Privacy disclosures, advertising identifiers, and customer data rights

This policy explains how Amishnmc records inquiries, respects Consent Mode v2, and handles advertising signals across our Albuquerque showroom operations.

Architecture: Clause Ledger Effective: November 10, 2026 Inquiry Only • No Online Cart
Clause & Scope What This Means In Plain Words Why It Applies & Legal Context
Effective Date This privacy policy took effect on November 10, 2026. All active website visits, inquiry submissions, and advertising signals from that date forward are governed under these terms. Baseline versioning date required under New Mexico and US state statutory consumer transparency standards.
Data Controller The data controller for this website is Amishnmc, trading at amishnmc.com, with physical showroom and business premises located at 1009 Juan Tabo Blvd NE, Albuquerque, New Mexico 87112, Albuquerque, New Mexico, United States. Telephone: 505-294-2638. Email: [email protected]. Identifies the legal operating entity responsible for personal data collected through workshop consultations and site traffic.
Data Collected When you submit an estimate form or message our desk, we collect your name, phone number, email address, physical delivery address or ZIP code, selected furniture category, requested timber specification, message notes, and consent confirmation. We also log your IP address, browser user-agent string, referring URL, form render timestamp, and submission timestamp. Our support chat records conversation transcripts and stores a session token in your browser. If you arrive via search ads, we process advertising click identifiers (gclid, msclkid, fbclid). No passwords, accounts, or payment card data are ever collected. Necessary to communicate custom dining estimates, detect automated form spam, and measure inbound advertising campaigns accurately.
Purposes of Processing Your information is used strictly to prepare woodworking quotes, verify showroom inventory, answer joinery questions, confirm delivery routes in New Mexico, optimize advertising campaigns on Google Ads, Microsoft Advertising, and Meta Ads, and safeguard our server infrastructure against automated abuse. Limits data handling exclusively to the legitimate commercial functions of our custom hardwood furniture business.
Advertising Platforms This website receives paid traffic from Google Ads, Microsoft Advertising, and Meta Ads. These platforms append unique click identifiers to destination URLs: gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads. These parameters allow the platforms to match clicks with campaign interactions when conversion tracking is permitted. Mandatory present-tense transparency disclosure for active commercial paid search and display campaigns.
Third-Party Processors Data may be processed by our infrastructure partners: Google Ireland Ltd and Google LLC for Google Ads infrastructure and Consent Mode signaling; Microsoft Ireland Operations Ltd for Microsoft Advertising, governed by the Microsoft Privacy Statement at privacy.microsoft.com; Meta Platforms Ireland Ltd for Meta Ads campaigns; our web hosting facility providing database storage; and our secure mail routing relay delivering inquiries to [email protected]. Discloses third-party cloud and advertising vendors who handle technical data on behalf of our furniture workshop.
International Transfers Our servers and showroom are based in Albuquerque, New Mexico, United States. Data submitted by visitors outside the United States is transferred to and processed within the US under standard contractual clauses, adequacy frameworks, and robust technical encryption safeguards. Provides legal grounding for international inquiries reaching our New Mexico workshop servers from abroad.
Data Retention We enforce precise retention schedules: customer inquiries and email records are retained for 24 months to support multi-year heirloom furniture design and warranty consultations; support chat transcripts are retained for 18 months; server security and access logs are retained for 90 days; cookie consent choices stored under site_consent_v2 are retained in your browser for 12 months; and statutory data rights requests are answered within 7 days. Replaces vague indefinite storage statements with concrete, verifiable retention thresholds.
Security Measures All website communications are protected by TLS encryption in transit. Our inquiry processing endpoints utilize automated rate limiting, hidden anti-spam honeypot parameters, strict file permission architecture, and isolated server storage without public directory indexing. Protects prospective customer specifications and contact details from unauthorized interception or extraction.
GDPR Rights Visitors protected under the General Data Protection Regulation (GDPR) hold comprehensive rights: the right of access to personal records, rectification of inaccurate details, erasure of inquiry records, restriction of processing, data portability in structured format, objection to processing, and the right to withdraw previously granted consent at any time without penalty. Ensures European visitors reaching our workshop site can exercise fundamental data protection rights under GDPR.
US State Privacy & CCPA Residents of California (under CCPA and CPRA) and other US states with active comprehensive privacy laws have the right to know what personal categories we collect, request deletion of their information, correct inaccuracies, and opt out of the sale or sharing of personal data. We do not sell your personal information or share it with third parties for independent commercial marketing. Required statutory disclosures for California and multi-state American consumer privacy compliance.
Global Privacy Control We recognize and automatically honour the Global Privacy Control (GPC) signal transmitted via the Sec-GPC HTTP header. When our server detects an active GPC signal from your browser, non-essential advertising and analytics storage is suppressed immediately without requiring manual banner interaction. Complies with California Attorney General enforcement mandates regarding automated browser opt-out signals.
Children’s Privacy Our website and solid hardwood furniture products are directed exclusively to adults and commercial purchasers. We do not knowingly solicit, collect, or store personal information from individuals under the age of 16. Maintains strict compliance with COPPA and state child online privacy protection legislation.
Right to File Complaints If you believe our processing of your personal information infringes your privacy rights, you have the right to lodge a complaint with your relevant state authority, including the New Mexico Attorney General, the California Privacy Protection Agency (CPPA), or an applicable European data protection supervisory authority. Provides direct regulatory recourse for consumers seeking administrative review of privacy practices.
Exercising Rights (DSAR) To inspect, modify, or permanently delete personal data submitted through our inquiry forms or support chat, email [email protected] or write to Amishnmc at 1009 Juan Tabo Blvd NE, Albuquerque, NM 87112. We respond to all verified statutory data requests within 7 days at no charge. Specifies concrete operational procedures and verified turnaround windows for data subject requests.
Policy Modifications Any revisions to this privacy policy or our data practices will be published directly on this page with an updated effective date header. Substantial changes affecting previously collected records will be announced via prominent site notifications. Maintains continuous accountability and transparency as advertising rules or workshop systems evolve.
Privacy Contact Details For privacy questions, data requests, or showroom security inquiries, contact our management team directly at [email protected], call our Albuquerque desk at 505-294-2638, or write to 1009 Juan Tabo Blvd NE, Albuquerque, New Mexico 87112, United States. Direct human contact channel ensuring prompt access to the operating managers of The Amish Connection.
Effective Date
Plain Meaning

