Services. We will retain your credit card information only for as long as necessary to process the transaction. However, as a matter of long-standing policy we do not use third party telemarketers or other outside vendors to solicit funds or otherwise communicate with our donors on our behalf. You will always have the opportunity to opt-out of future communications from us.
Call Recordings and Chat Transcripts. If you contact Windy Hill for information or assistance by calling our number, we may record your call for training and quality assurance purposes. The information contained in these transcripts will depend on what you voluntarily provide to Windy Hill.
How we collect personal information about you
Windy Hill and its service providers may collect Personal Information in a variety of instances. For example, we may collect information about you in the following circumstances:
Contact Form. Windy Hill’s staff is available to answer your questions during our normal office hours of 9 a.m. to 5 p.m. Eastern Standard Time. When you contact Windy Hill for information and resources, we will collect the Personal Information you provide in order to assist you.
Site Use. We may collect Personal Information through your use of the Site, including through the use of the Volunteer Form, Donation Form, or Contact Form.
Employment or Volunteer Participation. If you seek employment with Windy Hill or volunteer for Windy Hill, we will collect information related to your role. For instance, we will collect employment history information if you submit a resume to Windy Hill. Depending on your role, we may also request a background check.
Third-party Fundraising Campaigns, Promotions, or Events. We may use or interact with third-parties to conduct fundraising campaigns, promotions or events. In these instances, we may receive access to donor reports which includes donor name, contact information, and donation amount. We also may receive your Personal Information if you respond to a cause-related marketing campaign or other promotion benefitting Windy Hill conducted by a corporate partner.
Social Media Interfaces. If you elect to connect your social media account to your Site account, certain Personal Information from your social media account will be shared with us, which may include Personal Information that is part of your profile or your friends’ profiles; in addition, if you log-in to our website using your social media account, use a “like” button or use other social media features while visiting our website, those social media companies may collect information about you. Your interactions with social media companies and the use of their features are governed by their privacy policies.
Other Sources. We may receive your Personal Information from other sources, including Windy Hill affiliates that you engage with, or third-party organizations we collaborate with to provide support services and information to low- and lower-income families seeking affordable housing; or supplemental data sources to supplement or link the information we collect from you.
How we may use your personal information
We and our service providers may use Personal Information for the following purposes:
Mission Delivery and Support Operations. We will use your Personal Information to respond to your inquiries and to provide you with the information, resources, and support services you request. We may use your Personal Information to help us better understand the individuals we serve, to better communicate with you, and to better serve you and your community with relevant programs, services, and information. We may also use your Personal Information to develop, evaluate and improve our programs and services. For instance, we may contact you with a survey seeking voluntary feedback on services you have received.
Data Analytics. We also perform data analysis and research activities to better understand our residents to help better provide safe, decent, affordable housing to low- and lower-income families and older adults in Loudoun and Fauquier counties. This analysis can help us improve resident experiences, mission delivery, and support. We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.
Targeted Fundraising. We may use certain information (name, address, telephone number or e-mail information, date of birth, gender, dates of service, department of service information, etc.) to contact you for the purpose of raising money for Windy Hill, but any such communication will provide you with the opportunity to opt-out of receiving such future communications. If you reengage with Windy Hill without indicating your intent to opt-out, we will re-subscribe your email in order to ensure that you do not miss out on Windy Hill updates. You are free to opt-out of fundraising solicitations and your decision will have no impact on your ability to receive services from Windy Hill.
Other Business Purposes. We may use Personal Information for other business purposes, such as conducting audits, fraud monitoring and prevention, data analysis, recordkeeping, developing new services, enhancing, improving, or modifying our programs and our Services, identifying usage trends, determining the effectiveness of fundraising campaigns and mission activities, and updating and expanding our business activities.
With your consent. In addition to the other uses described in this section, we may also use your information as you expressly authorize us to do so.
With whom we may share your personal information
Windy Hill shares Personal Information with its service providers and other third-parties that assist Windy Hill in furtherance of its mission; information is only shared with third-parties pursuant to confidentiality requirements. In furtherance of our mission, your Personal Information may be shared with the following categories of third parties: Windy Hill affiliates, mission collaborators, referring organizations, volunteers, other non-profits, and others with your consent or as required by law.
Third-Party Service Providers. We may need to share Personal Information with third-parties that provide operational services on our behalf (such as website hosting, information technology and infrastructure, data analytics, email delivery, order fulfillment, auditing, or other services) or that assist Windy Hill in providing you with support and resources.
Windy Hill Affiliates. We may provide your information to affiliated organizations that share a common mission with Windy Hill.
