Privacy Policy

Inventory from last privacy scan and plugin map: 2026-08-21 12:09:10

Cookies observed on this site

Names, services, categories, and purposes from the latest scan. Entries are enriched with the local vendor catalog when a match is known.

Browser storage keys

Scripts, pixels, beacons, and embeds

Tracking can occur without cookies. These technologies were observed during scanning.

WordPress plugins that may process data

Active plugins mapped in our local catalog, including forms, builders, analytics, security, and commerce tools. Unmapped plugins may still process data. Review your install inventory with counsel.

Where data may go

Depending on the tools enabled and your consent choices, information may be processed by the providers below or their subprocessors. Each provider applies its own privacy terms.

Google Analytics

This website may use Google Analytics to understand how visitors find and use the site. That can include pages viewed, device and browser details, approximate location, referrers, and events. Google may use cookies or similar technologies. We do not intentionally send names, email addresses, phone numbers, or payment card numbers to Google Analytics. Where required by law, Analytics loads only after appropriate consent.

Google Tag Manager

Google Tag Manager may be used to manage tags and integrations for analytics, ads, and consent signals. Data collected depends on the tags configured. Where required, tags that load analytics or advertising should respect consent choices before firing.

Microsoft Clarity

We partner with Microsoft Clarity to understand how you use and interact with this website. Clarity may capture behavioral metrics, heatmaps, clicks, scrolls, and session replay, and may collect device and browser information and approximate location, using first- and third-party cookies and similar technologies. We use this information to improve products and services, optimize the site, support fraud and security monitoring, and (where enabled) advertising or Microsoft Advertising integrations.

Where GDPR-style rules or our jurisdiction pack require consent, Clarity loads only after you accept Analytics (or an equivalent category). It does not run from mere site use before that choice. You can change or withdraw consent anytime via Cookie Settings.

For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Cloudflare

Cloudflare may process technical information such as IP addresses, request headers, URLs, security events, bot scores, and traffic logs. This helps deliver, cache, and protect the site. Some Cloudflare security cookies may be treated as strictly necessary for availability and abuse prevention.

Meta and Facebook technologies

Meta Pixel or related tools may measure conversions, build audiences, or support advertising. These tools typically require marketing consent where GDPR-style rules apply. You may also have opt-out rights under US state privacy laws for sale or sharing.

Forms and user submissions

If you submit a form, request information, book an appointment, place an order, or contact us, we may use that information to respond, fulfill the request, prevent spam, and keep records. Form data may be processed by form plugins, email or SMTP providers, CRM tools, spam protection, and hosting providers.

Payments, shipping, and email

If this site offers purchases, donations, subscriptions, or bookings, payment details are typically handled by third-party payment processors. We do not intentionally store full card numbers unless a clearly disclosed compliant system requires it. Shipping or fulfillment data may be shared with carriers and logistics tools. Marketing emails are sent only where allowed. You can unsubscribe from marketing and still receive transactional messages.

How information is shared

We may share information with service providers such as hosting, CDN, analytics, advertising, payments, email, CRM, security, and developers as needed to operate the site, or when required by law. We do not sell personal information for money in the everyday sense. Some privacy laws define “sale” or “sharing” broadly to include certain advertising or cross-context behavioral advertising. See California rights below.

International transfers

Information may be processed or stored outside your state, province, or country, including by US-based providers. Where required, transfers may rely on adequacy decisions, standard contractual clauses, or other lawful mechanisms. Review each provider’s documentation for details.

Data retention

We retain information only as long as reasonably necessary for the purposes described here, unless a longer period is required or allowed by law. Configured operational retention for certain privacy records on this site is approximately 365 days. Other systems such as orders, security logs, and analytics may use different periods.

Security

We use reasonable technical and organizational measures such as TLS, access controls, firewalls, malware scanning, and monitoring. No method of transmission or storage is completely secure.

Account login activity

For security, login attempts and related account-security events (such as password policy checks) may be logged. This helps protect accounts against unauthorized access.

Password-policy and login-security tools (for example plugins that enforce password rotation or record sign-in history) may retain those events separately from cookie consent logs. Staff and customers with accounts should expect this monitoring as part of protecting the site.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing. You may also withdraw consent, request portability, opt out of certain advertising or sale or sharing, limit use of sensitive personal information, and lodge a complaint with a supervisory authority.

Submit a privacy or data rights request

California privacy rights (CCPA / CPRA). Do Not Sell or Share

California residents may have the right to know what personal information is collected, used, disclosed, sold, or shared. They may also request deletion or correction, opt out of sale or sharing, limit use of sensitive personal information, and be free from discrimination for exercising these rights.

Categories commonly involved on websites like this include identifiers such as name and email, commercial information such as orders, internet activity such as browsing and interactions, and approximate geolocation. Purposes include providing services, security, analytics, and marketing where allowed.

Do Not Sell or Share. To opt out of sale or sharing of personal information as defined under California law and similar US state laws, use the link below when available, or email us. Cookie Settings alone may not cover every advertising or sharing activity covered by those laws.

Do Not Sell or Share My Personal Information

Other US state privacy laws

Residents of states such as Colorado, Connecticut, Virginia, Utah, and others may have similar rights to access, delete, correct, or opt out of targeted advertising, sale, or profiling. Use the contact methods or rights forms on this site to submit a request. We may need to verify your identity.

European, UK, Swiss, and similar rights

Where GDPR or UK GDPR applies, you may have the rights listed above, including withdrawing consent for optional tracking. You may also contact your local data protection authority.

Brazil, Canada, and other regions

Other regions grant access, correction, deletion, and consent-related rights. This website’s jurisdiction packs and consent banner help support those workflows technically. Local counsel should confirm legal requirements for your organization.

Sensitive information and children

Do not submit sensitive personal information through this website unless specifically requested and necessary. This website is not directed to children under the age required by applicable law. We do not knowingly collect personal information from children without appropriate parental consent.

Automated processing and breaches

We may use automated tools for analytics, spam and fraud detection, security, and performance. We do not intentionally use automated decision-making that produces legal or similarly significant effects without appropriate safeguards. If a personal data breach occurs, we will investigate and notify individuals or authorities where required by law.

Embedded content and links

Embedded videos, maps, social posts, or other third-party content may collect data as if you visited those sites directly. Review third-party privacy policies before interacting with embeds or external links.

Changes

We may update this Privacy Policy when tools, laws, or business practices change. The updated version will be posted on this page with a revised date.

Contact

White Horse Graphics

Email: whgraphics@windstream.net

Phone: 570-584-0110

1000 Bartlow Road Muncy, PA 17756

Cookie Policy

Generated by Universal Consent and Privacy Framework as a technical aid. Not a compliance certification.