Privacy Policy

Effective March 13, 2024

Water for South Sudan, Inc. (“Water for South Sudan”, “we”, “us”, and “our”) is committed to protecting the privacy and security of the data of its clients, associates, suppliers, and website visitors. We want you to understand how we collect and use information from our website so you can interact with us with confidence. By using our website (“Site”), you accept and agree to the practices this Privacy Policy describes.

Information We Collect

When you use our Site, we may collect and use personal information about you, as well as other information. “Personal Information” includes your name, address, email address, credit card number, and other similar information that can be used to identify you. More specifically, when you use our Site, we may collect the following information:

• Details of your visits to our Site and the resources that you access, including, but not limited to, traffic data, location data, weblogs and other communication data, including your IP address, browser type, the date and time you accessed or left the Site, and which pages you viewed. Some parts of our Site use cookies, pixel tags (also known as “web beacons”), and other technologies to collect this information about your general internet usage. See the section below called “How We Use Cookies and Pixel Tags” to learn more.

• Information that you provide directly to us by filling in forms on our Site, including your name, email address, street address, telephone number, or other information.

• Information provided to us when you communicate with us for any reason, including information you provide in emails you send us, or submissions you may make.

How We Use Cookies and Pixel Tags A “cookie” is a small computer file that is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognize your browser. Cookies may store user preferences and other information. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent. Keep in mind, however, that some website features or services may not function properly without cookies.

4871-3935-9143.32

A pixel tag is a type of technology placed on a website or within the body of an email for the purpose of tracking activity on websites, or when emails are opened or accessed, and is often used in combination with cookies.

While we use cookies and pixel tags, we do not track our users across websites or over time.

“Do Not Track” Requests

Our Site currently does not respond to “do not track” or similar signals.

Use of Your Information

We use the information we collect from you primarily to enable us to provide you with information about our work in the best possible manner. In addition, your information may be used for the following purposes:

• To provide you, including via your email address, with information relating to our organization;

• To provide you with updates regarding our projects; and

• To administer our Site, including by monitoring and analysing our Site traffic and usage patterns.

Security We use commercially suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect on our Site. These procedures include, but are not limited to, firewalls, encryption, intrusion detection, and Site monitoring. We also limit access to any Personal Information we receive to employees who need access to that information in order to do their jobs. However, no data protection procedures are entirely infallible. As a result, while we strive to protect your Personal Information, we cannot guarantee that it will be 100% secure. Your transmission of your data to our Site thus is done entirely at your own risk.

Sharing Your Information

We may share your Personal Information with trusted third parties or our affiliates to:

• Assist us in providing our products and services to you, including by acting on our behalf to deliver packages, send postal mail and email, remove repetitive information from lists, analyse data, provide marketing assistance, process credit card payments, and provide customer assistance; and

• Compile statistics and reports regarding our audience and the users of our Site.

4871-3935-9143.33

Such third parties have access to Personal Information as needed to perform their functions, but they are not allowed to use it for other purposes. We do not sell or rent Personal Information collected through our Site to anyone.

When you provide us with Personal Information we also may use and share your Personal Information to contact you, including via email, to thank you for providing your request, to conduct satisfaction surveys, or for other administrative purposes related to your request.

Other Circumstances: We may disclose your Personal Information to third parties if we are involved in a merger, acquisition, or sale of any or all of our business and/or our assets to a third party, or if we have a good faith belief that disclosure is necessary to:

• comply with applicable laws, regulations, legal process (such as a subpoena), or enforceable government request;

• enforce applicable Terms of Service, including investigation of potential violations of such Terms, or to detect, prevent, or otherwise address fraud, security, or technical issues; and

• protect against harm to the rights, property, or safety of Water for South Sudan, our users, or the public as required or permitted by law.

Third Party Websites and Social Media Features Our Site may contain links to other sites, including those of third parties or business partners. While we seek to link only to sites that share our high standards and respect for privacy, we cannot be responsible for the privacy practices other websites use. By accessing other third party websites or applications through our Site, you are consenting to the terms and privacy policies of those websites. It is possible that other parties may collect Personal Information about your online activities over time and across different web sites when you use our Site.

International Visitors

Our Site is hosted and operated in the United States (“US”) and elsewhere in the world. By using the Site, you are consenting to the transfer of your Personal Information to the US. If you are accessing our Site from outside the US, please be advised that US law may not offer the same privacy protections as the law of your jurisdiction.

