Privacy Policy
Effective Date & Document Authority
This privacy policy took effect on October 19, 2026. It applies to all electronic interactions, visit sessions, booking request forms, and support communication originating from missgloss.click.
Data Controller & Operating Identity
The data controller responsible for the capture, maintenance, and processing of visitor personal data is Missgloss, trading at missgloss.click. The postal address is 42 Aegean Avenue, Tampa, Florida 33606, Tampa, Florida, United States. Telephone inquiries are answered at +1 (597) 555-9057 and written records requests are handled through office@missgloss.click.
Categories of Information Collected
We collect only the technical, contextual, and identifying details required to schedule studio appointments and assess marketing traffic. Our systems log the following distinct categories:
- Inquiry Form Entries: Name, telephone number, email address, physical street address or Tampa on-site prep location, inquiry category (makeup, brow shaping, brow tinting, blowout), service specification notes, and timestamp of the submission.
- Live Support Chat Records: Conversation dialogue submitted through nigefc0.php along with an anonymous local browser token enabling continuation across page views.
- Network & Access Diagnostics: Client IP address, browser user-agent header string, referring URL, time of initial render, and transmission timestamp.
- Storage Keys: Client consent decision stored strictly in localStorage key site_consent_v2.
- Advertising Click Identifiers: Inbound URL tracking parameters appended by ad networks when an incoming visitor clicks a paid commercial placement.
Miss Gloss collects no credit card numbers, payment tokens, customer account logins, or bank account credentials on this site. All monetary settlements for completed chair services occur in person at the studio bay.
Purposes of Data Processing
Collected categories are processed strictly for defined operational reasons:
- Evaluating client service suitability, chair slot availability, and quote parameters ($12 to $125 brackets) before confirming an appointment.
- Direct dispatch of appointment confirmations, location instructions, and hair or skin preparation checklists to the client via telephone or email.
- Responding to live questions through the support chat interface regarding service technique, timing constraints, and Tampa studio logistics.
- Measuring marketing campaign engagement, conversion rates, and cost efficiency across active paid search and social channels.
- Preventing automated spam abuse, form tampering, and denial-of-service attempts against studio booking infrastructure.
Lawful Legal Bases for Processing
We process data under three distinct legal bases recognized under international and state data standards:
| Processing Purpose | Legal Basis | Application Details |
|---|---|---|
| Booking intake & service scheduling | Contract / Pre-contractual | Necessary to evaluate timing, quote parameters, and confirm your requested chair reservation. |
| Support chat dialogue | Legitimate Interest | Direct communication answering client inquiries regarding studio services and bench standards. |
| Advertising attribution & analytics | Explicit Consent | Conditioned on user opt-in via cookie controls before marketing measurement keys are written. |
| Spam detection & server security | Legitimate Interest | Safeguarding web endpoints and preventing automated abuse of inquiry mechanisms. |
Advertising Platforms & Click Identifiers
This website runs active digital advertising campaigns. Paid media traffic is acquired through Google Ads, Microsoft Advertising, and Meta Ads. When a prospective client clicks an advertisement, the respective platform appends a unique URL query parameter to the arrival link:
- gclid: Google Click Identifier, generated by google ads campaigns to measure search query and booking conversions.
- msclkid: Microsoft Click Identifier, appended by microsoft advertising to attribute Bing and partner network interactions.
- fbclid: Facebook Click Identifier, generated by Meta Ads to measure ad set performance and audience engagement.
These click identifiers (gclid, msclkid, fbclid) allow our systems to tie an inbound booking inquiry back to the specific campaign that presented the offer. Paid media runs continuously on Google Ads, Microsoft Advertising, and Meta Ads. We never claim or imply that any advertising platform has reviewed, approved, or verified Miss Gloss.
Consent Mode v2 Operational Implementation
We implement Consent Mode v2 on missgloss.click. All four standardized consent signals are held in a strict denied state by default upon page load:
ad_storage: Deniedad_user_data: Deniedad_personalization: Deniedanalytics_storage: Denied
These four signals remain completely denied until the visitor explicitly clicks "Accept All" on the consent interface. If the visitor selects "Essential Only" or later declines storage, all four parameters are immediately restored to denied. When denied, no advertising or profiling cookies are written, and tag pings are stripped of client identifiers.
Third-Party Data Processors & Service Providers
Personal data is transferred solely to verified infrastructure and advertising partners required to deliver our web presence and capture booking inquiries:
- Google LLC / Google Ireland Ltd: Advertising and conversion attribution infrastructure. Governed under Google Ads data processing terms.
- Microsoft Ireland Operations Ltd: Search ad distribution via Microsoft Advertising. Governed under the Microsoft privacy statement published at privacy.microsoft.com.
- Meta Platforms Ireland Ltd: Social ad distribution and attribution for Meta Ads campaigns.
- Web Hosting Provider: Secure server infrastructure maintaining web files, application scripts, and inquiry database tables in certified data center facilities.
- Transactional Mail Routing Service: Encrypted relay service transporting completed booking notifications from zotuff2.php to our studio desk mailbox.
Cross-Border Data Transfers
Miss Gloss operates inside the United States. Data submitted by visitors residing outside the United States is transmitted to and stored on web infrastructure hosted within the United States. Where personal data is transferred across international boundaries, transfers comply with applicable data protection frameworks using Standard Contractual Clauses (SCCs) and partner adherence to commercial data privacy frameworks.