Mission Collaborators. We may also collaborate with organizations to provide or improve Windy Hill’s services and operations.
Volunteers. We may share limited personal information, such as contact information, with volunteers who are assisting Windy Hill and who require the information as part of their duties. Volunteers who are entrusted with personal information execute confidentiality agreements with Windy Hill prior to receiving any such information.
Donor Privacy. Windy Hill shares personal information (including name, contact information, and donation history) in the context of cooperatives managed by third-party vendors. The personal information provided is used by the third-party vendors to create a score or profile which may then be used to send solicitations on behalf of other organizations. In some cases, this information is exchanged directly with other non-profits. These organizations will not have direct or continued access to your personal information unless you choose to provide it to them directly by responding to an appeal. You, as a donor, may have your name excluded from any donor list sharing activity by submitting a Data Removal Request.
Your Consent. In addition to the other disclosures described in this section, we may also disclose your information as you expressly authorize us to do so.
Other information collected
Windy Hill may also collect information that does not reveal your specific identity or does not directly relate to an identifiable individual, referred to throughout this Privacy Statement as “Other Information,” including browser and device information, App usage data, Internet Protocol address, information collected through cookies, pixel tags and other technologies. Other Information also includes information that has been anonymized or aggregated in a manner that it no longer reveals your specific identity.
If we are required to treat Other Information as Personal Information under applicable law, then we may use and share it for the purposes for which we use and share Personal Information as detailed in this Privacy Statement.
Browser and Device Information. Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version and the name and version of the Services (such as the App) you are using. We use this information to ensure that the Services function properly.
Internet Protocol Address. Your IP address is automatically assigned to your computer by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications, and other services. We use IP addresses for purposes such as calculating usage levels, diagnosing server problems, and administering the Services. We may also derive your approximate location from your IP address.
Web Server Traffic Pattern Information and Browsing History. We collect standard web server traffic pattern information and your browsing history. General traffic, Site usage, browser information and length of stay information is collected and stored in log files.
Using pixel tags and other similar technologies. Pixel tags (also known as web beacons and clear GIFs) may be used to, among other things, track the online actions of users of the Services (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Services and response rates.
Do Not Track. Some browsers have a “Do Not Track” feature that lets you tell websites that you do not want to have your online activities tracked. We do not currently respond to browser do-not-track signals at this time.
Physical Location. We may collect the physical location of your device by, for example, using satellite, cell phone tower or Wi-Fi signals. We may use your device’s physical location to provide you with personalized location-based services and content. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you do, we may not be able to provide you with the applicable personalized services and content.
De-Identified or Aggregate Information. We use De-Identified Information and Aggregate Information for activities including data analysis and research to gain a greater general understanding of our website visitors. “De-Identified Information” means information where identifiers have been removed so that it does not directly or indirectly identify and cannot reasonably be used to identify an individual. “Aggregate Information” means information about groups or categories of individuals which does not identify and cannot reasonably be used to identify an individual. For example, we may use Aggregate Information to compare the types of services our constituents utilize in one geographic location with another to understand how the two groups are different or similar.
Uses and Disclosures of Other Information. We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law. In some instances, we may combine Other Information with Personal Information. If we do this, we will treat the combined information as Personal Information. For example, we may work with data providers to tailor our communications to you, including fundraising and outreach communications, based on your areas of interest and other information about you. To do this, we may place cookies on your browser and combine IP address or browsing history with other de-identified data (such as a hashed, non-readable e-mail or postal address). We may then communicate with you through mail, email, or other channels.
Our data security protections
We seek to use reasonable organizational, technical, and administrative measures reasonably designed to secure the information to protect Personal Information within our organization. We incorporate industry-standard security controls (like firewalls) and protocols (like SSL/TLS) to create a site resistant to standard internet-based threats. Unfortunately, no data transmission or storage system can be guaranteed 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us under the “How to Contact Us” section below.
Windy Hill retains the Personal Information that we receive for as long as necessary to fulfill the purpose(s) for which the information was collected, to provide our services and products, to pursue legitimate business purposes, to enforce our agreements, and comply with all applicable laws.
Your privacy options and access
Contact Preferences and Restrictions. We respect your privacy and recognize that you may wish to limit the ways in which we contact you and/or share your Personal Information, including for fundraising purposes. An “Unsubscribe” button will be provided at the top or bottom of each email marketing communication sent by Windy Hill, so that you may opt-out of further email communications. However, we will continue to send transaction-related emails regarding our relationship and the services you have requested. If you later reengage with Windy Hill without indicating your intent to opt-out, we will re-subscribe your email in order to ensure that you do not miss out on Windy Hill updates. Windy Hill offers the following options for restricting the use and disclosure of your Personal Information:
Do not contact me by postal mail.
