We protect your privacy by restricting data collection strictly to operational inquiries and transparent advertising attribution.

Paid Advertising Platforms & Click Identifiers

This website receives live commercial traffic driven by paid advertising campaigns. Specifically, Google Ads, Microsoft Advertising, and Meta Ads run paid clicks to our landing pages.

When visitors arrive through these promotional channels, the originating advertising network appends a unique cryptographic click identifier to the URL query string:

• google ads: Appends the gclid identifier to monitor search ad performance and lead conversions.
• microsoft advertising: Appends the msclkid identifier to attribute visits from Bing and partner networks.
• Meta Ads: Appends the fbclid parameter to attribute inbound visits originating from social marketing placements.

These identifiers enable our studio to determine which promotional placements yield genuine project inquiries, so our marketing expenditures remain focused and efficient. We state clearly that no advertising platform has reviewed, approved, or verified theCHIVE Club or our website.

Consent Mode v2 Architecture & Signal Enforcement

To guarantee absolute compliance with international privacy mandates, our tracking tags are integrated with Consent Mode v2. Under this protocol, four core storage and personalization signals are held in a strictly denied state by default when any visitor loads a page:

The four signals—ad_storage, ad_user_data, ad_personalization, and analytics_storage—remain denied until the visitor explicitly clicks the "Accept" button on our consent banner. If the visitor clicks "Decline", closes the prompt, or subsequently withdraws permission, all four signals immediately revert to the denied state. In the denied state, no cookies are written to your local disk for promotional profiling, and network signals transmit solely non-identifying conversion pings.

Global Privacy Control (GPC) Compliance

Our website programmatically detects and honors the Global Privacy Control signal (the Sec-GPC HTTP header or browser JavaScript flag). If your browser transmits a global privacy control signal, our system interprets it as an immediate opt-out directive for advertising profiling and analytical tracking. We automatically enforce denied states for marketing signals without presenting repeated pop-ups or override prompts.

Third-Party Data Processors

We do not sell, rent, or lease personal information to third-party data brokers. We share necessary data strictly with trusted service providers who process information on our behalf under binding confidentiality agreements:

• Google Ireland Ltd / Google LLC: Operates Google Ads conversion tracking and analytics infrastructure subject to Consent Mode v2 parameters.
• Microsoft Ireland Operations Ltd: Operates Microsoft Advertising conversion logging. Microsoft's comprehensive privacy practices and data protection disclosures can be reviewed directly at the official Microsoft privacy statement: privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Operates Meta Ads conversion attribution where campaigns run on their advertising network.
• Hosting Provider: Serves our static assets, processes secure PHP request scripts, and hosts our operational PostgreSQL/MySQL inquiry database located in secure US-based data centers.
• Electronic Mail Route Provider: Transmits encrypted notifications of inquiry form submissions from sema7e1.php directly to our operator desk in Austin, Texas.

Cross-Border Data Transfers

theCHIVE Club operates from Austin, Texas within the United States. If you access our website from the European Economic Area (EEA), the United Kingdom, or Switzerland, your personal data is transferred to and processed in the United States.

Cross-border data transfers are safeguarded under lawful transfer mechanisms recognized by the European Commission, including the EU-U.S. Data Privacy Framework (DPF) and standard contractual clauses (SCCs) entered into with our enterprise infrastructure providers, ensuring standards of data security comparable to European benchmarks.

Data Retention Periods

We do not retain personal information indefinitely. Data is stored strictly for defined operational periods:

• Client Inquiries & Email Notifications: Retained for exactly 24 months from submission to facilitate follow-up project estimates, warranty verification, and tax audit records.
• Support Chat Transcripts: Retained for exactly 12 months from the conversation conclusion to maintain context for recurring clients.
• Server & Access Logs: Retained for exactly 90 days for network diagnostic and intrusion prevention purposes before automated deletion.
• Cookie Consent Choices: Stored on your client device in site_consent_v2 for exactly 12 months, after which re-consent is requested.
• Formal Data Subject Requests: Answered and resolved within 7 days of verified identity receipt.

