TERMS OF SERVICE

Whitefort Risk Services, LLC Effective Date: April 1, 2026 | Last Revised: April 2026

I. Agreement to Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Client," "you," or "your") and Whitefort Risk Services, LLC, an Iowa limited liability company ("Whitefort," "we," "us," or "our"). By accessing our website at whitefortrisk.com, submitting an intake request, purchasing an Intelligence Product, or enrolling in a membership subscription, you agree to be bound by these Terms in their entirety.

If you are accessing or purchasing on behalf of a business, organization, or other legal entity, you represent and warrant that you have authority to bind that entity to these Terms, and all references to "you" shall refer to that entity.

If you do not agree to these Terms, do not use our website or purchase our services.

II. Description of Services

Whitefort Risk Services, LLC provides personalized travel risk intelligence products and subscription-based membership services, including but not limited to:

• Intelligence Products (Situational Brief, Operational Assessment, Executive Briefing) — analyst-reviewed, destination-specific risk assessments prepared on a per-order basis;
• Associate Membership — a free membership tier providing access to general travel risk content and updates; and
• Full Spectrum Membership — a paid subscription providing access to the Whitefort Resource Library, member discounts on Intelligence Products, and other member benefits as described on our website.

Service descriptions, pricing, and included deliverables are governed by the product descriptions published on our website at the time of purchase. Whitefort reserves the right to modify, discontinue, or update any service offering at any time, with changes taking effect upon publication to the website.

III. Eligibility

You must be at least 18 years of age to purchase services or establish a membership with Whitefort Risk Services, LLC. By using our services, you represent and warrant that you meet this requirement and that all information you provide is accurate, current, and complete.

IV. Orders and Payment

A. Intelligence Products. Intelligence Products are one-time purchases initiated by completing our client intake form and submitting payment through our third-party payment processor, Stripe. All prices are listed in U.S. dollars. Payment is due in full at the time of order submission. Whitefort will begin production only after payment has been confirmed.

B. Membership Subscriptions. Full Spectrum Membership is billed on a recurring basis (monthly or annual) through Stripe. By enrolling, you authorize Whitefort to charge your payment method on a recurring basis until you cancel. You may cancel your subscription at any time; cancellation will take effect at the end of the current billing period, and no partial-period refunds will be issued.

C. Accuracy of Information. The quality and accuracy of Intelligence Products depend materially on the accuracy and completeness of the information you provide at intake. Whitefort assumes no responsibility for deficiencies in a deliverable attributable to incomplete, inaccurate, or misleading information submitted by the Client.

D. Taxes. You are responsible for all applicable taxes, duties, or levies imposed on services purchased from Whitefort, to the extent required by applicable law.

V. Refund Policy

All sales are final. Whitefort does not offer refunds on Intelligence Products or membership subscriptions under any circumstances, including but not limited to: dissatisfaction with the content or conclusions of a delivered product; a change in travel plans after order submission; or failure to read or use a delivered product.

If Whitefort is unable to fulfill an order for reasons within our control, we will provide a full refund as our sole remedy. In all other cases, no refunds will be issued.

Whitefort reserves the right to modify this refund policy in the future. Any change will apply only to orders placed after the revised policy takes effect.

VI. Delivery and Turnaround

Whitefort targets delivery of Intelligence Products within 48 to 72 hours of order confirmation and payment receipt. This timeframe is an estimate, not a guarantee. Actual delivery times may vary depending on destination complexity, order volume, and other operational factors.

Deliverables are transmitted electronically to the email address provided at intake. Whitefort is not responsible for delivery failures attributable to inaccurate contact information provided by the Client.

Whitefort does not offer post-delivery condition monitoring or proactive change notifications on individual Intelligence Product orders. Conditions at a destination may change after delivery; subscribers to the Full Spectrum Membership may access updated regional intelligence through their subscription.

VII. Intellectual Property and Permitted Use

A. Ownership. All deliverables produced by Whitefort Risk Services, LLC — including Intelligence Products, Resource Library documents, website content, and analytical frameworks — are the sole intellectual property of Whitefort Risk Services, LLC and are protected by applicable copyright and intellectual property law.

B. License to Client. Upon delivery of an Intelligence Product, Whitefort grants the Client a limited, non-exclusive, non-transferable license to use the deliverable for the Client's own internal purposes, including distribution to the Client's own employees or personnel in connection with the specific travel for which the product was ordered.

C. Resource Library. Full Spectrum Members are granted a limited, non-exclusive license to access and use Resource Library materials for internal purposes, including use as internal training materials for the member organization's own employees or personnel. This license does not extend to external distribution, resale, or sublicensing.

D. Prohibited Uses. Clients and members may not: (i) resell, redistribute, or publicly disclose any Whitefort deliverable outside their own organization; (ii) reproduce or publish any Whitefort content in any external medium without prior written consent; (iii) use any Whitefort deliverable to develop a competing product or service; or (iv) remove, alter, or obscure any proprietary notices contained in a deliverable.

VIII. Disclaimer of Warranties

WHITEFORT RISK SERVICES, LLC PROVIDES ALL SERVICES, INTELLIGENCE PRODUCTS, AND CONTENT ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, WHITEFORT DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, COMPLETENESS, NON-INFRINGEMENT, AND UNINTERRUPTED OR ERROR-FREE SERVICE.

Travel risk conditions are dynamic and subject to rapid change. Whitefort makes no representation or warranty that any Intelligence Product will reflect conditions as they exist at the time of travel, and expressly disclaims any obligation to update a delivered product after the date of delivery.

Nothing in these Terms shall be construed as a guarantee of personal safety, security, or the absence of harm. Clients retain full personal responsibility for their own safety decisions.

IX. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, WHITEFORT RISK SERVICES, LLC, ITS MEMBERS, MANAGERS, EMPLOYEES, AGENTS, AND CONTRACTORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATED TO YOUR USE OF OUR SERVICES OR DELIVERABLES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL WHITEFORT'S TOTAL LIABILITY TO YOU FOR ANY CLAIM ARISING OUT OF OR RELATING TO THESE TERMS OR YOUR USE OF OUR SERVICES EXCEED THE TOTAL AMOUNT PAID BY YOU TO WHITEFORT IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

Some jurisdictions do not allow the exclusion or limitation of certain damages. In such jurisdictions, Whitefort's liability shall be limited to the maximum extent permitted by law.

X. Indemnification

You agree to indemnify, defend, and hold harmless Whitefort Risk Services, LLC and its members, managers, employees, agents, and contractors from and against any claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to: (a) your use of our services or deliverables; (b) your breach of these Terms; (c) your violation of any applicable law or third-party right; or (d) inaccurate or incomplete information provided by you at intake.

XI. Dispute Resolution

A. Informal Resolution. Before initiating any formal dispute process, you agree to first contact Whitefort in writing at contact@whitefortrisk.com describing the nature of the dispute and the relief sought. Whitefort will make a good-faith effort to resolve the dispute within thirty (30) days of receiving written notice. If the dispute is not resolved within that period, either party may proceed to arbitration as set forth below.

B. Binding Arbitration. Any dispute, claim, or controversy arising out of or relating to these Terms or the breach, termination, enforcement, interpretation, or validity thereof shall be determined by binding arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules. Arbitration shall take place in Iowa, or remotely by mutual agreement. The arbitrator's award shall be final and binding, and judgment may be entered in any court of competent jurisdiction.

C. Small Claims Carve-Out. Either party may bring an individual claim in small claims court if the claim qualifies under the applicable court's jurisdictional limits.

D. Class Action Waiver. You agree that any arbitration or litigation shall be conducted solely on an individual basis. You expressly waive any right to bring or participate in any class action, collective action, or representative proceeding.

E. Governing Law. These Terms shall be governed by and construed in accordance with the laws of the State of Iowa, without regard to its conflict of law principles. To the extent any matter is not subject to arbitration, the parties consent to exclusive jurisdiction in the state and federal courts located in Iowa.

XII. Modifications to Terms

Whitefort reserves the right to modify these Terms at any time. When we make material changes, we will update the "Last Revised" date at the top of this document and publish the revised Terms to our website. Your continued use of our services after the revised Terms take effect constitutes your acceptance of the changes.

XIII. Termination

Whitefort reserves the right to suspend or terminate your access to any service, membership, or account at any time, with or without notice, for conduct that we determine, in our sole discretion, violates these Terms or is otherwise harmful to Whitefort, other clients, or third parties.

Upon termination, your license to use any deliverable already received is not affected, but your right to access member-only content and future deliverables will cease immediately.

XIV. Miscellaneous

Entire Agreement. These Terms, together with our Privacy Policy, constitute the entire agreement between you and Whitefort with respect to the subject matter hereof and supersede all prior or contemporaneous agreements, understandings, and representations.

