Privacy Policy

1. Who we are

Omen Services is a service offered by Omen IT Solutions, a trade name of Walter White Enterprises, LLC, a Virginia limited liability company headquartered in Culpeper, Virginia. In this policy, "Omen Services", "we", "us" and "our" mean Walter White Enterprises, LLC doing business as Omen IT Solutions and Omen Services.

This policy covers nonprofit.omen.services, the grant application on that site, the contact form on that site, and the email we exchange with you about either one. It is written for the person filling in the application, and for the board member or grant professional reading it over that person's shoulder.

2. What the grant application collects

The application asks for six categories of information. Every field exists to answer one question: whether we can build a useful website for your organization. Nothing is collected for marketing.

2.1 Organization identity

• Legal name of the organization, and the name it operates under if the two differ.
• Employer Identification Number (EIN). We use it to confirm the organization is real and in good standing, and to look a determined organization up in the IRS Tax Exempt Organization Search.
• Tax status. Which section of the code you file under, or the name of your fiscal sponsor if you are fiscally sponsored.
• If your 501(c) application is still pending, which form you filed and roughly when you filed it. Both answers are optional, and the two fields appear only if you choose that status.
• The year the organization was founded. This is optional and an approximate year is fine.

2.2 Contact details

• The name and job title of the person applying.
• A work email address.
• A phone number, so we can reach you if the email bounces or a question needs a real conversation. This one is optional.
• Whether you can enter into agreements on the organization's behalf. Answering no changes nothing about the review.
• How you would rather be reached, if you want to tell us. This is optional.

2.3 Mission and program descriptions

• What your organization does, in your own words.
• The programs or services the website would need to describe.
• What you need the site to accomplish, such as recruiting volunteers, taking donations or publishing hours.
• Who you serve, described as a group. A sentence or two about the population your programs are for.
• The geographic area you serve, such as a county, a city, a region or nationwide.
• Roughly how many people you served in the last 12 months. One number, optional, an estimate is fine, and blank is a normal answer.

We do not ask for personal data about the people your organization serves. No names, no case details, no records, no demographic detail about any individual, and no identifying information of any kind. The two fields above are a general description of the group and a single approximate total. Both are facts about your organization's work, not information about any person, and there is no field anywhere in the application for a client list, a case file or a donor list. The application says the same thing at the point where it asks, and if identifying detail arrives anyway we delete it rather than store it.

2.4 Scale and capacity

• Annual operating budget, collected as a range. You pick a band, for example "$50,000 to $250,000". We never ask for an exact figure, and there is no field in which to enter one. Eligibility turns on being under $1,000,000, and a range answers that question completely.
• Roughly how many paid staff and volunteers you have.
• Whether anyone is paid to do marketing or communications. "Nobody" is a common answer and it changes how the site is built, not whether you qualify.
• Who will be responsible for sending us content and reviewing the build, and who will maintain the site afterward.

2.5 Current web presence

• Your current website address, if you have one. There is a checkbox for having no website at all, and checking it switches the field off.
• The platform the current site runs on, if you know it, and who controls the domain name. "No idea" and "unknown" are options on both.
• What is broken or missing on the site you have today.
• Your social media links, if you want to give them.
• Which of a short list of things you already have: logo files, a brand guide, photos of your work, and photos of people you hold signed releases for.

We never ask for payment or banking information. There is no field anywhere in the application or the contact form for a bank account, a card number, a merchant account number or a login of any kind, and we do not ask which donation processor you use until there is a site to connect one to. If you are awarded and we connect a donate button, we connect the processor you already have, and we do it without ever holding your credentials.

2.6 Fit and consent

• How you heard about the program.
• A required confirmation of your legal status. Before you can submit, you confirm that your organization holds at least one of three things: an IRS determination letter, a 501(c) application you have filed and are awaiting a decision on, or proof that you are registered as a business entity with your state. We collect the confirmation, not the document. If we select your application we ask for the document by email, and an award is conditional on producing it.
• Links to supporting documents, if you have any. This field is optional. There is no upload control anywhere on this site, so no file ever reaches us through the website.
• Anything time sensitive coming up, such as an event or a season. This is optional.
• Confirmations that your answers are accurate, that you have authority to submit the application or are coordinating with someone who does, that you understand applying does not guarantee selection, and that you have read this policy and the Program Terms.
• Whether you agree to be named publicly as an organization we built for. This is a yes or no question and you have to answer it. Either answer is acceptable. Saying no does not affect the decision on your application. If you say yes, you can withdraw permission later in writing and we will take your name down. The detail is in section 12 of the Program Terms.
• Your typed name as a signature, and the date you submit. The date is filled in for you.

3. What the contact form collects

The contact form is shorter than the application and separate from it. It collects your name, your email address, an optional organization name, a choice between email and a phone call for how you would rather be reached, and the message you write. That is the whole form. It does not ask for a phone number: if you choose a phone call, you put the number in your message, so we only ever hold a number you decided to give us.

Messages sent through the contact form are answered by email. They are not added to an application record, and asking a question through the form does not start an application.

4. Why we collect it

Two purposes, and no others.

• To evaluate grant applications. Eligibility, fit, scope of the build and the timeline all come out of the answers on the form.
• To respond to inquiries. If you write to us, we use your contact details to write back.

We do not use your information to build advertising audiences, to score you as a sales lead, or to enrich a profile of you from other sources. We do not buy data about applicants from anyone.

5. Who reads your application

Applications are reviewed by Omen Services personnel only. There is no outside review panel, no volunteer committee, no partner organization and no funder who sees your submission. Nobody outside Omen Services reads what you wrote.

6. Sharing, and the fact that nothing is sold

We never sell your information. We never rent it, trade it, or share it for anyone else's marketing. There is no exception to that sentence and no consent checkbox anywhere on this site that would create one.