Technical & Organizational Security Measures

Our digital infrastructure employs rigorous defense mechanisms designed to prevent unauthorized access, accidental alteration, or unlawful exposure of customer data:

• Mandatory Transport Layer Security (TLS 1.3) encryption across all public web traffic and administrative APIs.
• Strict server-side validation on sema7e1.php and mino431.php with dual honeypot traps (agency and weblink) to neutralize automated attack vectors.
• Access to our inquiry repository is restricted exclusively to lead web designer Alexey through multi-factor authentication and hardware key verification.
• Regular software patching, operating system isolation, and automated database backups maintained in encrypted offline storage.

European Visitor Rights (GDPR)

If you reside within the European Union, European Economic Area, or United Kingdom, the General Data Protection Regulation (gdpr) grants you comprehensive rights regarding your personal records:

• Right of Access: You can request a complete copy of all personal data held concerning your identity.
• Right to Rectification: You may request immediate correction of inaccurate or incomplete project records.
• Right to Erasure ("Right to be Forgotten"): You may demand deletion of your inquiry data where continued retention is no longer necessary.
• Right to Restriction: You can ask us to suspend processing while data accuracy disputes are reviewed.
• Right to Data Portability: You may receive your personal submission records in a structured, machine-readable format.
• Right to Object: You can object at any time to data processing carried out under legitimate interest grounds.
• Right to Withdraw Consent: You have the unconditional right to withdraw cookie or marketing consent at any time without negative consequences.

United States Privacy Rights & California Disclosures (CCPA/CPRA)

Under US state privacy legislation—including the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), the Texas Data Privacy and Security Act (TDPSA), and equivalent state laws—residents benefit from specific protections:

• Right to Know & Access: You may request disclosure of the specific pieces and categories of personal information collected over the preceding twelve months.
• Right to Delete: You can instruct us to permanently purge your submitted inquiry data from our active storage.
• Right to Correct: You may submit corrections to outdated or inaccurate project records.
• Right to Opt-Out of Sale or Sharing: theCHIVE Club does not sell personal data for monetary compensation. However, to the extent that cross-context behavioral advertising tags are classified as "sharing", you have the absolute right to opt out by declining cookies or utilizing Global Privacy Control.
• Non-Discrimination: Exercising your statutory privacy rights will never result in altered pricing, degraded service quality, or refusal to provide turnkey estimates.

Children's Privacy Protection

Our services and digital publications are directed strictly to commercial founders, businesses, and adult readers. We do not knowingly solicit, collect, or process personal data from individuals under 16 years of age. If we discover that a minor under 16 has submitted personal information through our inquiry form or chat widget, we will delete that record immediately.

Regulatory Authority Complaints

If you believe our data handling practices violate applicable privacy regulations, you have the right to lodge a formal complaint with supervisory authorities:

• In the United States: You may file a complaint with the Office of the Texas Attorney General, or in California with the California Privacy Protection Agency (CPPA) or California Attorney General.
• In the European Union: You may contact the Data Protection Authority in the EU Member State of your habitual residence or workplace.

Submitting a Data Subject Request

To exercise any of your statutory rights—including requests to view, update, export, or delete your inquiry data—submit your verified instruction to our designated privacy desk:

Digital Accessibility Commitment

theCHIVE Club is committed to ensuring our digital resources remain accessible to visitors of all abilities. We develop our layouts following Web Content Accessibility Guidelines (WCAG 2.2 AA standards), maintaining high-contrast color ratios, semantic markup structures, keyboard-navigable interactive controls, and clear screen reader announcements across all devices. If you experience difficulty accessing any content on this site, contact our Austin desk at [email protected] for prompt remediation.

Policy Modifications & Updates

We review our privacy protocols periodically to reflect technical enhancements, advertising network guideline changes, or regulatory statutory revisions. When modifications occur, we update the effective date at the top of this document. Material alterations to our data practices will be communicated via prominent notice banners on our homepage and direct notification to ongoing retainer clients.

Direct Contact Information

For questions regarding this policy, Consent Mode v2 implementation, or project confidentiality, reach out to our team:

theCHIVE Club
Attn: Lead Web Designer Alexey
1100 Congress Ave, Austin, Texas 78701, Austin, Texas, United States
Telephone: 512-555-0123
Email: [email protected]