Review and Correction of Your Information

You may review and edit the information we collected about you at any time by contacting us at the addresses below. If your information has been shared with a third party, as described elsewhere in this Privacy Policy, then that third party has received its own copy of your data. If you have been contacted by one of these third parties and wish to correct or delete your information, please contact them directly.

4871-3935-9143.34

California Privacy Rights

California law allows California residents to ask companies with whom they have an established business relationship to provide certain information about the companies’ sharing of Personal Information with third parties for direct marketing purposes. We do not share any California consumer Personal Information with third parties for marketing purposes without consent.

California users who wish to request further information about our compliance with this law or have questions or concerns about our privacy practices may contact us using the contact information set forth below.

Children’s Privacy

The Children’s Online Privacy Protection Act of 1998 and its rules (collectively, “COPPA”) require us to inform parents and legal guardians (as used in this section, “parents”) about our practices for collecting, using, and disclosing Personal Information from children under the age of 13 (“child” or “children”). It also requires us to obtain verifiable consent from a child’s parent for certain collection, use, and disclosure of the child’s Personal Information. This section only applies to the collection of information about children under the age of 13. Children can access many parts of the Site and its content and use many of its features without providing us with Personal Information. However, if a child contacts us, we may receive the following information: the child’s name, contact information, and any other information provided to us by the child. We do not ask for any specific information from your child.

If your child contacts us, we will respond to his/her request. We will not ask for any further Personal Information. If your child continues to contact us, we may ask for a parent’s contact information so that we can notify the parent of the child’s activity. However, we will not combine any Personal Information we receive with any other information we have collected from the child.

We do not share, sell, rent, or transfer children’s Personal Information. However, we may disclose children’s Personal Information:

• If we are required to do so by law or legal process, such as to comply with any court order or subpoena or to respond to any government or regulatory request.

• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of WFSS, our supporters or others, including to:

• protect the safety of a child;

• protect the safety and security of the Site; or

• enable us to take precautions against liability.

• To law enforcement agencies or for an investigation related to public safety.

4871-3935-9143.35

If we have collected any Personal Information about your child, you may, at any time, review the child’s Personal Information maintained by us, require us to correct or delete the Personal Information, and/or refuse to permit us from further collecting or using the child’s information. Please contact us at the information listed below in order to exercise this right.

European Union Visitors

For our website visitors residing in the European Economic Area (EEA), the General Data Protection Regulation (“GDPR”) may be applicable. The GDPR provides a framework for organizations to ensure protection of the Personal Information of European citizens and gives European citizens certain rights.

Legal Basis for Processing

If you are an individual located in the EEA, United Kingdom, or Switzerland, our legal basis for processing your Personal Information will depend on the Personal Information concerned and the specific context in which it is collected. However, we will normally collect or process Personal Information from you only where:

• We have your consent to do so; or

• We need the Personal Information to perform a contract with you (e.g. to deliver services).

In some cases, we may also have a legal obligation to process Personal Information from you or may need the Personal Information to protect your vital interest or those of another person. If we rely on your consent to process the Personal Information, you have the right to withdraw or decline your consent at any time in writing or as otherwise permitted. Please note that this does not affect the lawfulness of the processing based on consent before withdrawal, nor will it affect the processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.

Retention

We will retain your Personal Information for as long as is needed to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements, unless a longer retention period is required or permitted by law.

Rights to Access and Control Your Personal Information

Individuals residing in the European Economic Area, United Kingdom, and Switzerland have certain rights to access and control their Personal Information. These rights include:

• the right to be informed;

• the right of access;

• the right to rectification;

4871-3935-9143.36

• the right to erasure;

• the right to restrict processing;

• the right to data portability;

• the right to object; and

• rights in relation to automated decision making and profiling.

To make sure a request, please email us at info@waterforsouthsudan.org with subject line “data subject request.”

This Privacy Policy was last updated on February 28, 2024

We update the Privacy Policy from time to time, so please review it regularly. If we materially change our Privacy Policy, we will notify you by contacting you through your provided e-mail address or by posting a notice on our Site. Your continued use of the Site will be deemed your agreement that your information may be used in accordance with the new policy. If you do not agree with the changes, then you should stop using the Site and notify us that you do not want your information used in accordance with the changes.

Contacting Us

We welcome any questions, comments, or complaints you may have regarding this Privacy Policy. Please do not hesitate to contact us by email at info@waterforsouthsudan.org or by writing to: Water for South Sudan, Inc., PO Box 25551, Rochester, NY 14625, USA.