We protect agricultural field inquiries and respect visitor tracking boundaries

These pages take effect on 2026-10-17 — that exact date, written the way this language writes dates (October 17, 2026). It applies to all electronic inquiries, quote requests, phone records, and browser visits directed to Kafarms (K & A Farms, Inc.) through the domain kafarms.us or through associated field office communication channels.

We review our technical logging standards and advertising telemetry whenever crop seasons commence, when labor contracting programs are renewed, or when state and federal digital privacy rules are revised. We do not apply retroactive reductions to individual confidentiality rights without direct notice.

The legal entity responsible for the collection, handling, and protection of your personal and commercial farm inquiry information is:

Operator / controller: Kafarms, trading at kafarms.us
Postal address, written out in full: 204 OLD SWAMP ROAD, SOUTH MILLS, NC 27976, SOUTH MILLS, NC, United States
Phone: (252) 207-3787
Email for enquiries and for data requests: [email protected]

Kafarms (trading as K & A Farms, Inc.) is an established agricultural production and custom farm contracting enterprise operating under the laws of North Carolina in Camden County, United States. All data processing determinations, quotation files, and field labor crew scheduling logs originate from our South Mills operating location.

What this site's own code records, and nothing beyond it:

• The inquiry form (submit.php) writes: name, phone, email, address, the kind of enquiry, the message, the requested specification, the consent tick.
• Automated log and technical data recorded with it: the IP address, the browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent.
• The support chat (chat.php): keeps the conversation and a token in the visitor's browser so they can return to it.
• Cookie and choice identifiers: the consent choice is stored in the browser under site_consent_v2, and nothing else on this site persists a choice.
• Advertising click identifiers: click identifiers appended by advertising platforms, specifically gclid from Google Ads, msclkid from Microsoft Advertising, and fbclid from Meta Ads.

No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.

Kafarms uses the information we gather strictly for clear, tangible farm business purposes:

• Inquiry Form Details: Used to prepare seasonal field quotes ($12.78–$16.82/hr field labor, $0.50–$1.00/basket harvest, $6.00/straw bale), check crew availability, and contact the enquirer to discuss agricultural requirements.
• Automated Request & Technical Logs: Used to monitor server uptime, prevent automated abuse, protect infrastructure security, and ensure operational transmission of form messages.
• Support Chat Logs: Used to provide real-time dispatch assistance and allow returning visitors to resume active conversations via their browser token.
• Cookie & Consent Choice (site_consent_v2): Used to remember and enforce the visitor's Consent Mode v2 tracking choices across page visits.
• Advertising Click Identifiers: Used to measure campaign performance and verify advertising attribution from Google Ads, Microsoft Advertising, and Meta Ads.

We process each category of data under explicit legal bases as required by law:

• Contract: For responding to your inquiry form and chat requests to provide agricultural estimates, labor crew quotes, or straw availability. This processing is necessary to take steps at your request prior to entering into a contract.
• Legitimate Interest: For maintaining technical logs, server security, fraud prevention, and ensuring site functionality. Our legitimate interest lies in operating, securing, and maintaining our commercial farm web infrastructure.
• Consent: For setting optional advertising and analytics cookies, and processing click identifiers (gclid, msclkid, fbclid). Consent is requested via our banner and can be withdrawn at any time.

Advertising, in the present tense — this site receives paid clicks today:

• google ads, microsoft advertising and Meta Ads send traffic here.
• Click identifiers: gclid (Google), msclkid (Microsoft), fbclid (Meta).
• Consent Mode v2 holds ad_storage, ad_user_data, ad_personalization and analytics_storage denied until the visitor allows storage, and sets them back to denied the moment the visitor declines or withdraws.
• Global Privacy Control (the Sec-GPC header) is honoured as an opt-out without asking again.
• Nothing anywhere claims a platform has reviewed, approved or verified this site.

State verbatim: gclid, msclkid, fbclid, google ads, microsoft advertising. When a visitor arrives via these platforms, the respective identifier (gclid for google ads, msclkid for microsoft advertising, fbclid for Meta Ads) is attached to the link.

Consent Mode v2: the four signals held denied until the visitor allows storage, and set back to denied when they decline. Under consent mode, these four signals are:

• ad_storage: Denied by default until permission is granted; set back to denied upon refusal or withdrawal.
• ad_user_data: Denied by default until permission is granted; set back to denied upon refusal or withdrawal.
• ad_personalization: Denied by default until permission is granted; set back to denied upon refusal or withdrawal.
• analytics_storage: Denied by default until permission is granted; set back to denied upon refusal or withdrawal.

State verbatim: ad_storage, ad_user_data, ad_personalization, analytics_storage, consent mode. Consent Mode v2 holds ad_storage, ad_user_data, ad_personalization and analytics_storage denied until the visitor allows storage, and sets them back to denied the moment the visitor declines or withdraws.

Who receives data, to be named one by one:

• Google Ireland Ltd / Google LLC — Google Ads, which attaches gclid to a click and receives the consent signals.
• Microsoft Ireland Operations Ltd — Microsoft Advertising, which attaches msclkid; its own handling is covered by the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement. State verbatim: privacy.microsoft.com.
• Meta Platforms Ireland Ltd — Meta Ads, which attaches fbclid, where a campaign runs there.
• The hosting provider that serves this site and stores the enquiry database, and the mail provider that carries the notification to the operator's inbox.

Transfers of data outside the country of collection and what makes them lawful:

Our farming operations and primary computer servers are stationed in the United States. If you browse this website from outside the United States (such as the European Economic Area or the United Kingdom), your inquiry data will be transferred to and processed in the United States.

Transfers to multinational advertising platforms (Google LLC, Microsoft Corporation, Meta Platforms) are made lawful under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and standard contractual clauses (SCCs) approved by the European Commission, ensuring adequate safeguards and enforceable rights for data subjects.

Retention, as real periods — state these, do not write "as long as necessary":

• Enquiries and their email copies: 24 months
• Chat transcripts: 12 months
• Server and access logs: 30 days
• The record of a consent choice: 12 months
• A data request is answered within 14 days

We apply rigorous administrative and physical safeguards to protect electronic records against unauthorized inspection, loss, alteration, or destruction. All data in transit between your browser and our South Mills dispatch desk is encrypted via modern Transport Layer Security (TLS 1.3).

Access to farm quotation databases and inquiry logs is restricted to authorized farm operators and management staff using multi-factor authentication and strict least-privilege role boundaries. Our hosting environments undergo routine software patching, automated vulnerability scans, regular firewall rule reviews, and isolated database credential management.

State verbatim: gdpr. For visitors who reach the site from Europe, the gdpr rights in full:

• Access: The right to request confirmation of whether we process your data and obtain a copy of your personal data.
• Rectification: The right to request correction of inaccurate or incomplete personal records.
• Erasure: The right to request the deletion of your personal data when no longer needed or where consent is withdrawn.
• Restriction: The right to restrict the processing of your personal data under certain statutory circumstances.
• Portability: The right to receive personal data you provided to us in a structured, commonly used and machine-readable format.
• Objection: The right to object to processing based on legitimate interests or for direct marketing.
• Withdrawing Consent: The right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Which privacy regime: US state privacy law applies — California (CCPA/CPRA) named, plus the other state laws in force. State verbatim: ccpa.

Under the California Consumer Privacy Act (ccpa) and applicable US state privacy laws, California and other state residents have the following rights:

• Right to Know & Access: You may request disclosure of the specific categories and pieces of personal information collected, sources, and commercial purposes.
• Right to Delete: You can request deletion of personal information collected from you, subject to legal defense and regulatory audit exceptions.
• Right to Correct: You have the right to demand correction of inaccurate personal data maintained in our records.
• Right to Opt-Out of Sale or Sharing: We do not sell personal data for money. You have the right to opt out of the sale or sharing of your personal information, including cross-context behavioral advertising. You can exercise this opt-out via our cookie settings or via Global Privacy Control.
• Right to Non-Discrimination: We will never discriminate against you, alter agricultural rates, or deny service for exercising your privacy rights.

Global Privacy Control (the Sec-GPC header) is honoured as an opt-out without asking again. State verbatim: global privacy control.

If your browser or browser extension transmits the global privacy control signal, our system automatically treats this as a valid affirmative opt-out request. All non-essential advertising and analytics storage keys are immediately switched to denied under Consent Mode v2 without requiring you to interact with our cookie consent banner.

The site is not for children and takes no data from them. Kafarms provides commercial agricultural services and wholesale straw exclusively to commercial farm managers and agricultural businesses.

We do not knowingly solicit or collect data from anyone under the age of 18 (or under 13 under COPPA). If we learn that any personal data of a child has been submitted, we immediately purge the record from our systems.

Complaints: the visitor may complain to their state Attorney General, and to the California Privacy Protection Agency in California, or to a competent data protection authority:

• State Attorney General: The visitor may complain to their state Attorney General (in North Carolina, the North Carolina Department of Justice, Consumer Protection Division, 9001 Mail Service Center, Raleigh, NC 27699-9001).
• California Residents: You may submit complaints to the California Privacy Protection Agency (CPPA), 915 Capitol Mall, Suite 350A, Sacramento, CA 95814, or the California Attorney General.
• European Visitors: You retain the right to lodge a complaint with your national Data Protection Authority (DPA).

How to exercise these rights, with the real address to write to and how long an answer takes:

To exercise your rights of access, rectification, erasure, restriction, portability, objection, or opt-out, submit your request to our data desk:

A data request is answered within 14 days. We do not charge fees for standard data requests.

K & A Farms, Inc. strives to make agricultural service information, pricing schedules, and quotation tools accessible to all visitors, including individuals with visual, auditory, cognitive, or motor impairments. We engineer our web templates against the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA benchmarks.

Key accessibility features built into kafarms.us include:

• High-contrast letterpress typography exceeding 4.5:1 contrast ratios against our pale glacier blue ground.
• Keyboard-navigable link rails, skip links, and tab sequences with visible focus indicators.
• Fully responsive fluid layouts functioning without horizontal clipping from 320px smartphones to wide monitors.
• Semantic HTML5 landmark regions, descriptive ARIA attributes, and clear table headers on all data grids.
• Full motion reduction support via prefers-reduced-motion media queries across all continuous marquees and animated elements.

If you experience any difficulty accessing information on this site or wish to request assistance in an alternative format, please call our office at (252) 207-3787 or email [email protected].

How a change to this policy is announced: Any modifications to this privacy policy are announced and published directly on this page at kafarms.us with an updated effective date stamped prominently at the top of the policy.

For material changes that impact the handling of personal data or inquiry information, we publish an advisory in our dispatch notice bar or homepage notice. We encourage visitors to review this page periodically.

To reach a human for any privacy question, inquiry clarification, or rights request:

Operator / controller: Kafarms, trading at kafarms.us
Postal address, written out in full: 204 OLD SWAMP ROAD, SOUTH MILLS, NC 27976, SOUTH MILLS, NC, United States
Email for enquiries and for data requests: [email protected]
Phone: (252) 207-3787