We handle your farm communication and dispatch records with direct accountability under United States privacy statutes
Three D Farms maintains an open ledger of every technical parameter, acreage record, and advertising click identifier collected when growers contact our Reservoir Road operation.
Our data collection ledger outlines exactly how personal details and spray requests are handled across every operational category
We present our complete statutory privacy commitments through this clause ledger so neighboring growers, land managers, and advertising review systems can verify every operational practice without legal ambiguity.
| Statutory Provision | Plain Operational Meaning | Statutory Authority & Ad Mandates |
|---|---|---|
| Effective Operating Date | This privacy policy took effect on October 17, 2026 and governs website interactions and personal data processing on or after that date. It was last updated on October 17, 2026. | Annual compliance certification under Washington commercial trade practices and active advertising network publication standards. |
| Entity & Data Controller | The controller is Threedfarms, trading at threedfarms.us. The postal address is 3240 RESERVOIR RD, WALLA WALLA, WA 99362-8400, WALLA WALLA, WA, United States. For human enquiries and data requests, email [email protected] or call (509) 301-3878. | Legal entity verification under Washington state business registration and Google Ads merchant identity rules. |
| Specific Information Collected | The inquiry form (warea4a.php) writes: name, phone, email, address, the kind of enquiry, the message, the requested specification, and the consent tick. With it, automatically: the IP address, the browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent. The support chat (sofocb1.php) keeps the conversation and a token in the visitor's browser so they can return to it. We also collect technical and log data, cookie identifiers, the consent choice stored in the browser under site_consent_v2, and advertising click identifiers: gclid (Google), msclkid (Microsoft), and fbclid (Meta). No account, no password, no payment, and no card data: nothing is sold on this site and no payment is taken. | Required disclosure under US state consumer privacy frameworks and Google Ads advertiser verification rules. |
| Operational Use of Data | We use inquiry form submissions to evaluate field spraying requests, calculate per-acre estimates, and communicate directly with growers; support chat messages and session tokens to provide real-time dispatch assistance and resume ongoing conversations; technical access logs, IP addresses, and user-agent strings to maintain network security, diagnose server issues, and prevent automated abuse; cookie and consent choice storage under site_consent_v2 to enforce user privacy preferences; and advertising click identifiers (gclid, msclkid, fbclid) to attribute commercial traffic and evaluate ad campaign performance. | Agricultural service execution, customer support delivery, fraud prevention, and commercial advertising accountability. |
| Lawful Processing Grounds | For visitors where legal basis specification is required, we process personal information under defined legal bases: Consent is the basis for storing non-essential cookies, persisting chat tokens, passing advertising identifiers, and activating Consent Mode v2 signals when granted. Contract, or steps taken at the visitor's request prior to entering into a contract, is the basis for processing inquiries to schedule agricultural spraying and quote acre rates. Legitimate interest is the basis for securing site infrastructure, detecting spam or form fraud, and maintaining temporary server access logs. | Article 6 GDPR benchmarks, Washington commercial standards, and US state privacy legal authority. |
| Commercial Advertising Networks | This site receives paid clicks today from commercial advertising platforms: Google Ads, Microsoft Advertising, and Meta Ads. Google Ads attaches the gclid click identifier to inbound links and receives consent signals; Microsoft Advertising attaches the msclkid click identifier to inbound search traffic; and Meta Ads attaches the fbclid click identifier where promotional agricultural campaigns run. These click parameters enable campaign attribution. Nothing anywhere claims that any advertising platform has reviewed, approved, or verified this site. | Mandatory present-tense disclosure governing active google ads, microsoft advertising, and Meta ad traffic. |
| Consent Mode v2 Architecture | We implement Google Consent Mode v2 on this site. The four telemetry signals—ad_storage, ad_user_data, ad_personalization, and analytics_storage—are held strictly denied until the visitor affirmatively allows storage through the consent banner. These signals are set back to denied immediately the moment the visitor declines or withdraws storage consent. The visitor's consent choice is stored locally in the browser under site_consent_v2, and nothing else on this site persists a choice. | Google EU User Consent Policy, Consent Mode v2 implementation guidelines, and international consumer privacy mandates. |
| Downstream Service Processors | Third parties that receive personal data are named one by one: Google Ireland Ltd / Google LLC for Google Ads receiving Consent Mode v2 signals and gclid attribution; Microsoft Ireland Operations Ltd for Microsoft Advertising handling msclkid traffic under the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement; Meta Platforms Ireland Ltd for Meta Ads receiving fbclid click tokens; the hosting provider that serves this site and stores the enquiry database; and the mail route provider that carries notification messages to the operator's inbox. | Vendor processing accountability and transparent data routing under privacy.microsoft.com and Google partner policies. |
| International Transmission Protections | This site is hosted and operated in the United States. Data collected from visitors outside the United States, including European visitors, is transferred to US-based server infrastructure. Transfers of personal data outside the country of collection are made lawfully through Standard Contractual Clauses, adequacy decisions, or with explicit visitor consent where required by international data protection statutes. | Cross-border data transfer safeguards under international privacy accords and European data transfer regulations. |
| Rigid Storage Retention Timelines | We retain personal data for specified, definite calendar durations rather than indefinite periods: Enquiries and their email copies are retained for 24 months. Support chat transcripts are kept for 12 months. Server and access logs are retained for 30 days. The record of a consent choice in the visitor's browser under site_consent_v2 is kept for 6 months. A formal data request submitted to our team is answered within 5 days of receipt. | Definite retention requirement under modern statutory privacy frameworks and agricultural regulatory compliance. |
| Technical & Field Security Controls | We protect personal information through HTTPS encryption in transit, strict database access controls, secure mail relay channels, segregated storage of browser consent tokens, and administrative safeguards that restrict access to authorized farm dispatch personnel only. | Data security mandates under US state business statutes and agricultural trade secret confidentiality rules. |
| European Consumer Rights (GDPR) | For visitors reaching this site from Europe, we recognize the GDPR rights in full: right of access to personal data, right to rectification of inaccurate records, right to erasure ('right to be forgotten'), right to restriction of processing, right to data portability, right to objection to processing (including direct marketing), and the unconditional right to withdraw consent at any time without affecting prior lawful processing. Data requests are answered within 5 days by contacting [email protected]. | Articles 15 through 22 of the General Data Protection Regulation (gdpr) governing global web destinations. |
| United States State Privacy Rights (CCPA/CPRA) | United States state privacy laws apply to our operations. California residents have specific statutory rights under the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), including the right to know what personal information is collected, the right to access and delete personal data, the right to correct inaccurate records, and the explicit right to opt out of the sale or sharing of personal data and targeted advertising. Other state privacy laws in force are similarly honored. We do not sell personal data. To exercise rights, email [email protected]. | California Consumer Privacy Act (ccpa), CPRA regulations, and reciprocal state privacy statutes. |
| Global Privacy Control Signal Handling | Global Privacy Control is honoured on this site. When your browser transmits the Sec-GPC header signal, we automatically treat it as a valid statutory opt-out of data sharing and targeted advertising without asking again, keeping ad and telemetry storage strictly denied. | Automated opt-out compliance under California regulations and global privacy control technical specifications. |
| Protection of Children and Minors | This site is not directed to children under 16 years of age, and we do not knowingly take or collect personal data from children. If we discover that personal data of a minor was received without parental consent, we delete it immediately. | Children's Online Privacy Protection Act (COPPA) and state child safety privacy protections. |
| Supervisory Authority Complaints | Visitors have the right to lodge a formal complaint with a data protection or consumer privacy authority. You may complain to your state Attorney General, and California residents may complain directly to the California Privacy Protection Agency (CPPA). European visitors may lodge a complaint with their local supervisory authority. | State consumer protection oversight and California Privacy Protection Agency enforcement channels. |
| Policy Modification Procedures | Changes to this privacy policy are announced by publishing the revised terms on this page with an updated effective date header. Where changes are material to data handling practices, we will post a prominent notice on our website or notify growers directly via email before the changes take effect. | Transparency and notice obligations under US commercial consumer protection regulations. |
| Direct Privacy Contact Point | To contact a human regarding privacy matters or data requests: Email [email protected] or call (509) 301-3878. You may also write to our operations base at Threedfarms, 3240 RESERVOIR RD, WALLA WALLA, WA 99362-8400, WALLA WALLA, WA, United States. | Commercial identification and designated communication line under federal and state consumer rules. |
You can submit a formal record inquiry or request complete deletion of your farm contact history by contacting dispatch
Under US state privacy statutes including ccpa and European gdpr rules, growers have the unambiguous right to inspect all personal information, farm addresses, GPS coordinates, and spray records associated with their accounts.
To submit a formal data subject access request (DSAR), please review our direct administrative guidelines:
Data Subject Request Protocol
Submission Channel
Email your request directly to [email protected] with the subject line "Privacy Rights Request" or write to 3240 RESERVOIR RD, WALLA WALLA, WA 99362-8400.
Guaranteed Response Window
Every data request is acknowledged and answered within 5 business days of receipt, following basic identity verification to protect farm operational records.
Available Actions
You may request a portable summary file, demand complete record deletion, update contact details, or confirm your advertising opt-out status at zero cost.
We design and test our agricultural web interface so every grower can access spray information regardless of device or ability
Three D Farms is committed to digital accessibility. We construct our web pages to conform with the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards, ensuring full usability for farmers using screen readers, keyboard navigation, speech recognition software, or high-contrast mobile displays in bright sunlight.
Key accessibility provisions engineered into this site include:
- Full keyboard navigable controls with visible high-contrast focus rings and zero trapped navigation cycles.
- Semantic HTML architecture with structured landmark regions, descriptive table headers, and one logical H1 per page.
- High-contrast optical ratios exceeding 4.5:1 across our oat, clay, terracotta, and warm charcoal visual palette.
- Respect for the
prefers-reduced-motionoperating system setting, which halts smooth scroll animations and CSS wipes instantly. - Descriptive plain-text alternatives on all agricultural photographs and operational telemetry charts.
If you encounter an accessibility barrier on any part of our website, please call our office at (509) 301-3878 or email [email protected]. We will provide the requested agricultural information or service quote through your preferred alternate communication channel promptly.