Privacy policy
We keep what an inquiry needs, and ad cookies wait for your yes.
A parts inquiry needs a name, a way to reach you and a description of the part. That is most of what this site holds. The rest is the measurement side of the paid advertising that brings people here, and it stays switched off until you allow it.
Who and when
Date of this policy
This policy takes effect on , and it is the version that applies from that day until a newer one replaces it on this page.
Who runs this site
The controller of the data described here is Foremostfarms, trading as Foremost Farms at foremostfarms.net. Postal address: 8401 GREENWAY BLVD SUITE 600 · MIDDLETON, WI · 53562, United States. It is a parts counter and inquiry-only catalogue for dairy work. Nothing is sold or paid for on the site, so there is no account, no password, no card number and no payment record anywhere in it.
When this policy changes
A change is published on this page with a new effective date at the top, and the previous wording is kept on file so we can tell you what it said. If a change widens what we collect or who receives it, the cookie banner is shown again so you can make a fresh choice before anything new runs. We don't email a mailing list about it because we don't keep one.
Reaching a person
Privacy questions go to the same desk that answers parts questions, and a person reads them. Email [email protected], ring (608) 355-8791, or write to Foremostfarms, 8401 GREENWAY BLVD SUITE 600 · MIDDLETON, WI · 53562, United States.
What we take
Every category of data
- The inquiry form. When you send it,
fotu862.phpwrites your name, phone, email, address, the kind of inquiry, your message, the specification you asked for (a part number, a size, a measurement) and whether you ticked the consent box. - Sent along with the form, automatically. Your IP address, your browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent. The two times are how we filter out bots that fill a form in under a second.
- The support chat.
tivu3c3.phpkeeps the conversation, plus any name, phone or email you choose to give it. A token is stored in your browser so you can come back to the same conversation. - Server and access logs. The web server records requests: IP address, time, page asked for, browser string and response code.
- Cookie and storage identifiers. Your consent choice under
site_consent_v2, the chat token, and, only if you allow them, the analytics and advertising cookies listed on the cookie notice. - Advertising click identifiers. A click from an ad arrives with a gclid (Google Ads), an msclkid (Microsoft Advertising) or an fbclid (Meta Ads) in the address.
What each one is used for
Form and chat contents are used to identify the part, answer with stock, an indicative price and a lead time, and then invoice and ship if you go ahead. The automatic form data and the logs are used to stop spam, trace faults and keep the site running. The consent record exists so the site remembers your answer. Analytics tells us which catalogue pages people actually use. Click identifiers and advertising cookies tell the ad platforms whether a paid click led to an inquiry, which is how we decide what to stop paying for.
The legal basis for each purpose
| Purpose | Data | Legal basis |
|---|---|---|
| Answering an inquiry, quoting, invoicing, dispatch | Form fields, chat | Contract, or steps you asked for before one |
| Replying at all | Consent tick on the form | Consent |
| Spam filtering, security, fault tracing | IP, user-agent, times, logs | Legitimate interest |
| Remembering your cookie choice | site_consent_v2 | Legitimate interest, and legal obligation to record consent |
| Site statistics | Analytics cookies | Consent |
| Ad conversion measurement | gclid, msclkid, fbclid, ad cookies | Consent |
Advertising
The platforms that send people here
This site buys clicks. Google Ads and Microsoft Advertising send traffic here today, and Meta Ads does when a campaign is running there. Each one adds its own click identifier to the link you follow:
gclidAdded by Google Ads to a click on a Google search or display ad.msclkidAdded by Microsoft Advertising to a click on a Bing or Microsoft network ad.fbclidAdded by Meta to a click from Facebook or Instagram, including Meta Ads.
The identifier sits in the address bar whatever you choose. What changes with your choice is whether the site stores it and reports a conversion back. Declined, it is ignored.
