Privacy Policy & Advertising Consent Architecture.

Effective Date & Document Standing

This Privacy Policy took effect on October 17, 2026. It governs all personal information, procedural inquiry submissions, support communications, and technical telemetry collected through the website glamorise.click or during direct consultations with Glamorise.

Data Controller & Studio Operating Entity

The data controller responsible for personal information processed on this website is:

Glamorise
400 South LaSalle Street, Chicago, Illinois 60605, Chicago, Illinois, United States
Trading domain: glamorise.click
Telephone: +1 (307) 555-3072
Inquiry & Privacy Mailbox: office@glamorise.click

Glamorise is an independent aesthetic and personal care practice operating in downtown Chicago. We deliver scheduled, non-surgical cosmetic procedures including Botox units, hyaluronic dermal fillers, HydraFacial skin conditioning, laser hair removal, and non-invasive body contouring.

Categories Of Data Collected

We collect personal information through direct user entry, live chat dialogs, and automated technical protocols:

• Inquiry Form Submissions (zofi892.php): Full name, telephone number, email address, physical mailing address, requested procedure kind, target area or unit specification notes, and formal acknowledgement of non-medical cosmetic consent.
• Support Chat Dialogs (kinucd8.php): Name, direct telephone or email, text message contents, and a persistent session authentication token saved to your browser local storage.
• Automated Telemetry: Client Internet Protocol (IP) address, operating system, browser user-agent header, referring URL, timestamp of initial page render, and timestamp of form submission.
• Tracking & Advertising Identifiers: Marketing campaign attribution tokens passed via incoming landing URLs, specifically Google Ads (gclid), Microsoft Advertising (msclkid), and Meta Ads (fbclid).
• Local Preference State: Consent preference records stored locally under the browser key site_consent_v2.

We do not create client accounts, store passwords, or process credit card transactions through this website. The catalogue is inquiry-only and no financial accounts are maintained on our servers.

Purposes Of Processing

Personal information is processed strictly for the following operational reasons:

• Evaluating appointment inquiry submissions, reviewing requested procedure specifications, and responding via email or telephone with schedule availability.
• Verifying candidate suitability and screening for reported contraindications prior to confirming calendar dates.
• Transmitting transactional appointment confirmations, transit directions to 400 South LaSalle Street, and pre-session skin preparation guidelines.
• Answering live inquiries through our web chat interface.
• Measuring advertising conversion efficiency and verifying paid marketing campaigns across authorized digital channels.
• Protecting website infrastructure against abusive automated submissions, scraping, and brute-force bot requests.

Legal Bases For Processing

We collect and process personal data under clearly defined lawful bases:

• Consent: When you submit an inquiry form, initiate an interactive support chat, or grant permission for analytics and advertising storage cookies via our consent banner. You may withdraw consent at any time.
• Contractual Preparation: Processing intake notes, unit requests, and contact details to prepare customized aesthetic session proposals and reserve room time at our LaSalle Street suite.
• Legitimate Interests: Securing our network infrastructure, defending against fraud and spam, administering operating logs, and analyzing studio traffic performance.

Advertising Platforms & Click Identifiers

Glamorise actively runs paid search and display campaigns to direct clients to our aesthetic catalogue. We actively utilize Google Ads, Microsoft Advertising, and Meta Ads. When a visitor arrives via a paid promotion, these networks append unique click parameters to the URL:

• google ads: Appends the gclid (Google Click Identifier) parameter to evaluate campaign response and map session attribution.
• microsoft advertising: Appends the msclkid (Microsoft Click ID) parameter to verify Bing search ad conversions.
• Meta Ads: Appends the fbclid parameter when visitors navigate from paid Meta social media placements.

These identifiers are captured only to determine campaign efficacy and are subject to your consent status. We do not claim or imply that any advertising platform has endorsed, certified, or medically reviewed our cosmetic offerings.

Google Consent Mode v2 Implementation

Our website strictly implements Google Consent Mode v2. By default, prior to any visitor interaction with our cookie banner, the following four permission signals are initialized in an explicit denied state:

• ad_storage: 'denied'
• ad_user_data: 'denied'
• ad_personalization: 'denied'
• analytics_storage: 'denied'

These four parameters remain held in the denied status until you explicitly click "Allow Storage" on our consent interface. If you click "Decline" or adjust your preferences, all four signals are immediately re-asserted as denied. No advertising cookies or analytical identifiers are written to your device while these parameters remain denied.

Authorized Data Processors

We share data only with necessary infrastructure, communication, and marketing partners under strict confidentiality and processing agreements:

• Google LLC / Google Ireland Ltd: Advertising measurement and analytics infrastructure. Review the Google privacy policy at policies.google.com/privacy.
• Microsoft Ireland Operations Ltd: Search advertising and attribution engine. Review the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Social advertising and campaign measurement.
• Web Hosting & Server Provider: High-security web hosting facility that stores our server logs, static assets, and transactional PHP backend scripts.
• Email Relay Provider: Secure SMTP routing service that delivers inquiry form notifications directly to our studio staff inbox.

International Data Transfers

Glamorise operates within the United States. If you access our website from outside the United States, your communications and personal data will be transferred to and stored on servers located within the United States. Where personal data originating from the European Economic Area (EEA), United Kingdom, or Switzerland is transferred, we rely on Standard Contractual Clauses (SCCs) and adequacy frameworks established by our primary third-party processors.

Data Retention Schedules

We maintain strict data retention ceilings rather than keeping records indefinitely:

• Inquiry Records & Form Transmissions: Retained for exactly 24 months from submission to manage consultation histories and follow-up requests, after which they are purged.
• Support Chat Logs: Retained on our server for 12 months from the date of the conversation.
• Server Access Logs: Web server connection logs containing IP addresses and request headers are permanently overwritten every 90 days.
• Consent Preferences: Your local cookie preference under site_consent_v2 persists in your browser for 12 months unless cleared manually.
• Data Subject Access Inquiries: Formal privacy requests are logged and retained for 36 months to demonstrate regulatory compliance.

Information Security Measures

We implement physical, administrative, and technical safeguards to protect client records. Communications between your browser and our server are encrypted using Transport Layer Security (TLS 1.3). Server endpoints enforce strict file permissions, sanitized database inputs, honeypot spam traps, and automated rate limiting. Physical intake documents at our Chicago suite are kept in locked steel storage cabinets when not in active procedural use.

European Privacy Rights (GDPR)

For individuals residing in the European Economic Area or United Kingdom, the General Data Protection Regulation (gdpr) grants specific legal entitlements regarding personal data:

• Right of Access: You may request confirmation of whether we process your data and obtain a readable copy.
• Right to Rectification: You may request correction of inaccurate, incomplete, or outdated details.
• Right to Erasure: You may request deletion of personal information where processing is no longer required.
• Right to Restriction: You may request that we suspend processing while data accuracy or objections are verified.
• Right to Data Portability: You may receive your data in a structured, machine-readable format for transfer to another provider.
• Right to Object: You may object to data processing based on legitimate business interests or direct marketing.
• Right to Withdraw Consent: Where processing relies on consent, you may revoke permission at any moment without penalty.

United States State Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), and comparable consumer privacy laws in Colorado, Connecticut, Virginia, and Utah, residents enjoy specific statutory rights:

• Right to Know & Access: The right to discover the categories of personal data collected, sources, business purposes, and third parties receiving information.
• Right to Delete: The right to demand erasure of personal details collected directly from you, subject to legal recordkeeping exemptions.
• Right to Correct: The right to rectify inaccurate personal information in our records.
• Right to Opt-Out of Sale or Sharing: We do not sell personal information for cash. However, advertising platform pixels may constitute "sharing" under California law. You may opt out anytime using our cookie controls or Global Privacy Control.
• Right to Non-Discrimination: We never charge different rates, deny appointments, or alter session quality if you exercise your statutory privacy rights.

Global Privacy Control (GPC)

Our web applications automatically recognize and honor the global privacy control (GPC) browser signal. If your browser transmits the Sec-GPC header set to active, our systems immediately treat this as a valid statutory request to opt out of advertising data sharing and marketing cookies. When GPC is detected, Google Consent Mode v2 signals remain strictly denied without requiring manual banner interaction.

Children's Privacy Protection

Glamorise provides adult aesthetic and personal care procedures. This website and our services are strictly intended for individuals aged 18 and older. We do not knowingly collect, solicit, or maintain personal information from children under 18 years of age. If we learn that an individual under 18 has submitted an inquiry form, all related data is immediately expunged from our mailboxes and server logs.

Right To Lodge Regulatory Complaints

If you believe our processing of your personal information violates applicable privacy laws, you possess the legal right to submit a formal complaint to regulatory oversight bodies:

• In California: The California Privacy Protection Agency (CPPA) or the Office of the California Attorney General.
• In Illinois: The Office of the Illinois Attorney General, Consumer Protection Division.
• In Europe: The supervisory data protection authority in your EU member state of residence or employment.

How To Exercise Your Privacy Rights

To exercise any GDPR or CCPA privacy rights, submit a written Data Subject Access Request (DSAR) to our designated privacy desk:

Email: office@glamorise.click
Postal Address: Glamorise Privacy Desk, 400 South LaSalle Street, Chicago, Illinois 60605, United States
Telephone: +1 (307) 555-3072

Upon receiving your request, we will verify your identity against our historical inquiry records. We will confirm receipt and provide an initial response within 5 days, and fulfill completed statutory requests within 30 days (or 45 days where permitted by complex CCPA requirements with prior written notice). We charge no administrative fee for processing standard statutory privacy requests.

Policy Amendments & Notifications

We update this Privacy Policy periodically to reflect enhancements in studio procedural workflows, statutory privacy enactments, or ad platform compliance criteria. Revisions are published directly to this page with an updated effective date rail marker. Continued engagement with our website following posted updates constitutes acceptance of the modified terms.

Human Privacy Inquiries & Contact Details

For direct human inquiries regarding this policy, data handling practices, or our non-medical aesthetic intake protocols, reach our office through any of the following channels:

Glamorise Aesthetic Studio
400 South LaSalle Street, Chicago, Illinois 60605, Chicago, Illinois, United States
Telephone: +1 (307) 555-3072
Direct Office Email: office@glamorise.click