(as of December 30, 2003)

Thank you for visiting our web site and for reviewing our Privacy Policy. Our policy is clear:

We collect no information about you, other than information automatically collected and stored (see below), when you visit our web site unless you choose to provide that information to us.

Information Automatically Collected and Stored:

When you browse through any web site, certain personal information about you can be collected. We automatically collect and temporarily store the following information about your visit:

• the name of the domain you use to access the Internet (for example, aol.com, if you are using an American Online account, or stanford.edu, if you are connecting from Stanford University's domain);
• the date and time of your visit;
• the pages you visited; and
• the address of the web site you came from when you came to visit.

We use this information for statistical purposes and to help us make our site more useful to visitors. Unless it is specifically stated otherwise, no additional information will be collected about you.

Personally Provided Information:

You do not have to give us personal information to visit our web site. However, in order to place an order for merchandise, you will need to create an account and enter order information.

Personal Information Security:

Accounts and order information placed through our web site are protected by state-of-the-art 128-bit encryption. When you navigate by your browser into a secure portion of the web site, you will be initially confronted with the following popup window (or comparable):

This indicates that your browser has encountered a certificate that it does not recognize, which is the normal expected behavior when visiting our web site which uses a non-branded certificate. (There is no technical difference between a branded and non-branded certificate). After clicking the YES button, your brower will enter a secure mode visible by a lock indicator on the browser status line. Whenever this lock indicator appears you can be assured that all of your data is secure and protected by strong encrytion. For further information, consult http://www.openssl.org.

This notice is less likely to occur after we receive and install a branded certificate. If, however, you are running a browser older than Explorer 5.01 or Netscape 7, this warning could still occur.

Financial Transactions:

When a purchase is made from this or any other web site, payment information such as credit card number and card holder name are sent to trusted third-parties such as gateways and banks. All payment information is transmitted using state-of-the-art encryption.

This web site supports payments by electronic check. Information required on electronic checks is no more than that which appears on every paper check you sign.

Disclosure:

Whitewater Hill does not disclose, give, sell or transfer any personal information about our visitors, unless required for law enforcement or statute.

Intrusion Detection:

For site security purposes and to ensure that this service remains available to all users, we employ software programs to monitor traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. In the event of authorized law enforcement investigations, and pursuant to any required legal process, information from these sources may be used to help identify an individual.