Privacy policy for a studio that runs on paid clicks and one small form

Who runs this site

Zervuqo is an independent consulting studio trading as Zervuqo at zervuqo.com, operating from 93 River Road, Unit B, Austin, Texas 06493, United States. Zervuqo is the controller of the personal data described in this policy: the studio decides what is collected through this site and why.

What this site actually collects

The inquiry form on the contact page, the configurator on the engagement configurator and the homepage's short form all write the same categories to dowue63.php: name, phone, email, business address or city, the kind of engagement, your notes, the requested specification, and the consent tick. Alongside that, the server automatically logs the IP address making the request, the browser's user-agent string, the referring page, and the two timestamps that bracket the visit — the moment the page rendered and the moment the form was sent.

The support chat widget collects whatever you type into it, plus a name, phone or email if you give one, and stores a return token in your browser so a conversation can be resumed. Cookie identifiers set for consent state and, if allowed, analytics are also collected, along with the advertising click identifiers a paid ad attaches to a link: gclid from Google Ads, msclkid from Microsoft Advertising, and fbclid from Meta Ads. No account is created anywhere on this site, no password is set, and no payment or card data is ever taken — nothing here is sold as a checkout purchase.

What each category is used for

Contact details and notes are used to read your inquiry, decide whether the studio's four-client capacity and one-to-twelve-person scope actually fit what you have described, and to call or write back. Server logs are used to keep the site running and to investigate abuse. Cookie identifiers hold your consent choice and, if you allow it, measure which pages and ads led to an inquiry. The advertising click identifiers let Google Ads and Microsoft Advertising, and Meta Ads where a campaign runs there, attribute a later inquiry back to the ad that was clicked, so the studio can see which spend produced a real conversation rather than a wasted click.

The legal basis for each purpose

Where the GDPR applies — broadly, to visitors reaching this site from Europe — each purpose above rests on a specific basis, not a blanket "legitimate interest" covering everything.

The advertising platforms sending traffic here

This site runs paid traffic today, not conditionally. Google Ads and Microsoft Advertising send clicks to zervuqo.com, and Meta Ads does the same where a campaign is active there. A click from Google Ads carries a gclid parameter on the landing link; a click from Microsoft Advertising carries msclkid; a click from Meta Ads carries fbclid. Zervuqo reads these identifiers to tell the platforms which clicks turned into an inquiry. None of this means a platform has reviewed, approved or verified anything on this site — the identifiers only report outcomes back to the advertiser.

Consent Mode v2, in plain terms

This site runs Google's Consent Mode v2. Four signals — ad_storage, ad_user_data, ad_personalization and analytics_storage — start every visit set to denied. They stay denied until you actively allow storage through the cookie banner. If you decline, or later withdraw your choice, all four signals are set back to denied immediately. No advertising or analytics cookie is written while any of the four reads denied; the ad platforms still receive a signal that a page was viewed, but without the identifiers that would let them tie it to you personally.

Who else receives this data

Zervuqo does not sell data to anyone. A limited set of processors handle it on the studio's behalf: Google Ireland Ltd and Google LLC, operating Google Ads, receive the gclid identifier and the consent signals for that platform. Microsoft Ireland Operations Ltd, operating Microsoft Advertising, receives msclkid and the equivalent signals; its own handling of that data is described at privacy.microsoft.com. Meta Platforms Ireland Ltd, operating Meta Ads, receives fbclid where a campaign is running. Beyond the ad platforms, a hosting provider serves this site and stores the inquiry database, and a mail provider carries the notification email of a new inquiry into the studio's inbox. None of these parties may use the data for their own purposes beyond running the service Zervuqo pays them for.

Data crossing borders

Zervuqo is based in Texas and the hosting and mail providers it uses are based in the United States. Google, Microsoft and Meta each operate internationally and may process data outside the country where you clicked the ad. Where the GDPR applies, these transfers rely on the standard contractual clauses those platforms publish and maintain with their processors, or an equivalent adequacy mechanism recognised under the GDPR — Zervuqo does not run its own separate transfer mechanism on top of theirs.

How long each category is kept

Retention here is a stated period, not an open-ended "as needed." An inquiry and its email copy are kept 36 months from the date they were sent, then deleted. Chat transcripts are kept 18 months. Server and access logs roll off after 90 days. The record of a consent choice is kept 12 months, after which the banner simply asks again. None of these periods are extended for marketing once the underlying purpose above has been served.

How the data is protected

Form submissions travel over encrypted HTTPS connections. The inquiry database and chat transcripts sit behind an authenticated administrative area that is not linked from any public page, is not indexed, and is excluded from the sitemap. Access to that area is limited to the studio's three consultants. The two hidden fields on every form exist to catch automated submissions before a human ever sees them, reducing the volume of junk data the studio has to store at all.

Rights for visitors covered by the GDPR

If you reach this site from a country where the GDPR applies, you have the right to access the data Zervuqo holds about you, to have inaccurate data corrected, to have it erased, to restrict or object to certain processing, to receive a copy in a portable format, and to withdraw any consent you gave at any point, with no effect on processing already completed while consent stood. None of these rights cost anything to exercise.

Rights for visitors covered by US state privacy law

Visitors in California have rights under the CCPA as amended by the CPRA: to know what personal information is collected, to delete it, to correct it, and to opt out of its sale or sharing, including sharing for cross-context behavioural advertising through the ad platforms named above. Zervuqo does not sell personal information for money. Other US states with comparable privacy laws in force extend similar rights to their residents, and Zervuqo honours the same requests regardless of which state you write from.

Global Privacy Control

If your browser sends the Global Privacy Control signal, Zervuqo treats it as a valid opt-out of the sale and sharing of your data and sets the advertising consent signals to denied automatically, without asking you to repeat the choice through the cookie banner.

Children

This site is built for business owners and operators, not children. Zervuqo does not knowingly collect data from anyone under 16, does not direct advertising at children, and will delete any data it discovers came from a child as soon as it is identified.

Complaints

If you believe Zervuqo has mishandled your data, write to the studio first at [email protected] so it can be corrected directly. You may also complain to your state Attorney General, and, if you are a California resident, to the California Privacy Protection Agency. Visitors covered by the GDPR may complain to their national data protection authority.

Changes to this policy

If this policy changes in a way that matters — a new category of data, a new processor, a change to retention — the date at the top of this page is updated and, for a material change, a notice is posted on the homepage for at least 30 days. Continuing to use the site after that date means the updated policy applies to you.

How to reach a person about this policy

Questions about this policy, or about data Zervuqo holds, go to [email protected] or +1 (365) 555-8425. A letter can be sent to 93 River Road, Unit B, Austin, Texas 06493, United States. This reaches one of the studio's three consultants directly, not an intake queue.