Your privacy matters to us. This policy explains how Arson Bayou collects, uses, and protects your personal information.
Last Updated: January 15, 2026
This Privacy Policy describes how Arson Bayou ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website at arsonbayou.com and use our goat farming educational resources, interactive tools, and newsletter services. Arson Bayou operates as an educational platform dedicated to beginner goat farming management for milk and meat production.
Arson Bayou is the data controller responsible for processing your personal data. Our registered business address is 350 Fifth Avenue, New York, NY 10118, United States. We are committed to protecting your privacy and handling your data transparently and lawfully.
By accessing and using our website, you acknowledge that you have read and understood the practices described in this Privacy Policy. If you do not agree with any part of this policy, we encourage you to discontinue use of the website and contact us with any concerns. This policy applies to all visitors, subscribers, and users of our website regardless of geographic location, though we have made specific provisions for individuals covered by the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection legislation.
We do not sell personal information to third parties. We do not engage in aggressive data collection practices. Our primary purpose for collecting data is to deliver better educational content about goat farming and to communicate with our subscribers about seasonal farming advice.
We collect different categories of personal data depending on how you interact with our website. Below is a comprehensive list of the types of data we may collect:
We do not collect sensitive personal data such as financial or payment information, government identification numbers, health records, racial or ethnic origin, political opinions, religious beliefs, or biometric data. We do not process credit card numbers on our website. We do not require account creation or passwords to use our educational resources.
We collect your personal information through the following methods:
When you fill out and submit our newsletter subscription form, contact form, or any other input form on our website, we collect the information you enter into those fields. Each form clearly identifies which fields are required and which are optional. A link to this Privacy Policy is displayed adjacent to every form submission button.
We use cookies and browser local storage to remember your preferences and understand how visitors use our site. Our cookie consent banner allows you to accept or reject non-essential cookies before they are placed on your device. Essential cookies that are strictly necessary for the website to function (such as remembering your cookie consent choice) may be placed without separate consent as permitted under applicable law. Full details of the cookies we use are provided in Section 10.
We use Google Analytics to collect anonymized usage data about how visitors interact with our website. Google Analytics uses cookies to gather information such as page views, session duration, bounce rates, and geographic region (at the city level, not precise location). We have configured Google Analytics to anonymize IP addresses before storage and processing. We do not enable Google Analytics advertising features or cross-device tracking.
Our web hosting provider automatically records server access logs that include your IP address, the date and time of your request, the pages you accessed, the HTTP status code, and your browser's user agent string. These logs are used for security monitoring, troubleshooting technical issues, and preventing abuse. Server logs are retained for a maximum of 90 days and then permanently deleted.
For visitors located in the European Economic Area (EEA) and the United Kingdom, we rely on the following legal bases under GDPR Article 6 for processing personal data:
We rely on your explicit consent when you subscribe to our newsletter, submit a contact form, or accept non-essential cookies. You may withdraw consent at any time by unsubscribing from emails, clearing your cookies, or contacting us directly. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.
We rely on our legitimate interest in maintaining website security, preventing fraud, analyzing aggregated site usage patterns to improve our educational content, and ensuring the technical functionality of our website. We have conducted a legitimate interest assessment and determined that these processing activities do not override your fundamental rights and freedoms.
When you request our free beginner checklist or subscribe to our seasonal newsletter, we process your data as necessary to deliver the service you requested. This includes sending confirmation emails, delivering the newsletter content, and managing your subscription preferences.
We may process your data when required by law, such as responding to lawful requests from public authorities, complying with tax obligations, or preserving records as mandated by applicable regulations.
We use the personal data we collect for the following specific purposes:
We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects concerning you. We do not sell, rent, or trade your personal information to third parties for their marketing purposes under any circumstances.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Below are our specific retention periods for each category of data:
| Data Category | Retention Period |
|---|---|
| Newsletter subscriber data (name, email) | Until you unsubscribe, plus 30 days for processing the deletion request |
| Contact form submissions | 2 years from the date of submission |
| Google Analytics data | 14 months (configured within Google Analytics settings) |
| Server access logs | 90 days |
| Cookie consent preferences | 13 months (stored in your browser's local storage) |
| Checklist and tool progress data | Stored locally on your device only; cleared when you clear browser data |
After the applicable retention period expires, we securely delete or anonymize the data so it can no longer be associated with you. If we are required by law to retain data for a longer period (for example, to comply with tax or accounting regulations), we will do so only to the extent required and will restrict access to that data.
We do not sell your personal data. We share personal data only with the following categories of third-party service providers who assist us in operating our website and delivering our services. Each provider is contractually obligated to protect your data and may only process it for the specific purposes we have authorized:
We may also disclose your personal data if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, the safety of our users, or the public. In such cases, we will make reasonable efforts to provide you with notice of the disclosure unless prohibited by law.
Arson Bayou is based in the United States. If you are visiting our website from the European Economic Area (EEA), the United Kingdom, or other regions with data protection laws that differ from U.S. law, please be aware that your personal data may be transferred to and processed in the United States.
When personal data is transferred from the EEA or UK to the United States or other countries outside the EEA that have not received an adequacy decision from the European Commission, we ensure appropriate safeguards are in place. These safeguards include:
You may request a copy of the relevant safeguards we rely on by contacting us at [email protected].
If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation. We also extend these rights to all our users regardless of location:
You have the right to request a copy of all personal data we hold about you. We will provide this information within 30 days of receiving a verified request, free of charge for the first request.
You have the right to request correction of inaccurate or incomplete personal data we hold about you. If you notice your information is incorrect, contact us and we will update our records promptly.
You have the right to request deletion of your personal data when it is no longer necessary for the purpose it was collected, when you withdraw consent, or when we have no other legal basis for processing it. We will comply within 30 days unless a legal obligation requires us to retain certain data.
You have the right to request that we limit how we process your data in certain circumstances, such as when you contest the accuracy of your data or when you object to processing based on legitimate interest while we verify our grounds.
You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another controller where processing is based on consent or a contract.
You have the right to object to processing of your personal data when we rely on legitimate interest as the legal basis. Upon receiving your objection, we will cease processing unless we demonstrate compelling legitimate grounds that override your rights.
Where we process your data based on consent, you may withdraw that consent at any time. For newsletter subscriptions, use the unsubscribe link at the bottom of any email. For cookies, adjust your preferences through your browser settings or clear your local storage. Contact us directly for all other withdrawal requests.
To exercise any of these rights, send an email to [email protected] with the subject line "Data Rights Request." Include your full name and the email address associated with your data so we can verify your identity. We will respond within 30 days.
If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority. For residents of the EU, a list of supervisory authorities is available on the European Data Protection Board website.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 years of age. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete such information from our records.
If we become aware that we have inadvertently collected personal data from a child under 16 without verified parental consent, we will take steps to delete that information as quickly as possible. We encourage parents and guardians to monitor their children's online activity and to educate them about safe internet practices.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page.
For significant changes that materially affect how we process your personal data, we will provide notice through one or more of the following methods:
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of our website after changes take effect constitutes acceptance of the updated policy. If you disagree with any changes, please stop using the website and contact us to request deletion of your data.
If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us using the information below:
Data Controller
Arson Bayou
Registered Address
350 Fifth Avenue, New York, NY 10118, United States
Privacy Contact Email
General Contact Email
Phone
+1 (212) 547-8320
We aim to respond to all privacy-related inquiries within 5 business days and to fulfill data rights requests within 30 calendar days as required by GDPR. If our response does not satisfactorily address your concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.