- Contrast Ratios: Text elements maintain contrast ratios exceeding 4.5:1 against our cold glacier ground (#EEF4F7) and surface white (#FFFFFF).
- Keyboard Operation: Every interactive link, disclosure summary, button, and inquiry input carries visible focus outlines and supports logical Tab order.
- Screen Reader Semantics: Full ARIA labeling, live chat log regions, and descriptive alt attributes on all product evidence photography.
- Assistance: If you experience any barrier accessing our nail supply catalog, contact our desk at office@glossiques.click or call +1 (307) 555-3072 for immediate personal assistance.
We document all catalog data flows, advertising signals, and individual privacy rights.
This policy discloses how Glossiques collects, processes, and protects visitor records, inquiry transmissions, support chat sessions, and advertising identifiers across Google Ads, Microsoft Advertising, and Meta Ads.
Policy Effective Date & Document Authority
This privacy policy took effect on 2026-10-17 and governs all digital interactions, catalog inquiries, and technical data collection on glossiques.click. Any subsequent update supersedes previous revisions upon formal posting to this ledger.
Data Controller & Studio Identity
The data controller responsible for the processing of personal data collected through this website is:
- Trading Name: Glossiques
- Operating Website: glossiques.click
- Postal Address: 130 North Tryon Street, Charlotte, North Carolina 28202, Charlotte, North Carolina, United States
- Telephone: +1 (307) 555-3072
- Inquiry & Privacy Contact: office@glossiques.click
Categories of Personal Data Collected
Glossiques collects only the information necessary to evaluate catalog inquiries, provide technical support, and verify advertising delivery:
- Inquiry Form Submissions: Full name, telephone number, electronic mail address, physical shipping or studio address, primary category of interest, target nail specifications (bottle volume, brush grit, rubber viscosity), custom order notes, and the affirmative consent indicator.
- Live Support Desk Sessions: Conversation transcripts submitted through our support chat widget, operator responses, and a browser session token.
- Technical & Log Data: Visitor Internet Protocol (IP) address, browser user-agent string, operating system version, referring URL, timestamp of page render, and timestamp of form submission.
- Advertising Click Identifiers: Inbound campaign click parameters appended by ad networks, specifically
gclid(Google Ads),msclkid(Microsoft Advertising), andfbclid(Meta Ads). - Consent Storage Keys: The visitor preference record stored in localStorage under
site_consent_v2.
No user account credentials, passwords, credit card numbers, or automated billing data are ever collected or processed on this website. Our catalog is strictly inquiry-based.
Specified Purposes of Data Processing
We process collected records strictly for the following operational purposes:
- Reviewing nail polish, base coat, top coat, and brush specifications against physical studio inventory.
- Formulating accurate, non-binding written price quotes ($3 to $20 USD per piece) and confirming lot certificates.
- Responding to live questions through the studio desk chat widget regarding curing lamp compatibility and application protocols.
- Protecting the integrity of our inquiry forms against spam, bot intrusions, and automated script attacks.
- Evaluating advertising campaign reach and keyword relevance across Google Ads, Microsoft Advertising, and Meta Ads.
Lawful Bases for Processing
Under international and statutory privacy standards, every processing activity is anchored to an explicit lawful basis:
| Processing Activity | Data Category | Lawful Basis |
|---|---|---|
| Catalog inquiry evaluation & quotes | Name, email, phone, specifications | Contract: Pre-contractual steps taken at the explicit request of the customer. |
| Advertising measurement & attribution | Click IDs (gclid, msclkid, fbclid), cookies | Consent: Freely given consent granted via the banner before measurement activation. |
| Server security & bot filtering | IP address, user-agent, timestamps | Legitimate Interest: Protecting studio infrastructure against fraud and abuse. |
| Live support chat communication | Conversation body, session token | Consent & Legitimate Interest: Real-time customer communication requested by visitor. |
Advertising Platforms & Click Identifiers
Glossiques runs active paid advertising campaigns. Traffic to glossiques.click is directed from google ads, microsoft advertising, and Meta Ads.
These ad platforms append proprietary click identifiers to destination URLs to track ad interactions and campaign performance:
- Google Ads: Appends the
gclidparameter to track conversions, verify keyword relevance, and prevent ad fraud. - Microsoft Advertising: Appends the
msclkidparameter to attribute searches across the Microsoft Bing network. - Meta Ads: Appends the
fbclidparameter where promotional campaigns run across Meta properties.
We do not state or imply that any advertising platform has reviewed, approved, or verified this website. Advertising is conducted in full compliance with publisher guidelines and counterfeit merchandise prohibitions.
Google Consent Mode v2 Implementation
This website implements Google consent mode v2 in accordance with regional privacy mandates. By default, prior to any user interaction with our consent banner, the following four measurement signals are initialized in a denied state:
ad_storage: deniedad_user_data: deniedad_personalization: deniedanalytics_storage: denied
These parameters remain held strictly denied until the visitor clicks "Accept" on the banner or adjusts their settings in the Cookie Preferences panel. If the visitor clicks "Decline" or withdraws consent at any point, all four signals are immediately returned to denied, and any active measurement tags are suppressed.
Third-Party Processors & Service Providers
Glossiques transfers data only to verified third-party processors required to deliver web services, process communications, and evaluate marketing:
- Google LLC / Google Ireland Ltd: Provides ad conversion measurement (gclid) and Consent Mode v2 infrastructure. Governed by the Google Privacy Policy.
- Microsoft Ireland Operations Ltd: Provides Microsoft Advertising search campaign measurement (msclkid). Governed by the Microsoft privacy statement at privacy.microsoft.com.
- Meta Platforms Ireland Ltd: Provides advertising campaign measurement (fbclid) when campaigns are active.
- Studio Web Hosting Provider: Stores server logs, website static assets, and the secure MySQL inquiry database on servers located in the United States.
- Direct Mail Routing Provider: Delivers inquiry notifications from sugi445.php directly to the operator desk inbox (office@glossiques.click).
Cross-Border Data Transfers
Glossiques operates primarily within the United States from Charlotte, North Carolina. Information collected from international visitors, including European visitors, is transferred to and processed within the United States. Such transfers are executed pursuant to Standard Contractual Clauses (SCCs) adopted by the European Commission, the EU-U.S. Data Privacy Framework, or the explicit consent of the visitor when submitting an international supply inquiry.
Data Retention Schedules
We do not store information indefinitely. Every category of record is governed by an explicit retention window:
- Catalog Inquiries & Email Records: Retained for 24 months from the date of transmission to maintain inquiry history and lot verification.
- Support Chat Transcripts: Retained for 18 months to allow return reference for custom nail formula recommendations.
- Server Access & Security Logs: Retained for 60 days before automatic system rotation and deletion.
- Cookie Consent Choices: Stored locally in the user's browser for 12 months before re-prompting.
- Data Subject Access Requests: Formal requests are acknowledged and answered within 14 days of verified receipt.
Security Protocols & Infrastructure Safeguards
All data transmitted to glossiques.click is protected using 256-bit Transport Layer Security (TLS 1.3) encryption. Our inquiry endpoints implement timestamp verification, cryptographic honeypot fields, input sanitization, and automated rate limiting to prevent unauthorized database access and message spoofing. Internal administrative access is restricted to verified studio personnel.
European Data Subject Rights (GDPR)
Visitors accessing our catalog from the European Economic Area or United Kingdom possess comprehensive rights under the General Data Protection Regulation (gdpr):
- Right of Access: You may request a verified copy of all personal records held about you.
- Right to Rectification: You may correct inaccurate or incomplete contact details.
- Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your inquiry and chat logs.
- Right to Restriction of Processing: You may request that your data be stored but not actively evaluated.
- Right to Data Portability: You may request your inquiry data in a machine-readable JSON or CSV format.
- Right to Object: You may object at any time to processing grounded in legitimate interests.
- Right to Withdraw Consent: You may withdraw consent for cookie storage at any moment using our footer preference controls.
United States & California Privacy Rights (CCPA / CPRA)
Residents of California, Colorado, Connecticut, Virginia, Utah, and other applicable states enjoy protections under statutory frameworks including the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa):
- Right to Know: You may request disclosure of the specific pieces and categories of personal information collected.
- Right to Delete: You may request deletion of personal information subject to legal recordkeeping exemptions.
- Right to Correct: You may request correction of inaccurate personal records.
- Right to Opt-Out of Sale or Sharing: Glossiques does not sell personal information for monetary consideration. Where cookie tracking is classified as "sharing" for cross-context behavioral advertising, you may opt out via our consent banner or Global Privacy Control.
- Right to Non-Discrimination: We will never deny products, adjust pricing, or alter catalog access because you exercised statutory privacy rights.
Global Privacy Control (GPC) Signal
Glossiques recognizes and honors the global privacy control (GPC) browser signal. When our system detects the Sec-GPC: 1 HTTP header or client-side navigator.globalPrivacyControl flag, we automatically treat this as a binding opt-out request for advertising cookies and non-essential measurement. Consent Mode v2 signals remain in the denied state without prompting for consent.
Children's Privacy Protection
Our nail supply catalog and consultation services are intended strictly for adults and professional nail practitioners. We do not knowingly solicit, collect, or maintain personal information from individuals under the age of 18. If we discover that personal data of a minor has been transmitted without verified parental consent, we immediately purge the record from our active databases.
Regulatory Oversight & Complaints
If you believe your personal data has been handled in violation of statutory privacy standards, you have the right to lodge a formal complaint with the relevant regulatory authority:
- United States: The Attorney General of North Carolina or your respective state Attorney General. In California, complaints may be directed to the California Privacy Protection Agency (CPPA).
- European Union / UK: Your local National Data Protection Authority (DPA) or the Information Commissioner's Office (ICO) in the UK.
Data Subject Access Request (DSAR) Protocol
To exercise your rights to access, review, correct, or delete personal data, submit a written inquiry specifying your full name and the email address used during your catalog submission to:
We verify the identity of the requester prior to disclosing records. All valid data requests are fulfilled within 14 days of verified receipt without administrative fee.
Policy Revisions & Notifications
Glossiques reviews this privacy disclosure periodically to ensure alignment with platform policies, state legislation, and studio operations. Whenever changes are enacted, the updated document will be published immediately on this URL with an updated effective date. Continued submission of inquiries constitutes acknowledgment of the published terms.
Human Privacy Officer Contact
If you have questions, feedback, or concerns regarding our privacy architecture, contact our designated privacy officer directly:
- Direct Email: office@glossiques.click
- Studio Phone: +1 (307) 555-3072
- Postal Mail: Glossiques Privacy Officer, 130 North Tryon Street, Charlotte, North Carolina 28202, United States