Severability. If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that the remaining Terms remain in full force and effect.

Waiver. Whitefort's failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.

No Agency. Nothing in these Terms creates any agency, partnership, joint venture, or employment relationship between you and Whitefort.

Contact. Questions about these Terms may be directed to Whitefort Risk Services, LLC at contact@whitefortrisk.com.

PRIVACY POLICY

Whitefort Risk Services, LLC Effective Date: April 1, 2026 | Last Revised: April 2026

I. Overview

Whitefort Risk Services, LLC ("Whitefort," "we," "us," or "our") is committed to protecting the privacy and confidentiality of the information you share with us. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights with respect to it.

By using our website at whitefortrisk.com, submitting a client intake form, or enrolling in a membership subscription, you agree to the practices described in this Privacy Policy.

II. Information We Collect

We collect information in two ways: information you provide directly, and information collected automatically when you visit our website.

A. Information You Provide. When you submit a client intake form or establish a membership, you may provide:

• Name, email address, phone number, and other contact information
• Travel itinerary details, including destinations, travel dates, and accommodation information
• Traveler profile information, which may include nationality, professional background, and travel purpose
• Payment information processed through Stripe (Whitefort does not store payment card data directly)
• Any additional context you choose to include in your intake submission

B. Information Collected Automatically. When you visit whitefortrisk.com, standard web technologies may collect certain information automatically, including your IP address, browser type, pages visited, and referring URLs. This information is used for operational and security purposes and is not used to identify you personally.

III. How We Use Your Information

We use the information you provide solely to:

• Fulfill your Intelligence Product order and deliver your completed report
• Manage your membership account and deliver member benefits
• Communicate with you about your order, membership, or inquiries
• Improve our services and internal workflows

We do not use your personal information for advertising, profiling, or any purpose unrelated to fulfilling your service request.

IV. Confidentiality of Intake Information

We treat all information submitted through the client intake process as confidential. The sensitive nature of travel risk information — including itineraries, traveler profiles, and destination details — is understood and taken seriously.

Intake information is used exclusively to produce the Intelligence Product you ordered. It is not shared with third parties except as described in Section V below, and it is not retained beyond the period necessary to fulfill your order and maintain reasonable business records.

V. How We Share Your Information

Whitefort does not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• Service providers. We use Stripe for payment processing and Tally for intake form collection. These providers receive only the information necessary to perform their functions and are not authorized to use your information for any other purpose.
• Legal compliance. We may disclose information if required to do so by law, court order, or governmental authority.
• Business protection. We may disclose information to protect the rights, property, or safety of Whitefort, our clients, or others, to the extent permitted by law.

We do not share intake information — including itinerary details, traveler profiles, or travel dates — with any third party for any marketing, analytics, or commercial purpose.

VI. Data Retention

We retain personal information only as long as necessary to fulfill the purpose for which it was collected and to comply with applicable legal obligations. Intelligence Product intake data is retained for a reasonable period following delivery to support client service and record-keeping, after which it is deleted or anonymized. Membership account information is retained for the duration of your membership and for a reasonable period thereafter.

VII. Data Security

We implement reasonable administrative and technical measures to protect your information from unauthorized access, disclosure, or loss. These measures include secure transmission protocols and access controls on internal systems.

No method of transmission over the internet is completely secure. While we take your privacy seriously and apply appropriate safeguards, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

VIII. Third-Party Services

Our website and intake process involve third-party services including Stripe (payment processing) and Tally (intake forms). These services operate under their own privacy policies, which we encourage you to review. Whitefort is not responsible for the privacy practices of third-party services.

Our website may contain links to external resources. Whitefort is not responsible for the privacy practices or content of those external sites.

IX. Your Rights

Depending on your jurisdiction, you may have certain rights with respect to your personal information, including the right to access, correct, or request deletion of information we hold about you. To exercise any of these rights, contact us at contact@whitefortrisk.com. We will respond to all reasonable requests in a timely manner.

We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

X. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Revised" date at the top of this document and publish the revised policy to our website. Your continued use of our services after the revised policy takes effect constitutes your acceptance of the changes.

XI. Contact

For questions, concerns, or requests related to this Privacy Policy, contact us at:

Whitefort Risk Services, LLC contact@whitefortrisk.com whitefortrisk.com

Whitefort Risk Services, LLC | whitefortrisk.com | contact@whitefortrisk.com