Privacy Policy and advertising measurement disclosures for Avessora in Portland.

The standards, data flows, and platform measurement disclosures articulated in this document take effect on October 19, 2026 (2026-10-19) and apply to all visitors browsing avessora.click forward. Any subsequent material modifications will be documented with a revised timestamp and archived on this page.

The business controller operates under the trade name Avessora, registered in Portland, Oregon in 2026. The full postal address is 1500 Southwest 1st Avenue, Portland, Oregon 97201, Portland, Oregon, United States.

Direct communication regarding data protection, inquiries, and customer records is handled directly by store management at office@avessora.click or by calling +1 (636) 555-8436.

This website does not support customer accounts, does not create passwords, and never accepts or processes credit card transactions or banking details. No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.

Specifically, our web server and backend scripts record:

• Inquiry Form (submit.php / bonaf8e.php): Full name, telephone number, email address, physical address or pickup preference, the kind of enquiry, the message, the requested specification, and the consent tick. Automatically with it: the IP address, the browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent.
• Support Chat (chat.php / vazi6b3.php): Keeps the conversation text messages and an arbitrary session authentication token in the visitor's browser so they can return to it.
• Technical Server Metrics & Logs: Internet Protocol (IP) address, browser user-agent header, language preferences, page request timestamps, and referring URL.
• Advertising Campaign Parameters: Campaign click identifiers appended to inbound URLs by advertising platforms, specifically gclid (Google Ads), msclkid (Microsoft Advertising), and fbclid (Meta Ads).
• Consent State Preferences: The visitor's explicit choice stored under the single browser cookie key site_consent_v2, and nothing else on this site persists a choice.

We process collected data exclusively for the following operational tasks:

• Consultation & Quotation Delivery: Reviewing client skin specifications, verifying batch inventory, and replying with custom pricing for facial skincare ($28–$150) or color cosmetics ($14–$65).
• Live Chat Assistance: Enabling visitors to ask store management real-time questions regarding formula ingredients, shade selection, and consultation openings.
• Site Security & Fraud Prevention: Inspecting server access logs, detecting automated bot traffic, and shielding form handlers against malicious submissions.
• Advertising Campaign Measurement: Tracking aggregate ad conversion performance across Google, Microsoft, and Meta to evaluate advertising spend efficiency.

The advertising platforms that send traffic here, named: Google Ads, Microsoft Advertising, and Meta Ads, with the click identifier each attaches to a link. In verbatim terms, this site receives paid clicks from google ads (gclid), microsoft advertising (msclkid), and Meta Ads (fbclid).

• Google Ads (google ads): Appends the gclid query parameter to incoming links to measure campaign attribution and keyword relevance.
• Microsoft Advertising (microsoft advertising): Appends the msclkid parameter to inbound clicks from Bing and the Microsoft search network.
• Meta Ads: Appends the fbclid parameter to incoming clicks originating on Facebook or Instagram.

We process these click strings (gclid, msclkid, fbclid) to understand which product queries brought visitors to our Portland parlour catalog. Nothing anywhere claims an advertising platform has reviewed, approved or verified this site.

In strict compliance with modern privacy requirements and Consent Mode v2, our site initializes the following four platform signals with the value denied immediately when any page loads:

• ad_storage: Denied by default. Blocks reading or writing advertising cookies.
• ad_user_data: Denied by default. Prevents transmitting user identity signals to ad platform measurement APIs.
• ad_personalization: Denied by default. Restricts platform remarketing and audience profiling.
• analytics_storage: Denied by default. Disables persistent performance and analytics trackers.

If the visitor clicks "Allow Storage" in our cookie notice, these signals are updated to granted. If the visitor selects "Decline Non-Essential" or later withdraws consent via the Consent Preferences control, all four parameters are instantly reset to denied.

Personal data collected on avessora.click is handled by the following individual processing entities:

• Google LLC / Google Ireland Ltd: Operates Google Ads and platform conversion reporting for paid search traffic.
• Microsoft Ireland Operations Ltd: Operates Microsoft Advertising and Bing search attribution. Microsoft's independent collection and processing policies are governed by the Microsoft privacy statement published at https://privacy.microsoft.com/privacystatement.
• Meta Platforms Ireland Ltd: Operates Meta Ads, receiving conversion pings only when visitors grant explicit advertising storage consent.
• Hosting Infrastructure Provider: Provides physical cloud server hosting, SSL termination, and encrypted SQL database records in dedicated data facilities located in the United States.
• Mail Transport Router: Relays inquiry notifications from bonaf8e.php directly to our store manager's desk inbox.

If you access this website from the European Economic Area, the United Kingdom, or another foreign jurisdiction, your inquiries and transmission logs are transferred directly to our primary web server located in the United States.

Such cross-border transfers are conducted pursuant to standard contractual clauses approved by the European Commission, our commercial processors' binding corporate rules, and the EU-US Data Privacy Framework principles.

Avessora implements robust technical and organizational protections against unauthorized data access, alteration, or disclosure. All web traffic between your browser and our server is forced over HTTPS with modern 256-bit TLS encryption.

Our web forms utilize hidden honeypot validation, server-side parameter scrubbing, and render-timestamp checks to block automated intrusion attempts. Access to internal inquiry records is restricted strictly to store management in Portland with two-factor authentication.

Under the General Data Protection Regulation (gdpr), individuals located within the European Economic Area or United Kingdom are entitled to exercise the following legal protections:

• Right of Access: The right to obtain confirmation as to whether personal data is processed, alongside a complete digital extract.
• Right to Rectification: The right to correct inaccurate or incomplete contact records.
• Right to Erasure ("Right to Be Forgotten"): The right to demand permanent deletion of your inquiry and chat history.
• Right to Restriction of Processing: The right to freeze the processing of disputed data records.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: The right to object at any time to processing grounded in legitimate interest.
• Right to Withdraw Consent: The right to revoke previously granted cookie or inquiry consent at any time without retroactive penalty.

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), as well as the Oregon Consumer Privacy Act and reciprocal state statutes, residents have distinct privacy rights regarding their personal information.

No Sale or Sharing: Avessora has never sold personal information for monetary compensation, nor do we disclose personal data to third-party data brokers. We do not engage in cross-context behavioral advertising without affirmative consent.

You have the right to know what personal details we hold, request prompt deletion, correct errors, and receive non-discriminatory service regardless of exercising your privacy prerogatives.

If your browser transmits the global privacy control header (Sec-GPC: 1), our script infrastructure detects it immediately upon page initialization.

When Global Privacy Control is active, non-essential cookies and ad measurement keys remain locked in denied state. You will not be challenged with repetitive opt-in consent prompts while this preference header is present.

In compliance with Meta Ads sensitive category advertising rules and the Children's Online Privacy Protection Act (COPPA), our skincare consultations and color cosmetic selections are marketed exclusively to adults aged 18 or older.

We do not knowingly collect, solicit, or retain personal information from any person under the age of 18. If a parent or guardian discovers that a minor has submitted personal contact details via our forms, contact us at office@avessora.click and we will purge the corresponding records within 24 hours.

If you believe our processing of your personal information infringes upon governing privacy statutes, you have the right to lodge a complaint with your competent supervisory authority:

• Oregon Residents: The Oregon Department of Justice, Office of the Attorney General, Consumer Protection Section, Salem, Oregon.
• California Residents: The California Privacy Protection Agency (CPPA) or the Office of the California Attorney General.
• European Visitors: The national Data Protection Authority (DPA) within your European Union member state or the UK Information Commissioner's Office (ICO).

To inspect, correct, export, or permanently delete personal records associated with your name, phone number, or email address, submit a written inquiry to our compliance mailbox:

We require reasonable verification of identity (such as replying from the email address used during initial catalog submission) prior to releasing or erasing records.

Avessora is committed to ensuring digital accessibility for people with disabilities. We build our web interfaces against the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards.

Key accessibility implementations include:

• High-contrast typographic hierarchy (minimum 4.5:1 text-to-background contrast ratio across pure white backgrounds).
• Full keyboard navigation support, visible focus rings, and dedicated skip-to-content links.
• Explicit label tags on all form elements, aria-expanded controls on menus, and descriptive text on icon buttons.
• Responsive layouts designed down to 320px width without horizontal viewport clipping.
• Complete deactivation of motion effects when prefers-reduced-motion: reduce is detected.

If you encounter accessibility barriers while navigating avessora.click, please notify our boutique team at office@avessora.click or call +1 (636) 555-8436.

We review this Privacy Policy periodically to reflect updates in ad platform requirements (such as Google Ads, Microsoft Advertising, or Meta Ads policies) and evolving state privacy legislation.

Whenever a material change is made to the ways we record or retain inquiry data, we will post an advance banner notice on our homepage for at least fourteen days prior to implementation, accompanied by an updated effective date at the head of this page.

You can reach a real person at Avessora during normal Portland business hours through any of the following channels: