Privacy disclosure, advertising telemetry, and data subject protocols.

This privacy governance specification governs the processing of electronic personal data, technical inquiries, and browser telemetry across the web domain zenitoskin.click. It establishes our regulatory parameters under United States state privacy legislation and international data protection standards.

The registered operator and legal data controller for this web property is Zenitoskin, operating at the physical address: 308 Brazos Street, Austin, Texas 78701, Austin, Texas, United States. Telephone communications are maintained at +1 (464) 595-0201 and written inquiries are managed at office@zenitoskin.click.

Zenito Skin collects data strictly necessary to fulfill technical cosmetic formulation inquiries and analyze website performance:

• Inquiry Submissions (fojod1d.php): Full representative name, direct contact telephone number, corporate email address, delivery facility or clinic address, inquiry classification type, formulation notes, custom specification parameters, and affirmative consent verification.

• Automated System Telemetry: Internet Protocol (IP) address, browser user-agent header, referring URL, timestamp of form render, and timestamp of transmission.

• Support Chat Transcripts (sohice8.php): Real-time consultation messages and an anonymous session token persisted in browser local storage.

• Advertising Click Identifiers: Advertising platform parameters passed via URL strings, specifically Google Ads gclid, Microsoft Advertising msclkid, and Meta Ads fbclid.

• Consent Telemetry State: Your explicit storage choice recorded under the browser key site_consent_v2.

We do not operate consumer account systems, we do not require passwords, and we never collect payment card numbers, billing credentials, or financial accounts. No binding purchases occur directly on this website.

Every piece of collected information is mapped to specific operational requirements: to generate written formulation proposals, to answer clinical questions regarding active ingredients under Product Manager Irina Petrova, to protect our submission endpoints against automated spam through hidden honeypots, to verify batch cold-chain delivery feasibility, and to determine the effectiveness of paid search and social campaigns.

In compliance with statutory standards, our processing grounds are clearly defined:

• Affirmative Consent: Applied to marketing telemetry cookies, advertising attribution tags, and voluntary submission of technical inquiries via our contact forms.

• Pre-Contractual Measures: Preparing custom formulation specifications, batch price quotations from $10 to $315 per package, and evaluating clinical delivery logistics at your explicit request.

• Legitimate Interests: Securing our web server infrastructure, monitoring fraud or bot abuse, maintaining server error logs, and verifying trade compliance.

This website actively receives paid visitors from online advertising campaigns. Google Ads, Microsoft Advertising, and Meta Ads send traffic here. When you arrive via these networks, distinct query parameters are appended to the destination URL to evaluate campaign performance: gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads.

These identifiers correlate ad clicks with landing page interactions without harvesting unencrypted personal identity files from your device.

We strictly enforce Google Consent Mode v2 architecture. Prior to your interaction with our consent banner, the four foundational tracking signals are initialized strictly to denied: ad_storage, ad_user_data, ad_personalization, and analytics_storage.

Only when you provide affirmative consent by selecting "Accept All" are these signals updated to granted. If you select "Essential Only" or decline storage, all four parameters remain held in or are immediately returned to denied, blocking advertising tags from reading or writing persistent profiling identifiers.

We engage vetted infrastructure providers to maintain website availability, communication security, and advertising performance:

• Google Ireland Ltd / Google LLC: Operates Google Ads measurement and receives Consent Mode signals.

• Microsoft Ireland Operations Ltd: Operates Microsoft Advertising and receives msclkid attribution signals. Its independent data handling practices are described in full within the Microsoft Privacy Statement available at https://privacy.microsoft.com/privacystatement.

• Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Manages Meta Ads attribution tokens (fbclid) where advertising runs.

• Secure Web Hosting & Mail Transport: Cloud infrastructure storing inquiry database records and encrypted SMTP mail relays delivering consultation requests directly to our Austin product inbox.

Zenito Skin servers and consultation offices reside in the United States. When visitors reach our website from jurisdictions outside the United States, their inquiries and technical metadata are transferred to our secure US storage facilities. Such cross-border transfers are conducted pursuant to Standard Contractual Clauses (SCCs) and statutory data adequacy mechanisms guaranteeing equivalent technical security.

In compliance with data minimization principles, our retention schedules are strictly bounded:

• Technical Inquiries & Email Records: Retained for exactly 24 months to support recurring batch formulation continuity.

• Support Chat Transcripts: Retained for exactly 12 months from the date of the initial consultation exchange.

• Server & Network Access Logs: Retained for exactly 60 days for network diagnostic and threat monitoring purposes, then overwritten automatically.

• Cookie Consent Selections: Retained in browser local storage for 12 months before requiring user re-affirmation.

• DSAR Fulfillment Response Window: Formal data subject requests are verified and answered within 10 days of verified receipt.

We deploy robust cryptographic controls to safeguard visitor transmissions: modern TLS 1.3 encryption across all HTTPS endpoints, strict Content Security Policy directives, isolated relational databases for inquiry storage, and anti-spam architectural honeypots (office, domain) to neutralize programmatic credential-stuffing and automated harvest bots.

For visitors accessing our catalog from the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (gdpr) guarantees comprehensive rights: the right to access your stored personal records; the right to rectify inaccurate formulation records; the right to request full erasure of your contact history; the right to restrict processing; the right to data portability in structured JSON format; the right to object to processing; and the unconditional right to withdraw previously granted consent at any time without adverse effect.

Under United States state privacy statutes, specifically the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), along with privacy laws in Texas, Virginia, Colorado, and Connecticut, consumers possess specific protections: the right to know what personal data categories are collected; the right to request deletion of personal information; the right to correct inaccurate records; and the absolute right to opt out of the sale or sharing of personal data for cross-context behavioral advertising.

Notice of Non-Sale: Zenito Skin does not sell your personal data, formulation inquiries, or contact phone numbers to third-party data brokers for monetary consideration. We share analytics tokens solely with designated advertising platforms as described herein.

Zenito Skin honours the global privacy control (Sec-GPC) browser header. When our web servers detect an active GPC opt-out signal transmitted by your browser, our application automatically suppresses non-essential marketing trackers and holds Consent Mode v2 advertising storage states in the denied position without requiring manual menu navigation.

Our website is a business catalog intended for professional skincare specialists, clinical practitioners, and adults aged 18 years or older. We do not knowingly solicit, collect, or retain personal data from children under the age of 16. If we become aware that an inquiry has been transmitted by a minor, the record is expunged from our database immediately.

If you believe our processing of your personal information infringes statutory privacy standards, you maintain the legal right to file a formal complaint with your relevant supervisory authority: in Texas, with the Office of the Texas Attorney General; in California, with the California Privacy Protection Agency (CPPA); and in Europe, with your local national Data Protection Authority.

To exercise your statutory rights of access, correction, erasure, or opt-out, transmit your written request to our designated privacy officer at office@zenitoskin.click, or send postal mail to: Zenitoskin, Data Compliance, 308 Brazos Street, Austin, Texas 78701, United States.

Please specify your full name, the email address or telephone number originally submitted in your inquiry, and the specific statutory right you wish to exercise. All legitimate data requests are authenticated and answered within exactly 10 business days without administrative charge.

We review and update this privacy policy periodically to reflect evolving regulatory enforcement and platform standards. Any substantive revisions will be announced by updating the effective date at the top of this document. We encourage visitors to review this page regularly.

If you have questions regarding our data collection, consent signals, or commercial catalog terms, our Austin team is directly accessible:

• Electronic Mail: office@zenitoskin.click

• Direct Telephone: +1 (464) 595-0201

• Postal Office: 308 Brazos Street, Austin, Texas 78701, Austin, Texas, United States

Governing law for all data governance matters is the law of Texas, United States, with venue situated in the competent courts of Austin.