This policy took effect on November 10, 2026. All active visits and inquiries are governed under these terms.

Statutory Context

Baseline versioning date required under New Mexico and US state statutory consumer transparency standards.

Data Controller
Plain Meaning

Amishnmc, trading at amishnmc.com, located at 1009 Juan Tabo Blvd NE, Albuquerque, New Mexico 87112, United States. Telephone: 505-294-2638. Email: [email protected].

Statutory Context

Identifies the legal operating entity responsible for personal data collected through our workshop desk.

Data Collected
Plain Meaning

We collect names, phone numbers, email addresses, delivery locations, custom furniture specs, chat logs, IP addresses, user-agent strings, and ad click identifiers (gclid, msclkid, fbclid). No passwords or card numbers are taken.

Statutory Context

Necessary to communicate custom dining estimates, detect automated form spam, and measure inbound campaigns.

Purposes of Processing
Plain Meaning

Your information is used strictly to prepare dining estimates, verify showroom stock, confirm delivery routes in New Mexico, optimize Google Ads, Microsoft Advertising, and Meta Ads, and safeguard our server infrastructure.

Statutory Context

Limits data handling exclusively to the legitimate commercial functions of our custom hardwood furniture business.

Legal Bases
Plain Meaning

Inquiries are handled to take pre-contractual steps at your request. Advertising beacons depend on affirmative consent. Server logging relies on our legitimate interest in site security.

Statutory Context

Aligns processing activities with statutory requirements under US state privacy laws and GDPR Article 6 standards.

Advertising Platforms
Plain Meaning

We actively receive paid clicks from Google Ads, Microsoft Advertising, and Meta Ads, which append gclid, msclkid, and fbclid click identifiers respectively.

Statutory Context

Mandatory present-tense transparency disclosure for active commercial paid search and display campaigns.

Consent Mode v2
Plain Meaning

We enforce Google Consent Mode v2. Signals ad_storage, ad_user_data, ad_personalization, and analytics_storage remain denied until you click Accept, and return to denied if declined.

Statutory Context

Ensures strict technical compliance with Google European and regional user consent enforcement mechanisms.

