Client data protection and advertising transparency govern every Pure Blush interaction.
This privacy policy is formatted as a structured specification ledger. Every clause names the exact operational reality, technical scope, and statutory legal basis.
| Clause | Plain Language Meaning | Legal Basis & Applicability |
|---|---|---|
| Effective Date | This policy took effect and was verified current on October 17, 2026. | Mandatory statutory benchmark for privacy disclosure applicability under US state privacy statutes and digital advertising platform standards. |
| Data Controller | The controller responsible for personal information processed through this website is Pureblush, trading at pureblush.click, with studio premises at 1301 Barton Springs Road, Austin, Texas 78704, Austin, Texas, United States. Telephone: +1 (307) 555-3072. Email: office@pureblush.click. | Establishes legal identity and physical establishment of the enterprise for regulatory oversight and consumer communication. |
| Data Categories Collected | Pure Blush collects contact records submitted via kobud27.php (full name, telephone number, email address, physical city or postal zip code, service category, skin specifications, profile notes, consent timestamp). Automatically recorded technical logs include client IP address, HTTP user-agent string, referrer URL, intake render timestamp, and form transmission timestamp. The interactive chat widget (biwe3c7.php) stores conversation transcripts and a session token in browser localStorage. This site runs paid advertising campaigns; technical click identifiers processed include: gclid from google ads, msclkid from microsoft advertising, and fbclid from Meta Ads. The consent choice is stored in the browser under site_consent_v2, and nothing else on this site persists a choice. No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken. | Full audit ledger of user-provided, technical server, and advertising telemetry data streams. |
| Processing Purposes | Collected data is used solely to: (1) evaluate appointment requests, shade match requirements, and barrier health contraindications; (2) communicate directly with prospective clients via telephone or email regarding studio appointments; (3) maintain server security, mitigate automated spam bot traffic, and preserve forensic system logs; and (4) measure marketing reach and conversion attribution from authorized advertising campaigns. | Defines explicit operational boundaries preventing unapproved secondary data exploitation or unauthorized brokering. |
| Legal Grounds | Processing relies on three lawful bases: (1) Contractual necessity / pre-contractual steps under GDPR Article 6(1)(b) to review inquiries and coordinate booking slots requested by the user; (2) Explicit consent under GDPR Article 6(1)(a) for non-essential storage, analytics scripts, and advertising measurement identifiers; and (3) Legitimate interest under GDPR Article 6(1)(f) to protect network infrastructure integrity and prevent malicious bot submissions. | Articulates lawful authority under international and cross-border data protection frameworks. |
| Advertising Platforms & Click IDs | This site is an active destination for paid traffic. google ads, microsoft advertising, and Meta Ads send prospective clients to pureblush.click. When an ad link is clicked, platforms attach query string click identifiers: gclid for google ads, msclkid for microsoft advertising, and fbclid for Meta Ads. These parameters allow the originating platform to correlate ad clicks with landing page arrivals and appointment inquiry events. | Mandatory disclosure of live commercial traffic generation channels and associated URL parameter attribution tags. |
| Google Consent Mode v2 | Our digital tracking architecture operates under consent mode v2. Four distinct privacy signals are governed: ad_storage, ad_user_data, ad_personalization, and analytics_storage. Upon initial page arrival, all four signals are held in a strict "denied" state. No advertising cookies, personal tags, or measurement pixels read client identifiers until the visitor grants positive consent via our consent banner. If the visitor declines or resets consent, all four signals instantly revert to denied. | Technical enforcement of granular signal gating across Google Ads and associated measurement networks. |
| Data Processors & Third Parties | Pure Blush transmits specific technical data to vetted third-party service providers acting as processors: Google LLC and Google Ireland Ltd (Google Ads tag routing); Microsoft Ireland Operations Ltd (Microsoft Advertising, with policies accessible via privacy.microsoft.com); Meta Platforms Ireland Ltd (Meta Ads conversion measurement); our dedicated web hosting provider that stores our operational web server and SQLite inquiry database; and our secure transactional SMTP mail provider carrying booking alert notices. We do not sell consumer contact records to third-party data brokers. | Transparency regarding external cloud infrastructure and platform vendors handling client data streams. |
| Cross-Border Data Transfers | Our primary hosting facilities and studio operations are situated in the United States. When visitors access pureblush.click from the European Economic Area, United Kingdom, or Switzerland, their inquiries and technical metadata are transferred to our US servers under Standard Contractual Clauses (SCCs) adopted by the European Commission, or through equivalent adequacy agreements and Data Privacy Framework certifications maintained by participating vendors. | Affirms statutory compliance mechanisms for international data transmission into United States jurisdiction. |
| Data Retention Periods | We retain personal data strictly according to defined schedules rather than open-ended timelines: (1) Client inquiry form submissions and their transactional email copies: 18 months; (2) Inquire desk support chat transcripts: 12 months; (3) Server and access log files: 90 days; (4) Client cookie consent preference state (site_consent_v2): 12 months. Upon expiration of these periods, electronic records are permanently purged or anonymized. | Eliminates indefinite personal data accumulation through predictable, scheduled data deprecation. |
| Data Security Safeguards | Studio data is guarded by multi-tiered technical and administrative safeguards: all public web traffic is forced over Transport Layer Security (TLS 1.3 encryption); server storage partitions restrict unauthorized administrative file inspection; honeypot security parameters prevent automated scraping; and inquiry records are stored on protected server volumes with restricted internal access keys. | Details reasonable physical, administrative, and technological protections mitigating unauthorized breach risks. |
| European Rights Under GDPR | Visitors within the European Union and EEA retain full statutory rights under gdpr: the right of access to personal data; the right to rectification of inaccurate records; the right to erasure ("right to be forgotten"); the right to restriction of processing; the right to data portability; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal. | Explicit catalog of individual protections guaranteed to European data subjects under GDPR Regulation (EU) 2016/679. |
| United States Privacy Rights & CCPA | Under United States state privacy legislation, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), Texas Data Privacy and Security Act (TDPSA), and equivalent state laws, residents possess the right to: know what personal information has been collected, used, or shared; request deletion of personal information; request correction of inaccurate data; and opt out of the sale of personal information or sharing for cross-context behavioral advertising. Pure Blush does not sell personal records or share sensitive personal information for monetary value. | Satisfies consumer notice mandates under California CCPA and emerging US state statutory data frameworks. |
| Global Privacy Control (GPC) | Our website recognizes and respects global privacy control (GPC) browser signals. When an HTTP request carries the Sec-GPC header set to 1, our consent manager automatically interprets the signal as an affirmative opt-out of third-party advertising telemetry and non-essential analytics cookies without requiring secondary confirmation dialogs. | Automated legal recognition of universal browser opt-out signals required under California and state privacy standards. |
| Children's Privacy | Pure Blush is a professional facial skincare and cosmetic studio intended strictly for adults aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 16. If we become aware that personal information of a child under 16 has been transmitted without verified parental consent, we immediately delete such records from our databases. | Mandatory compliance standard under COPPA and state child safety privacy statutes. |
| Regulatory Complaints | You have the right to submit a formal complaint if you believe our data processing violates applicable statutory standards. California residents may lodge complaints with the California Privacy Protection Agency (CPPA) or the California Attorney General. Residents of Texas may contact the Office of the Texas Attorney General. European individuals may contact their national data protection supervisory authority. | Provides consumers with clear avenues of administrative recourse with sovereign data protection authorities. |
| Exercising Consumer Data Requests | To exercise your rights to access, review, correct, or delete personal data, submit a written inquiry to office@pureblush.click or visit our dedicated Data Request portal. Every data request is answered within 5 days. We will verify your identity using your email or telephone on file before fulfilling the request. | Operational pathway and guaranteed response window for consumer privacy rights invocation. |
| Policy Updates & Amendments | Pure Blush reserves the right to amend this Privacy Policy to reflect evolving regulatory directives or studio operational adjustments. Any revised version will be published at pureblush.click/privacy.html with an updated effective date header. Where revisions materially alter the processing of previously collected information, we provide prominent notice on our website homepage. | Legal notice protocol regarding ongoing updates to privacy governance documentation. |
| Studio Privacy Contact | For inquiries or concerns regarding personal information, data processing, or platform advertising practices, reach our privacy administrator directly: Pureblush Privacy Desk, 1301 Barton Springs Road, Austin, Texas 78704, Austin, Texas, United States. Telephone: +1 (307) 555-3072. Direct Email: office@pureblush.click. Governing law: the law of Texas, United States, with disputes heard in the courts of Austin. | Direct human contact information for privacy compliance correspondence and jurisdiction venue. |