Privacy Policy & Data Rights Architecture

This Privacy Policy took effect on October 16, 2026. It applies to all visitors, prospective clients, and commercial partners interacting with Gorvansi through the primary domain gorvansi.com, related submission endpoints, and connected studio communication tools.

This document is governed by the laws of the State of Colorado, United States. Any disputes arising from the interpretation of these terms or our technical data handling will be resolved exclusively in the state or federal courts located in Denver, Colorado.

The data controller responsible for the collection and processing of personal information under this policy is Gorvansi, an independent web design and front-end engineering studio registered in Denver, Colorado.

Gorvansi operates an inquiry-only web presence. We do not maintain visitor user accounts, accept credit card numbers, or process online payments directly through this website. We collect data strictly through the following channels:

• Direct Project Intake Form (toji8a4.php): When you submit an inquiry, we collect your name, phone number, email address, physical address or project location, requested engagement kind, technical scope preferences, message notes, and explicit consent confirmation. Along with this submission, our server logs the IP address, browser user-agent string, referring URL, form render timestamp, and form transmission timestamp.
• Studio Consultation Chat (mopa9d8.php): If you engage our desktop chat widget, we record conversation messages and issue a temporary session token stored in your browser's local storage so you can resume the dialogue.
• Browser Storage & Consent: Your choice regarding tracking consent is stored locally in your browser under the key site_consent_v2. No other persistent cookies are generated by our application code.
• Advertising Identifiers: If you arrive at our site via paid search campaigns, URL click identifiers (including Google Ads gclid, Microsoft Advertising msclkid, and Meta Ads fbclid) are processed by script tags subject to your explicit consent status.

We process collected data exclusively for defined operational and commercial purposes:

• To evaluate client project specifications, verify feasibility, and prepare non-binding estimates bounded by our published rates ($3,500–$60,000 or $15–$200/hr).
• To respond directly to technical inquiries, architectural triage requests, and telephone appointments.
• To operate the live interactive chat widget on the studio desk.
• To detect and filter malicious automated form abuse, spam injection, and distributed denial of service attempts.
• To evaluate the performance of our paid marketing campaigns across search and social ad networks, ensuring accurate attribution of commercial inquiries.

Under applicable data protection legislation, including European data protection directives, every processing action is justified by a lawful legal basis:

Gorvansi runs active digital marketing campaigns. Paid traffic is directed to this website via Google Ads, Microsoft Advertising, and Meta Ads.

When a visitor clicks a sponsored search ad or campaign creative, the respective advertising network appends a unique cryptographic query string parameter to the landing page URL:

• Google Ads attaches the gclid (Google Click Identifier).
• Microsoft Advertising attaches the msclkid (Microsoft Click Identifier).
• Meta Ads attaches the fbclid (Facebook Click Identifier).

These parameters allow conversion measurement, session attribution, and campaign cost accounting. We do not claim that any advertising platform has reviewed, endorsed, or approved our website or our technical services.

This website implements Consent Mode v2 natively in compliance with international privacy standards. Before a visitor makes a choice via our cookie dock, all four tracking parameters are initialized and strictly held in a denied state:

• ad_storage: denied
• ad_user_data: denied
• ad_personalization: denied
• analytics_storage: denied

Only when the visitor clicks "Allow Cookies" are these parameters updated to granted. If the visitor selects "Decline" or revokes consent via the footer link, all four signals are immediately reset to denied. Under a denied state, no advertising tags write persistent cookies or read existing identifiers.

We transfer data only to verified third-party processors who provide technical infrastructure or advertising attribution necessary to operate our studio:

• Google LLC / Google Ireland Ltd: Provides Google Ads campaign infrastructure and Consent Mode integration.
• Microsoft Ireland Operations Ltd: Provides Microsoft Advertising campaign delivery. Microsoft’s data handling is governed by their privacy disclosure at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Provides Meta Ads attribution measurement for selected display and social marketing campaigns.
• Hosting Infrastructure Provider: Operates the secure static file web server, database storage for incoming form records, and active SSL termination.
• Email Routing Provider: Handles internal transmission of form notification emails directly to [email protected].

Gorvansi operates servers and primary business facilities in Denver, Colorado, United States. If you access our website from outside the United States, your information will be transferred to and processed within the United States.

Where international transfers involve data originating in the European Economic Area or the United Kingdom, transfers are conducted pursuant to standard contractual clauses approved by the European Commission, ensuring equivalent data protection safeguards.

We retain personal data strictly for defined durations tied to legitimate commercial necessity:

• Project Inquiries & Email Records: Kept for 24 months from the transmission date to facilitate follow-up scoping, warranty tracking, and commercial tax audits.
• Studio Desk Chat Transcripts: Retained for 12 months, after which session records are purged from the database.
• Server & Access Logs: Retained for 90 days for network diagnostic and cybersecurity analysis before automatic rotational deletion.
• Tracking Consent Choices (site_consent_v2): Stored in your local browser for 6 months before prompting for confirmation.
• Data Rights Inquiries: Formal data subject requests are reviewed, resolved, and answered within 7 days of receipt.

We protect personal data through rigorous engineering controls: continuous HTTPS with active SSL/TLS certificates, rate-limiting on submission endpoints, parameterized queries preventing SQL injection, honeypot filters blocking automated spam bots, and strict least-privilege administrative access controls.

Visitors accessing this site from the European Union, European Economic Area, or United Kingdom hold rights under the General Data Protection Regulation (GDPR). These rights include:

• Right of Access: Obtain confirmation as to whether your personal data is processed, and receive an export of that data.
• Right to Rectification: Request the correction of inaccurate or incomplete personal records.
• Right to Erasure (Right to be Forgotten): Demand the deletion of your personal data where retention is no longer justified.
• Right to Restriction: Request that we halt active processing while a dispute over accuracy or lawful basis is investigated.
• Right to Data Portability: Receive your submitted data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct commercial marketing.
• Right to Withdraw Consent: Revoke cookie or marketing consent at any time without penalty.

Under United States state privacy statutes—including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Colorado Privacy Act, and other state laws—residents have specific statutory rights:

• The right to know what personal information has been collected, disclosed, or sold.
• The right to delete personal information held by the studio.
• The right to correct inaccurate personal information.
• The right to opt-out of the "sale" or "sharing" of personal data for cross-context behavioral advertising. Gorvansi does not sell personal information for financial remuneration.
• The right to non-discrimination for exercising privacy rights.

Gorvansi recognizes and honors the Global Privacy Control (Sec-GPC) browser header. If your browser transmits a valid GPC signal, our client scripts immediately treat that signal as an automatic opt-out from advertising storage and tracking cookies without requiring you to open the cookie dock or submit a manual opt-out request.

Our website, digital services, and engineering consultations are directed exclusively to business professionals and adult individuals capable of forming binding commercial contracts. We do not knowingly solicit or collect personal information from individuals under the age of 18. If we discover that personal data from a minor has been submitted, it will be deleted immediately.

If you believe your privacy rights have been infringed, you have the right to lodge a complaint with an appropriate regulatory authority. In Colorado, residents may submit concerns to the Colorado Attorney General. In California, complaints may be directed to the California Privacy Protection Agency. European visitors may lodge complaints with their national Data Protection Authority.

To exercise any of your statutory data rights—including requests to access, rectify, port, or erase your personal information—transmit a written request to our designated privacy desk:

We may update this Privacy Policy periodically to reflect technological adjustments, advertising platform requirements, or statutory amendments. When changes are made, the revised version will be published at gorvansi.com/privacy.html with an updated Effective Date. Continued use of our site following an update constitutes acceptance of the modified terms.

For inquiries, clarification regarding our tracking mechanisms, or questions concerning our technical engineering standards, reach a principal engineer directly:

Gorvansi Studio
300 East 17th Avenue, Denver, Colorado 80203, United States
Direct Telephone: +1 (663) 555-5277
Electronic Mail: [email protected]

Gorvansi is committed to ensuring digital accessibility for all users, including individuals with disabilities. We build and test our digital interfaces against the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards.

Key accessibility measures implemented across this website include:

• High-contrast chalk typographic ink providing greater than 7:1 contrast against our flat slate (#4B544E) ground.
• Full keyboard navigability, logical tab sequencing, and visible focus indicators across all links, buttons, and form inputs.
• Touch target sizing exceeding the mandatory 44px minimum height across all viewports.
• Fluid type scaling via clamp() supporting zoom levels up to 200% without horizontal overflow or clipped text.
• Respect for prefers-reduced-motion user preferences, instantly disabling background canvas rendering and transitions.
• Accessible ARIA semantics, clear form labeling, and explicit live region announcements.

If you encounter an accessibility barrier or require an alternate format for any document, please contact us at [email protected] or call +1 (663) 555-5277.