Privacy disclosures and consent framework

Effective Date & Document Version

These pages take effect on 2026-11-12. This privacy policy and consent specification applies to all electronic records, automated HTTP requests, referral query parameters, and communications generated through owlcreeknaturalsproducts.com.

Data Controller Identity

The data controller responsible for personal information submitted through this website is Owlcreeknaturalsproducts, trading at owlcreeknaturalsproducts.com. Our physical merchant address is 12130 Sagebrush Rd, Nisland, South Dakota 57762, Nisland, South Dakota, United States. Telephone inquiries are handled directly at 605-569-1051, and written correspondence is received at [email protected].

Categories of Data Collected

What this site’s own code records, and nothing beyond it:

• The inquiry form (vole9db.php) writes: name, phone, email, address, the kind of enquiry, the message, the requested specification, the consent tick.
• With it, automatically: the IP address, the browser’s user-agent string, the referring URL, the moment the form was rendered and the moment it was sent.
• The support chat (bina6d3.php): keeps the conversation and a token in the visitor’s browser so they can return to it.
• The consent choice: is stored in the browser under site_consent_v2, and nothing else on this site persists a choice.
• No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.
• Advertising Campaign Parameters: Incoming URL query click identifiers appended by advertising networks: gclid, msclkid, and fbclid.

Purposes of Processing

We process collected data to respond directly to inquiries regarding organic dry goods, scale weights, and pasture cut reservations. Automated technical logs are processed to detect brute-force submission abuse, maintain web server reliability, and measure advertising acquisition volume without building invasive consumer behavioral dossiers.

Legal Bases for Processing

We process personal data under clearly specified legal foundations:

• Consent: Explicit user consent serves as the legal basis for processing inquiry forms, storing optional browser tokens, and releasing Consent Mode v2 measurement signals.
• Contractual Preparation: Responding to customer requests for cut availability, product specifications, and weight quotes prior to entering a sale.
• Legitimate Interests: Preventing form spam via hidden validation checks, diagnosing server errors, and protecting our infrastructure against automated attacks.

Advertising Platforms & Click Identifiers

Google Ads, Microsoft Advertising and Meta Ads send traffic here. This site receives paid clicks today. Click identifiers: gclid (Google), msclkid (Microsoft), fbclid (Meta). Nothing anywhere claims a platform has reviewed, approved or verified this site.

Google Consent Mode v2 Architecture

Consent Mode v2 holds ad_storage, ad_user_data, ad_personalization and analytics_storage denied until the visitor allows storage, and sets them back to denied the moment the visitor declines or withdraws.

Processors & Third-Party Services

Who receives data, named one by one:

• Google Ireland Ltd / Google LLC: Google Ads, which attaches gclid to a click and receives the consent signals.
• Microsoft Ireland Operations Ltd: Microsoft Advertising, which attaches msclkid; its own handling is covered by the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement.
• Meta Platforms Ireland Ltd: Meta Ads, which attaches fbclid, where a campaign runs there.
• The hosting provider and the mail provider: The hosting provider that serves this site and stores the enquiry database, and the mail provider that carries the notification to the operator’s inbox.

International Data Transfers

Our core merchant systems and servers operate within the United States. Where visitors access the website from the European Economic Area or the United Kingdom, transmission of diagnostic logs and platform tokens relies on standard contractual clauses, adequacy regulations, or statutory derogations governing pre-contractual customer communications under the law of South Dakota, United States, with disputes heard in the courts of Nisland.

Fixed Data Retention Clocks

Retention, as real periods:

• Enquiries and their email copies: 36 months
• Chat transcripts: 12 months
• Server and access logs: 90 days
• The record of a consent choice: 12 months
• A data request is answered within 10 days

Technical & Operational Security Measures

All data in transit is encrypted using modern TLS 1.3 cryptographic protocols. Web forms utilize rate-limiting mechanisms and honeypot validation fields to prevent automated abuse. Server databases reside behind strict perimeter firewalls with administrative access restricted to authorized personnel via key-based authentication.

European Data Subject Rights (GDPR)

The GDPR sections are written for visitors who reach the site from Europe. Under the General Data Protection Regulation (GDPR), European visitors retain the right of access to personal records held, the right of rectification for inaccurate details, the right of erasure (“right to be forgotten”), the right to restrict processing, the right to data portability in a machine-readable format, the right to object to processing based on legitimate interests, and the right to withdraw consent at any time.

United States State Privacy Rights (CCPA / CPRA)

US state privacy law applies — California (CCPA/CPRA) named, plus the other state laws in force (including Virginia, Colorado, Connecticut, and Utah). Residents have the right to know what personal data is collected, the right to delete personal information, the right to correct inaccurate data, and the right to non-discrimination for exercising these rights. Owlcreeknaturalsproducts does not sell personal information and does not share personal data for cross-context behavioral advertising.

Global Privacy Control (GPC)

Global Privacy Control (the Sec-GPC header) is honoured as an opt-out without asking again. When a Sec-GPC header is detected from your browser, tracking and advertising parameters remain denied automatically.

Children’s Privacy Protection

Our services and website content are directed exclusively to adults, household managers, and commercial wholesale buyers. We do not knowingly solicit, collect, or store personal information from individuals under the age of 16. If we discover that personal data of a minor has been transmitted without verified parental authorization, we purge the record immediately.

Supervisory Authorities & Complaints

The visitor may complain to their state Attorney General, and to the California Privacy Protection Agency in California. Visitors from Europe may lodge complaints with their competent local Data Protection Authority. Dispute proceedings under this policy are governed by the law of South Dakota, United States, with disputes heard in the courts of Nisland.

Exercising Your Rights (DSAR Framework)

You may exercise any of your access, rectification, portability, or erasure rights by sending a direct inquiry to our compliance desk. Every formal request is acknowledged, investigated, and answered within 10 days of verified receipt.

Policy Modifications & Updates

We review this privacy policy periodically to reflect evolving regulatory requirements, technical upgrades, and platform compliance guidelines. Any updates take effect upon publication to this URL, marked with a revised effective date in the document header.

Human Contact Information

For privacy inquiries, technical questions, or store communications, contact our merchant desk directly:

Owl Creek Naturals Products
12130 Sagebrush Rd, Nisland, South Dakota 57762, United States
Phone: 605-569-1051
Email: [email protected]