Documented data handling protocols protect every inquiry and dispatch record.
Effective Date & Governance
This privacy policy took effect on October 17, 2026 and governs all digital communications, estimate requests, and measurement telemetry conducted on the public domain brickpowerwashing.us.
Governing law: the law of OH, United States, with any legal disputes heard exclusively in the courts of ORRVILLE.
Data Controller Identity
The data controller responsible for the capture, storage, and processing of personal information under this policy is:
Categories of Data Collected
We collect only specific operational data required to draft written masonry cleaning estimates and manage truck dispatch:
- Inquiry Form Data: Name, phone number, email address, physical property address, kind of masonry service, requested square footage or specification notes, and timestamped consent confirmation submitted via
kobu404.php. - Technical and Server Logs: Visitor IP address, user-agent browser string, referring URL, page render timestamps, and form transmission moments.
- Chat Transcripts: Conversation logs initiated via
wojace0.phpand persistent session tokens retained locally in visitor browser storage. - Consent Registry: Visitor consent choice recorded locally in browser storage under
site_consent_v2. - Advertising Click Identifiers: Technical URL parameters passed by ad networks upon landing, including
gclid,msclkid, andfbclid.
No user accounts, passwords, debit or credit card data, or payment mechanisms exist on this site. We do not process monetary transactions online.
Operational Purposes of Processing
Every data item captured fulfills a strictly designated physical contracting function:
- Preparing and transmitting binding, itemized written estimate ledgers for power washing and soft washing services.
- Verifying property locations across Orrville and Wayne County to calculate mobilization logistics against our $150 minimum base trip order.
- Communicating field inspection schedules, PSI calibration parameters, and mortar evaluation results to property owners.
- Protecting server endpoints against automated form manipulation, bot submissions, and denial-of-service abuse.
- Measuring advertising traffic acquisition and conversion attribution through Google Ads, Microsoft Advertising, and Meta Ads.
Lawful Legal Bases for Processing
In accordance with statutory standards, data processing activities rely on explicitly established legal grounds:
| Processing Activity | Legal Ground | Operational Scope |
|---|---|---|
| Estimate Intake | Contract | Steps taken at the request of the individual prior to entering into a physical exterior washing agreement. |
| Live Dispatch Chat | Consent | Freely provided by the visitor upon initiating interactive inquiry via wojace0.php. |
| Network Logs & Security | Legitimate Interest | Protecting infrastructure integrity, stopping automated spam, and diagnosing dispatch errors. |
| Advertising Telemetry | Consent | Activated strictly upon user acceptance of analytics and advertising storage tokens. |
Paid Advertising Platforms & Click Identifiers
This website is a direct landing destination for paid advertising campaigns. google ads and microsoft advertising run active traffic to this site, and meta ads may route visitor campaigns.
When a visitor arrives via a sponsored campaign, the advertising network appends a unique cryptographic query parameter to the URL:
- google ads: passes the gclid (Google Click Identifier) parameter to evaluate search query performance.
- microsoft advertising: passes the msclkid (Microsoft Click Identifier) parameter to measure Bing and partner network conversions.
- meta ads: passes the fbclid (Facebook Click Identifier) parameter for social campaign attribution.
No claim is made anywhere that an advertising platform has reviewed, endorsed, or verified our operations.
Consent Mode v2 Operational States
Our digital infrastructure implements Google consent mode v2 in strict default-deny configuration. Prior to user action, and immediately upon explicit rejection or withdrawal of consent, the following four telemetry permissions remain denied:
- ad_storage: denied
- ad_user_data: denied
- ad_personalization: denied
- analytics_storage: denied
Only when a visitor deliberately engages the "Accept Storage" control on our banner does the browser transmit granted states. If the visitor selects "Decline" or clears choices, these permissions are instantaneously set back to denied.
Third-Party Data Processors
We do not sell personal records. We transmit data exclusively to specified technical processors under rigorous confidentiality covenants:
- Google LLC / Google Ireland Ltd: Web analytics and advertising conversion measurement governed by Google corporate privacy standards.
- Microsoft Ireland Operations Ltd / Microsoft Corporation: Search advertising measurement and conversion verification; review terms via privacy.microsoft.com.
- Meta Platforms Ireland Ltd / Meta Platforms Inc: Social campaign telemetry and attribution tracking.
- Hosting Infrastructure Provider: Linux hosting servers maintaining encrypted SQLite database storage and Apache web server access logs.
- SMTP Mail Delivery Provider: Secure transport routing inquiry notifications directly to Ivan Petrov's dispatch inbox.
Cross-Border Data Transfers
Our primary servers and physical facilities reside in the United States. Where telemetry involves European visitors or multinational advertising networks, data transfers rely upon Standard Contractual Clauses (SCCs) approved by the European Commission for equivalent data protection safeguards.
Data Retention Schedules
We enforce defined mathematical retention limits across all operational storage repositories rather than ambiguous holding periods:
site_consent_v2.
Technical & Physical Security Controls
Data transmitted across brickpowerwashing.us is encrypted in transit using Transport Layer Security (TLS 1.3). On-disk database files are held in non-public directories protected by restrictive POSIX file permissions. Honeypot traps (agency and domain fields) reject automated bot submissions.
European Data Rights (GDPR)
Visitors accessing this domain from the European Economic Area possess defined statutory rights under gdpr:
- Right of Access: Obtain confirmation of processing and copies of all held estimate and chat records.
- Right to Rectification: Request correction of inaccurate property addresses or telephone numbers.
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of personal records where legal obligations permit.
- Right to Restriction: Restrict processing while accuracy or dispute inquiries are resolved.
- Right to Data Portability: Receive submitted data in structured, machine-readable JSON or CSV ledger format.
- Right to Object: Object to processing grounded in legitimate interest.
- Right to Withdraw Consent: Revoke consent at any moment via our Consent Preferences banner.
United States State Privacy Rights (CCPA / CPRA)
Residents of California and states with comparable privacy statutes (including Virginia, Colorado, Connecticut, Utah, and Ohio standards) maintain specific statutory rights under the California Consumer Privacy Act as amended (ccpa):
- The right to know what personal data categories are collected, disclosed, or shared.
- The right to delete personal information collected from the consumer.
- The right to correct inaccurate personal information.
- The right to opt-out of the "sale" or "sharing" of personal data for cross-context behavioral advertising.
- The right to non-discrimination for exercising any privacy entitlement.
Brickpowerwashing does not sell personal records for monetary consideration.
Global Privacy Control (GPC) Compliance
Our infrastructure natively detects and respects the global privacy control (Sec-GPC) browser header signal.
When a visitor's browser broadcasts a GPC signal, all optional advertising and analytics storage states are automatically held in denied status without requiring manual interaction with our consent banner.
Children's Privacy Protection
Our services and website are directed strictly to commercial property managers, industrial facility operators, and residential homeowners over 18 years of age. We never knowingly solicit or collect personal records from children under 16 years of age. If such data is inadvertently received, it will be purged immediately upon notice.
Regulatory Authority Complaints
Individuals have the statutory right to lodge an administrative complaint with an authorized supervisory authority:
- In Ohio: Office of the Ohio Attorney General, Consumer Protection Section, Columbus, OH.
- In California: The California Privacy Protection Agency (CPPA) or Office of the California Attorney General.
- In the European Union: The Data Protection Authority corresponding to your habitual member state residence.
Data Registry Request Protocol (Section #data-request)
To exercise any statutory right under GDPR, CCPA, or applicable state law—including requests for record copies, deletion, or correction—submit a formal verified request to our dedicated data desk:
To prevent fraudulent disclosures, we require verification matching the telephone number or email address associated with the original masonry estimate.
Policy Amendments & Revision Log
We may periodically amend this document to reflect modifications in digital advertising regulations, operational equipment, or state privacy laws. Any material adjustments will be posted directly to this URL with an updated effective revision date.
Human Point of Contact
Direct inquiries regarding this policy, Consent Mode v2 configurations, or field record management reach our human dispatch operator directly: