Mitchell Family Farms
Privacy Policy
Important:
This page explains how this website collects and uses information. It is a technical disclosure, not legal advice. It does not guarantee compliance with GDPR, CPRA, LGPD, or any other law. Have qualified counsel review it before you rely on it.
This Privacy Policy describes how Mitchell Farms (“we”, “us”) collects, uses, protects, and shares information when you visit or use Mitchell Family Farms. That includes browsing the site, submitting forms, making purchases, using online services, or contacting us.
Who is responsible
The organization responsible for this website is Mitchell Farms.
Email: mitchellfarmsevents@gmail.com
Phone: (814) 932-1339
1019 Old Mill Run Rd, Altoona, PA 16601
Submit a privacy or data rights request
Do Not Sell or Share My Personal Information
Your privacy choices
You can manage optional cookies and similar technologies at any time with Cookie Settings on this website. Choose Accept All, Reject All (essential only), or Customize.
Under California law (CCPA / CPRA) and certain other US state privacy laws, you may also opt out of the “sale” or “sharing” of personal information. That can include some advertising uses. We do not sell personal information for money in the everyday sense. Some laws define sale or sharing more broadly. Use the Do Not Sell or Share link above when it is provided, the rights sections later on this page, or contact us to make that request.
Cookie Policy. How cookies work and how to change cookie choices.
Information we collect
We may collect information you provide directly. We may also collect information automatically through your browser or device. Third-party tools used to operate, secure, analyze, and improve this website may collect information as well.
Information you provide may include your name, email address, phone number, mailing address, billing or shipping address, and company name. It may also include account details, form responses, messages, appointment requests, order details, payment-related information handled by payment providers, uploaded files, survey answers, support requests, newsletter signups, and anything else you choose to submit.
Information collected automatically may include IP address, browser type, device type, operating system, and approximate location. It may also include pages visited, time on pages, links clicked, referring website, search terms, session activity, form interactions, shopping cart or checkout activity when e-commerce is enabled, performance data, security logs, and error logs.
How we use information
We may use collected information to operate this website, respond to inquiries, and provide customer service. We may also use it to process orders or requests, send confirmations or transactional messages, and manage appointments or bookings.
We may use it to improve website performance, analyze visitor behavior, prevent fraud, protect against spam or abuse, and secure the website. Where allowed, we may measure advertising performance and improve marketing. We may also use information to comply with legal obligations and enforce applicable terms or policies.
Legal bases for EEA, UK, and similar laws
Where GDPR or similar laws apply, we process personal data under one or more of these bases. Consent covers optional cookies, analytics, marketing, and similar tools. Contract covers providing requested services. Legal obligation covers required processing. Legitimate interests cover securing the site, preventing fraud, and improving essential operations, balanced against your rights and interests.
Where required, non-essential cookies, analytics, advertising, session replay, heatmaps, and similar technologies run only after you provide consent through our cookie banner or privacy controls. You may withdraw consent at any time.
Cookies and tracking technologies
This website may use cookies, pixels, scripts, tags, server logs, local storage, session storage, and similar technologies. These help the website function, remember preferences, secure sessions, prevent fraud, analyze traffic, and measure performance. Where allowed, they may also support advertising or marketing.
- Strictly necessary. Security, login sessions, form protection, cart or checkout when applicable, consent storage, load balancing, and bot protection.
- Analytics and statistics. Understand how visitors use the site, including pages, duration, and interactions, so we can improve content and performance.
- Marketing and advertising. Measure ad performance, conversions, audiences, or retargeting where used and permitted.
- Functional and preferences. Embeds, maps, videos, chat, accessibility tools, saved preferences, and similar enhancements.
See the Cookie Policy for the live cookie and technology inventory.
What this site uses
The following sections come from privacy scans, active plugins, and the local vendor catalog on this website. Re-scan and regenerate pages after major changes so the lists stay current.
Cookies observed on this site
Names, services, categories, purposes, and durations from the latest scan and from Google tags enabled under Integrations. Entries are enriched with the local vendor catalog when a match is known.
Browser storage keys
Scripts, pixels, beacons, and embeds
Tracking can occur without cookies. These technologies were observed during scanning.
WordPress plugins that may process data
Active plugins mapped in our local catalog, including forms, builders, analytics, security, and commerce tools. Unmapped plugins may still process data. Review your install inventory with counsel.
Where data may go
Depending on the tools enabled and your consent choices, information may be processed by the providers below or their subprocessors. Each provider applies its own privacy terms.
Google Analytics
This website may use Google Analytics to understand how visitors find and use the site. That can include pages viewed, device and browser details, approximate location, referrers, and events. Google may use cookies or similar technologies. Typical Analytics cookie lifetimes in our catalog include _ga / _ga_* for about 2 years, _gid for about 24 hours, and _gat* for about 1 minute. We do not intentionally send names, email addresses, phone numbers, or payment card numbers to Google Analytics. Where required by law, Analytics loads only after appropriate consent.
Google Tag Manager
Google Tag Manager may be used to manage tags and integrations for analytics, ads, and consent signals. Data collected depends on the tags configured in each container. Tags fired through GTM may set cookies such as _ga or advertising identifiers (_gcl_*), with lifetimes that vary by the underlying service. Where required, tags that load analytics or advertising should respect consent choices before firing.
Google tags configured on this site
The following Google container and tag IDs are enabled for this website and load after the visitor consents to the relevant category. These IDs identify which tags load; they are not cookie names. Cookie families that may be set appear in the cookie table above.
-
GTM-K2M8ZJ4B
Google Ads and advertising tags
Google Ads or related advertising tags may measure conversions, support remarketing, or help deliver ads. Catalog cookie families include _gcl_* (about 90 days), IDE (about 2 years), and short-lived test cookies. Where required by law, these tools load only after marketing consent.
Microsoft Clarity
We partner with Microsoft Clarity to understand how you use and interact with this website. Clarity may capture behavioral metrics, heatmaps, clicks, scrolls, and session replay, and may collect device and browser information and approximate location, using first- and third-party cookies and similar technologies. We use this information to improve products and services, optimize the site, support fraud and security monitoring, and (where enabled) advertising or Microsoft Advertising integrations.
Where GDPR-style rules or our jurisdiction pack require consent, Clarity loads only after you accept Analytics (or an equivalent category). It does not run from mere site use before that choice. You can change or withdraw consent anytime via Cookie Settings.
For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
Cloudflare
Cloudflare may process technical information such as IP addresses, request headers, URLs, security events, bot scores, and traffic logs. This helps deliver, cache, and protect the site. Some Cloudflare security cookies may be treated as strictly necessary for availability and abuse prevention.
Meta and Facebook technologies
Meta Pixel or related tools may measure conversions, build audiences, or support advertising. These tools typically require marketing consent where GDPR-style rules apply. You may also have opt-out rights under US state privacy laws for sale or sharing.
Forms and user submissions
If you submit a form, request information, book an appointment, place an order, or contact us, we may use that information to respond, fulfill the request, prevent spam, and keep records. Form data may be processed by form plugins, email or SMTP providers, CRM tools, spam protection, and hosting providers.
Payments, shipping, and email
If this site offers purchases, donations, subscriptions, or bookings, payment details are typically handled by third-party payment processors. We do not intentionally store full card numbers unless a clearly disclosed compliant system requires it. Shipping or fulfillment data may be shared with carriers and logistics tools. Marketing emails are sent only where allowed. You can unsubscribe from marketing and still receive transactional messages.
How information is shared
We may share information with service providers such as hosting, CDN, analytics, advertising, payments, email, CRM, security, and developers as needed to operate the site, or when required by law. We do not sell personal information for money in the everyday sense. Some privacy laws define “sale” or “sharing” broadly to include certain advertising or cross-context behavioral advertising. See California rights below.
International transfers
Information may be processed or stored outside your state, province, or country, including by US-based providers. Where required, transfers may rely on adequacy decisions, standard contractual clauses, or other lawful mechanisms. Review each provider’s documentation for details.
Data retention
We retain information only as long as reasonably necessary for the purposes described here, unless a longer period is required or allowed by law. Configured operational retention for certain privacy records on this site is approximately 365 days. Third-party cookie and identifier lifetimes (for example Analytics, Ads, or partner tags disclosed for Google Tag Manager) follow each provider’s or partner’s periods and are listed in the Cookie Policy where available — those durations are separate from this operational retention setting.
Security
We use reasonable technical and organizational measures such as TLS, access controls, firewalls, malware scanning, and monitoring. No method of transmission or storage is completely secure.
Account login activity
For security, login attempts and related account-security events (such as password policy checks) may be logged. This helps protect accounts against unauthorized access.
Password-policy and login-security tools (for example plugins that enforce password rotation or record sign-in history) may retain those events separately from cookie consent logs. Staff and customers with accounts should expect this monitoring as part of protecting the site.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing. You may also withdraw consent, request portability, opt out of certain advertising or sale or sharing, limit use of sensitive personal information, and lodge a complaint with a supervisory authority.
Submit a privacy or data rights request
California privacy rights (CCPA / CPRA). Do Not Sell or Share
California residents may have the right to know what personal information is collected, used, disclosed, sold, or shared. They may also request deletion or correction, opt out of sale or sharing, limit use of sensitive personal information, and be free from discrimination for exercising these rights.
Categories commonly involved on websites like this include identifiers such as name and email, commercial information such as orders, internet activity such as browsing and interactions, and approximate geolocation. Purposes include providing services, security, analytics, and marketing where allowed.
Do Not Sell or Share. To opt out of sale or sharing of personal information as defined under California law and similar US state laws, use the link below when available, or email us. Cookie Settings alone may not cover every advertising or sharing activity covered by those laws.
Do Not Sell or Share My Personal Information
Other US state privacy laws
Residents of states such as Colorado, Connecticut, Virginia, Utah, and others may have similar rights to access, delete, correct, or opt out of targeted advertising, sale, or profiling. Use the contact methods or rights forms on this site to submit a request. We may need to verify your identity.
European, UK, Swiss, and similar rights
Where GDPR or UK GDPR applies, you may have the rights listed above, including withdrawing consent for optional tracking. You may also contact your local data protection authority.
Brazil, Canada, and other regions
Other regions grant access, correction, deletion, and consent-related rights. This website’s jurisdiction packs and consent banner help support those workflows technically. Local counsel should confirm legal requirements for your organization.
Sensitive information and children
Do not submit sensitive personal information through this website unless specifically requested and necessary. This website is not directed to children under the age required by applicable law. We do not knowingly collect personal information from children without appropriate parental consent.
Automated processing and breaches
We may use automated tools for analytics, spam and fraud detection, security, and performance. We do not intentionally use automated decision-making that produces legal or similarly significant effects without appropriate safeguards. If a personal data breach occurs, we will investigate and notify individuals or authorities where required by law.
Embedded content and links
Embedded videos, maps, social posts, or other third-party content may collect data as if you visited those sites directly. Review third-party privacy policies before interacting with embeds or external links.
Changes
We may update this Privacy Policy when tools, laws, or business practices change. The updated version will be posted on this page with a revised date.
Contact
Mitchell Farms
Email: mitchellfarmsevents@gmail.com
Phone: (814) 932-1339
1019 Old Mill Run Rd, Altoona, PA 16601
Generated by Universal Consent and Privacy Framework as a technical aid. Not a compliance certification.
