Legal
Privacy Policy
Effective March 1, 2026
White Oak Foundation (“we,” “us,” or “the Foundation”) respects your privacy. This policy describes what information we collect when you visit whiteoakfoundation.org (the “Site”), how we use it, and the choices you have. White Oak Foundation is an approved 501(c)(3) public charity, EIN 41-4830734.
Information we collect
We collect information in two ways: information you give us directly and information collected automatically when you use the Site.
Information you provide
- Application submissions. When a church applies for services through our /apply form, we collect the church name, contact name, email, phone (optional), city, state, average weekly attendance, current website (optional), the services requested, and the story you share about your congregation.
- Donations. When you donate, payment information (card details, name, billing address, email) is collected and processed by Stripe. We never see or store your full card number. We receive a record of the transaction (amount, frequency, donor name, donor email) for receipting and reporting purposes.
- Direct communications. If you email us, we keep that correspondence so we can respond and follow up.
Information collected automatically
- Google Analytics. We use Google Analytics 4 to understand how visitors use the Site. GA4 collects IP address (truncated), device and browser information, pages viewed, time on page, and referral source. We use this data in aggregate to improve the Site. You can opt out using the Google Analytics opt-out browser add-on.
- Server logs. Our hosting provider (Vercel) logs basic request data (IP, timestamp, requested URL) for security and operational purposes.
How we use information
- To review applications and contact churches about their requests.
- To process and acknowledge donations, including issuing receipts.
- To send transactional emails (donation confirmations, application follow-ups).
- To improve the Site and our programs based on aggregate usage data.
- To comply with legal, tax, and reporting obligations applicable to 501(c)(3) organizations.
We do not sell, rent, or trade your personal information. We do not share your information with advertisers or marketing companies.
Service providers we use
We share information only with the service providers we need to operate the Foundation:
- Stripe — payment processing. Stripe Privacy Policy
- Resend — transactional email delivery. Resend Privacy Policy
- Google Analytics (Google LLC) — site analytics. Google Privacy Policy
- Vercel — website hosting. Vercel Privacy Policy
Cookies
The Site uses cookies set by Google Analytics for measurement. Stripe sets cookies on its checkout pages for fraud prevention and payment processing. You can control or block cookies in your browser settings; the Site will still function with cookies disabled, though some analytics will be lost.
Data retention
We retain donation records for as long as required by tax and accounting rules (generally 7 years). Application submissions are retained for as long as needed to provide services and for internal program records. You may request deletion of your personal information by emailing us; we will comply unless we are legally required to retain it.
Your rights
You have the right to access, correct, or request deletion of the personal information we hold about you. To exercise these rights, email zach@whiteoakmedia.io. If you are a California or EU/UK resident, you have additional rights under CCPA, GDPR, or UK GDPR; we will honor those rights in accordance with applicable law.
Children
The Site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.
Security
We take reasonable technical and organizational measures to protect your information. All data is transmitted over HTTPS, payment data is handled by PCI-compliant providers, and access to our systems is limited. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
Changes to this policy
We may update this policy from time to time. Material changes will be announced on this page with a new effective date.
Contact us
Questions about this policy or our data practices? Email zach@whiteoakmedia.io or visit our contact page.