Third-Party Processors
Plain Meaning

Data is processed by Google LLC / Google Ireland Ltd, Microsoft Ireland Operations Ltd (privacy.microsoft.com), Meta Platforms Ireland Ltd, our hosting facility, and secure mail servers.

Statutory Context

Discloses third-party cloud and advertising vendors who handle technical data on behalf of our furniture workshop.

International Transfers
Plain Meaning

Inquiries from outside the US are transferred to our Albuquerque, New Mexico servers under standard contractual safeguards and TLS encryption.

Statutory Context

Provides legal grounding for international inquiries reaching our New Mexico workshop servers from abroad.

Data Retention
Plain Meaning

Inquiries are held for 24 months, chat transcripts for 18 months, server logs for 90 days, and cookie choices for 12 months. Data requests are fulfilled in 7 days.

Statutory Context

Replaces vague indefinite storage statements with concrete, verifiable retention thresholds.

Security Measures
Plain Meaning

TLS encryption, firewall rate limits, honeypots, and hardened server permissions protect all customer communications.

Statutory Context

Protects prospective customer specifications and contact details from unauthorized interception or extraction.

GDPR Rights
Plain Meaning

Visitors under the GDPR possess rights to access, rectify, erase, restrict, port, or object to personal data, and to withdraw consent without penalty.

Statutory Context

Ensures European visitors reaching our workshop site can exercise fundamental data protection rights under GDPR.

US State Privacy & CCPA
Plain Meaning

California residents and other US consumers may request access to, correction of, or deletion of their records. We do not sell or share personal data for marketing.

Statutory Context

Required statutory disclosures for California and multi-state American consumer privacy compliance under CCPA.

Global Privacy Control
Plain Meaning

We automatically honour Global Privacy Control (GPC) signals sent via the Sec-GPC header, disabling non-essential ad tracking without requiring manual opt-out.

Statutory Context

Complies with California Attorney General enforcement mandates regarding automated browser opt-out signals.

Children’s Privacy
Plain Meaning

We do not knowingly collect or store personal information from individuals under the age of 16.

Statutory Context

Maintains strict compliance with COPPA and state child online privacy protection legislation.

Complaints
Plain Meaning

Consumers may file data complaints with the New Mexico Attorney General, the California Privacy Protection Agency (CPPA), or applicable European supervisory authorities.

Statutory Context

Provides direct regulatory recourse for consumers seeking administrative review of privacy practices.

Data Request (DSAR)
Plain Meaning

Email [email protected] or write to 1009 Juan Tabo Blvd NE, Albuquerque, NM 87112 to inspect or delete your records within 7 days.

Statutory Context

Specifies concrete operational procedures and verified turnaround windows for data subject requests.

Policy Modifications
Plain Meaning

Policy updates will appear directly on this page with a revised effective date header.

Statutory Context

Maintains continuous accountability and transparency as advertising rules or workshop systems evolve.

Contact Details
Plain Meaning

Contact our Albuquerque management desk at [email protected], phone 505-294-2638, or 1009 Juan Tabo Blvd NE, Albuquerque, New Mexico 87112.

Statutory Context

Direct human contact channel ensuring prompt access to the operating managers of The Amish Connection.

Policy Effective Date & Jurisdictional Scope

This privacy statement took effect on November 10, 2026 and governs all customer communications, digital inquiries, and advertising tracking connected with Amishnmc. This document is governed by the laws of New Mexico, United States, with disputes subject to the exclusive jurisdiction of the state and federal courts in Albuquerque, New Mexico.

Operating Entity & Physical Showroom

The data controller is Amishnmc, trading as The Amish Connection at amishnmc.com. Our principal showroom and workshop office is located at 1009 Juan Tabo Blvd NE, Albuquerque, New Mexico 87112, Albuquerque, New Mexico, United States. Contact telephone: 505-294-2638. Inquiry and administrative email: [email protected].

Categories of Data Collected Across Our Platforms

We collect personal information directly when you request a custom dining estimate or interact with our showroom desk:

  • Inquiry Form Records: Full name, telephone number, email address, physical delivery address or Albuquerque area ZIP code, selected dining set category, custom timber specifications, and project notes submitted through fowu732.php.
  • Automated Server Telemetry: Visitor IP address, browser user-agent header, referring URL, time of initial form render, and time of transmission.
  • Live Support Transcripts: Chat message text and a localized session persistence token stored in your browser under soge24f.php.
  • Advertising Identifiers: Inbound campaign click identifiers, specifically gclid from Google Ads, msclkid from Microsoft Advertising, and fbclid from Meta Ads.
  • Consent Registry: An affirmative or negative preference token stored in browser localStorage under site_consent_v2.

