This policy explains what information the Christmas at the Tree Farm and Little Millican Farms website (this "site") collects, why, who helps us handle it, how long we keep it, and the choices you have.
1. Who we are#
The site is run by OCC Construction Corporation. It does business as Brazos Valley Tree Farm, Christmas at the Tree Farm, Little Millican Farms & Country Store and Little Millican Venue. In this policy, "we", "us" and "the farm" mean OCC Construction Corporation.
- Farm address: 20881 FM 2154, College Station, TX 77845
- Mailing address: 20881 FM 2154, College Station, TX 77845
- Privacy questions and requests: info@christmasatthetreefarm.holiday
2. The short version#
- You can browse the site without telling us who you are.
- Analytics only load after you click Accept on the cookie banner. If your browser sends a Global Privacy Control signal, we treat it as Decline.
- We only get your name, email or phone number if you choose to give them to us: a form, the email list, the chat, or the online visitor agreement.
- We do not sell your personal information. We do not use it for targeted advertising, and no advertising pixels run on this site.
- Christmas tickets are sold on this website. Payments are processed by PayPal, a separate company with its own privacy policy.
- To see, correct or delete your information, email info@christmasatthetreefarm.holiday.
3. What we collect and why#
3.1 Information you give us#
| Where | What we collect | Why we use it |
|---|---|---|
| Email list (footer, the Christmas envelope signup and "notify me" forms) | Your email address and the lists you choose (Christmas tickets, tree farm news, venue news). We also keep a consent record: the exact wording you agreed to, its version, the time and the page you signed up on. | To send the emails you asked for, and to prove you asked for them. |
| Contact form | Your name, email, phone (optional), message, which part of the farm you're writing to (farm, store or events), and your contact consent. | To answer your message. |
| Tree and landscape quote request | What you need (trees, delivery and planting, wholesale, landscaping or tree service), the species, sizes and quantity, a description, your ZIP code, your name, and an email or phone number. | To prepare and send your quote. |
| Venue inquiry | Event type, preferred and alternate dates, guest count, the space you want, notes, your name, and an email or phone number. | To answer your event inquiry and check availability. |
| Group and field-trip inquiry | Group type (school, church or nonprofit, corporate, family, scouts or club), preferred nights, the number of adults and children, needs such as a private area or accessibility, optional notes, and the organizer's name, organization, email and phone. We collect no information about individual children: no names, ages or photos. Please don't put children's names in the notes. | To plan the group's visit. If you mention an accessibility need, we use it only to plan your visit. Please share only what we need to know. |
| Chat assistant | What you type. If you ask the chat to pass on an inquiry, also your name and an email or phone number. | To answer questions about the farm and, if you ask, to pass your inquiry to our team (see section 3.3). |
| Online Agritourism Agreement and Warning (the visitor agreement, when it is offered online) | Your full name, email, typed signature, your confirmation that you are 18 or older, the number of minors in your care (never their names, ages or birthdates), the document version and a fingerprint of the exact text you saw, the time, your IP address and your browser type. If you link it to an order, the order number. | To keep a record that you signed the agreement before your visit, and to email you a printable copy. |
Contact consent. The contact, quote, venue and group forms each have a required box where you agree that we may contact you by email about that request. We save the exact wording you agreed to, the time, the form version and your IP address. That record is how we show you agreed. It is not consent to marketing emails; the email list has its own checkbox.
How you found us. When you send a form, the site also sends where your visit started: the page you landed on, the website that referred you, and any campaign tags in the link (for example utm_source). We use this to learn which listings and posts bring visitors, and we store it with your inquiry.
3.2 Information collected automatically#
- Server and security logs. Like every website, our hosting provider receives your IP address, browser type, the pages you request and the time. We use your IP address for a short time to block spam and floods of form submissions. Our own logs are written to record outcomes and record IDs, not your name, email or message.
- Analytics, only with your consent. If you click Accept, we load Google Analytics 4 and Vercel Web Analytics. They tell us which pages are viewed and which buttons are used: for example tapping a phone number, opening the chat, clicking Buy Tickets, moving through a form step, or sending a form (the type of form only, never what you typed). Google Analytics sets cookies (
_ga) and is set up with IP anonymization and ad-data redaction turned on. Before you choose, nothing is sent: events wait in your browser's memory and are discarded if you decline. - Browser storage. The site saves a few things in your own browser, not on our servers:
- your cookie choice (
bvtf:cookie-consent), until you clear it; - the chat conversation (
bvtf_chat_v1), so it is still there if you change pages; it is deleted automatically after 7 days; - where your visit started (
bvtf:attribution), only for the current browser tab session.
