1. Who we are (data controller)
Burnmist is a practical resource site focused on building farmer cooperatives and partnerships for collective success. For the purposes of the EU General Data Protection Regulation (GDPR) and similar privacy laws, the data controller is:
This policy applies to the Burnmist website and related pages and tools, including the cooperative feasibility checker and newsletter subscription forms. If you follow links to third-party websites, their privacy practices apply.
2. Data we collect
We collect only data that supports site functionality, requested resources, and basic analytics. Depending on how you interact with Burnmist, we may process the following categories of personal data:
Identity and contact data
Full name (if provided), email address, and phone number (only if you choose to provide it via contact requests). We do not request sensitive categories of data.
Device and usage data
IP address, browser type, device identifiers, approximate location (derived from IP), pages visited, referrer, timestamps, and interaction events.
Cookies and similar technologies
Strictly necessary cookies (or local storage equivalents), analytics cookies (if accepted), and marketing cookies (if accepted). See the cookie section below for details and durations.
Form and tool inputs
Information you type into forms such as newsletter signup and tool inputs for the feasibility checker. Feasibility checker answers are used to generate results and may be stored locally in your browser for convenience.
We do not intentionally collect special category data (such as health, biometric, political opinions, or religious beliefs). Please do not submit sensitive personal information through our forms.
3. How we collect data
Burnmist collects personal data through the following methods:
3.1 Web forms
When you submit a newsletter signup, request a resource, or contact us, we receive the information you provide. We use it to deliver the requested content and communicate with you. Each form references this Privacy Policy so you know how submissions are handled.
3.2 Cookies, local storage, and analytics tools
We use cookies and similar technologies to remember your cookie preferences, help the site work reliably, and understand general usage patterns. Where used, analytics is configured to measure aggregated site activity. If we run advertising campaigns, we may use a marketing pixel for conversion measurement and retargeting, but only when you have consented through the cookie banner.
Tools that may be used (depending on your consent and our configuration) include Google Analytics 4 and Meta Pixel. If enabled, these tools may collect IP address, device and browser signals, page views, and interaction events.
3.3 Server logs
Like most websites, our hosting infrastructure logs requests to the site. These logs may include your IP address, browser information, request time, requested page, and error codes. We use this information to maintain security, prevent abuse, and troubleshoot performance.
4. Legal basis for processing (GDPR Article 6)
If you are in the European Economic Area (EEA) or the United Kingdom, we process personal data under the legal bases described below. Even if GDPR does not apply to you, we apply similar principles of purpose limitation and transparency.
| Data category | Typical examples | Legal basis |
|---|---|---|
| Newsletter data | Name, email | Consent (Art. 6(1)(a)) |
| Contact requests | Name, email, optional phone, message | Legitimate interests (Art. 6(1)(f)) and/or Contract steps (Art. 6(1)(b)) |
| Site security logs | IP address, timestamps, request metadata | Legitimate interests (Art. 6(1)(f)) |
| Analytics data | Page views, device info, interactions | Consent (Art. 6(1)(a)) where required; otherwise Legitimate interests (Art. 6(1)(f)) |
| Marketing pixels | Ad conversions, retargeting audiences | Consent (Art. 6(1)(a)) |
| Compliance records | Consent logs, opt-out requests | Legal obligation (Art. 6(1)(c)) and Legitimate interests (Art. 6(1)(f)) |
Where we rely on consent, you can withdraw it at any time (for example, by using the cookie banner controls or unsubscribing from emails). Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
5. Purposes of processing
We use personal data for the following purposes, each tied to practical site operation and the services Burnmist provides:
5.1 Provide requested content and tools
To deliver templates and resources, provide tool outputs (such as the feasibility checker result), respond to messages, and maintain the website experience across devices.
5.2 Customer support and communications
To answer questions about cooperative formation steps, governance concepts, and how to use site materials. We may keep a record of the conversation for continuity and quality.
5.3 Consent-based marketing
To send collaboration tips by email when you subscribe, and to measure campaign performance when you have opted into marketing cookies. We do not sell email addresses and we do not send unrelated promotional content.
5.4 Security and fraud prevention
To protect the website from abuse, detect unusual traffic patterns, and ensure integrity of forms and downloads.
We do not use your data to make decisions that produce legal or similarly significant effects solely by automated means.
6. Retention periods
We retain personal data only for as long as necessary to fulfill the purposes described above, unless a longer period is required by law. Retention depends on the data category:
Form submissions and contact requests
Retained for up to 2 years from last interaction to support follow-up and continuity, unless you request deletion earlier or we must keep a record for legal reasons.
Analytics data
Where analytics is enabled, we retain analytics event data for 14 months (or the closest available setting) to understand site usage trends and improve content relevance.
Newsletter list
Retained until you unsubscribe, then removed within 30 days (with minimal suppression data kept to ensure we honor your opt-out).
Server security logs
Retained for up to 90 days, unless extended for security investigations or to comply with legal obligations.
Cookie preferences
Stored in your browser using local storage until you clear your browser storage or update your preference using the cookie banner.
8. International transfers
Burnmist LLC is based in the United States. If you access our site from the EEA, UK, or Switzerland, your personal data may be transferred to and processed in countries that may not provide the same level of data protection as your country of residence.
When we transfer personal data internationally, we use appropriate safeguards as required by applicable law, such as the European Commission’s Standard Contractual Clauses (SCCs), and we assess the receiving country’s legal environment and the security measures applied by our service providers. Where a provider relies on an adequacy decision (when available), we may use that mechanism instead.
9. Your rights (GDPR and similar laws)
Subject to applicable law, you may have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: ask us to correct inaccurate or incomplete data.
- Right to erasure: request deletion of your data where applicable.
- Right to restriction: request that we limit processing in certain circumstances.
- Right to data portability: receive certain data in a machine-readable format and transmit it to another controller.
- Right to object: object to processing based on legitimate interests, including certain analytics.
- Right to withdraw consent: withdraw consent at any time for processing based on consent (newsletter, marketing cookies).
How to exercise your rights
Email [email protected] with your request. To protect your information, we may ask you to verify your identity before responding. We aim to respond within one month, and sooner where possible.
Newsletter emails include an unsubscribe link. Cookie consent can be changed using the cookie banner on this site.
Right to complain to a supervisory authority
If you are located in the EEA, you have the right to lodge a complaint with your local supervisory authority. If you are in the UK, you can complain to the Information Commissioner’s Office (ICO).
UK supervisory authority: Information Commissioner’s Office (ICO). Website: ico.org.uk.
11. Children’s privacy
Burnmist is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact us at [email protected] and we will take steps to delete the information.
12. Policy updates
We may update this Privacy Policy to reflect changes in our tools, templates, or legal requirements. When changes are significant, we will post a prominent notice on the website and, where appropriate, notify newsletter subscribers by email. The “Last Updated” date at the top of this page indicates when this policy was last revised.
13. Contact and DPO
For privacy requests, questions, or complaints, contact our privacy team:
Burnmist does not appoint a statutory Data Protection Officer for this site at this time. If that changes, we will update this section with DPO contact details.
Related pages
For website usage rules, please see our Terms of Service. For site background and purpose, see About.