Privacy at Dream River Ranch

This notice covers the public Dream River Ranch website, inquiries about horse riding sessions and the support chat. It also covers advertising identifiers attached to visits. The effective date identifies this version; the changes section explains how a revision is announced.

Each disclosure opens separately. Open everything to read the whole notice, or use Print this page to print all disclosures, including the ones currently closed. A link to a section opens that section directly.

The operator and controller is Dreamriverranche, trading at dreamriverranche.com. The site presents Dream River Ranch riding instruction. The full postal address is 8894 W Martha Ave, Oasis, Idaho 83647, Oasis, Idaho, United States.

Privacy questions reach the operator at [email protected] or 208-602-3265. You do not need an account to contact us or use a privacy right.

The inquiry form receives your name, phone, email, address, kind of inquiry, message, requested specification and consent tick. Phone and email are each optional, but at least one is needed for a reply. Please do not include a diagnosis or health history.

With the inquiry, the site records the IP address, browser user-agent string, referring URL, the moment the form was rendered and the moment it was sent. Requests to the website also produce server and access logs.

Support chat keeps the conversation and a token in your browser so you can return to it. The consent choice is stored under site_consent_v2; no other key on this site persists that choice. Advertising cookie identifiers and click identifiers connect eligible visits to campaign measurement. Click identifiers include gclid, msclkid and fbclid.

There is no account or password. No payment is taken, and the site collects no card data or online purchase record.

Your name and reply details let us answer an inquiry. The address and session fields help us understand the visit you want to discuss. The consent tick records your permission for that conversation, not permission for unrelated advertising.

Technical records help receive forms and detect abuse. They also help investigate a failed submission. Chat messages and the browser token keep your conversation connected; consent storage remembers the storage choice you made.

Advertising identifiers support campaign attribution and measurement according to your consent settings. They are not used here to ask you for health information. Please keep private health details out of both inquiry and chat messages.

For visitors covered by the GDPR, the basis depends on the activity. Permission to reply is consent. Discussing a session at your request can also be a step before a contract; it does not turn the inquiry into a confirmed booking.

Receiving submissions, preventing abuse and investigating technical faults rely on legitimate interest in a safe, functioning site. Advertising storage and optional measurement rely on consent. We keep records and respond to rights requests under applicable legal obligations and legitimate interests in documenting those responses.

You may withdraw consent without undoing processing that was lawful before withdrawal. A legal obligation can still require a particular record to be kept. We explain that distinction when responding to a request.

Google Ads, Microsoft Advertising and Meta Ads send traffic here. Google attaches gclid to a click; Microsoft attaches msclkid; Meta attaches fbclid where a campaign runs there. These identifiers can arrive in the page URL before any optional storage is allowed.

The campaign labels google ads and microsoft advertising refer to those paid channels. With the relevant consent, identifiers help attribute a visit to a campaign. A campaign link is not a professional recommendation or a health endorsement.

The consent mode settings hold ad_storage, ad_user_data, ad_personalization and analytics_storage denied until you allow storage. Accept updates these settings to granted. Decline or withdrawal sets all four back to denied at that moment. Microsoft UET receives the corresponding ad_storage consent update.

The advertising tag can load while storage is denied. A denied storage signal is not a claim that every network request stops. You can read the page and send an inquiry without accepting optional storage.

Use Cookie choices in the footer to change your decision. A withdrawal applies to subsequent activity; it does not erase a previously sent inquiry or data already received by an advertising provider. For deletion, use the data-request route as well.

Google Ireland Ltd / Google LLC receives Google Ads signals, including eligible gclid attribution and consent signals. Microsoft Ireland Operations Ltd receives Microsoft Advertising signals associated with msclkid. Its handling is described in the Microsoft privacy statement at privacy.microsoft.com.

Meta Platforms Ireland Ltd receives Meta Ads signals associated with fbclid where that campaign runs. These providers apply their own privacy terms to information they receive.

The hosting provider serves the site and stores the inquiry database. The mail provider carries inquiry notifications to the operator’s inbox. These service routes receive the records needed to deliver or store your request; an inquiry does not give them permission from this site to use your message for unrelated marketing.

Hosting, email and advertising services can process records in the United States or another country where their systems operate. A visitor from Europe can therefore send information to a service outside Europe by using this website.

Transfers rely on applicable lawful transfer mechanisms and contractual safeguards attached to the service, together with the operator’s lawful instructions. Ask through the data-request route for information about the safeguards relevant to your record. A country’s privacy rules may differ from those where you live.

At the end of the relevant period, records are deleted or identifying details are removed, unless a legal duty or an unresolved dispute requires longer retention. A request to erase information is considered separately from this routine schedule.

Advertising providers handle their own records under their privacy terms. Deleting browser storage does not delete a message already sent to the ranch. Contact the operator if you want that message located and reviewed for deletion.

Operator access controls restrict the inquiry database and notification route. Protected connections secure information in transit, and the public form does not give visitors direct database access. Stored records are reviewed against the retention periods above.

No internet service can promise absolute security. Do not send medical records or payment details in a message. If an incident requires notification, the operator follows the applicable law and contacts affected people through the information available.

The gdpr rights route covers access, rectification, erasure, restriction, portability, objection and withdrawing consent. Ask for a copy of your information, correction of an inaccurate detail or consideration of a deletion request. The right available depends on the processing and the applicable law.

Withdrawal does not affect processing that was lawful before you withdrew. Where a record must be retained, we explain why rather than treating the request as permission to keep everything. Use the contact details below and identify the inquiry or conversation without sending health information.

US state privacy law applies, including California’s CCPA/CPRA and other state laws in force. The ccpa rights route includes requests to know or access collected information, correct it, delete it and receive a portable copy, subject to the law covering the request.

California residents can opt out of sale or sharing of personal information. Advertising-related sharing is a separate question from selling a riding session: this website takes no payment, but it still uses advertising signals. Decline optional storage and use the data-request route to exercise a statutory opt-out. You can exercise applicable rights without discriminatory treatment.

The site honours global privacy control. A browser’s Global Privacy Control signal, including the Sec-GPC header, is treated as an opt-out without asking again. Advertising and optional measurement storage remain denied while that signal is active.

Cookie choices do not override an active privacy signal. The opt-out does not prevent you from contacting the ranch; an inquiry still needs a reply route and permission to handle that message.

The site is not directed to children and does not knowingly collect their personal information. An adult should make an inquiry about a family session. Give the number of prospective participants rather than a child’s name or private details.

If you believe a child has submitted information, contact the operator so the record can be located and removed as appropriate. Do not repeat the child’s information in a public message or add health records to establish the request.

You may complain to your state Attorney General or, in California, the California Privacy Protection Agency. Visitors covered by European privacy law may complain to a data protection authority with jurisdiction over them.

Contacting the operator first can help resolve an error, but it is not a condition of making a complaint. Keep a copy of your request and any response if you need to explain the issue to an authority.

Email [email protected], or write to 8894 W Martha Ave, Oasis, Idaho 83647, Oasis, Idaho, United States. The operator answers a data request within 14 days.

State the right you want to exercise and the contact route you used for the original message. If you have an inquiry receipt, include it. These details help distinguish your record from somebody else’s without requiring a health history.

The operator may ask for reasonable information to confirm identity before disclosing or deleting records. Do not attach identity documents or sensitive records unless a suitable verification route has been agreed. If a legal exception limits the request, the response explains that limit.

The current notice stays at this privacy URL. When handling practices change, the operator updates the affected text and the effective date so visitors can identify the version they read.

A material change can also be highlighted through the inquiry or consent route. A revised notice does not silently turn an earlier refusal of optional storage into permission. Storage choices remain separate from permission to answer an inquiry.

Write to [email protected] or call 208-602-3265. Postal questions go to 8894 W Martha Ave, Oasis, Idaho 83647, United States.

Say whether your message concerns a riding inquiry, a chat conversation or a storage choice. This helps the operator find the right record. Privacy questions do not require you to book a session or use the online form.

If a page or form is difficult to use, call 208-602-3265 or email [email protected]. Give the page name and describe the part that does not work. You do not need to disclose a disability or diagnosis to report an access problem.

The site provides keyboard controls and reduced-motion support. Disclosures can be expanded before printing. A telephone or email inquiry is available if the form does not work with your device. Discuss practical arrival requirements before travelling; do not assume a particular yard arrangement without confirmation.

Dream River Ranch describes instruction with horses. This is not medical care and does not replace a doctor. It does not diagnose or guarantee an outcome. Obtain your doctor’s clearance before booking when required. The service is not for urgent care or unsupervised riding.

No payment is taken here. The session format and availability are discussed in a reply; the form does not create a binding quote. There is no warranty of a health result. Read the session and inquiry terms before arranging a visit.