We do not maintain customer accounts, passwords, or stored credit card data. The catalogue is strictly inquiry-only and no financial transactions are processed on this site.

Purposes for Which Personal Information is Processed

All data collected is used solely to provide itemized solid hardwood furniture quotes, answer custom woodworking questions, coordinate showroom appointments at 1009 Juan Tabo Blvd NE, plan local New Mexico white-glove deliveries, measure marketing campaign efficiency across search engines, and maintain server integrity against automated bot submissions.

Legal Bases for Processing Under US & International Standards

We process your information in accordance with defined statutory legal bases:

  • Pre-Contractual Measures: Processing inquiry forms and dimension requests to provide formal timber quotes prior to an order.
  • Affirmative Consent: Placing measurement beacons and ad conversion tracking via Google Ads, Microsoft Advertising, and Meta Ads.
  • Legitimate Interests: Operating security firewalls, honeypot spam detection, and server telemetry logs to prevent fraud.

Active Advertising Platforms & Click Identifiers

This site receives commercial advertising traffic from google ads, microsoft advertising, and Meta Ads. When a visitor clicks on one of our sponsored advertisements, the destination URL receives specific query parameters:

  • gclid — Google Click Identifier generated by google ads for campaign attribution.
  • msclkid — Microsoft Click Identifier appended by microsoft advertising for conversion tracking.
  • fbclid — Facebook Click Identifier utilized by Meta Ads.

These parameters are read by client-side tags only when consent is granted. We never claim that any advertising network has reviewed, certified, or endorsed our furniture workshop.

Google Consent Mode v2 Architecture

Our site deploys Google consent mode v2 to govern advertising tags. Upon initial page load, four essential privacy signals are initialized to a default denied state:

  • ad_storage — Held denied until explicit visitor acceptance.
  • ad_user_data — Held denied until explicit visitor acceptance.
  • ad_personalization — Held denied until explicit visitor acceptance.
  • analytics_storage — Held denied until explicit visitor acceptance.

If a visitor clicks “Decline” on our consent banner or closes the disclosure without opting in, all four signals remain strictly denied. When a user changes their preference to decline, these parameters are immediately updated to denied across the active session.

Third-Party Processors & Service Providers

We share technical telemetry and advertising parameters only with contracted third-party processors bound by confidentiality obligations:

  • Google LLC & Google Ireland Ltd: Advertising delivery, analytics measurement, and Consent Mode tag management.
  • Microsoft Ireland Operations Ltd: Search ad measurement via Microsoft Advertising. For comprehensive details on Microsoft’s data practices, review the Microsoft Privacy Statement at privacy.microsoft.com.
  • Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Social advertising measurement and audience engagement.
  • Hosting Infrastructure Provider: Secure web application server hosting and database storage located in US data centers.
  • Transactional Mail Routing Service: Encrypted relay routing incoming workshop inquiries directly to [email protected].

Cross-Border Data Transfers

All central databases and showroom operations are located in Albuquerque, New Mexico, United States. When visitors outside the United States access our catalogue or transmit specifications, their personal information is transferred to and processed within the US. We apply technical encryption standards and contractual safeguards to ensure an equivalent level of privacy protection across international borders.

Specific Data Retention Schedules

We do not store information indefinitely. We observe concrete data lifecycle windows:

  • Inquiries and Email Records: Retained for 24 months following receipt to allow customer re-orders, timber batch matching, and multi-year heirloom design consultations.
  • Support Chat Transcripts: Retained for 18 months to provide continuity during custom furniture design cycles.
  • Server Access and Security Logs: Retained for 90 days before automated deletion by server rotation utilities.
  • Consent Records: The site_consent_v2 token persists in your browser for 12 months unless manually cleared.
  • Statutory Data Requests: Data subject access and deletion requests are verified and fulfilled within 7 days.

Technical & Organizational Security Protections

We maintain multi-layered security controls to protect inquiry data: TLS encryption across all web sessions, strict file permissions on inquiry intake scripts, automated rate-limiting to prevent brute-force attacks, and invisible honeypot validation fields (company and domain) that reject automated harvesting scripts.