Do not contact me by telephone.
Do not contact me by e-mail.
Do not share my contact information with other nonprofit organizations.
Do not contact me with fundraising requests supporting Windy Hill.
Do not contact me at all.
You may also be able to limit the frequency of postal mail. To inform us of any desired restrictions, please complete our Data Request/ Opt-Out Form. If you contact us with an opt-out request, we will honor the request in accordance with timelines set forth in applicable law. Please note that if you opt-out of receiving e-mails but later reengage with Windy Hill without indicating your intent to opt-out, we will re-subscribe your email to ensure that you do not miss out on Windy Hill updates. We may also still send you important administrative messages from which you cannot opt-out.
To Request a Copy of your Personal Information. Subject to applicable law, you may have the right to obtain confirmation regarding whether Windy Hill processes Personal Information about you and/or to request access to and receive information about the Personal Information that we maintain. To make such a request, please submit a Data Request/ Opt-Out Form.
In your request, please make clear what Personal Information you would like to review. We may need to verify your identity before implementing your request for your protection. We will try to comply with your request as soon as reasonably practicable, consistent with applicable law.
Subject to applicable law, you may also have the right to object to processing your Personal Information, and have the information blocked, anonymized, or deleted, as appropriate. Please note that in cases of deletion, limited personal information will remain to document the request. The right to access Personal Information may be limited in some circumstances by local law. To exercise these rights, please submit a Data Request/ Opt-Out Form.
Subject to applicable law, although Windy Hill makes good faith efforts to provide individuals with access to their Personal Information, there may be circumstances in which Windy Hill is unable to provide access, including but not limited to: where the information would compromise others’ privacy or other legitimate rights, where the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy in the case in question, or where the information is subject to legal privilege. If Windy Hill determines that access should be restricted in any instance, we will endeavor to provide you with an explanation of why that determination has been made and a contact point for any further inquiries. To protect your privacy, Windy Hill will take commercially reasonable steps to verify your identity before granting access to or making any changes to your Personal Information.
Notices and Disclosures
Children’s Privacy. Windy Hill does not knowingly request or collect information from any person under 13 years of age without parental consent. If you believe that your child has submitted Personal Information to Windy Hill without your consent and you would like this info restricted or removed, please contact us using one of the methods provided in “How to Contact Us” below.
Links to Third-Party Websites. Our Services may contain links to third-party websites, whose privacy practices may be different from Windy Hill’s. This Privacy Statement does not address, and we are not responsible for, the privacy, information or other practices of any third-parties, including any third-party operating any website or service to which the Services link. Links to other sites do not imply Windy Hill’s endorsement of the products or services or privacy or security practices of those websites. In addition, we are not responsible for the information collection, use, disclosure or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any Personal Information you disclose to other organizations through or in connection with the Sites or our Social Media Pages.
For California Residents. California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of Personal Information to third-parties for their direct marketing purposes during the preceding calendar year. In addition, if you are a California resident under the age of 18 and a registered user of the Services, you may ask us to remove content or information that you have posted to the Sites. To make sure a request is made, please submit a Data Request/ Opt-Out Form. We will respond to your request consistent with applicable law. Please note that your request does not ensure complete or comprehensive removal of the content or information, as, for example, some of your public content may have been reposted by another user. Limited personal information will remain to document the request for deletion.
Lawful Basis for Processing. The laws in some countries require us to tell you about the lawful grounds we rely on to collect, use, disclose, and otherwise process your Personal Information. To the extent those laws apply, we have several different lawful bases for processing your Personal Information including:
as necessary to provide a service or information you request;
to comply with legal obligations;
based on your consent,
and in support of our legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
In many cases, we handle Personal Information because it furthers our legitimate business and charitable interests. This includes:
Providing a safe user experience on our Site;
Sending communications to you to let you know about what we are doing with your donations and to solicit additional donations;
Protecting users, our employees, our volunteers, and our property;
Analyzing and improving our operations (e.g., optimizing the design and operation of our Site); and
Managing legal issues.
Jurisdiction and Cross-Border Transfer. Windy Hill is headquartered in the United States and has service providers in other countries, and your personal information may be transferred to the United States or other locations outside of your state, province, country, or other governmental jurisdiction where privacy laws may not be as protective as those in your jurisdiction. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities may be entitled to access your Personal Information. Where required, data transfers will be made subject to the terms of the applicable Standard Contractual Clauses or with your consent.
Information on Third-Parties. If you disclose any Personal Information relating to other people to us, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Statement.
How to contact us
Privacy Questions and Communication Preferences. If you have any questions about this Privacy Statement, or if you wish to update or correct your personal profile, change your communication preferences, or limit communications, please contact us at:
Mailing address: Windy Hill Foundation, P.O. Box 1593 Middleburg, VA 20118
Privacy Rights. Subject to applicable law, you may have the right to obtain confirmation regarding whether Windy Hill processes Personal Information about you, request access to your Personal Information, delete your Personal Information remove and/or receive information about the Personal Information that we maintain. To make such a request, please submit a Data Request/ Opt-Out Form.
Security Breach or Fraud Notification. If you witness or become aware of any suspected privacy or security breach of Windy Hill constituent data (i.e., mishandling, theft, loss, or improper disclosure of personal information) or potentially fraudulent activity, please contact us via our Contact Form.
User Agreement and Terms
By viewing and/or using this website, you agree to all of the terms and conditions explained below.
General. This World Wide Web site with its home page in the domains “windyhillfoundation.org” and “windyhillfoundation.com” (the “website”) is a complimentary information service offered by the Windy Hill Foundation, Inc. (“Windy Hill”) at no charge to you as a user of the World Wide Web, with the express condition that you agree to be bound by the terms and conditions set forth in this User Agreement. Windy Hill reserves the right to change these Terms and Conditions at any time, and you must consult the most recent version of this User Agreement and Terms and Conditions (not an older cached version) each time you view the website. Do not use the website if you do not agree to all of the following terms and conditions.
Representations and Warranties. You acknowledge that the information on the website is provided “as is” for general information only. Windy Hill makes no representations or warranties of any kind regarding this website, including but not limited to any warranties of accuracy, completeness, currency, reliability, merchantability or fitness for a particular purpose, or any warranty that these pages, or the server that makes them available, are free of viruses or other harmful elements, and all such warranties are expressly disclaimed.
Indemnification. You agree that you will hold harmless Windy Hill and its officers, directors and employees from all claims arising out of or related to your access or use of, or your inability to access or use, this website or the information contained in this website or other websites to which it is linked, including but not limited to claims that you have found something you have heard, viewed or downloaded from this website or another website to which it is linked to being obscene, offensive, defamatory, or infringing upon your intellectual property rights or the intellectual property rights of a third party. In no event will Windy Hill or the contributors of information to this website be liable to you or anyone else for any decision made or action taken by you in reliance on such information or for any consequential, special or similar damages, even if advised of the possibility of such damages.
Opinions/Recommendations. You acknowledge that opinions and recommendations contained in this website are not necessarily those of Windy Hill or endorsed by Windy Hill.
Linked Sites/Third-Party Content. These Terms and Conditions apply only to this website. Windy Hill may provide links on the website to other websites which are not under the control of Windy Hill. These links are provided for convenience of reference only and are not intended as an endorsement by Windy Hill of the organization or individual operating the website or a warranty of any type regarding the website or the information on the website. Under no circumstances will Windy Hill be held liable, directly or indirectly, or any loss or damage that is caused or alleged to have been caused to you in connection with your use of, reliance on, or any content, goods or services available on any other website to which this website links. You should direct any concerns to that website’s administrator.
Governing Law and Jurisdiction. This website (excluding linked sites) is controlled and operated by Windy Hill, which is headquartered in the Commonwealth of Virginia, United States of America. It can be accessed from all 50 states, as well as United States territories and other countries around the world. By accessing this website you agree that any action at law or equity arising or in any way relating to this website, shall be filed only under the statutes and laws of the Commonwealth of Virginia, without regard to conflicts of law principles thereof. You also agree and hereby submit to the exclusive personal jurisdiction and venue of the Circuit Court of the Commonwealth of Virginia in and for the County of Loudoun, and the United States District Court for the Eastern District of Virginia with respect to such matters. Windy Hill makes no representation that materials on the website are appropriate or available for use in other locations, and accessing them from territories where their contents are illegal is prohibited. Those who choose to access this website from other locations do so of their own initiative and are responsible for compliance with local laws.
Last Modified: December 28, 2022
Updates to this privacy statement and user terms & conditions
Windy Hill may modify this Privacy Statement and the User Terms & Conditions at any time. When changes are made to this Privacy Statement, we will update the “last modified” section at the top of our Privacy Statement. Likewise, when changes are made to the User Terms & Conditions, we will update the “last modified” section at the top of our User Terms & Conditions.
Your use of Windy Hill’s Services following these changes means that you have read, understood, and accept the revised Privacy Statement and User Terms & Conditions.