Privacy Policy & Statutory Data Notice
Statutory notice of personal data processing, active advertising network measurement identifiers, Consent Mode v2 implementation, and formal data subject access protocols.
Effective Date
This Privacy Policy and Statutory Data Notice entered into formal effect on November 8, 2026. It supersedes all prior drafts and remains enforceable across all digital interactions conducted on boldenridgeo.com.
Data Controller Identity
The designated data controller responsible for the capture, retention, and handling of information across this platform is:
Categories of Data Collected
Boldenridge strictly limits data acquisition to what is technically necessary to evaluate editorial briefs and communicate with commercial clients. We do not maintain consumer accounts, passwords, or stored credit card vaults. Our systems log the following distinct categories:
- Inquiry Dossier Records (jovu076.php): Client legal name, direct corporate email address, telephone contact number, physical office address or jurisdiction, nature of editorial scope (selected service tier), project target specification, detailed overview notes, and verified consent confirmation.
- Automated Transmission Metadata: Incoming IP address, browser user-agent header string, referring web URL, UTC timestamp of form render, and UTC timestamp of transmission completion.
- Live Consultation Chat (hela1b0.php): Real-time message exchange logs and an ephemeral session authorization token retained in local browser storage to permit continuous conversation across page navigation.
- Storage Choice Marker: The local browser choice record held under
site_consent_v2, recording whether the visitor accepted or declined advertising cookies. - Advertising Inbound Identifiers: Click tracking parameters passed via destination URLs, specifically
gclid,msclkid, andfbclid.
Processing Purposes
All recorded information is processed strictly for the following operational requirements:
- Direct scoping, quote generation, and editorial feasibility assessments for prospective corporate narrative engagements.
- Execution of agreed copywriting deliverables, tone manuals, and revision calibrations.
- Attribution and audit verification of inbound traffic generated by paid enterprise campaigns on Google Ads and Microsoft Advertising.
- Platform security, anti-spam filtering (via honeypot token evaluation), and infrastructure anomaly detection.
Statutory Legal Bases
Data processing activities rely upon explicit legal grounds established under US state legislation and GDPR Article 6:
- Contractual Necessity (Art. 6(1)(b)): Evaluating preliminary parameters, structuring binding quotes ($59–$200/page, $75–$200/hr), and delivering finalized narrative drafts.
- Consent (Art. 6(1)(a)): Activating non-essential measurement cookies, storage tags, and advertising attribution identifiers via explicit affirmative selection on the consent banner.
- Legitimate Interests (Art. 6(1)(f)): Protecting server infrastructure against brute-force attacks, filtering automated spam submissions, and defending legal rights under Illinois jurisdiction.
Advertising Platforms & Click Identifiers
This website is an active commercial destination for paid enterprise advertising campaigns. We receive inbound traffic from leading ad networks in the present tense. These platforms append unique cryptographic click parameters to arriving URLs to evaluate campaign effectiveness and attribution:
- google ads: Traffic originating from Google search and partner placements transmits the
gclid(Google Click Identifier) parameter. - microsoft advertising: Inbound visits originating from Bing and the Microsoft Advertising network carry the
msclkid(Microsoft Click Identifier) parameter. - Meta Ads: Inbound referrals originating from Meta platforms carry the
fbclid(Meta Click Identifier) parameter.
These click identifiers are processed strictly in accordance with user consent signals recorded on the site.
Consent Mode v2 Implementation
To preserve complete visitor autonomy, Boldenridge deploys Google consent mode v2 across all pages. Under default initial page loads, all four distinct data storage categories are held in a strictly denied status:
ad_storage: Denied by default; no advertising cookies are placed until permission is granted.ad_user_data: Denied by default; user data is not transmitted to advertising networks without consent.ad_personalization: Denied by default; behavioral profile targeting is blocked.analytics_storage: Denied by default; statistical measurement storage is disabled.
If the visitor clicks “Decline” or withdraws permission via the consent control in the site footer, all four signals immediately revert to denied, and local tracking tokens are purged.
Data Processors & Third Parties
Personal data is never sold, leased, or syndicated to consumer data brokers. Submissions are processed exclusively by verified infrastructure partners under data processing agreements:
- Google LLC / Google Ireland Ltd: Advertising conversion reporting and Consent Mode signal processing.
- Microsoft Ireland Operations Ltd: Microsoft Advertising network measurement. Detailed information regarding Microsoft's data practices and opt-out controls is published at privacy.microsoft.com.