Consent Mode v2
The site uses Google's Consent Mode v2, and the Microsoft consent signal works the same way. On arrival, four signals are set to denied: ad_storage, ad_user_data, ad_personalization and analytics_storage. They stay denied until you press "Allow cookies". Only then are they set to granted. If you press "Decline", or later withdraw from the cookie settings link in the footer, all four are set back to denied at once and no advertising or analytics cookie is written from then on.
While the signals are denied, the platforms may receive a cookieless ping that a page was loaded, without an identifier that follows you. That is how consent mode is built, and it is the most they get without your yes.
Global Privacy Control
If your browser sends the Global Privacy Control signal (the Sec-GPC header), the site treats it as a decline and does not ask you again. All four consent mode signals start denied, and ad_storage, ad_user_data and ad_personalization stay denied even if you later press "Allow cookies". Any advertising cookie already in your browser from this site is cleared.
Who receives it
Third parties, one by one
- Google Ireland Ltd and Google LLC for Google Ads. Receives the gclid and the consent signals, and conversion data when you have allowed it.
- Microsoft Ireland Operations Ltd for Microsoft Advertising. Receives the msclkid and conversion data when allowed. Microsoft's own handling is set out in the Microsoft privacy statement at privacy.microsoft.com/privacystatement.
- Meta Platforms Ireland Ltd for Meta Ads, where a campaign runs there. Receives the fbclid and conversion data when allowed.
- The hosting provider that serves this site and stores the inquiry and chat database.
- The mail provider that carries each inquiry notification to the parts desk inbox.
We don't sell your data to anyone, and no list of buyers goes to a parts maker or a dealer network.
Data that leaves the country
The site is run from the United States, so if you contact us from Europe your data is transferred to the US. The ad platforms may also process it in the US and in Ireland. Those transfers rely on the EU-US Data Privacy Framework where the recipient is certified under it, and on the European Commission's standard contractual clauses where it is not.
How long each thing is kept
| Record | Kept for |
|---|---|
| Inquiries and their email copies | 24 months |
| Chat transcripts | 18 months |
| Server and access logs | 30 days |
| Record of a consent choice | 6 months |
After the period ends the record is deleted. Invoices for orders that went ahead are business records and follow tax rules, not this table.
How it is protected
Every page and form is served over HTTPS. The inquiry and chat store sits outside the public web folder and is reachable only through a password-protected operator panel used by the desk. Forms carry two hidden honeypot fields and a timing check to keep automated abuse out. Logs roll over after 30 days. Access to the panel is limited to the people on the parts desk who answer inquiries.
Your rights
If you are in Europe: the GDPR
Under the GDPR you have the right of access to what we hold about you, the right to rectification of anything wrong, the right to erasure, the right to restriction of processing, the right to data portability in a common format, and the right to object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time from the cookie settings link or by writing to us, and withdrawing doesn't undo what was lawfully done before.
If you are in the United States
California residents have rights under the CCPA as amended by the CPRA: to know what personal information we collect and why, to delete it, to correct it, to opt out of its sale or sharing for cross-context behavioural advertising, to limit use of sensitive information, and not to be treated differently for using any of these. We don't sell personal information. Sharing a click identifier with an ad platform can count as sharing under the CCPA, so declining cookies, or sending Global Privacy Control, is your opt-out and it takes effect immediately. Residents of other states with privacy laws in force, including Texas, Colorado, Virginia and Connecticut, have comparable rights and we honour them the same way.
Children
This is a trade catalogue for dairy parts. It is not meant for children under 16 and we don't knowingly take any data from them. If a child has sent us something, tell us and we delete it.
Complaining to an authority
You can complain to your state Attorney General, and in California to the California Privacy Protection Agency. In Europe you can complain to the data protection authority where you live or work. We'd rather hear it first, but you don't need to go through us.
How to use any of these rights
Use the data request form, email [email protected], or write to Foremostfarms, 8401 GREENWAY BLVD SUITE 600 · MIDDLETON, WI · 53562, United States. Say which right you're using and give the email or phone you used with us so we can find the record. We may ask one question to confirm it's you. A data request is answered within 14 days.