Privacy Policy

Last updated: 29 July 2026

Where the Way Leads Foundation Fund (“Where the Way Leads,” “WTWL,” “we,” “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit wtwl.org, contact us, subscribe to our communications, make a donation or otherwise interact with us.

We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”) and, where applicable, the European Union General Data Protection Regulation (“GDPR”) and other relevant data protection laws.

1. Who We Are

Where the Way Leads Foundation Fund supports women-led and survivor-centred organisations working in fragile, conflict-affected and transitional settings.

For the purposes of applicable data protection laws, Where the Way Leads is responsible for deciding how and why personal data collected through this website is used. Where the GDPR applies, we act as the data controller unless otherwise stated.

Contact details

Where the Way Leads Foundation Fund
Website: wtwl.org
Email: connect@wtwl.org
Registered address: [insert registered address]

Data Protection Officer or Privacy Contact:
Where the Way Leads Foundation Fund
Email: connect@wtwl.org

2. Personal Data We Collect

Depending on how you use our website or interact with us, we may collect:

  • Your name, email address, telephone number and organisation.

  • Information you provide through contact forms, enquiries, applications, surveys or correspondence.

  • Newsletter and communications preferences.

  • Donation information, such as your name, contact details, donation amount and transaction reference.

  • Information relating to partnerships, grantmaking, employment, volunteering or other engagement with our work.

  • Technical information such as your IP address, browser type, device information, general location, referring website and information about how you use our website.

  • Cookie identifiers and website analytics information, where permitted.

  • Any other personal data you voluntarily provide to us.

Please do not submit sensitive personal data through the website unless we have specifically requested it and provided appropriate instructions.

3. How We Collect Personal Data

We may collect personal data:

  • Directly from you when you complete a form, contact us, subscribe to updates, make a donation or otherwise communicate with us.

  • Automatically through cookies and similar technologies when you use our website.

  • From service providers that support our website, communications, fundraising and operations.

  • From publicly available sources or professional contacts, where permitted by law.

  • From partner organisations, philanthropic partners or payment processors where necessary to manage a donation, partnership or other relationship.

4. How We Use Personal Data

We may use personal data to:

  • Respond to enquiries and communicate with you.

  • Provide information about our work, programmes, events and impact.

  • Manage newsletter subscriptions and other communications.

  • Process, acknowledge and maintain records of donations.

  • Manage relationships with donors, partners, grantees, applicants, volunteers and other stakeholders.

  • Review grant, partnership, employment or volunteer enquiries and applications.

  • Operate, maintain, secure and improve our website.

  • Understand how visitors use our website.

  • Prevent fraud, misuse, security incidents and other unlawful activity.

  • Meet legal, regulatory, financial, reporting and governance requirements.

  • Establish, exercise or defend legal claims.

  • Carry out any other purpose explained to you when your personal data is collected.

We will only collect, use or disclose personal data for purposes that are reasonable and appropriate in the circumstances.

5. Legal Bases for Processing

Under the Singapore PDPA, we generally collect, use and disclose personal data with your consent or where another legal exception applies. You may withdraw your consent, subject to legal or contractual restrictions and reasonable notice.

Where the GDPR applies, we process personal data using one or more of the following legal bases:

  • Consent: You have given us permission, such as when subscribing to a newsletter or accepting non-essential cookies.

  • Legitimate interests: Processing is reasonably necessary to operate and protect our organisation, communicate with stakeholders, improve our website or advance our charitable and philanthropic objectives, provided that these interests do not override your rights.

  • Contractual necessity: Processing is necessary to take steps at your request or to perform an agreement with you.

  • Legal obligation: Processing is necessary to comply with applicable laws and regulatory requirements.

  • Protection of vital interests: Processing is necessary to protect someone’s life or physical safety in exceptional circumstances.

Where we rely on consent, you may withdraw it at any time without affecting processing that took place before the withdrawal.

6. Donations and Payment Information

Donations may be administered or processed through a philanthropic partner, fiscal sponsor, payment platform, bank or other third-party service provider.

Payment card and banking information is generally collected directly by the relevant payment processor and is subject to that provider’s privacy policy. We may receive information such as your name, contact details, donation amount, transaction date and transaction reference for acknowledgement, reporting and recordkeeping purposes.

We do not normally store complete payment card details on our own systems.

7. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

  • Ensure the website functions correctly.

  • Remember your preferences.

  • Maintain website security.

  • Understand website traffic and performance.

  • Improve the content and visitor experience.

Essential cookies may be used because they are necessary for the website to operate. Where required by law, analytics, advertising or other non-essential cookies will only be activated after you provide consent.

You can accept, reject or change your choices through the cookie banner or the Cookie Settings link on our website. You may also control cookies through your browser settings. Disabling certain cookies may affect how the website functions.

Further information may be provided in a separate Cookie Policy or within our cookie settings panel.

8. How We Share Personal Data

We may share personal data with:

  • Website hosting, technology, analytics and cybersecurity providers.

  • Email, newsletter and communications platforms.

  • Philanthropic partners, donation platforms and payment processors.

  • Professional advisers, including legal, financial, accounting and audit advisers.

  • Consultants, contractors and other service providers supporting our activities.

  • Partner organisations where necessary for a programme, donation, grant or collaboration.

  • Government authorities, regulators, courts or law-enforcement bodies where required by law.

  • Another organisation in connection with a restructuring, transfer or continuation of our operations, subject to appropriate safeguards.

We require service providers handling personal data on our behalf to protect it and use it only for authorised purposes.

We do not sell or rent personal data to third parties for their independent marketing purposes.

9. International Transfers

Because our work and service providers may operate internationally, personal data may be accessed, stored or processed outside Singapore or outside the country in which you live.

When transferring personal data internationally, we take reasonable steps to ensure that it receives a standard of protection comparable to that required under the Singapore PDPA.

Where the GDPR applies, we use an approved transfer mechanism where required, such as an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to meet legal, accounting, audit, reporting, donor-management and recordkeeping requirements.

Retention periods may vary depending on:

  • The type and sensitivity of the information.

  • The purpose for which it was collected.

  • Whether we have an ongoing relationship with you.

  • Applicable legal and regulatory requirements.

  • The need to establish, exercise or defend legal claims.

When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

11. Data Security

We use reasonable administrative, technical and organisational safeguards to protect personal data against accidental loss, misuse, unauthorised access, disclosure, alteration or destruction.

However, no website, email system or electronic transmission is completely secure. You should take appropriate care when sharing information online and should avoid sending highly sensitive information through ordinary email or website forms.

12. Your Rights

Depending on where you live and the laws that apply, you may have the right to:

  • Ask whether we hold personal data about you.

  • Request access to your personal data.

  • Ask us to correct inaccurate or incomplete personal data.

  • Withdraw consent to certain processing.

  • Request deletion of your personal data.

  • Request restriction of processing.

  • Object to processing based on legitimate interests.

  • Object to direct marketing.

  • Request a portable copy of certain personal data.

  • Ask about the ways in which your personal data has been used or disclosed.

  • Lodge a complaint with an appropriate data protection authority.

  • Request that certain decisions significantly affecting you are not made solely through automated processing.

These rights are subject to applicable legal limitations and exceptions. We may need to verify your identity before responding to a request.

To exercise your rights, contact us at connect@wtwl.org. We will respond within the period required by applicable law.

You may also raise a concern with the Singapore Personal Data Protection Commission or, where the GDPR applies, the data protection supervisory authority in the country where you live or work.

13. Communications and Marketing

We may send you newsletters or updates where you have requested them or where otherwise permitted by law.

You can unsubscribe at any time by:

  • Selecting the unsubscribe link in an email.

  • Updating your communication preferences.

  • Contacting us at connect@wtwl.org.

Even after you unsubscribe from promotional communications, we may still send necessary administrative messages relating to an existing donation, application, enquiry or relationship.

14. Children’s Privacy

Our website is intended for a general audience and is not directed at children under the age of 16.

We do not knowingly collect personal data directly from children through the website without appropriate consent. If you believe that a child has provided personal data to us without the necessary permission, please contact us so that we can review and, where appropriate, delete the information.

15. Third-Party Websites

Our website may contain links to third-party websites, donation platforms or social media services.

We do not control these third parties and are not responsible for their privacy practices. We encourage you to review the privacy policy of each external website or service before providing personal data.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our activities, website, service providers or legal obligations.

The updated version will be posted on this page with a revised “Last updated” date. Material changes may also be communicated through the website or another appropriate method.

17. Contact Us

Questions, requests or concerns about this Privacy Policy or our handling of personal data should be directed to:

Data Protection Officer / Privacy Contact
Where the Way Leads Foundation Fund
Email: connect@wtwl.org
Website: wtwl.org
Address: [insert registered or correspondence address]