One outside party handles your submission: the form delivery service that carries the form from this website to our inbox. A static website cannot deliver email by itself, so a relay service performs that single step. It processes the submission only to deliver it to us.

Beyond that, we may disclose information if the law requires it, in response to valid legal process, or where it is necessary to protect someone's safety. If that ever happens we will tell you unless we are legally prohibited from doing so.

7. The draft saved in your own browser

Plain English first. The application is long. If you close the tab halfway through, your answers are still there when you come back, because your browser kept them. Your browser kept them locally. They were not sent to us.

Here is exactly what happens.

• As you fill in the application, your answers are written to localStorage, a storage area inside your own browser on your own device.
• That draft never leaves your device until you press submit. Omen Services cannot see it, cannot retrieve it, and does not know it exists. Nothing is transmitted anywhere while you are typing.
• When you return to the application, the page offers to restore the draft so you do not start over.
• The application carries a "Start over" control. Pressing it deletes the saved draft from your browser immediately.
• Clearing your browser data clears the draft too. Clearing site data, clearing storage for this site, or using your browser's private or incognito mode all have the same effect: the draft is gone and cannot be recovered by you or by us.
• Once you press submit, the completed application is transmitted to us and becomes an application record, covered by the retention rules in section 9. Submitting also clears the draft from your browser.
• The contact form does not save a draft. Only the grant application does. An unsent message can be more sensitive than an application, so nothing you type into the contact form is written to your browser at all.

If you are filling in the application on a shared or public computer, press "Start over" when you are finished, or use a private browsing window from the start. A draft left on a shared machine is readable by the next person who uses it.

8. Cookies and local storage

Plain English first. This site stores two things in your browser: whether you dismissed the notice at the bottom of the screen, and your application draft. That is the complete list.

Specifically, this site has:

• No advertising cookies.
• No tracking cookies.
• No third-party analytics. No Google Analytics, no session replay, no heatmaps.
• No tracking pixels of any kind, from any advertising network.
• No fingerprinting, and no cross-site profiling.

What it does store is exactly two things: the fact that you dismissed the notice at the bottom of the page, and the application draft described in section 7. Both live in your browser's local storage. Neither is transmitted to us and neither is readable by anyone else's website.

This is a deliberate choice, not an oversight. This program serves organizations that carry their own privacy obligations to donors, clients, patients and volunteers. Staff at those organizations should be able to read a grant page without their browsing being handed to an advertising network. Building the site without trackers is cheaper than defending a tracker later, and it is the correct default for this audience.

Your web browser and your device may store other things on their own initiative, such as cache files. Those are under your control through your browser settings.

9. How long we keep information, and how to have it deleted

Plain English first. Declined applications are deleted within 12 months. You can ask us to delete yours sooner, and we will.

9.1 If we declined your application and you want your record deleted

Email info@omen.services with "Delete my application" in the subject line, from the address you applied with, or tell us in the message which organization applied so we can find the record.

We confirm the deletion by email within 30 days. You do not have to give a reason, we will not ask why, and we will not send a follow-up trying to talk you out of it. Once the record is deleted we cannot restore it, so if you reapply later you will fill the form in again.

Awarded organizations can also request deletion. We keep only what tax and accounting law requires us to keep, and we will tell you specifically what that is when you ask.

10. Your rights under the Virginia Consumer Data Protection Act

Plain English first. If you live in Virginia, the law gives you the right to see what we hold, correct it, get a copy, and have it deleted. Email us and we handle it.

The Virginia Consumer Data Protection Act gives Virginia residents the right to:

• Confirm whether we are processing your personal data, and access it.
• Correct inaccuracies in it.
• Delete personal data we hold about you.
• Obtain a copy in a portable format.
• Opt out of targeted advertising, of the sale of personal data, and of profiling used for decisions with legal or similarly significant effects. We do none of these three things, so there is nothing here to opt out of, but the right exists and we will confirm that in writing if you ask.
• Appeal a decision we make on any of the above.

To exercise a right, email info@omen.services with "Privacy Request" in the subject line. We respond within 45 days. If we decline a request, we will explain why, and you may appeal by replying to that response. If your appeal is denied you may contact the Office of the Attorney General of Virginia.

Residents of other states with comparable privacy laws may have similar rights. Use the same email address and we will handle the request the same way rather than arguing about which statute applies.

11. Security

The site is served over HTTPS on every page, so what you type into the application is encrypted in transit. Access to application records is limited to Omen Services personnel who need it. We do not store payment card numbers, banking details or processor credentials, because we never ask for them.

No system is perfectly secure and we will not claim otherwise. If we become aware of a breach affecting your information, we will notify you as required by law.

12. Links to other websites

This site links to omen.services, and may link to organizations we have built for, to donation processors, or to public resources such as the IRS. Once you follow a link you are on someone else's website, under their privacy policy, and this one no longer applies. We do not control what other sites collect and we do not receive information about what you do there.

13. Children's privacy

This site is aimed at adults working at nonprofit organizations. It is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has submitted information through a form on this site, email info@omen.services and we will delete it.

14. Changes to this policy

We may update this policy if the program changes or the law changes. When we do, we revise the effective date at the top of this page. If a change materially affects what we collect or who sees it, we will post a notice on this page for at least 30 days before it takes effect.

Applications already submitted are handled under the policy that was in effect when you submitted them, unless the newer policy is more protective of you.

15. Contact

Questions about this policy, or a request about your information:

• Email: info@omen.services
• Phone: (540) 792-3635
• Mail: Omen IT Solutions, PO Box 14, Culpeper, VA 22701, United States

See also the Terms of Service and the Program Terms.