- Meta Platforms Ireland Ltd / Meta Platforms Inc: Campaign conversion attribution when Meta advertising campaigns are live.
- Infrastructure Hosting Provider: Secure web application server hosting within the continental United States, executing PHP runtime operations and managing the inquiry database.
- Enterprise Mail Carrier: Encrypted SMTP mail relay delivering inquiry notification payloads to the [email protected] editorial inbox.
Cross-Border Data Transfers
Primary data ingestion occurs on server hardware situated in the United States. Where visitors access this site from the European Economic Area, the United Kingdom, or Switzerland, transmissions are safeguarded under Standard Contractual Clauses (SCCs) and prevailing international transfer mechanisms recognized under GDPR Article 46.
Data Retention Periods
In accordance with statutory minimization standards, Boldenridge adheres to concrete, defined retention windows rather than indefinite storage:
Information Security Safeguards
We deploy end-to-end transport layer security (TLS 1.3), hardened Unix server permissions, strict perimeter firewall filtering, encrypted database storage for inquiry records, and automated token scrubbing to prevent unauthorized data exfiltration or tampering.
European Data Subject Rights (GDPR)
Under the General Data Protection Regulation (gdpr), visitors arriving from European jurisdictions retain uninhibited statutory rights regarding their personal records:
- Right of Access (Art. 15): Obtain confirmation and an itemized copy of all retained personal information.
- Right to Rectification (Art. 16): Require immediate correction of inaccurate or outdated corporate records.
- Right to Erasure (Art. 17): Demand permanent deletion of inquiry records where no statutory retention mandate exists.
- Right to Restriction (Art. 18): Restrict active processing while formal disputes or audits are pending.
- Right to Data Portability (Art. 20): Receive submitted dossier parameters in a structured, machine-readable format.
- Right to Object (Art. 21): Object to any processing founded on legitimate interest grounds.
- Right to Withdraw Consent (Art. 7(3)): Revoke previously granted cookie consent at any moment without penalty.
US State Privacy Rights & CCPA
Pursuant to state data privacy statutes including the California Consumer Privacy Act as amended by the CPRA (ccpa), and corresponding frameworks in Illinois, Colorado, Virginia, Connecticut, and Texas, US residents possess specific statutory rights:
- Notice & Knowledge: The right to know the precise categories of data captured and the business purpose for collection.
- Opt-Out of Sale or Sharing: Boldenridge does not sell personal data for monetary gain. We do not share personal records for cross-context behavioral advertising without active user consent.
- Non-Discrimination: We do not alter rates ($59–$200/page), turnaround times (2–4 weeks), or service quality when a client exercises statutory privacy rights.
- Right to Delete and Correct: Direct deletion and correction of personal identifying parameters upon written submission.
Global Privacy Control (GPC)
Our web infrastructure programmatically recognizes and honors the global privacy control (Sec-GPC) browser header signal. When a client browser transmits a valid GPC opt-out broadcast, our platform automatically sets all advertising cookies to denied, disables third-party attribution tags, and honors the preference without requiring secondary manual opt-out action.
Children's Privacy Exclusions
Boldenridge provides strictly B2B executive corporate copywriting and advisory services. Our website and services are not directed toward children under 16 years of age. We do not knowingly capture or retain personal information from minors. If any such record is detected, it is immediately purged from our active databases.
Regulatory Supervisory Authorities & Complaints
Visitors who believe their privacy entitlements have been compromised retain the statutory right to file a formal grievance with relevant supervisory agencies:
- Illinois Residents: Office of the Illinois Attorney General, 100 West Randolph Street, Chicago, IL 60601.
- California Residents: California Privacy Protection Agency (CPPA), Sacramento, CA, or the Office of the California Attorney General.
- European Visitors: The relevant national Data Protection Authority (DPA) within the EU member state of habitual residence.
Formal Data Subject Access Requests
To exercise statutory rights of access, correction, deletion, or portability, transmit a verified written request to our dedicated privacy desk. We verify identity via return corporate email matching prior inquiry submissions:
Policy Modifications
Any revisions to our data handling practices or applicable regulatory standards will be announced directly on this page with an updated effective date banner. Continued use of boldenridgeo.com following published revisions constitutes formal acceptance of the modified terms.
Direct Privacy Contact
For inquiries regarding data protection protocols, Consent Mode operations, or regulatory compliance: