Last updated: July 13, 2026
Who We Are
This website is operated by Oatlands Historic House and Gardens. Our website address is:
For questions about this Privacy Policy or requests concerning your personal information, contact us at:
Email: https://oatlands.org/contact/
Mailing address: 20850 Oatlands Plantation Lane, Leesburg, Virginia 20175
Information We Collect
We may collect personal information when you:
- Purchase tickets or register for an event
- Make a donation or other payment
- Create a customer account
- Submit a contact form
- Subscribe to email communications
- Leave a comment, when commenting is available
- Request information or customer support
- Interact with the website
Depending on the activity, this information may include:
- Name
- Email address
- Telephone number
- Billing address
- Ticket, event and registration information
- Order and transaction history
- Account information
- Communications sent to us
- Internet Protocol address
- Browser, device and operating-system information
- Website usage and referral information
- Cookie and analytics information
Ticket Purchases, Event Registrations and Donations
When you purchase a ticket, register for an event, make a donation or complete another transaction through the website, we may collect the information necessary to process and administer that transaction.
This may include your name, email address, telephone number, billing information, order details, ticket quantity, event selections and related customer-service communications.
We use this information to:
- Process transactions and registrations
- Send receipts, tickets and confirmation emails
- Communicate event updates or schedule changes
- Respond to customer-service requests
- Maintain financial and operational records
- Prevent fraud and protect the security of the website
- Comply with legal, tax, accounting and reporting obligations
Payment Processing
Payments made through the website may be processed by third-party payment providers, including Square.
Payment card information is submitted directly to the applicable payment processor and is not ordinarily stored directly on the Oatlands website. Payment processors may collect and process information in accordance with their own privacy policies, security practices and legal obligations.
We may receive limited transaction information from a payment processor, such as:
- Customer name
- Billing address
- Email address
- Transaction amount
- Payment status
- Order number
- Payment method type
- Partial payment-card information, such as the last four digits
We do not control the independent privacy practices of third-party payment providers.
Customer Accounts
If you create an account on the website, we may store the personal information provided in your customer profile.
Registered users may be able to view or update certain account information through the website’s account area. Users may not be able to directly delete all information associated with previous orders, financial records, event registrations or administrative systems.
Guest purchasers who complete transactions without creating an account do not have direct access to modify or delete information stored in our administrative systems.
Requests to access, correct or delete personal information may be submitted using the contact information listed in this Privacy Policy.
Comments
When visitors leave comments on the website, if commenting is available, we collect the information shown in the comment form. We may also collect the visitor’s IP address and browser user-agent information to assist with spam detection and website security.
An anonymized string created from an email address, sometimes called a hash, may be provided to the Gravatar service to determine whether the commenter uses that service.
After a comment is approved, a profile picture associated with the Gravatar account may be visible publicly alongside the comment.
Media Uploads
If visitors are permitted to upload images or other media to the website, they should avoid uploading files containing embedded location information, including EXIF GPS data.
Visitors may be able to download publicly accessible images and extract embedded information from those files.
Contact Forms and Communications
When you submit a contact form, send an email or otherwise communicate with us, we may retain your name, email address, telephone number, message and related correspondence.
We use this information to respond to inquiries, provide assistance and maintain records of our communications.
Please do not submit sensitive personal, financial or medical information through a general contact form.
Email Communications
If you subscribe to a mailing list, register for an event, make a purchase or otherwise request communications, we may use your email address to send:
- Transaction confirmations
- Event information
- Operational announcements
- Customer-service messages
- Newsletters or promotional communications, where permitted
You may unsubscribe from promotional email communications using the unsubscribe link included in those messages.
Unsubscribing from marketing communications does not prevent us from sending necessary transactional or administrative messages relating to an order, registration or account.
Cookies
Cookies are small files placed on a browser or device that allow a website to operate and remember certain information.
We may use cookies for purposes such as:
- Processing shopping-cart and checkout activity
- Maintaining customer login sessions
- Remembering user preferences
- Improving website security
- Preventing fraud and spam
- Measuring website traffic and performance
- Understanding how visitors use the website
Some cookies are necessary for the website to function. Other cookies may be provided by analytics, payment, video, social-media or other third-party services.
Browser settings may allow you to block or delete cookies. Blocking certain cookies may prevent portions of the website, including account, ticketing or checkout functionality, from working correctly.
Login Cookies
When a user visits a login page, the website may set a temporary cookie to determine whether the browser accepts cookies. This cookie does not contain personal information and is typically discarded when the browser is closed.
When a user logs in, the website may set cookies to retain login information and display preferences.
Login-cookie duration may vary depending on whether the user selects an option such as “Remember Me.” Logging out generally removes login-session cookies.
Shopping Cart and Checkout Cookies
WooCommerce and related website services may use cookies to:
- Maintain shopping-cart contents
- Connect checkout activity with an order
- Remember customer-session information
- Determine whether a cart contains products
- Support account and payment functionality
These cookies are generally necessary to provide online ticketing, registration and checkout services.
Analytics and Website Usage Information
We may use analytics tools to understand how visitors use the website.
These services may collect information such as:
- IP address
- Browser type
- Device type
- Approximate geographic area
- Pages viewed
- Referral source
- Time spent on the website
- Links or buttons selected
- Date and time of visits
We use this information to evaluate website performance, identify technical problems and improve website content and services.
Analytics providers may process this information according to their own privacy policies.
Embedded Content From Other Websites
Pages on this website may include embedded content, including:
- Videos
- Images
- Maps
- Social-media posts
- Donation forms
- Ticketing tools
- Articles
- Other external content
Embedded content may behave in the same manner as if the visitor had directly visited the third-party website.
Those third parties may collect information, use cookies, provide additional tracking and monitor interactions with the embedded content. This may include tracking visitors who are logged into an account with the applicable third-party service.
Information We Share
We may share personal information with service providers that assist us in operating the website and providing services.
These providers may include:
- Website hosting providers
- WordPress and WooCommerce service providers
- Payment processors, including Square
- Email-delivery and marketing platforms
- Event-management and ticketing providers
- Website analytics providers
- Security, fraud-prevention and spam-detection services
- Information-technology consultants
- Accounting, auditing and professional advisers
We provide these parties only with information reasonably necessary to perform their services.
We may also disclose information:
- When required by law, court order or legal process
- To respond to lawful requests from government authorities
- To investigate suspected fraud, misuse or security incidents
- To enforce agreements or protect legal rights
- To protect the safety of visitors, staff or the public
- As part of an organizational restructuring, transfer or similar transaction
We do not sell payment-card information.
Password Reset Requests
If you request a password reset, your IP address may be included in the password-reset email or related security records.
Automated Spam and Security Services
Visitor comments, contact-form submissions, login attempts and other website activity may be reviewed by automated spam-detection, firewall, malware-detection or security services.
These services may process IP addresses, browser information, submitted content and other technical information to identify abuse, fraud or security threats.
How Long We Retain Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Retention periods may depend on:
- The type of information
- The purpose for which it was collected
- Event and customer-service requirements
- Financial, tax and accounting obligations
- Fraud-prevention and security requirements
- Contractual requirements
- Dispute-resolution needs
- Applicable legal requirements
Order, transaction, registration and donation records may be retained for financial, administrative, historical and legal purposes.
If you leave a comment, the comment and associated metadata may be retained indefinitely so that follow-up comments can be recognized and approved.
Account information may be retained while an account remains active and for a reasonable period afterward.
Some information may remain temporarily in website backups after it has been removed from active systems.
Your Choices and Requests
You may request that we:
- Confirm whether we maintain personal information about you
- Provide a copy of certain personal information
- Correct inaccurate or incomplete information
- Delete certain personal information
- Update your communication preferences
To make a request, contact us at:
Please include enough information for us to identify the relevant account, order, registration or communication.
We may take reasonable steps to verify your identity before processing a request. Verification may include confirming control of the email address associated with the information.
We may decline or limit a request when necessary to:
- Maintain transaction and accounting records
- Comply with tax, legal or regulatory requirements
- Prevent fraud
- Protect website and account security
- Resolve disputes
- Enforce agreements
- Protect the rights of Oatlands or other parties
- Retain records for legitimate administrative purposes
Visitors and guest purchasers are not required to have a self-service deletion option. Requests may be reviewed and processed by an authorized website administrator.
Removing information from the Oatlands website may not automatically remove information maintained independently by third-party providers such as payment processors, email services, analytics providers or other external platforms.
Children’s Privacy
The website is intended for a general audience and is not directed specifically toward children under 13.
Children should not submit personal information through the website without the involvement and consent of a parent or legal guardian.
If we learn that personal information was submitted by a child in a manner that should not have occurred, a parent or guardian may contact us to request review or deletion of that information.
Data Security
We use reasonable administrative, technical and organizational measures intended to protect personal information from unauthorized access, loss, misuse, alteration or disclosure.
However, no website, electronic transmission or storage system can be guaranteed to be completely secure.
Customers should use caution when transmitting information online and should protect their account credentials.
Third-Party Websites
This website may contain links to websites operated by other organizations.
We are not responsible for the content, privacy practices or security practices of third-party websites. Visitors should review the privacy policies of external websites before providing personal information.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in:
- Website functionality
- Ticketing or payment systems
- Service providers
- Organizational practices
- Legal or regulatory requirements
The “Last updated” date at the beginning of this page indicates when the policy was most recently revised.
Continued use of the website after an updated policy is published is subject to the revised policy.
Contact Us
Questions, concerns and personal-information requests may be submitted to:
Oatlands Historic House and Gardens
20850 Oatlands Plantation Lane
Leesburg, Virginia 20175
Email: https://oatlands.org/contact/
Website: https://oatlands.org
