Audit.
Clause ledger and operational data handling registry for Kelvorina engineering requirements practice.
This privacy policy is structured as an engineering clause ledger. Each technical clause specifies the operational reality of our systems, telemetry parameters from active advertising campaigns, and the exact protocols governing data retention and subject requests.
| Clause ID | Subject | Plain Language Meaning | Operational & Legal Basis |
|---|---|---|---|
| CLAUSE-01 | Effective Date | This privacy policy and telemetry data registry took effect on October 27, 2026. It applies to all consultations, inquiries, and visits initiated on or after this date. | Policy version baseline 2026-10-27. Reflects active advertising compliance standards. |
| CLAUSE-02 | Data Controller | The controller responsible for your information is Kelvorina, trading at kelvorina.com, located at 1371 Cherokee Street, Denver, Colorado 80204, Denver, Colorado, United States. Telephone: +1 (698) 555-9980. Direct email: [email protected]. | Direct identification of legal operating entity under Colorado and US business registries. |
| CLAUSE-03 | Data Collected | We collect data submitted via our inquiry form (name, telephone, email address, project location, engagement category, technical notes, specification volume, consent timestamp). Our chat desk records conversation transcripts and browser session tokens. Web servers log IP addresses, browser user-agent strings, referring URLs, and page render timestamps. Advertising click parameters (gclid, msclkid, fbclid) are captured when landing from active promotional campaigns. No passwords, user accounts, credit cards, or financial credentials are collected or stored. | Form handling via vajoad4.php, real-time consultation dispatch via wamo91f.php, and standard web server logging. |
| CLAUSE-04 | Purposes of Processing | Data is used solely to prepare 1–3 day technical scope evaluations, conduct 55-minute requirements consultation sessions, resolve interface control conflicts, draft verification cross-reference matrices, maintain practice security, and measure conversion attribution from paid advertising traffic. | Direct delivery of requirements consulting services and evaluation quotes. |
| CLAUSE-05 | Legal Bases for Processing | We process consultation inquiries under contract performance (taking requested pre-contractual scoping steps). Telemetry, analytical measurement, and ad attribution run exclusively on affirmative consent. Site security, anti-spam honeypot defense, and audit record retention rely on our legitimate interests in protecting technical infrastructure and documenting commercial proposals. | Article 6(1)(a) Consent, Article 6(1)(b) Contract, and Article 6(1)(f) Legitimate Interests. |
| CLAUSE-06 | Advertising Platforms & Click IDs | This website receives live traffic from paid digital advertising. We actively run campaigns across Google Ads, Microsoft Advertising, and Meta Ads. These platforms append unique click identifiers to inbound links: gclid from Google, msclkid from Microsoft, and fbclid from Meta. These tokens verify that an incoming visit originated from an ad interaction and allow post-consultation conversion measurement. | Operational necessity for campaign attribution across Google Ads, Microsoft Advertising, and Meta Ads. Verbatim tracking parameters: gclid, msclkid, fbclid. |
| CLAUSE-07 | Consent Mode v2 Signals | We enforce Google Consent Mode v2. By default, four critical storage signals—ad_storage, ad_user_data, ad_personalization, and analytics_storage—are initialized in a 'denied' state upon page load. No marketing cookies or ad telemetry tags write storage to your browser until you click 'Allow Storage' on our consent banner. If you choose 'Decline Storage' or reopen your settings to withdraw consent, all four signals (ad_storage, ad_user_data, ad_personalization, and analytics_storage) are immediately set back to 'denied', and non-essential cookies are removed. | Compliance with European and state-level ePrivacy guidelines and Google Consent Mode v2 architecture. |
| CLAUSE-08 | Data Processors & Third Parties | We transmit data strictly to authorized technical service providers. These include: Google LLC / Google Ireland Ltd (Google Ads attribution and Consent Mode), Microsoft Ireland Operations Ltd / Microsoft Corporation (Microsoft Advertising attribution, governed by privacy.microsoft.com), Meta Platforms Ireland Ltd / Meta Platforms Inc. (Meta Ads conversion measurement), our cloud hosting infrastructure hosting the Denver web environment and secure submission database, and our SMTP routing provider delivering inquiry notifications directly to [email protected]. We do not sell or lease personal details to data brokers. | Processor data processing agreements. Microsoft privacy policy reference: https://privacy.microsoft.com/privacystatement. |
| CLAUSE-09 | International Data Transfers | Kelvorina operates from Denver, Colorado in the United States. Inquiries originating outside the United States are processed on servers in the United States. Where personal data transfers occur from the European Economic Area or the United Kingdom, they are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission or rely on active Data Privacy Framework certifications held by our technology vendors. | Transatlantic data protection compliance and EU-US Standard Contractual Clauses. |
