Privacy Policy
Misty Mountain Homestead operates this website for our family homestead in Lexington, Virginia. This policy explains information handled through the site’s contact form, newsletter signup, security features, and service providers. For questions or privacy requests, use our Contact page.
1. Information you provide
When you send a contact message, we receive your name, email address, message, and your permission to use those details to respond. Messages are sent to the site administrator through our email service. Please include only the personal information needed for your inquiry.
When you request the homestead letter, the site stores your email address, confirmation status, consent timestamp, and security records used for confirmation and unsubscribe links. Submitting the form does not confirm a subscription; you must follow the confirmation email and confirm your choice.
2. How we use information
We use contact information to answer inquiries, manage requested subscriptions, operate the website, prevent misuse, and meet applicable obligations. We do not sell or rent contact messages or subscriber lists. We do not collect payment-card details through these forms.
3. Cloudflare Turnstile and security
We use Cloudflare Turnstile to help distinguish visitors from automated abuse on the contact and newsletter forms. Cloudflare processes browser and connection signals, which can include your IP address, browser information, and the site you are visiting. Our server sends a verification token to Cloudflare before accepting a protected submission.
Cloudflare explains its processing in the Turnstile Privacy Addendum and its Privacy Policy. Those notices also describe Cloudflare’s use of signals to improve its security service.
The website uses a temporary hashed network address to limit repeated form attempts and a hashed verification-token record to prevent duplicate processing. Raw verification tokens are not retained as subscriber records.
4. Hosting, email, and other providers
Our WordPress website is hosted through Bluehost. Hosting, security, backup, and email providers may process information needed to deliver and protect their services, including connection information, delivery records, and messages. Relevant staff and service providers may access information as needed to operate the site or respond to requests.
Information may also be disclosed when required by law or reasonably necessary to protect rights, investigate abuse, or address a security incident. Provider processing and storage locations can differ from your location. See Bluehost’s privacy information for its own practices.
5. Cookies, browser storage, and links
WordPress, hosting, and security services may use cookies or browser storage for functions such as administrator login, security, and site delivery. Cloudflare’s use depends on the verification configuration; its notices explain those practices. Blocking required scripts, cookies, or storage may prevent protected forms from working.
Following a social-media or other external link takes you to a service with its own privacy practices. The Weather page is currently a placeholder and does not retrieve weather data. If new services change the information handled through this site, this policy should be updated to describe them.
6. Retention and unsubscribe
Contact correspondence may remain in the administrator’s mailbox and relevant service-provider records for as long as needed to handle inquiries and related recordkeeping. Retention in hosting logs, mail systems, and backups depends on those services and their configuration.
Pending newsletter confirmation links expire after 24 hours, and expired pending signups are periodically removed by scheduled website maintenance. Confirmed subscriptions remain until unsubscribed or removed. Completing the unsubscribe link deletes the active subscriber record from the site; previously sent email and backup copies may remain until their normal deletion cycles.
Temporary rate-limit records expire, and token-replay records are eligible for scheduled cleanup after one day. Scheduled cleanup may be delayed when the website receives little traffic or maintenance is paused.
7. Your choices and requests
You can choose not to submit a form, unsubscribe using the link supplied in your confirmation email, or contact us to ask about access, correction, or deletion of information you provided. If you no longer have your unsubscribe link, contact us for assistance.
Depending on where you live and the laws that apply, you may have additional privacy rights. We may need to verify a request and may retain information where permitted or required for legal, security, or recordkeeping purposes. Let us know if you believe a request was not handled correctly so we can review it.
8. Children and information security
The contact and newsletter features are intended for adults. We do not knowingly seek personal information from children under 13. If you believe a child has submitted personal information, please contact us so we can investigate and address it.
We use access controls and verification measures to protect the website, but no storage or transmission method can guarantee absolute security. Do not send passwords, financial details, medical records, or other unnecessary sensitive information through the contact form.
9. Updates and contact
We may revise this policy when the website or its practices change. The date above shows the latest revision. Send privacy questions and requests through our Contact page. See also our Terms of Use.