Governance & Privacy Architecture Stack of Disclosures

We document all catalog data flows, advertising signals, and individual privacy rights.

This policy discloses how Glossiques collects, processes, and protects visitor records, inquiry transmissions, support chat sessions, and advertising identifiers across Google Ads, Microsoft Advertising, and Meta Ads.

Studio document workstation with clean glass panel and ledger lines.
Documentation desk at Glossiques Charlotte. Every operational clause below is structured for audit and platform compliance.
Effective: 2026-10-17 Consent Mode v2
Disclosure Controls
Policy Effective Date & Document Authority

This privacy policy took effect on 2026-10-17 and governs all digital interactions, catalog inquiries, and technical data collection on glossiques.click. Any subsequent update supersedes previous revisions upon formal posting to this ledger.

Data Controller & Studio Identity

The data controller responsible for the processing of personal data collected through this website is:

  • Trading Name: Glossiques
  • Operating Website: glossiques.click
  • Postal Address: 130 North Tryon Street, Charlotte, North Carolina 28202, Charlotte, North Carolina, United States
  • Telephone: +1 (307) 555-3072
  • Inquiry & Privacy Contact: office@glossiques.click
Categories of Personal Data Collected

Glossiques collects only the information necessary to evaluate catalog inquiries, provide technical support, and verify advertising delivery:

  1. Inquiry Form Submissions: Full name, telephone number, electronic mail address, physical shipping or studio address, primary category of interest, target nail specifications (bottle volume, brush grit, rubber viscosity), custom order notes, and the affirmative consent indicator.
  2. Live Support Desk Sessions: Conversation transcripts submitted through our support chat widget, operator responses, and a browser session token.
  3. Technical & Log Data: Visitor Internet Protocol (IP) address, browser user-agent string, operating system version, referring URL, timestamp of page render, and timestamp of form submission.
  4. Advertising Click Identifiers: Inbound campaign click parameters appended by ad networks, specifically gclid (Google Ads), msclkid (Microsoft Advertising), and fbclid (Meta Ads).
  5. Consent Storage Keys: The visitor preference record stored in localStorage under site_consent_v2.

No user account credentials, passwords, credit card numbers, or automated billing data are ever collected or processed on this website. Our catalog is strictly inquiry-based.

Specified Purposes of Data Processing

We process collected records strictly for the following operational purposes:

  • Reviewing nail polish, base coat, top coat, and brush specifications against physical studio inventory.
  • Formulating accurate, non-binding written price quotes ($3 to $20 USD per piece) and confirming lot certificates.
  • Responding to live questions through the studio desk chat widget regarding curing lamp compatibility and application protocols.
  • Protecting the integrity of our inquiry forms against spam, bot intrusions, and automated script attacks.
  • Evaluating advertising campaign reach and keyword relevance across Google Ads, Microsoft Advertising, and Meta Ads.
Advertising Platforms & Click Identifiers

Glossiques runs active paid advertising campaigns. Traffic to glossiques.click is directed from google ads, microsoft advertising, and Meta Ads.

These ad platforms append proprietary click identifiers to destination URLs to track ad interactions and campaign performance:

  • Google Ads: Appends the gclid parameter to track conversions, verify keyword relevance, and prevent ad fraud.
  • Microsoft Advertising: Appends the msclkid parameter to attribute searches across the Microsoft Bing network.
  • Meta Ads: Appends the fbclid parameter where promotional campaigns run across Meta properties.

We do not state or imply that any advertising platform has reviewed, approved, or verified this website. Advertising is conducted in full compliance with publisher guidelines and counterfeit merchandise prohibitions.

Third-Party Processors & Service Providers

Glossiques transfers data only to verified third-party processors required to deliver web services, process communications, and evaluate marketing:

  • Google LLC / Google Ireland Ltd: Provides ad conversion measurement (gclid) and Consent Mode v2 infrastructure. Governed by the Google Privacy Policy.
  • Microsoft Ireland Operations Ltd: Provides Microsoft Advertising search campaign measurement (msclkid). Governed by the Microsoft privacy statement at privacy.microsoft.com.
  • Meta Platforms Ireland Ltd: Provides advertising campaign measurement (fbclid) when campaigns are active.
  • Studio Web Hosting Provider: Stores server logs, website static assets, and the secure MySQL inquiry database on servers located in the United States.
  • Direct Mail Routing Provider: Delivers inquiry notifications from sugi445.php directly to the operator desk inbox (office@glossiques.click).
Cross-Border Data Transfers

Glossiques operates primarily within the United States from Charlotte, North Carolina. Information collected from international visitors, including European visitors, is transferred to and processed within the United States. Such transfers are executed pursuant to Standard Contractual Clauses (SCCs) adopted by the European Commission, the EU-U.S. Data Privacy Framework, or the explicit consent of the visitor when submitting an international supply inquiry.

Data Retention Schedules

We do not store information indefinitely. Every category of record is governed by an explicit retention window:

  • Catalog Inquiries & Email Records: Retained for 24 months from the date of transmission to maintain inquiry history and lot verification.
  • Support Chat Transcripts: Retained for 18 months to allow return reference for custom nail formula recommendations.
  • Server Access & Security Logs: Retained for 60 days before automatic system rotation and deletion.
  • Cookie Consent Choices: Stored locally in the user's browser for 12 months before re-prompting.
  • Data Subject Access Requests: Formal requests are acknowledged and answered within 14 days of verified receipt.
Security Protocols & Infrastructure Safeguards

All data transmitted to glossiques.click is protected using 256-bit Transport Layer Security (TLS 1.3) encryption. Our inquiry endpoints implement timestamp verification, cryptographic honeypot fields, input sanitization, and automated rate limiting to prevent unauthorized database access and message spoofing. Internal administrative access is restricted to verified studio personnel.

European Data Subject Rights (GDPR)

Visitors accessing our catalog from the European Economic Area or United Kingdom possess comprehensive rights under the General Data Protection Regulation (gdpr):

  • Right of Access: You may request a verified copy of all personal records held about you.
  • Right to Rectification: You may correct inaccurate or incomplete contact details.
  • Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your inquiry and chat logs.
  • Right to Restriction of Processing: You may request that your data be stored but not actively evaluated.
  • Right to Data Portability: You may request your inquiry data in a machine-readable JSON or CSV format.
  • Right to Object: You may object at any time to processing grounded in legitimate interests.
  • Right to Withdraw Consent: You may withdraw consent for cookie storage at any moment using our footer preference controls.
United States & California Privacy Rights (CCPA / CPRA)

Residents of California, Colorado, Connecticut, Virginia, Utah, and other applicable states enjoy protections under statutory frameworks including the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa):

  • Right to Know: You may request disclosure of the specific pieces and categories of personal information collected.
  • Right to Delete: You may request deletion of personal information subject to legal recordkeeping exemptions.
  • Right to Correct: You may request correction of inaccurate personal records.
  • Right to Opt-Out of Sale or Sharing: Glossiques does not sell personal information for monetary consideration. Where cookie tracking is classified as "sharing" for cross-context behavioral advertising, you may opt out via our consent banner or Global Privacy Control.
  • Right to Non-Discrimination: We will never deny products, adjust pricing, or alter catalog access because you exercised statutory privacy rights.
Global Privacy Control (GPC) Signal

Glossiques recognizes and honors the global privacy control (GPC) browser signal. When our system detects the Sec-GPC: 1 HTTP header or client-side navigator.globalPrivacyControl flag, we automatically treat this as a binding opt-out request for advertising cookies and non-essential measurement. Consent Mode v2 signals remain in the denied state without prompting for consent.

Children's Privacy Protection

Our nail supply catalog and consultation services are intended strictly for adults and professional nail practitioners. We do not knowingly solicit, collect, or maintain personal information from individuals under the age of 18. If we discover that personal data of a minor has been transmitted without verified parental consent, we immediately purge the record from our active databases.

Regulatory Oversight & Complaints

If you believe your personal data has been handled in violation of statutory privacy standards, you have the right to lodge a formal complaint with the relevant regulatory authority:

  • United States: The Attorney General of North Carolina or your respective state Attorney General. In California, complaints may be directed to the California Privacy Protection Agency (CPPA).
  • European Union / UK: Your local National Data Protection Authority (DPA) or the Information Commissioner's Office (ICO) in the UK.
Data Subject Access Request (DSAR) Protocol

To exercise your rights to access, review, correct, or delete personal data, submit a written inquiry specifying your full name and the email address used during your catalog submission to:

Designated DSAR Desk office@glossiques.click Attention: Privacy Officer, Glossiques, 130 North Tryon Street, Charlotte, NC 28202

We verify the identity of the requester prior to disclosing records. All valid data requests are fulfilled within 14 days of verified receipt without administrative fee.

Policy Revisions & Notifications

Glossiques reviews this privacy disclosure periodically to ensure alignment with platform policies, state legislation, and studio operations. Whenever changes are enacted, the updated document will be published immediately on this URL with an updated effective date. Continued submission of inquiries constitutes acknowledgment of the published terms.

Human Privacy Officer Contact

If you have questions, feedback, or concerns regarding our privacy architecture, contact our designated privacy officer directly:

Studio Accessibility Standard
"Does the studio ensure this catalog is fully operable using keyboard navigation, screen readers, and high-contrast settings?"
WCAG 2.1 AA Target Charlotte Workbench
Glossiques is committed to ensuring digital accessibility for all users, including those with visual, motor, or cognitive disabilities. Our website is built adhering strictly to the World Wide Web Consortium (W3C) Web Content Accessibility Guidelines (WCAG 2.1) Level AA standards.
  • Contrast Ratios: Text elements maintain contrast ratios exceeding 4.5:1 against our cold glacier ground (#EEF4F7) and surface white (#FFFFFF).
  • Keyboard Operation: Every interactive link, disclosure summary, button, and inquiry input carries visible focus outlines and supports logical Tab order.
  • Screen Reader Semantics: Full ARIA labeling, live chat log regions, and descriptive alt attributes on all product evidence photography.
  • Assistance: If you experience any barrier accessing our nail supply catalog, contact our desk at office@glossiques.click or call +1 (307) 555-3072 for immediate personal assistance.