Your Statutory Rights Under the GDPR

For visitors residing within the European Economic Area or United Kingdom, the gdpr provides you with specific enforceable rights:

  • The right to access all personal data maintained regarding your inquiries.
  • The right to request rectification of incomplete or inaccurate wood specifications and contact details.
  • The right to obtain complete erasure (“right to be forgotten”) of your records from our servers.
  • The right to restrict or suspend processing of your information.
  • The right to data portability in an exportable, machine-readable format.
  • The right to object to processing founded upon our legitimate interests.
  • The right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

US State Privacy Laws & California Consumer Privacy Act

Under the California Consumer Privacy Act (ccpa), the California Privacy Rights Act (CPRA), and related comprehensive US state privacy statutes in Virginia, Colorado, Connecticut, Utah, and other jurisdictions:

  • You have the right to know the categories and specific pieces of personal information we have collected over the preceding twelve months.
  • You have the right to request deletion of personal information collected from you.
  • You have the right to correct inaccurate personal data.
  • You have the right to opt out of the sale or sharing of personal data. The Amish Connection does not sell personal information and has not sold personal information in the preceding 12 months.
  • You have the right to non-discrimination for exercising any of your statutory privacy protections.

Recognition of Global Privacy Control Signals

Our server and client scripts automatically monitor for the global privacy control signal transmitted via the Sec-GPC header. If your browser or privacy extension transmits this signal, we interpret it as an immediate statutory opt-out of ad tracking and non-essential measurement cookies. Our cookie consent banner respects this preference automatically without requiring repeated manual clicks.

Protection of Children’s Privacy

Our commercial website and heirloom furniture services are designed for adult homeowners, interior designers, and commercial buyers. We do not knowingly solicit, collect, or store personal information from children under the age of 16. If we become aware that an inquiry has been submitted by a minor, the information is expunged from our records immediately.

Regulatory Complaints & Supervisory Authorities

You hold the legal right to submit complaints regarding our handling of your personal information to your competent privacy regulator. In the United States, you may contact the New Mexico Office of the Attorney General (Consumer Protection Division) or, for California residents, the California Privacy Protection Agency (CPPA). European visitors may lodge complaints with their national Data Protection Authority (DPA).

Exercising Data Subject Access Rights (DSAR)

To exercise any of your privacy rights — including requesting a copy of your inquiry history or asking for permanent deletion — please submit your request to our data desk:

Data Protection Officer • Amishnmc

Email: [email protected] (Subject line: “Data Subject Access Request”)

Telephone: 505-294-2638

Postal Address: 1009 Juan Tabo Blvd NE, Albuquerque, New Mexico 87112, United States

We verify the identity of the requester against previously submitted email or phone records and provide an itemized response within 7 days of verification at no cost.

Notification of Policy Changes

We reserve the right to modify this privacy policy to reflect new workshop systems, updated privacy statutes, or revised advertising guidelines from Google Ads and Microsoft Advertising. Revisions take effect immediately upon publication on this URL. The date of the most recent revision will always be displayed at the top of this document.

Privacy Inquiries & Showroom Contacts

If you have questions regarding our timber certifications, customer data handling, or advertising compliance, please contact our Albuquerque management team:

  • Entity Name: Amishnmc, trading as The Amish Connection
  • Physical Showroom: 1009 Juan Tabo Blvd NE, Albuquerque, New Mexico 87112, United States
  • Telephone: 505-294-2638 (Monday through Saturday, 10:00 to 17:00 Mountain Time)
  • Email: [email protected]

Website Accessibility Statement (WCAG 2.1 AA)

The Amish Connection is committed to ensuring digital accessibility for people of all abilities. We strive to adhere to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA specifications across our online catalogue and inquiry forms.

Accessibility Implementations:

  • High text contrast ratios exceeding 6.9:1 on secondary text and 11.9:1 on primary body copy.
  • Logical heading hierarchy with balance across all viewport sizes.
  • Keyboard accessibility for interactive components including consent controls, support panels, and inquiry inputs.
  • Descriptive alternative text for photographs depicting solid hardwoods, mortise-and-tenon joinery, and showroom settings.
  • Visible focus outlines for all interactive elements.

If you encounter any difficulty accessing any portion of this website or require assistance with custom dining specifications, please call our Albuquerque showroom at 505-294-2638 or email [email protected].