Privacy Policy and Data Rights

These pages take effect on 2026-11-12. Every interaction with annapolisamishmarkets.com, including stall inquiry transmissions, market office telecommunications, real-time desk messaging, and advertising campaign referrals from Google Ads, Microsoft Advertising, and Meta Ads, is governed by the operational terms recorded herein. Governing law is the law of Maryland, United States, with disputes heard in the courts of Annapolis.

This document governs data handling disclosures for the physical trading location at 2472 Solomons Island Rd, Annapolis, Maryland 21401, Annapolis, Maryland, United States and its associated digital communications services.

The data controller responsible for the capture, retention, and routing of personal data processed through this marketplace web facility is:

Annapolis Amish Market maintains an inquiry-only commercial catalogue. The system does not operate consumer checkout baskets, customer registration portals, or digital payment processing gateways. Data intake is strictly limited to four explicit technical and operational channels:

1. Market Inquiry Form Transmissions: Submissions directed to bitu839.php capture the sender’s full legal or trading name, telephone number, email address, physical postal address, product classification or vendor category inquiry, message narrative, specific pitch or merchandise specifications, and the affirmative consent timestamp. At transmission, the server automatically appends the originating IP address, the browser user-agent header string, referring URL source, the timestamp of page composition, and the completion duration.

2. Live Desk Support Transmissions: Real-time interactive exchanges routed through sore999.php record message conversation transcripts, optional contact details supplied by the visitor (name, phone, email), session initiation timestamps, and a local session token persisted within browser local storage to maintain session continuity during marketplace browsing.

3. Technical Infrastructure Logs: Apache/Nginx web server hosting facilities automatically log client IP addresses, standard request method verbs, HTTP response status codes, requested URL paths, byte volume transfers, and timestamp strings.

4. Campaign Inbound Identifiers: Digital advertising campaigns running across external platforms append diagnostic query parameters upon consumer referral clicks: Google Ads attaches gclid, Microsoft Advertising attaches msclkid, and Meta Ads attaches fbclid. Browser local storage key site_consent_v2 retains the visitor’s explicit preference state.

Every data item processed by our digital infrastructure satisfies a specific commercial or technical requirement:

Merchant Evaluation and Allocation: Assessing vendor pitch qualification against our 10×10 ft layout rules, electrical connection requirements, cold-chain refrigeration capacity, and trade counter balance.

Direct Customer Communication: Responding to consumer inquiries regarding daily scratch bakery bake schedules, whole-wheel cheese cutting times, cured meats weights, and custom timber furniture commissions.

Site Integrity and Spam Abatement: Inspecting form latency tokens and hidden honeypot validation fields to prevent automated abuse, server depletion, and malicious inquiry scripts.

Marketing Performance Measurement: Quantifying advertising response rates from commercial campaigns across Maryland and surrounding regions to optimize market schedule notices and inventory allocations.

We process records exclusively under defined statutory legal bases recognized under federal, Maryland state, and international data protection standards:

Annapolis Amish Market actively runs commercial acquisition campaigns. We receive referral traffic through google ads, microsoft advertising, and Meta Ads. Google Ads, Microsoft Advertising and Meta Ads send traffic here today. When a prospective visitor clicks a sponsored search or social promotion, specific diagnostic click identifiers are transmitted:

Google Ads: The destination URL appends gclid (Google Click Identifier) to correlate downstream actions with keyword auctions and retail campaigns.

Microsoft Advertising: The destination URL appends msclkid (Microsoft Click Identifier) to connect merchant center listings and search ads with stall inquiry actions.

Meta Ads: Commercial social placements append fbclid (Meta Click Identifier) to associate feed engagements with marketplace visits.

These identifiers are evaluated on our web server only when tracking storage has been explicitly granted by the visitor through our consent interface. Click identifiers: gclid (Google), msclkid (Microsoft), fbclid (Meta). No platform has reviewed, approved, or verified this site.

Our digital properties operate consent mode v2 as a programmatic gatekeeper. Four specific consent signals govern analytical and advertising instrumentation:

Consent Mode v2 holds ad_storage, ad_user_data, ad_personalization and analytics_storage denied until the visitor allows storage, and sets them back to denied the moment the visitor declines or withdraws consent. All four operational signals are maintained in a strict denied state by default upon page load. No marketing cookies are written, and no behavioral profiles are generated prior to explicit visitor authorization. If the visitor clicks “Decline Non-Essential”, all four signals remain permanently denied. If previously accepted, a visitor can revoke permission at any moment via the consent control in the site footer, causing all four variables to immediately revert to denied.

Personal data collected through this marketplace website is shared exclusively with named technological sub-processors under binding operational and security agreements:

Google Ireland Ltd / Google LLC: Operates Google Ads and Google Analytics. Receives anonymized measurement pings and Consent Mode status signals.

Microsoft Ireland Operations Ltd / Microsoft Corporation: Powers Microsoft Advertising campaign measurement. When advertising storage is approved, diagnostic conversion signals are routed to Microsoft. The processing of this data is subject to the provisions outlined in the Microsoft privacy statement at privacy.microsoft.com/privacystatement.

Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Processes campaign attribution signals for Meta Ads when authorized by the consumer.

Web Hosting & Server Infrastructure Provider: Serves this site and stores the inquiry database within certified United States data center nodes.

SMTP Relay & Email Dispatch Provider: Securely transmits form inquiry notification records directly to market management at [email protected] via encrypted TLS tunnels.

Annapolis Amish Market stores and processes primary digital records on high-availability web servers physically situated inside the United States. Where visitors access this service from overseas jurisdictions, including the European Economic Area, United Kingdom, or Switzerland, processing occurs within United States server clusters.

Transfers to third-party technology providers operate in compliance with the EU-U.S. Data Privacy Framework, the UK Extension, and standard contractual clauses approved by competent regulatory bodies, guaranteeing equivalent safeguards.

We reject indefinite data warehousing. In compliance with strict minimization mandates, our system applies immutable retention ceilings:

Annapolis Amish Market implements modern defensive standards across all digital communication layers:

Transport Layer Security: All client-to-server traffic is forced over HTTPS utilizing TLS 1.3 encryption with strict HSTS headers and modern cipher suites.

Input Sanitization & Rate Restraint: Inquiries posted to bitu839.php undergo strict server-side validation, UTF-8 normalization, anti-spam honeypot filtering (firm and weblink parameters), and IP submission throttling.

Database Partitioning: Inquiry tables are shielded behind hardened operating systems with restricted localhost-only socket binding and least-privilege credentials.

For individuals accessing this service from the European Economic Area or United Kingdom under the General Data Protection Regulation (gdpr), the following statutory rights are guaranteed in full:

Right of Access (Article 15): Obtain confirmation of whether your data is processed and receive a structured copy of retained records.

Right to Rectification (Article 16): Require immediate correction of inaccurate or incomplete contact or vendor records.

Right to Erasure (Article 17): Request the permanent deletion of personal records where retention is no longer justified.

Right to Restriction (Article 18): Demand the freezing of processing pending verification of accuracy or legitimacy claims.

Right to Data Portability (Article 20): Receive your submitted contact information in an interoperable JSON or CSV format.

Right to Object (Article 21): Object to processing grounded in legitimate interests or commercial analytics.

Right to Withdraw Consent (Article 7(3)): Revoke previously granted consent choices instantly without penalty.

Residents of California under the California Consumer Privacy Act as amended by the CPRA (ccpa), alongside consumers residing in Virginia, Colorado, Connecticut, Utah, and Maryland, possess distinct rights regarding personal information:

Right to Know and Access: Demand disclosure of the specific pieces and categories of personal information collected, sources, and commercial purposes.

Right to Delete: Demand deletion of personal information collected directly from you, subject to standard statutory exemptions.

Right to Correct: Demand correction of inaccurate personal data held in active business records.

Notice of No Sale or Sharing: Annapolis Amish Market does not sell consumer personal information for monetary compensation, nor do we disclose personal data to third parties for cross-context behavioral advertising without affirmative consent. We do not process sensitive personal information to infer consumer traits.

Right to Non-Discrimination: Exercising your privacy rights will never result in price changes, service denial, or altered quality of marketplace goods or vendor stall allocations.

Annapolis Amish Market programmatically respects global privacy control (GPC) browser signals. When our web server detects a valid Sec-GPC header transmitting an opt-out preference, our consent state engine automatically treats the visit as an explicit denial of advertising storage, analytical telemetry, and data sharing without requiring manual intervention from the visitor.

Our digital services, market stall applications, and farm provision inquiries are directed exclusively to adults, professional agricultural vendors, and consumers aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 16. If we discover that an individual under 16 has submitted personal records through our contact form or support chat, those records are purged from our servers immediately.

If you believe your personal data has been handled in violation of applicable statutory requirements, you possess the right to file a formal complaint with relevant regulatory bodies:

Maryland Residents: Office of the Attorney General of Maryland, Consumer Protection Division, 200 St. Paul Place, Baltimore, MD 21202.

California Residents: California Privacy Protection Agency (CPPA), 915 Capitol Mall, Suite 350A, Sacramento, CA 95814.

European / International Visitors: The national Data Protection Authority (DPA) situated in your member state of habitual residence, place of work, or alleged infringement location.

To exercise any statutory right of access, rectification, erasure, restriction, or portability, submit a formal Data Subject Access Request directly to our compliance officer:

To protect customer records against fraudulent extraction, we require reasonable proof of identity matching the contact details on record (such as an email confirmation response from the originating address). We do not levy fees for standard statutory requests unless repetitive, excessive, or manifestly unfounded.

Annapolis Amish Market is committed to digital inclusivity, ensuring our provisions catalogue, vendor criteria, and customer inquiry interfaces are accessible to all patrons regardless of physical, sensory, or cognitive abilities.

Our site is engineered to conform with the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards. Key accessibility implementations include:

Color Contrast Architecture: Type elements maintain high contrast against our ground palette (--ink: #272A27 against --ground: #E4EAE3 provides an 11.9:1 ratio, exceeding the 4.5:1 AA threshold).

Keyboard Navigability: All interactive elements, drawer controls, bottom dock links, and modal widgets support keyboard traversal with visible focus indicators. A skip-to-content bypass is pinned at the document root.

Semantic Structure & Assistive Tech: Semantic HTML5 landmarks, explicit table headers, descriptive form labels, and SVG icons equipped with aria-hidden tags provide clear screen-reader interpretation.

Patrons experiencing accessibility barriers may contact our market office directly at 410-573-0770 or [email protected] for immediate accommodation.

We reserve the right to revise this Privacy Policy to reflect evolving regulatory frameworks, updated platform integration rules from Google Ads, Microsoft Advertising, or Meta, or operational changes in our market hall procedures. Revisions become effective upon publication with an updated effective date at the head of this document. Material alterations will be indicated via a visible announcement banner on our primary landing page.

For immediate questions regarding this policy, our data collection practices, or vendor compliance standards, contact market leadership directly: