Privacy Policy

Last updated: April 12, 2026

---

1. Who We Are

OFarmingHQ ("we," "us," or "our") operates the website ofarminghq.com and sells digital educational products related to commodity brokering. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information We Collect

Information you provide directly:

• Purchase a product (name, email address, billing information)
• Opt in to our email list (name, email address)
• Contact us by email

We do not collect billing or payment card details directly — all payments are processed by Stripe, Inc. We receive only order confirmation data (name, email, amount).

Information collected automatically:

• Pages visited and time spent on each page
• The link or platform you clicked to reach our site (referral source / UTM parameters)
• Browser type, operating system, and approximate geographic location (country/region)
• Events such as clicking a buy button or landing on a thank-you page
• IP address (collected by Google Analytics; anonymized by default)

This data is collected via Google Analytics 4 (cookies) and our own UTM tracking script (browser localStorage). Neither identifies you personally.

3. How We Use Your Information

• To deliver your purchased digital products via email
• To send order confirmations and purchase receipts
• To send educational and marketing emails (only if you opted in)
• To respond to customer support requests
• To comply with legal obligations

4. Email Communications

If you purchase a product or opt in to our list, you may receive emails from us at orders@mail.ofarminghq.com. You may unsubscribe at any time by clicking the unsubscribe link in any email or by emailing us directly.

5. Third-Party Services

We use the following third-party services, each with their own privacy policies:

• Google Analytics 4 (Google LLC) — website analytics and traffic measurement. Google may use this data per their own privacy policy (policies.google.com/privacy). You can opt out at any time — see Section 9.
• Stripe — payment processing (stripe.com/privacy)
• Resend — transactional email delivery (resend.com/legal/privacy-policy)
• Vercel — website hosting (vercel.com/legal/privacy-policy)

We do not sell your personal information to any third parties.

6. Cookies and Tracking

Our website uses the following tracking technologies:

• Google Analytics cookies — GA4 sets two first-party cookies: _ga (expires 2 years) and _ga_F5LWSB218D (expires 2 years). These distinguish unique visitors and sessions. They do not contain personally identifiable information.
• UTM tracking via localStorage — when you arrive from a social media link, we store the traffic source (e.g., "tiktok," "instagram") in your browser's localStorage for up to 30 days. This lets us understand which platforms drive sales. No personal data is stored — only the source label and a timestamp.
• Server logs — our hosting provider (Vercel) logs basic request data (IP address, URL, timestamp) for security and performance. These logs are retained per Vercel's own policy.

We do not use advertising cookies, retargeting pixels, or cross-site tracking. You can disable cookies in your browser settings or opt out of Google Analytics at any time — see Section 9.

7. Data Retention

We retain different types of data for different periods:

• Purchase records and email addresses — retained for 7 years to comply with tax and legal requirements, or until you request deletion (whichever is later, where permitted by law)
• Google Analytics data — retained for 14 months in Google's systems, after which it is automatically deleted. You can adjust your own browser-level retention by clearing cookies.
• UTM/localStorage data — stored in your browser only, automatically expires after 30 days, and is never transmitted to our servers
• Email marketing records — retained until you unsubscribe, at which point your address is suppressed from future sends
• Server/hosting logs — retained per Vercel's policy (typically 30 days)

You may request deletion of your personal data at any time by contacting us. Note that some data may be retained as required by law even after a deletion request.

8. Security

We take the following measures to protect your data:

• Encryption in transit — all data transmitted to and from ofarminghq.com is encrypted via TLS 1.2+ (HTTPS). Our SSL certificate is issued by Let's Encrypt and covers both ofarminghq.com and www.ofarminghq.com.
• Payment security — payment card data is handled entirely by Stripe's PCI-DSS Level 1 compliant infrastructure and never touches our servers.
• Analytics data — behavioral data collected via Google Analytics is stored on Google's infrastructure and is subject to Google's own security standards. We do not store raw analytics data on our own servers.
• Access controls — access to customer data (order records, email lists) is limited to authorized personnel only.
• No sensitive data in localStorage — our UTM tracking script stores only traffic source labels (e.g., "tiktok") and timestamps in your browser. No names, emails, or financial data are ever written to localStorage.

No method of transmission over the internet is 100% secure. While we use commercially reasonable protections, we cannot guarantee absolute security.

9. Your Rights and Opt-Out Options

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Opt out of marketing communications at any time
• Object to or restrict certain types of data processing

To opt out of Google Analytics tracking, you have several options:

• Install the Google Analytics Opt-Out Browser Add-on
• Enable "Do Not Track" in your browser settings (honored on a best-effort basis)
• Use a browser extension that blocks analytics scripts (e.g., uBlock Origin)
• Clear your browser cookies — this resets your GA4 identifier

To clear UTM tracking data, open your browser's developer tools, go to Application → Local Storage → ofarminghq.com, and delete the ofhq_utm key. It also expires automatically after 30 days.

To exercise any other rights or submit a data deletion request, contact us at the email address below. We will respond within 30 days.

10. Children's Privacy

Our products and website are not directed at children under 13. We do not knowingly collect personal information from anyone under 13 years of age.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, contact us at: support@ofarminghq.com