| CLAUSE-10 | Data Retention Schedules | We adhere to fixed retention schedules: formal consultation inquiries and notification emails are retained for 24 months to maintain commercial scope histories; support chat transcripts are retained for 18 months; web server and security access logs are purged after 90 days; and visitor consent decisions recorded under site_consent_v2 are retained in your browser for 6 months before re-prompting. Data subject access requests are fulfilled within 10 days of verified receipt. | Fixed operational retention schedule. No indefinite or unmonitored data accumulation. |
| CLAUSE-11 | Security Safeguards | All web traffic between your browser and kelvorina.com is encrypted using modern Transport Layer Security (TLS 1.3 / SSL). Form submissions run through automated sanitization filters, timing gates (hidden opened field), and dual honeypot traps (firm and domain) to prevent automated intrusion. Database records are stored behind restricted firewall perimeters with multi-factor authentication enforced for all administrative access. | Technical and organizational security measures meeting NIST and ISO requirements. |
| CLAUSE-12 | European GDPR Rights | Under the General Data Protection Regulation (gdpr), individuals residing in the European Economic Area or UK possess comprehensive rights: the right of access to personal data, the right to rectification of inaccurate records, the right to erasure ('right to be forgotten'), the right to restriction of processing, the right to data portability, the right to object to processing based on legitimate interests, and the right to withdraw consent at any time without affecting prior lawful processing. | Full compliance with gdpr Articles 15–22. |
| CLAUSE-13 | US State Privacy Rights & CCPA | Residents of California (under the California Consumer Privacy Act / ccpa as amended by the CPRA), Colorado (under the Colorado Privacy Act), and other applicable states have specific statutory protections. You have the right to know what personal information is collected, the right to request deletion of personal information, the right to correct inaccurate data, and the right not to face discriminatory treatment for exercising these protections. Kelvorina does not sell personal information or share personal data for cross-context behavioral advertising outside the authorized ad platforms disclosed herein. You may opt out of sharing at any time. | Statutory compliance with ccpa / CPRA and the Colorado Privacy Act (CPA). |
| CLAUSE-14 | Global Privacy Control (GPC) | Our consent architecture automatically detects and respects Global Privacy Control signals transmitted by your browser (the Sec-GPC header). When a valid global privacy control signal is detected, the website treats it as an automatic refusal of marketing cookies and telemetry tracking without requiring you to manually toggle the cookie banner. Consent Mode v2 signals remain denied. | Automated browser-level signal recognition for global privacy control. |
| CLAUSE-15 | Children’s Privacy | Kelvorina is an engineering and product requirements consultancy serving commercial enterprises, hardware fabricators, and systems developers. We do not knowingly offer services to, market to, or collect personal data from children under 16 years of age. Any technical transmission identified as originating from a minor will be permanently purged immediately. | COPPA and general child protection regulatory alignment. |
| CLAUSE-16 | Supervisory Authority Complaints | If you believe our data handling practices violate applicable regulations, you have the right to lodge a formal complaint with a competent supervisory authority. In the United States, you may contact the Colorado Attorney General or the California Privacy Protection Agency (CPPA). In the European Union, you may contact the data protection authority in your member state of habitual residence. | Formal statutory recourse channels under state and international privacy frameworks. |
| CLAUSE-17 | Data Subject Access Requests (DSAR) | To exercise your rights to review, correct, port, or erase your information, submit a written Data Subject Access Request by email to [email protected] or by mail to Kelvorina Data Desk, 1371 Cherokee Street, Denver, Colorado 80204, United States. We verify the requester’s identity through email confirmation and respond within 10 days of receipt without assessment of administrative fees. | Standard operational DSAR protocol fulfilled at id=“data-request”. |
| CLAUSE-18 | Policy Modifications | Any material revisions to our data handling standards, telemetry systems, or ad partner integrations will be published directly to this URL with a revised effective date header. For existing clients with active engineering engagements, material changes affecting contract processing will be communicated via direct email notification prior to enactment. | Transparent ledger version control and notice standards. |
| CLAUSE-19 | Direct Privacy Contacts | Questions, notices, or formal legal service regarding data practices should be directed to Maria Ivanova at [email protected] or by telephone at +1 (698) 555-9980. Physical correspondence: Kelvorina Practice Desk, 1371 Cherokee Street, Denver, Colorado 80204, United States. | Direct point of contact for human accountability and legal inquiries. |
Compliance & Archive Systems
Verify.
Transparent management of consent states and advertising identifier handling across all browser sessions.
You maintain total control over telemetry and advertising storage. If you previously allowed cookies and wish to revoke access, select 'Cookie Settings' in the footer or click below. Your selection is recorded in site_consent_v2 and Consent Mode signals will immediately revert to 'denied'.