Privacy Policy & Legal Disclosures

1. Effective Date. This Privacy Policy took effect on October 17, 2026 (2026-10-17). It applies to all electronic transmissions, inquiry submissions, and telemetry directed to autonfarms.com from this date forward. Every prior revision is superseded in full.

2. Data Controller & Operator Identity. The data controller operating this site is Autonfarms, trading at autonfarms.com as AUTON FARMS at the postal address located at 1400 ROPER RD., LAVONIA, GA 30553, LAVONIA, GA, United States. Telephone dispatch contact is maintained at (864) 247-9456 and electronic mail inquiries are received at [email protected]. The enterprise is an active agricultural holding registered in Georgia and managed by the owner and farm operations crew. Governing law is the law of GA, United States, with disputes heard in the courts of LAVONIA.

3. Categories of Data Collected. Auton Farms records data strictly necessary to schedule agricultural equipment work, evaluate parcel cutting requirements, and coordinate Shiloh Farm overnight retreats. Through the operational inquiry form (sorif9a.php), we collect the submitter’s full name, telephone number, email address, physical service parcel address or town, category of requested work, project notes, requested machinery specifications, and affirmative consent confirmation. Concurrently, server systems record the visitor IP address, user-agent string, HTTP referring URL, page render timestamp, and form transmission timestamp. Through the interactive dispatch support chat (hocoe9f.php), we store the textual message conversation and generate a localized session token stored in browser local storage. Technical server access logs record incoming request headers, HTTP methods, URI paths, and HTTP response codes. Where visitors arrive through digital advertising campaigns, incoming URLs carry platform click identifiers including gclid, msclkid, and fbclid. Cookie consent preferences are stored under the browser key site_consent_v2, and nothing else on this site persists a consent choice. No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.

4. Operational Purposes of Processing. Auton Farms processes collected data to prepare non-binding estimates for rotary mowing, pasture clearing, and equipment hauling; to confirm farm retreat dates for 2 to 6 guests across 1 to 2 night visits; to evaluate physical access constraints for 50-HP tractor and tandem-axle trailer transport; to verify parcel boundaries against subsurface hazards; to maintain operational security and suppress automated form abuse; and to evaluate the effectiveness of paid advertising campaigns across commercial search and social channels.

5. Lawful Legal Bases for Processing. Processing of inquiry submissions and chat messages is conducted on the basis of contract initiation or performance, as records are necessary to review machinery capabilities and deliver pricing ranges requested by the visitor. Processing of technical server logs, rate limiting, and brute-force intrusion defense is conducted on the basis of our legitimate interest in securing farm communications and maintaining site infrastructure. Processing of analytical cookies, conversion tracking parameters, and commercial campaign telemetry is conducted exclusively on the basis of affirmative consent provided through our consent interface. Where consent is withheld or declined, non-essential data processing ceases immediately.

6. Commercial Advertising Platforms & Click Identifiers. This website is a direct, active destination for commercial advertising campaigns and receives inbound traffic from google ads, microsoft advertising, and Meta Ads. When a visitor selects an advertisement on these platforms, unique alphanumeric click tracking parameters are appended to the landing URL. Specifically, Google Ads attaches the gclid parameter, Microsoft Advertising attaches the msclkid parameter, and Meta Ads attaches the fbclid parameter. These parameters permit measurement of ad clicks, campaign attribution, and keyword effectiveness. Google Ads, Microsoft Advertising and Meta Ads send traffic here. They are read by our client-side scripts solely to associate inquiry origins with ad campaigns. Auton Farms explicitly discloses that no advertising platform has reviewed, endorsed, verified, or approved this site, its equipment specifications, or its retreat lodgings.

7. Google Consent Mode v2 Architecture. Auton Farms implements Google Consent Mode v2 to govern storage tags in real time. consent mode holds ad_storage, ad_user_data, ad_personalization and analytics_storage denied until the visitor allows storage, and sets them back to denied the moment the visitor declines or withdraws consent. Upon page arrival, before any visitor interaction with the consent banner occurs, all four Consent Mode v2 operational signals are established in a denied state: ad_storage is denied, ad_user_data is denied, ad_personalization is denied, and analytics_storage is denied. Only if the visitor provides explicit opt-in confirmation by selecting "Accept" on the consent interface are these four signals updated to granted. If the visitor selects "Decline", or reopens the cookie settings and revokes permission, all four signals are returned to denied without delay, preventing advertising storage or user data transmission to third-party endpoints.

8. Third-Party Data Processors. Auton Farms shares data with designated third-party infrastructure providers named one by one under strict contractual confidentiality. The hosting provider that serves this site and stores the enquiry database, and the mail provider that carries the notification to the operator's inbox receive data strictly as necessary for operational performance. Web hosting and secure database storage are provided by our enterprise server host within the United States. Outbound dispatch notification emails are routed through our transactional SMTP mail relay. For digital marketing attribution, data is processed by Google Ireland Ltd / Google LLC for Google Ads, which attaches gclid to a click and receives the consent signals; by Microsoft Ireland Operations Ltd for Microsoft Advertising, which attaches msclkid; and by Meta Platforms Ireland Ltd for Meta Ads, which attaches fbclid. The processing practices and privacy standards of Microsoft Advertising are detailed in the official Microsoft Privacy Statement at privacy.microsoft.com: https://privacy.microsoft.com/privacystatement. We do not sell customer personal records to list brokers, marketing syndicates, or commercial lead generators.

9. International Data Transfers. Auton Farms operates exclusively in Lavonia, Georgia, United States. Communications originating outside the United States, including inquiries submitted from the European Economic Area or the United Kingdom, are received directly on secure servers located within the United States. Cross-border transfers executed by our third-party advertising and analytics vendors rely upon Standard Contractual Clauses (SCCs) approved by the European Commission or valid participation in the EU-U.S. Data Privacy Framework.

10. Data Retention Schedules. Personal data is stored only for defined operational periods. Inquiry form records, machinery quote requests, and their corresponding email duplicates are retained for exactly 24 months to support seasonal recurrence of agricultural mowing and fence line maintenance. Dispatch support chat transcripts are retained for 12 months from the date of the last recorded message. Server access, firewall, and diagnostic logs are retained for 60 days before automated cyclic overwriting. The visitor consent selection recorded under the browser key site_consent_v2 is maintained for 12 months unless cleared manually by the user. Formally submitted statutory data requests are processed and answered within 14 days of identity verification.

11. Technical & Operational Security Measures. Auton Farms deploys physical, administrative, and technical safeguards designed to protect personal data. Web traffic is encrypted end-to-end using Transport Layer Security (TLS 1.3). Server instances are hardened with access-restricted SSH keys, automated intrusion detection, rate limiting on submission endpoints, and honeypot validation fields (office and weblink) to deflect malicious automation. Physical equipment keys and dispatch logs at the Shiloh Farm shop are stored in secured work offices accessible only to the owner and trusted farm personnel.

12. European Data Subject Rights Under GDPR. For individuals accessing this website from Europe, the European Union, the European Economic Area, or the United Kingdom, the General Data Protection Regulation (gdpr) affords specific rights regarding personal data. The GDPR rights in full are: access, rectification, erasure, restriction, portability, objection, and withdrawing consent. Specifically, these rights comprise: the right of access to obtain confirmation of processing and copies of stored data; the right to rectification of inaccurate or incomplete farm records; the right to erasure ("right to be forgotten") where retention is no longer necessary; the right to restriction of processing under statutory dispute conditions; the right to data portability in a structured, machine-readable format; the right to object to processing grounded in legitimate interests; and the right to withdraw previously granted consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

13. United States State Privacy Rights & CCPA Disclosures. Under United States state privacy law, California (CCPA/CPRA) is named alongside Colorado, Connecticut, Virginia, and other state laws in force. Residents of United States jurisdictions, including California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), possess specific statutory rights. You possess the right to know the categories of personal data collected, the business purposes for which it is used, and the categories of third parties with whom it is shared. You hold the right to request deletion of your personal data, subject to agricultural booking or business record exceptions under Georgia law. You hold the right to correct inaccurate records. Furthermore, you hold the explicit right of opting out of sale or sharing of personal data. Auton Farms does not sell personal information for monetary compensation and does not share personal data for cross-context behavioral advertising absent affirmative consent. You have the statutory right to be free from discrimination or altered service rates for exercising your privacy prerogatives.

14. Global Privacy Control (GPC) Adherence. Auton Farms recognizes and honours the Global Privacy Control (global privacy control) signal transmitted via the HTTP Sec-GPC header or client-side browser settings. When our system detects an active GPC broadcast from your browser, our consent controller treats the signal as an immediate, affirmative opt-out of advertising tracking and non-essential cookies without requiring further visitor action or presenting repeated banner prompts.

15. Children’s Online Privacy Protection. Auton Farms operates an agricultural service and adult farm retreat website. We do not knowingly solicit, collect, or maintain personal information from individuals under the age of 18. If a parent or guardian becomes aware that a minor has submitted personal contact information through our dispatch or retreat forms without parental consent, please notify us at [email protected] so we can promptly expunge the data from our operational records.

16. Supervisory Authorities & Complaints. If you believe Auton Farms has handled your personal data in violation of applicable data protection laws, the visitor may complain to their state Attorney General, and to the California Privacy Protection Agency in California. Residents of Georgia may submit inquiries to the Office of the Attorney General of Georgia, Consumer Protection Division. European visitors may submit complaints to their local national Data Protection Authority (DPA) or supervisory authority.

18. Amendments to This Policy. Auton Farms reserves the right to amend this Privacy Policy to reflect modifications in agricultural machinery offerings, guest retreat terms, statutory regulations, or advertising partner protocols. Revisions take effect immediately upon publication to this URL with an updated effective date stamped in Section 1. Visitors are encouraged to periodically review this page.

19. Direct Operator Contact. For inquiries regarding this Privacy Policy, machinery safety documentation, or our handling of commercial click identifiers, contact our farm office directly: Auton Farms, 1400 ROPER RD., LAVONIA, GA 30553, LAVONIA, GA, United States; Telephone: (864) 247-9456; Email: [email protected]. Operating hours are 7:30 AM to 5:30 PM Eastern Time, Monday through Saturday.