Your privacy choices

Can we use optional analytics? It would show us which pages are visited, which links and buttons get used (like Book Tickets), and your device and browser type. It stays off unless you accept. Session recordings are a separate choice under Preferences.

Privacy Policy

Last updated: October 8, 2026

This policy explains what the McMillan Farms website collects, why, and the choices you have. In short:

  • You can use the whole site, including tickets and the contact form, without accepting analytics.
  • Optional analytics runs only if you accept it. It shows us which pages are visited, which links and buttons get used (like Book Tickets), and your device and browser type. It uses a random ID saved in your browser, not your name or email.
  • Session recordings are a separate choice that needs analytics turned on. Anything you type and all forms are hidden from recordings. We have not turned recordings on yet.
  • You can change your choices anytime from Privacy preferences at the bottom of every page.
  • We can switch analytics off for the whole site. While it is off, there is no banner or Privacy preferences, and nothing new is collected in your browser.

Who we are and what this policy covers

McMillan Farms is a family farm in Kelowna, British Columbia. This policy covers this website, www.mcmillanfarms.ca. It does not cover the other websites we link to, such as Showpass for tickets, the farm's online shop at shop.mcmillanfarms.ca, or our social media pages. Each of those has its own privacy practices.

Information you send us

The site asks for personal details only in its forms. What happens next depends on the form.

Contact form

When you send a message through the contact form, we receive your name, email address, phone number, the subject you choose, and your message. We send it to the farm's inbox through our email service provider, Resend, so we can read it and reply.

We use your message only to reply to you and follow up on it. We keep it in the farm's inbox only as long as we need it for that, then delete it. Resend keeps a copy of each email it sends, with a log of what happened to it, for 30 days.

To limit spam, the form has a hidden field that automated programs tend to fill in, and it limits how many messages one IP (Internet Protocol) address can send in an hour. That count is held only in the memory of the server that handled your request, and it is removed after about an hour.

Email offers

If you enter your email address for an offer on this site, such as our winter hayride discount, we collect it, when and where you entered it (a QR code at the farm, a pop-up, or a page on this site), and which version of our consent wording you agreed to.

We use this information to email you the offer code, a reminder before our Christmas tree season, and occasional news and offers from McMillan Farms.

Our email provider, Resend, stores this information in the United States and sends these emails for us.

We keep your email address and these details until you ask us to delete them. If you unsubscribe, we stop emailing you but keep your address marked as unsubscribed so we can honour your choice. You can unsubscribe at any time with the link in any of our emails, by replying to any of our emails, or by writing to information@mcmillanfarms.ca.

To keep automated programs from abusing the offer form, the site uses Vercel BotID. Its script runs in your browser on this site and checks each submission before it is accepted, using technical signals about your browser and device that Vercel uses only to tell people from automated programs.

Your privacy choices

The first time you visit, a banner offers Accept analytics, Reject analytics, and Preferences. The banner does not block the page. Tickets, contact, and the rest of the site work the same whatever you choose.

The three choices work like this:

  • Accept analytics turns on analytics but never session recordings.
  • Reject analytics keeps analytics and session recordings off.
  • Preferences opens Privacy preferences. There you can choose Allow analytics and, separately, Allow session recordings, then select Save preferences.

If your browser sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, analytics and session recordings stay off, even if you allowed them before.

We save your choice in your browser's local storage under the name mcmillan_farms_consent. It stays there until you change your choice or clear this site's data in your browser. Once you accept analytics, PostHog's code also keeps a small note in local storage saying whether analytics is on or off, and the note stays after you turn analytics off.

Optional analytics

If you accept analytics, the site loads PostHog, an analytics service, and sends it information about how the site is used. Before you accept, the site does not load PostHog at all.

With analytics on, PostHog receives:

  • The pages you view, without anything after a question mark in the web address. The site replaces any address that does not match one of its pages with a placeholder.
  • When you leave a page, how long you stayed, and how far you scrolled.
  • Which links and buttons you use, such as Book Tickets, and where they sit on the page. For email, phone, and map links we record only which kind of link it was, never the address or number.
  • Which menus you open and which frequently asked questions you expand.
  • Each step of the contact form: when it appears, when you start filling it in, and whether our email provider accepted your message. We record the subject you picked and which fields needed correcting, never what you typed.
  • Technical errors: the kind of error and where in the site's code it happened, not its message. If sending your contact message fails, our server reports that error with your random ID.
  • The website that sent you here, as its main address only (such as www.google.com), never the page you were on there or your search words. Addresses that are only numbers or that belong to a private network are left out, and so are names we recognize as spelling out a numeric address.
  • Campaign tags from links we published, when they are on our approved list. The site drops any other tag.
  • Your device type, operating system, browser and their versions, browser language, time zone, and screen and window size.
  • A random ID saved in your browser, an ID for each visit, and the time of each event.
  • The site's version, and whether it was the live site or a test version.
  • The name of the current seasonal campaign, and whether the browser is marked as a farm staff browser.

PostHog does not receive your name, email address, phone number, or messages, or anything you type into any form. PostHog's person profiles are turned off, so your events are linked only by the random ID. We also switched off PostHog's automatic click collection, heatmaps, surveys, and similar features.

PostHog keeps its information in your browser's local storage and session storage, never in cookies. If your browser blocks either kind of storage, PostHog keeps the random ID and visit details only in the open page, so a new page starts with a new random ID.

Session recordings

Session recordings are a separate choice that needs analytics turned on. If you choose Allow session recordings, PostHog may record some of your visits: clicks, scrolling, mouse movement, and the layout of the pages you see. Only a sample of visits from people who allow recordings is recorded. Recordings are linked to the same random ID as analytics.

We have not turned session recordings on yet. Until we do, nothing is recorded even if you allow recordings, and we will update this policy before we turn them on.

Recordings hide what you type and what the site shows back to you:

  • Anything you type and all forms are hidden. Every form is blocked and appears as an empty box, including its fields and messages.
  • Page text is replaced with placeholder characters, except two headings: "Get in touch" and "Careers".
  • The recorder blocks pop-up notices, status messages, and the contact form's confirmation message.
  • It blocks content embedded from other websites, such as the Google Maps map.
  • It hides link addresses and images from other websites, and keeps only the path of each web address.

A recording can show which pages you visited and how you moved around them. It cannot show what you typed or chose in a form.

Your IP address

Every website and online service your browser contacts sees your device's IP address. That includes PostHog when analytics is on. PostHog can use your IP address briefly, before it is discarded. For example, it can estimate your approximate location, such as your country or city, and filter out automated traffic.

We have set PostHog to discard your IP address instead of storing it with analytics events.

This is not a promise that PostHog never processes your IP address. When our server reports a contact result or a technical error to PostHog, it does not include your IP address, and it turns off location lookup for those reports.

Technical error reports from our server

If sending your contact message fails, or another error happens on our server, our server can report the error to PostHog even if you did not accept analytics. This helps us fix the problem. These reports describe only the error: its kind and code, which part of the site failed, where in our code it happened, and the site version. They contain no name, email address, phone number, message, IP address, random ID, or anything else that links the report to you or your visit on its own. If you accepted analytics and the same error also shows you an error page, your browser's report of that page carries the same error code, so the two can be matched.

If you accepted analytics, a failure while sending your contact message is instead reported once, linked to your random ID, as described under optional analytics.

How long we keep information

We keep information for these periods:

  • Analytics events, including error reports: PostHog keeps them for up to 7 years under our plan.
  • Session recordings: 30 days.
  • Contact messages: see the contact form section above.
  • Email addresses given for offers: see the email offers section above.
  • Your choices: saved in your browser until you change them or clear this site's data.

To compare seasons, we may copy season-level totals, such as how many ticket links were selected, into our own records. These totals contain no random IDs, visit IDs, or other details about single visits.

Your rights and requests

You can ask what information we hold about you, and ask us to correct or delete it, by emailing information@mcmillanfarms.ca.

Analytics and recordings are linked to a random ID, not to your name or email address. We may not be able to find them from your name or email alone, and we will tell you if that is the case.

You can remove the random ID from your browser at any time by turning analytics off or clearing this site's data. If you turn analytics back on before you reload or leave the page, PostHog can keep using the same random ID. If you want us to find your analytics data or recordings, email us before you turn analytics off or clear this site's data. Both remove the random ID, and we will first explain how to find it.

Limits of these choices

Turning analytics off in Privacy preferences stops new analytics and recordings in that tab and in other open tabs of this site. A tab in the background stops when you return to it.

Turning analytics off cannot recall information already sent. Events or recording pieces captured before you turned it off may still reach PostHog afterwards, usually within seconds. In rare cases, for example after a connection problem or while a tab is in the background, they can arrive an hour or more later.

While analytics is on, PostHog's code keeps some raw details in your browser's storage. They include the full address of the page you arrived on and of the website that sent you, with any search words. The site sends only cleaned versions to PostHog, and the raw details are removed when you turn analytics off.

You can also block PostHog with your browser's settings or an extension. The site keeps working.

If we switch analytics off

We can switch analytics off for the whole site. While it is off, the site shows no banner or Privacy preferences, loads no PostHog code in your browser, and sends nothing new to PostHog from it. Information PostHog already holds is kept and deleted as described under "How long we keep information", and you can still ask us about it by email. Anything PostHog's code saved in your browser earlier stays there, unread and unsent, until you clear this site's data.

Other services this site uses

Some services receive information from your browser no matter which analytics choice you make:

  • Vercel hosts this website. Like any web host, it processes your IP address and request details to serve pages, and it may keep them in its logs.
  • Vercel Web Analytics and Speed Insights run on every page, and the choices on this site do not control them. Web Analytics counts page views. For each one it records the time, the page, the website that sent you, filtered tags from the web address, your approximate location (country, region, and city), and your device type, operating system, and browser. It uses no cookies: it tells visitors apart with a code made from the request, which it discards after 24 hours. Speed Insights measures how fast each page loads, with the page, your country, your network speed, and your device type, operating system, and browser. Neither one identifies you or follows you across websites.
  • Google Maps: the home, contact, and frequently asked questions pages show a map from Google. When the map loads, your browser connects to Google, which receives your IP address and the site's main address, never the page you are on or its tracking tags, and may set its own cookies under Google's privacy policy.
  • dinocode: the footer on every page shows the logo of dinocode, the site's developer, loaded from dinocode.app. When it loads, your browser connects to dinocode.app, which receives your IP address.

These services receive information only when you use the feature they support:

  • Resend sends contact form messages to the farm's inbox, stores the email addresses given for offers, and sends the offer emails.
  • Vercel BotID checks the offer form's submissions for automated programs.
  • PostHog runs analytics and session recordings only with your consent. It also receives the technical error reports from our server described above.
  • Showpass sells tickets on its own website under its own privacy policy. If you accepted analytics, we record that you selected a ticket link on our site. We do not record whether you bought tickets, and we do not share your random ID with Showpass.

Vercel, Resend, and PostHog store and process information in the United States, where it can be accessed by authorities under United States law.

Children

This website is not directed at children. If you believe a child has sent us personal information through a form, email us and we will take steps to delete it.

Security

No website can guarantee that information sent over the internet is secure. We keep analytics limited to the details listed above. Only the farm's owners and its website developer can see analytics data and recordings, and PostHog stores and processes that data for us as our service provider.

Changes to this policy

We will post any change on this page and update the date at the top.

Contact us

Email information@mcmillanfarms.ca with any question about this policy or your information.