Data Retention Periods
We do not keep personal data indefinitely. Records are retained strictly according to the following real operational schedules:
- Booking Inquiries & Email Records: Retained for 18 months from the date of submission to maintain appointment history and quote records, after which they are permanently deleted.
- Support Chat Transcripts: Retained for 18 months to verify client consultations, scheduling notes, and service agreements.
- Server & Access Diagnostic Logs: Retained for 90 days for firewall telemetry, security analysis, and load balancing, then automatically purged.
- Consent Preference Records: Stored locally in the client browser for 12 months before requiring re-confirmation.
Security & Encryption Measures
All traffic between your browser and missgloss.click is encrypted in transit using Transport Layer Security (TLS 1.3 / active SSL). Our server environment enforces strict firewalls, disabled directory indexing, server-side input sanitization, honeypot spam protection, and restricted internal administrative access. Database files and backups are stored behind multi-layered authorization walls.
European Visitor Rights (GDPR)
For visitors accessing our studio website from the European Union, United Kingdom, or European Economic Area, the General Data Protection Regulation (gdpr) grants specific legal rights regarding personal data:
- Right of Access: You may request a machine-readable summary of all personal information held regarding your identity.
- Right to Rectification: You may request immediate correction of inaccurate or incomplete contact or scheduling details.
- Right to Erasure: You may demand deletion of your submitted booking records where no legal retention requirement exists.
- Right to Restriction: You may request that we suspend active processing of your inquiry data under defined legal disputes.
- Right to Data Portability: You may request transfer of your submitted inquiry data to another service provider.
- Right to Object: You may object at any time to data processing carried out under legitimate interest bases.
- Right to Withdraw Consent: Where processing relies on consent, you may withdraw your approval at any time through our cookie settings.
United States State Privacy Rights (CCPA / CPRA)
Residents of California, Colorado, Connecticut, Virginia, Utah, and other US states with enacted comprehensive privacy legislation hold statutory rights under state regulations, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa):
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information collected over the preceding 12 months.
- Right to Delete: You have the right to request deletion of personal information collected directly from you.
- Right to Correct: You have the right to require correction of inaccurate personal records.
- Non-Discrimination: Miss Gloss will never deny service, adjust service rates ($12–$125 brackets), or alter booking response speeds because you exercised your statutory privacy rights.
- Opt-Out of Sale or Sharing: Miss Gloss does not sell personal information for monetary compensation. To the extent third-party cookie measurement across ad networks is deemed "sharing" under California law, you may opt out via our consent panel.
Global Privacy Control (GPC) Compliance
We honor the global privacy control (GPC) signal. If your browser broadcasts an active GPC header (Sec-GPC = 1), our systems immediately treat this as an automated universal opt-out of ad tracking and third-party data sharing without requiring you to open the cookie preferences banner.
Children's Privacy Protection
missgloss.click is a commercial beauty studio platform intended exclusively for adult clients and professionals booking studio appointments. We do not knowingly target, market to, or solicit personal details from children under the age of 16. If we discover that personal information of a minor has been transmitted without verified parental authorization, we will purge the record within 48 hours.
Regulatory Authority & Complaints
If you believe our data processing violates applicable statutory standards, you retain the legal right to lodge a formal complaint with supervisory authorities:
- Florida Residents: You may submit complaints to the Office of the Attorney General of Florida.
- California Residents: You may file grievances with the California Privacy Protection Agency (CPPA) or the California Attorney General.
- European Visitors: You may file a complaint with the national Data Protection Authority (DPA) in the EU member state of your residence or workplace.
Data Subject Access Requests (DSAR)
To exercise your rights of access, correction, deletion, or portability, submit a formal request via email to our dedicated data desk:
ATTN: Privacy & Data Operations
Email: office@missgloss.click
Postal: 42 Aegean Avenue, Tampa, Florida 33606, United States
Please include your full name, the telephone or email address used in your original booking inquiry, and a concise statement of the action requested. A data request is answered within 10 days of verified receipt. We do not assess fees for reasonable access requests unless manifestly repetitive or excessive.
Policy Modifications & Updates
We reserve the right to revise this policy to reflect modifications to studio procedures, platform measurement requirements, or applicable statutory mandates. Changes will be published directly on missgloss.click with an updated effective date banner. Significant procedural revisions affecting booking intake will be announced via direct notification to clients with active reservations.
Direct Studio Contact Information
For questions concerning this privacy policy, Consent Mode v2 implementation, or appointment record maintenance, contact our studio administration directly:
- Operator / Controller: Missgloss, trading at missgloss.click
- Postal Address: 42 Aegean Avenue, Tampa, Florida 33606, Tampa, Florida, United States
- Direct Telephone: +1 (597) 555-9057
- Administrative Email: office@missgloss.click
Accessibility Statement & Digital Standards
Miss Gloss is committed to ensuring digital accessibility for people of all abilities. We apply Web Content Accessibility Guidelines (WCAG) 2.1 Level AA benchmarks across missgloss.click.
Our design implements high-contrast color pairings meeting minimum 4.5:1 visual ratios against our #E4EAE3 paper ground, logical heading sequences, skip-to-content links for keyboard navigators, visible focus states on all interactive controls, and explicit text labels for screen readers. If you encounter any accessibility barrier while reviewing our rates or submitting an appointment request, please contact us at office@missgloss.click or call +1 (597) 555-9057.