The privacy ledger sets out our advertising data practices, Consent Mode signals, and inquiry governance.
Glowveras is an inquiry-only catalog destination. We do not sell user data, maintain user passwords, or process credit card payments. We manage paid traffic under strict Consent Mode v2 controls across Google Ads, Microsoft Advertising, and Meta Ads.
The clause ledger below details every operational data category, legal basis, retention threshold, and advertising identifier processed during your visit to glowveras.click. On mobile screens, each ledger entry converts into an independent labeled block for legibility.
| Ledger Clause | Operational Provision & Plain Language Term | Legal Ground & Authority |
|---|---|---|
| Effective Date | This Privacy Ledger took effect and was verified on 2026-10-17. It governs all user interactions, catalog inquiries, and paid ad traffic dispatched to glowveras.click. | Operating standard in force from October 17, 2026. |
| Data Controller | The site and catalog operations are controlled by Glowveras, trading at glowveras.click. Postal address: 130 North Tryon Street, Charlotte, North Carolina 28202, Charlotte, North Carolina, United States. Telephone: +1 (307) 555-3072. Email: office@glowveras.click. | Identified commercial operator under US commercial codes and GDPR Article 4(7). |
| Data Collected | We collect information entered into our inquiry form (`submit.php`): name, phone number, email address, physical delivery address or salon location, category selection (lacquer, base, top, brushes, consumables), notes, and specification preferences. The support chat (`chat.php`) collects typed messages and an anonymous session token stored in browser localStorage. Technical access logs record visitor IP address, user-agent string, referring URL, page render timestamps, and ad click identifiers. | Direct voluntary user input and standard HTTP web server access logging. |
| Purposes of Processing | Collected data is used strictly to prepare and deliver itemized quotations for nail lacquers ($6–$18), base coats ($7–$16), top coats ($7–$18), brushes ($4–$20), and consumables ($3–$15); to answer formula compatibility questions via live chat; to maintain server security against automated scrapers; and to evaluate the effectiveness of paid advertising campaigns. | Quotation dispatch, salon consulting, and server infrastructure security. |
| Legal Bases | We process inquiry submissions under the legal basis of taking pre-contractual steps at the request of the user prior to entering a potential transaction. Server security and abuse mitigation rest on legitimate interest. Storage of optional marketing cookies and advertising telemetry rests exclusively on affirmative consent. | GDPR Article 6(1)(b) Contract, 6(1)(f) Legitimate Interest, and 6(1)(a) Consent. |
| Advertising Platforms | This website actively receives paid advertising traffic from three commercial ad networks: google ads, microsoft advertising, and Meta Ads. These platforms append unique click identifiers to destination URLs to measure ad interaction: gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads. We do not claim any platform has reviewed or endorsed our store. | Present-tense commercial advertising disclosure for Google Ads, Microsoft, and Meta. |
| Consent Mode v2 | Glowveras implements Google consent mode v2 across all incoming advertising traffic. Four distinct privacy signals—ad_storage, ad_user_data, ad_personalization, and analytics_storage—are held strictly denied by default until the visitor actively chooses to allow storage via our consent banner. If the visitor declines or later revokes permission, all four signals are immediately reset to denied. | Technical Consent Mode v2 protocol enforcement for EEA and US privacy regimes. |
| Third-Party Processors | Data processors receiving operational data include: Google LLC / Google Ireland Ltd (Google Ads click attribution); Microsoft Ireland Operations Ltd (Microsoft Advertising, privacy statement accessible at https://privacy.microsoft.com/privacystatement); Meta Platforms Ireland Ltd (Meta Ads attribution); our infrastructure cloud hosting facility storing inquiry database records; and our mail transport provider routing inquiry dispatches. | Data Processing Agreements pursuant to GDPR Article 28 and privacy.microsoft.com. |
| International Transfers | Glowveras is situated in North Carolina, United States. When European or overseas visitors submit inquiries or consent to advertising cookies, data is transferred to and stored on US-based secure server hardware. All cross-border data flows are safeguarded through standard contractual clauses (SCCs) and adherence to applicable adequacy mechanisms. | Standard Contractual Clauses approved by the European Commission. |
| Retention Periods | We enforce finite retention schedules: product inquiries and notification emails are retained for 18 months; live support chat transcripts are retained for 12 months; web server access and error logs are destroyed after 90 days; and browser consent choice records (`site_consent_v2`) persist for 12 months. | Enforced retention schedules; indefinite data hoarding is strictly prohibited. |
| Security Measures | All network communication is secured using TLS 1.3 cryptographic transport. Inquiry endpoints deploy server-side parameter sanitization, rate-limiting, and non-guessable honeypot traps (`agency`, `homepage`). Database records are housed on isolated server environments behind strict firewall policies. | Technical and organizational security pursuant to GDPR Article 32. |
| GDPR Privacy Rights | For European Economic Area and UK visitors, the gdpr guarantees specific auditable rights: the right to access personal records, the right to rectification of inaccurate data, the right to erasure ('right to be forgotten'), the right to restrict processing, the right to data portability, the right to object to legitimate interest processing, and the right to withdraw consent at any time without detriment. | European Union General Data Protection Regulation (Regulation EU 2016/679). |
| US State Privacy Rights | Under state privacy laws including the California Consumer Privacy Act (ccpa) as amended by CPRA, as well as laws in Virginia, Colorado, Connecticut, and Utah, residents hold the right to know what personal data is collected, the right to delete personal information, and the right to non-discrimination. Glowveras does not sell personal data or share personal data for cross-context behavioral advertising without affirmative consent. | California Consumer Privacy Act (CCPA/CPRA) and US multi-state privacy statutes. |
| Global Privacy Control | Our web servers and consent scripts natively recognize and honor the global privacy control (Sec-GPC header) signal. When a browser transmits a valid GPC header, advertising storage is held denied automatically as an opt-out without presenting repeated consent prompts. | Recognized universal opt-out mechanism under CCPA regulations. |
| Children's Privacy | Glowveras provides professional cosmetic chemicals and salon tools intended strictly for adults and professional practitioners. The site is not directed toward children under the age of 16, and we do not knowingly collect personal information from minors. | Children's Online Privacy Protection Act (COPPA) compliance. |
| Complaints Authority | You have the right to file a complaint regarding our data handling practices. US residents may file with their state Attorney General, and California residents may contact the California Privacy Protection Agency (CPPA). European visitors may lodge a complaint with their local supervisory Data Protection Authority. | Administrative recourse under US state authorities and EU supervisory agencies. |
| Data Subject Requests | To exercise rights of access, correction, or deletion, transmit a written notice to office@glowveras.click or submit an inquiry through our dedicated Data Request Portal. All verifiable inquiries are acknowledged and resolved within 5 days without charge. | Standard five-day fulfillment protocol for verified data subject requests. |
| Policy Revisions | Material revisions to this Privacy Ledger are posted directly to this URL with a revised effective date header. Changes reflecting regulatory updates or advertising policy amendments become operative upon publication. | Transparent administrative change management. |
| Human Privacy Contact | To speak directly with our studio data compliance officer: Glowveras Desk, 130 North Tryon Street, Charlotte, North Carolina 28202, United States. Telephone: +1 (307) 555-3072. Email: office@glowveras.click. | Direct human contact access required by consumer protection mandates. |