Comply.

This privacy policy took effect on October 17, 2026 (2026-10-17). It applies authoritative governance to all digital interactions, technical logs, direct consultation dispatches, diagnostic assessments, and telemetric signals recorded across the domain zorelle.click and associated sub-resources.

The data controller responsible for personal information processed through this website is Zorelle, trading online at zorelle.click. The physical and commercial seat of the enterprise is located at 42 Aegean Avenue, Tampa, Florida 33606, Tampa, Florida, United States. Telephone: +1 (464) 555-7461. Corporate correspondence and privacy inquiries must be directed to office@zorelle.click.

Zorelle collects personal and telemetric data strictly within documented technical envelopes:

(a) Inquiry Submissions (jahe615.php): When a client requests a formulation specification, quotation, or appointment, the server records the visitor's full name, telephone number, email address, physical address or metropolitan area, service/product kind requested, clinical notes, requested active formulation specification, affirmative consent timestamp, and transmission metadata (submission timestamp and render timestamp).

(b) Telemetry & Access Logs: Automated server logs record client Internet Protocol (IP) addresses, browser user-agent strings, referring URLs, exact resource timestamps, and protocol versions.

(c) Support Chat (gedo267.php): Conversation transcripts, client-provided contact details, and a randomized cryptographic session token stored in browser localStorage to sustain conversational continuity.

(d) Diagnostic Engine Records: Transient skin phototype, lipid sensitivity, and environmental climate inputs evaluated during client self-assessment.

(e) Advertising Click Identifiers: Inbound query string identifiers transmitted by digital marketing networks, specifically Google Ads (gclid), Microsoft Advertising (msclkid), and Meta Ads (fbclid).

(f) Excluded Categories: This site maintains no user accounts, requires no client passwords, and conducts zero financial transactions. No credit card, debit card, bank account, or automated payment instrument is ever requested or processed.

Personal and technical information is processed for explicit, legitimate commercial purposes:

(a) Evaluating skin condition profiles and preparing non-binding formulation quotations for serums ($24–$295 USD), face creams ($36–$150 USD), and treatment masks ($8–$60 USD);

(b) Coordinating scheduling and clinical facility preparation for in-studio facial treatments ($65–$425 USD) and in-store makeup consultations ($13–$90 USD) overseen by Irina Petrova;

(c) Communicating chemical assay reports, formulation compatibility notices, and batch integrity documentation;

(d) Verifying form authenticity, mitigating automated script abuse via honeypot traps, and ensuring network perimeter security;

(e) Measuring advertising campaign effectiveness, verifying link attribution via click identifiers, and administering regulatory consent signals across marketing platforms.

Zorelle actively runs paid search, display, and social advertising campaigns to direct commercial traffic to this vitrine. We participate in advertising programs administered by Google Ads, Microsoft Advertising, and Meta Ads.

When a visitor arrives at zorelle.click through a paid marketing link, the destination URL may append a unique cryptographic click identifier:

• Google Ads: Appends the gclid (Google Click Identifier) parameter to measure conversion events, audience engagement, and keyword relevance.

• Microsoft Advertising: Appends the msclkid (Microsoft Click Identifier) parameter to evaluate campaign performance and search query matching across the Bing network.

• Meta Ads: Appends the fbclid (Facebook Click Identifier) parameter to track referral origin and social audience responsiveness across Meta platforms.

These identifiers are ingested in real time. Their persistent storage or linkage to conversion tracking tags is strictly conditioned on the visitor granting voluntary consent through our consent architecture. Nothing on this website implies or claims that any advertising platform has reviewed, approved, endorsed, or verified Zorelle's products or services.

To guarantee absolute compliance with international privacy mandates, Zorelle deploys Google Consent Mode v2. Upon initial page load, our system enforces a strict default-deny baseline across four explicit operational storage states:

• ad_storage: Held 'denied' by default.
• ad_user_data: Held 'denied' by default.
• ad_personalization: Held 'denied' by default.
• analytics_storage: Held 'denied' by default.

Until the visitor executes an affirmative action by clicking "Allow Storage" on the consent banner, no non-essential advertising or analytical scripts access local storage or transmit telemetry. When a visitor selects "Essential Only" or subsequently revokes consent via the footer preferences trigger, all four parameters are immediately reset to 'denied'. The visitor's preference is recorded in browser storage under site_consent_v2 for a maximum duration of 12 months.

Personal data and telemetric signals are disclosed strictly to vetted third-party infrastructure processors subject to confidentiality covenants:

(a) Google Ireland Ltd / Google LLC: Operates Google Ads measurement and infrastructure, receiving consent state signals and gclid conversion events when permitted.

(b) Microsoft Ireland Operations Ltd: Operates Microsoft Advertising and Bing search telemetry, receiving msclkid conversion signals. Microsoft's independent collection, usage, and retention terms are articulated in the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement.

(c) Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Operates Meta Ads telemetry, receiving fbclid attribution signals when consented.

(d) Hosting & Database Infrastructure: Secure cloud web servers providing encrypted storage of jahe615.php inquiry submissions, chat transcripts, and web server access logs in compliant United States data centers.

(e) Mail Transport Gateway: Encrypted SMTP mail relays delivering consultation notifications directly to office@zorelle.click.

Zorelle's primary servers and commercial operations are situated in the State of Florida, United States. Visitors accessing this website from the European Economic Area (EEA), the United Kingdom, or Switzerland acknowledge that their inquiries and network traffic are transferred to, processed in, and stored within the United States. Such cross-border transfers are conducted pursuant to standard contractual clauses (SCCs) approved by the European Commission, the EU-U.S. Data Privacy Framework where certified by third-party processors, and pre-contractual necessity established under Article 49(1)(b) of the GDPR.

We do not maintain vague indefinite retention schedules. Data categories are archived for documented operational durations and purged thereafter:

• Inquiry Submissions & Email Records: Retained for exactly thirty-six (36) months from submission date to maintain formulation records, skin tolerance histories, and warranty claims.

• Support Chat Transcripts: Retained for exactly six (6) months from conversation closure.

• Web Server Access & Security Logs: Retained for exactly ninety (90) days, followed by automatic log rotation and overwriting.

• Consent Choice Records (site_consent_v2): Stored client-side for exactly twelve (12) months before prompt re-verification.

• Data Subject Requests: Formal responses and fulfillment documentation are processed and dispatched within seven (7) business days.

Zorelle enforces strict technical and administrative safeguards to defend client records against unauthorized inspection, exfiltration, or tampering. All digital transmissions are secured through Transport Layer Security (TLS 1.3) with modern cipher suites. Server infrastructure enforces least-privilege administrative access, automated honeypot bot interception on public endpoints, hardened firewall filtering, and periodic vulnerability reviews. Physical access to consultation terminals at our Aegean Avenue studio is restricted to authorized personnel.

Under the General Data Protection Regulation (gdpr), individuals residing in the European Union, European Economic Area, and United Kingdom possess enforceable rights regarding their personal data:

(a) Right of Access: Request verification of processing and obtain a readable copy of personal records;

(b) Right to Rectification: Demand correction of inaccurate or incomplete formulation or contact records;

(c) Right to Erasure ("Right to be Forgotten"): Demand deletion of personal information where processing is no longer required;

(d) Right to Restriction: Restrict processing during dispute or verification proceedings;

(e) Right to Data Portability: Obtain structured, machine-readable exports of provided personal data;

(f) Right to Object: Object at any time to processing based on legitimate interests or direct marketing;

(g) Right to Withdraw Consent: Revoke granted consent at any time without compromising the lawfulness of prior processing.

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), alongside comprehensive consumer privacy statutes in Florida, Virginia, Colorado, Connecticut, Utah, and other applicable states, consumers possess specific statutory protections:

(a) Notice of Collection: Right to know the categories of personal data collected, commercial purposes, and third parties receiving disclosures prior to collection;

(b) Opt-Out of Sale or Sharing: Right to opt out of the sale of personal information or sharing of personal data for cross-context behavioral advertising. Zorelle does not sell personal data for monetary consideration. Any tracking for targeted advertising is governed by affirmative opt-in;

(c) Right of Deletion & Correction: Right to request deletion or correction of inaccurate personal data;

(d) Non-Discrimination: Zorelle will never deny services, alter formulation pricing, or diminish esthetic care standards for consumers exercising statutory privacy rights.

Zorelle recognizes and respects the global privacy control (GPC) browser signal. If client browsing software transmits the Sec-GPC: 1 header, our web infrastructure interprets this signal as an immediate, binding request to opt out of the sale or sharing of personal data and non-essential analytical storage. When GPC is detected, advertising cookies and third-party tracking tags are suppressed automatically without requiring manual interaction with our consent banner.

This website, our clinical skincare dispensary, and our esthetic treatment services are directed exclusively to adults aged 18 and older. We do not knowingly solicit, collect, or store personal data from children under the age of 16. In the event that Zorelle discovers that personal information concerning an individual under 16 has been transmitted through an inquiry form or chat session without verified parental consent, such records will be permanently expunged immediately.

If you believe Zorelle has handled your personal data in violation of applicable data protection statutes, you maintain the right to lodge a formal complaint with relevant regulatory authorities:

• United States: File a complaint with the Office of the Attorney General in your state of residence (in Florida: Office of the Attorney General, State of Florida, The Capitol PL-01, Tallahassee, FL 32399), or the California Privacy Protection Agency (CPPA) for California residents.

• European Union & UK: Lodge a complaint with your national Data Protection Authority (DPA) or the UK Information Commissioner's Office (ICO).

To exercise statutory rights of access, correction, deletion, or portability, submit a formal Data Subject Access Request to our designated privacy desk:

• Electronic Submission: Email office@zorelle.click with the subject header "Formal Data Subject Privacy Request".
• Postal Delivery: Zorelle, Attn: Privacy Governance Officer, 42 Aegean Avenue, Tampa, Florida 33606, United States.
• Verification Protocol: Requests must include your full name, email address used during inquiry, and reasonable verification of identity.
• Turnaround Timeline: All verified requests receive a formal acknowledgment and complete fulfillment within seven (7) calendar days of receipt, free of charge.

Zorelle reserves the right to revise this statutory privacy policy to mirror updates in our clinical formulation lines, changes in dispensary operations, or evolving regulatory mandates from the Federal Trade Commission, Florida state legislation, or international privacy boards. Revisions become effective upon publication at zorelle.click/privacy.html, accompanied by a prominent update to the stated effective date. Continued engagement with our digital services following an amendment signifies acknowledgment of the updated terms.

For questions, clarifications, or technical compliance inquiries regarding our privacy controls and Consent Mode v2 implementation, contact our team directly:

Zorelle Privacy & Formulation Governance
Address: 42 Aegean Avenue, Tampa, Florida 33606, Tampa, Florida, United States
Telephone: +1 (464) 555-7461
Official Electronic Dispatch: office@zorelle.click
Operating Hours: Tuesday through Friday 09:00–18:00 EST, Saturday 10:00–17:00 EST.