- your cookie choice (
3.3 The chat assistant#
The chat is an automated assistant, not a person. It works mostly inside your browser: the questions you type are matched against the farm's own answers on your device, and are not sent to us as you type. Two things to know:
- Model files. The first time you open the chat, your browser downloads a small language-matching model from Hugging Face (huggingface.co) and supporting code from jsDelivr (cdn.jsdelivr.net). Like any download, those services receive your IP address and browser details. They do not receive what you type.
- When it reaches us. The chat sends us information only if you choose to send an inquiry through it (a quote, venue or group inquiry, or a message). Then your contact details and request are saved like a form submission, and a copy of that chat conversation is emailed to the farm team handling it. We do not store or email chats where you didn't send an inquiry.
Please don't type sensitive personal information (health details, payment card numbers, passwords) into the chat.
3.4 Tickets#
PayPal. Christmas tickets are sold on this website. You pay through PayPal, which processes your payment under its own terms and privacy policy, not this one. We never see or store your card number or your PayPal login. PayPal shares the payer's name and email and the payment's reference number with us.
Your order record. We keep each order in our database: your name and email, the night, the tickets bought, the subtotal, sales tax and total, and the PayPal reference. Each ticket's QR code is stored only as a scrambled code (a hash), with when and at which gate it was used. A log records each sale and each ticket scan or refusal, and which staff member or gate handled it.
Your tickets by email. Your e-tickets are emailed to you, and the farm gets a copy of the order without the QR codes.
At the gate. Staff phones keep tonight's scrambled ticket codes so tickets can be checked without signal. No names or order details are stored on the phones. Staff can look up an order by its order number or last name (and admins by email) to re-send tickets or help you at the gate.
Not used for marketing. Buying tickets doesn't add you to our email list. We use order records to send your tickets, run the event, check tickets at the gate, and contact ticket holders about closures or changes.
4. Cookies and your analytics choice#
- Decline is as easy as Accept. Both buttons sit side by side on the banner, and nothing analytics-related loads until you pick one.
- Global Privacy Control (GPC). If your browser or extension sends a GPC signal, we treat it as Decline and don't show you the banner.
- Changing your mind. Your choice is saved in your browser. To change it, clear this site's data in your browser settings (or use a private window); the banner will appear again on your next visit.
- Necessary cookies. We don't set any other cookies for public visitors. Farm staff who sign in to the staff pages get a sign-in cookie, which is needed for that sign-in to work. Preview versions of the site (not the public site) may use a password cookie.
- The Santa page. The Santa page (
/christmas/santa) has no forms, no uploads and no chat assistant. If you accepted analytics, Google's advertising features are switched off there, and no advertising pixel ever loads on it.
5. Who we share information with#
We share personal information only with the service providers that run the site for us, only for that purpose:
| Provider | What it does for us |
|---|---|
| Vercel | Hosts the site and receives the normal request data described in 3.2. Vercel Web Analytics runs only after you Accept. |
| PayPal | Processes ticket payments (see 3.4). We never see or store card numbers. |
| Supabase | The database where ticket orders and scan records, form submissions, email-list records and visitor-agreement records are stored. |
| Resend | Sends our emails: e-tickets and the farm's order copies, list confirmations, newsletters, signed-agreement copies, and inquiry notifications to our team. |
| Google (Google Analytics 4) | Site analytics, only after you Accept. |
| Hugging Face and jsDelivr | Deliver the chat's model files to your browser (see 3.3). |
| Our website developer | Builds and maintains the site, and can access the systems above to keep them working. |
Your inquiries are also delivered to the farm's own email inboxes so our team can reply.
Separate companies. PayPal processes ticket payments under its own privacy policy (see 3.4). When you follow a link to Facebook, Instagram, YouTube, Google Maps or Apple Maps, those companies' own policies apply.
Other disclosures. We may disclose information if the law requires it (for example a valid subpoena), to protect the safety of our guests, staff or property, or as part of a sale or transfer of the farm's business, in which case this policy continues to apply to the information transferred.
We do not sell personal information, and we do not share it for targeted advertising.
6. Our emails#
- You choose to join. The email-list box is unchecked until you tick it, and we send a confirmation email first. You're only on the list after you click the link in it. If you don't click it, you won't get marketing emails from us.
- The confirmation email only asks you to confirm. It contains no advertising.
- Every marketing email names the sender, includes our postal address, and has a one-click unsubscribe link. Unsubscribing takes one click on one page. We don't ask you to log in, give a reason, or type your email again. We stop marketing emails within 10 business days, and usually right away. You can also email info@christmasatthetreefarm.holiday to unsubscribe.
- After you unsubscribe we keep your email address and the unsubscribe date on a do-not-email list, so we don't email you again by mistake.
- Emails you'll still get. Unsubscribing from marketing doesn't stop messages about something you asked for: replies to your inquiry, your signed-agreement copy, or notices about a closure or change affecting a ticket you bought.
- Ticket emails (your e-tickets, and closure or change notices) are about your order. They aren't marketing.
- Subject lines will be truthful. We won't send fake deadlines or sales that don't exist.
7. Phone calls and text messages#
If you tick the contact-consent box on a form, we may call or email you about that request. The forms also offer a separate, optional box to agree to text messages; it is never required and is not a condition of any purchase. We do not currently send text messages. If we start, we will only text people who ticked that box, and replying STOP will end them. You can withdraw call, email or text consent at any time by telling us at info@christmasatthetreefarm.holiday or on the call. We honor withdrawals within 10 business days.
8. How long we keep information#
| Information | How long |
|---|---|
| Contact, quote, venue and group inquiries, their consent records, and chat transcripts emailed to our team | Up to 3 years after our last contact with you about the inquiry, unless it becomes a booking or a purchase, in which case we keep it as long as we need it for that booking and our business records. |
| Ticket orders and payment records | At least 4 years (Texas sales-tax records, Tax Code §151.025(b)). |
| Email-list records and consent records | While you're subscribed. After you unsubscribe, we keep only your email address and the unsubscribe date on the do-not-email list. |
| Unconfirmed email sign-ups (you never clicked the confirmation link) | Up to 90 days. |
| Visitor agreement (Agreement and Warning) records | As long as a claim about the visit could legally be brought. In Texas that is generally at least two years after the visit, and longer when a minor was involved. |
| Analytics data in Google Analytics | Google Analytics' shortest standard retention setting (2 months for user-level data). |
| Chat conversation in your browser | 7 days, then deleted automatically by your browser. |
| Server and security logs | The short period set by our hosting provider. |
When information is no longer needed, we delete it or remove anything that identifies you.
9. Children#
- This site is for adults planning a visit. It is not directed to children under 13, and we don't knowingly collect personal information from them.
- The Santa page is informational. It has no forms, no uploads and no chat assistant, and we don't ask children for letters, wish lists, names or photos anywhere on the site. The chat assistant on the rest of the site is meant for adults planning a visit.
- Only an adult (18 or older) may sign the online visitor agreement. A parent or guardian signs for the minors in their care, and we record only how many minors are covered, never who they are.
- Group inquiries come from the adult organizer. We ask for a count of children, not their details.
- If you believe a child under 13 has sent us personal information (for example through the chat or a form), email info@christmasatthetreefarm.holiday and we will delete it.
10. Your choices and requests#
Wherever you live, you can ask us to:
- tell you whether we hold personal information about you, and give you a copy;
- correct information that's wrong;
- delete your information;
- stop marketing emails (use the unsubscribe link, or ask us).
How to ask. Email info@christmasatthetreefarm.holiday with "Privacy request" in the subject, or write to us at 20881 FM 2154, College Station, TX 77845. Tell us what you'd like and the email address or phone number you used with us. To protect you, we may ask you to confirm a code we send to that address before we share or delete anything. We'll respond within 45 days. If we need more time, we'll tell you why.
What we may keep. Even after a deletion request, we may keep:
- your email address on the do-not-email list (so we don't email you again);
- a signed visitor agreement, for the period in section 8;
- records the law requires us to keep.
If we can't fully do what you ask, we'll tell you why. You can reply and ask us to take a second look.
No penalty. We won't treat you differently, or charge you different prices, for making a request.
11. Security#
We use reasonable safeguards for the information we hold, including:
- encrypted (HTTPS) connections;
- access to stored information limited to the people and services that need it;
- confirmation and unsubscribe codes stored in scrambled (hashed) form.
No website or email system is perfectly secure, so we can't promise that information will never be accessed without permission. If that happens and the law requires us to tell you, we will.
12. Other websites#
The site links to PayPal, Facebook, Instagram, YouTube, Google Maps, Apple Maps and others. Those sites aren't covered by this policy. Please read their privacy policies.
13. Changes to this policy#
When we change this policy, we'll post the new version here and update the effective date. If a change materially affects how we use information we already have, we'll give notice on the site, and by email to list members, before the change takes effect.
14. Contact us#
OCC Construction Corporation20881 FM 2154, College Station, TX 77845
Email: info@christmasatthetreefarm.holiday