How does Green Essence protect your personal and formulation data?
This notice details our numbered privacy obligations, data collection practices across consultation forms and digital advertising platforms, Consent Mode v2 implementation, and your legal rights under Texas and applicable privacy law.
1. When did this privacy notice take effect?
This privacy policy took effect on October 19, 2026. It applies to all consultations, formulation requests, digital interactions, and advertising traffic processed on greenessence.click.
2. Who operates this website and controls your personal data?
The data controller responsible for personal information processed through this site is Greenessence, trading at greenessence.click.
Our physical apothecary and skincare studio is located at 1301 Barton Springs Road, Austin, Texas 78704, Austin, Texas, United States. You can reach our privacy desk by telephone at +1 (484) 555-1556 or by email at office@greenessence.click.
3. What categories of personal data does Green Essence collect?
We collect information you provide directly through our consultation inquiry forms and live support chat widget, alongside technical data generated when you interact with our website:
- Inquiry Submission Data: When submitting an inquiry via give1c7.php, our system records your full name, telephone number (if provided), email address (if provided), physical pick-up or shipping address, the kind of inquiry selected, your target formulation specification, your skin profile notes, and your explicit consent confirmation.
- Chat Transcripts: Conversations conducted through our live consultation chat (puke3fc.php) generate a session token and transcript stored in your browser and on our server.
- Server & Log Data: Our hosting server automatically logs your Internet Protocol (IP) address, browser user-agent string, referring URL, the exact timestamp the inquiry form rendered, and the timestamp it was received.
- Advertising Click Identifiers: When you arrive via paid advertising campaigns, the URL carries platform click identifiers including gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads.
- Consent Choice Record: Your consent decision regarding measurement cookies is saved locally under the browser storage key site_consent_v2.
- Excluded Data: No accounts, passwords, credit cards, or financial payment details are ever collected on this website because our catalogue is strictly inquiry-only.
4. For what purposes is your information used?
We process your data strictly to conduct our botanical skincare practice:
- Evaluating skin sensitivity and formulating custom botanical batch recommendations by our licensed aesthetician.
- Contacting you via telephone or email to schedule in-studio consultations or coordinate bottle pick-up at our Barton Springs Road dispensary.
- Ensuring network security, preventing malicious automated submissions through hidden form honeypots, and monitoring server uptime.
- Measuring the effectiveness of digital advertising campaigns and allocating our marketing budget across search platforms.
5. What are the legal bases for processing your data?
We process personal information under defined legal bases recognized by applicable data protection frameworks:
- Consent: When you check our inquiry consent box or accept measurement cookies through our consent banner, we process your information based on your freely given, specific, and informed consent.
- Contract: When you request formulation matching or studio consultations, processing your contact details is necessary to take preparatory steps toward delivering custom botanical services.
- Legitimate Interests: We process server access logs and security indicators based on our legitimate commercial interest in defending our infrastructure against fraud, abuse, and automated spam.
6. Which digital advertising platforms send traffic to this site?
This website is an active destination for paid advertising campaigns. Google Ads, Microsoft Advertising, and Meta Ads send paid traffic here.
Each platform attaches unique click identifiers to inbound links to measure ad relevance and conversion efficacy: gclid for google ads, msclkid for microsoft advertising, and fbclid for Meta Ads. These identifiers allow platforms to determine which campaign generated a specific studio inquiry. No platform has reviewed, endorsed, or approved our formulations.
7. How does Green Essence enforce Consent Mode v2?
We strictly deploy Google Consent Mode v2 across this website. By default, before you take any action on our consent banner, the four foundational tracking signals are held in a denied state:
- ad_storage: denied
- ad_user_data: denied
- ad_personalization: denied
- analytics_storage: denied
These four signals remain denied until you explicitly click "Allow Storage". If you select "Decline Optional" or subsequently withdraw permission through our footer consent trigger, all four parameters are immediately reset to denied, halting any non-essential telemetry.
8. Which third-party service providers receive your information?
We share personal data only with vetted infrastructure partners who assist in operating our dispensary:
- Google LLC / Google Ireland Ltd: Operates Google Ads measurement services and processes conversion tags subject to consent mode.
- Microsoft Ireland Operations Ltd: Operates Microsoft Advertising and processes msclkid tags. Their data protection practices are detailed in the Microsoft privacy statement at privacy.microsoft.com.
- Meta Platforms Ireland Ltd: Operates Meta Ads conversion measurement when social acquisition campaigns run.
- Hosting & Server Infrastructure: Our secure web host provides the Linux environment and database storage for inquiry records.
- Mail Routing Provider: Handles encrypted transmission of incoming inquiry notifications directly to office@greenessence.click.
9. How are international data transfers managed?
Green Essence operates within the United States. If you access our website from the European Economic Area, the United Kingdom, or other international regions, your information is transferred directly to and processed on secure servers located within the United States.
Where international transfers occur involving global advertising partners, lawful transfer mechanisms such as European Commission Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework ensure equivalent protections.
10. How long does Green Essence retain your personal data?
We do not store information indefinitely. We adhere to real, defined retention periods:
- Formulation Inquiries & Email Records: Retained for 36 months from the date of submission to maintain historical formulation records for returning clients.
- Support Chat Transcripts: Stored for 12 months, after which session records are permanently purged.
- Server Access Logs: Automatically erased after 30 days.
- Browser Consent Choices: Stored in local storage under site_consent_v2 for 12 months before requiring reconfirmation.
- Consumer Data Requests: Written inquiries submitted to our data desk are acknowledged and answered within 7 days.
11. What technical measures protect your information?
All traffic between your browser and our servers is protected using active Secure Sockets Layer / Transport Layer Security (TLS 1.3) encryption. Form endpoints validate input strictness, sanitize user content to prevent code injection, enforce hidden server-side honeypots against automated crawlers, and isolate database tables behind strict firewall permissions.
12. What are your rights under the General Data Protection Regulation?
For visitors accessing our services from the European Economic Area or the United Kingdom, the gdpr provides comprehensive individual data rights:
- Right of Access: You may request confirmation of whether we hold your personal data and obtain a readable copy of that data.
- Right to Rectification: You may correct inaccurate or incomplete contact or formulation records.
- Right to Erasure: You may request the deletion of your inquiry data where no statutory retention obligation exists.
- Right to Restriction: You may restrict the processing of your data under specific contested circumstances.
- Right to Data Portability: You may receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You may object at any time to the processing of your data based on legitimate interests.
- Right to Withdraw Consent: Where processing relies on your consent, you can withdraw that consent at any time without affecting prior lawful processing.
13. What rights do United States and Texas residents hold?
Under applicable United States state privacy legislation, including the Texas Data Privacy and Security Act (TDPSA) and California legislation under ccpa / CPRA:
- You have the right to know what personal data categories are collected and whether personal data is sold or shared. Green Essence does not sell personal information for monetary payment.
- You have the right to opt out of the processing of personal data for targeted advertising purposes.
- You have the right to access, correct, and delete personal information collected from you.
- We will not discriminate against you in pricing, service quality, or consultation availability for exercising any privacy right.
14. How does Green Essence respond to Global Privacy Control signals?
Our website recognizes and respects the global privacy control (GPC) browser header. When your browser transmits the Sec-GPC signal indicating an opt-out preference, our system automatically sets measurement cookies and advertising storage parameters to declined without requiring you to manually open our banner.
15. Does Green Essence collect personal data from children?
Our website and skincare dispensary are strictly intended for adults and individuals aged 18 and older. We do not knowingly solicit or collect personal information from children under 16 years of age. If we learn that an inquiry contains data from a minor, we immediately erase that submission from our records.
16. Where can you file a formal privacy complaint?
If you believe our data processing violates your rights, you have the right to lodge a complaint with your competent supervisory authority. In the United States, you may contact the Office of the Texas Attorney General or, for California residents, the California Privacy Protection Agency. European residents may lodge complaints with their national Data Protection Authority.
17. How can you submit a verifiable consumer data request?
To exercise your rights of access, correction, deletion, or portability, submit a written request via our Data Rights Portal or email office@greenessence.click with the subject line "Personal Data Request".
Alternatively, mail your written request to Green Essence, 1301 Barton Springs Road, Austin, Texas 78704. Every verifiable request is evaluated and answered within 7 days.
18. How will you be notified of future policy changes?
When updates are made to this privacy notice, we will revise the effective date at the top of this document. For substantive operational changes affecting data retention or processing bases, a prominent notice will be displayed across our website header.
19. How do you contact our privacy officer directly?
For questions regarding our privacy practices or data handling protocols, contact our designated privacy officer directly:
Green Essence Skincare Studio
Attn: Data Privacy Officer
1301 Barton Springs Road, Austin, Texas 78704, Austin, Texas, United States
Telephone: +1 (484) 555-1556
Email: office@greenessence.click