Our privacy policy details the precise legal grounds, identifiers, and handling standards governing your commercial inquiry data.

This Privacy Policy took effect on October 27, 2026. It sets out the data governance framework for glassware.click, covering our public digital catalogue, inquiry endpoints, direct communication desks, and paid advertising traffic.

We operate strictly as a commercial inquiry-only glassware platform. We maintain no user registration accounts, no checkout carts, and process no direct payments. All interactions relate to trade cataloguing, SKU specification indexing, and hospitality procurement scoping.

The data controller responsible for personal information processed on this website is:

We collect information through three specific technical channels and nothing beyond them:

• Commercial Inquiry Form: When you submit a specification request via our inquiry form, our backend script (jedi38f.php) records your full name, telephone number, business email, physical venue address, inquiry kind, technical notes, requested glassware specifications, and explicit consent confirmation.
• Automated Request Metadata: Alongside inquiry submissions, server logs capture the visitor’s IP address, browser user-agent string, referring URL, the exact timestamp the page was rendered, and the submission timestamp.
• Real-Time Support Chat: Interactions via our support chat desk (wimi528.php) store the text transcript and an anonymous session token in your browser’s local storage to maintain continuity during your review of catalog lines.
• Advertising & Analytics Identifiers: When arriving via marketing campaigns, we process campaign identifiers including gclid, msclkid, and fbclid, alongside consent preferences stored in the browser under site_consent_v2.

We process collected data exclusively for the following operational needs:

• Reviewing, calculating, and preparing commercial glassware catalog quotes ($5,000 to $35,000 scoping brackets).
• Verifying volume calibrations, rim specifications, and physical logistics feasibility with beverage managers.
• Transmitting technical specification sheets and answering inquiries submitted through our web forms or chat.
• Measuring digital advertising campaign effectiveness and verifying lead sources across commercial channels.
• Preventing automated bot abuse and ensuring server infrastructure security.

This website is an active destination for paid commercial traffic. We run paid advertising campaigns across google ads, microsoft advertising, and Meta Ads.

When a commercial buyer clicks on our advertisements, the originating platform attaches a unique query identifier to the destination URL:

• gclid (Google Click Identifier) — generated by Google Ads to track ad impressions, clicks, and subsequent form inquiries.
• msclkid (Microsoft Click Identifier) — generated by Microsoft Advertising to measure B2B search engagement.
• fbclid (Facebook Click Identifier) — generated by Meta Ads for marketing and distribution campaigns.

We process these identifiers in the present tense to attribute inbound trade inquiries to their originating campaign. We state plainly that no advertising platform has reviewed, approved, or certified our business operations.

We operate consent mode v2 on this website. By default, before any interaction with our cookie banner, the following four consent signals are held strictly in a denied status:

• ad_storage — denied until the visitor grants consent.
• ad_user_data — denied until the visitor grants consent.
• ad_personalization — denied until the visitor grants consent.
• analytics_storage — denied until the visitor grants consent.

If a visitor selects “Allow Storage”, these parameters transition to granted. If the visitor selects “Decline” or subsequently revokes storage, all four signals are immediately returned to denied. No marketing cookies or ad tags are loaded while in the denied state.

We disclose collected data to specific infrastructure providers under data processing contracts:

• Google LLC / Google Ireland Ltd: Provides ad conversion attribution and analytics services. Subject to Google privacy policies.
• Microsoft Ireland Operations Ltd / Microsoft Corporation: Provides search advertising services via Microsoft Advertising. Governed by the Microsoft Privacy Statement available at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms Inc: Delivers social marketing attribution where active campaigns run.
• Hosting & Server Infrastructure Provider: Serves our static assets, executes jedi38f.php and wimi528.php, and hosts our encrypted database repository in secure data centers.
• Mail Transport Route: Securely relays inquiry notifications from our server to our primary inbox at office@glassware.click.

Our primary servers and administrative desks are located in Austin, Texas, United States. When European visitors submit inquiries, their personal data is transferred directly to the United States. Such transfers are conducted pursuant to standard contractual clauses (SCCs) approved by the European Commission or under adequacy determinations where applicable.

We do not retain information indefinitely. We enforce fixed retention windows across all data categories:

• Trade Inquiries & Email Records: Retained for exactly 36 months to support historical SKU specifications, repeat orders, and project warranty records.
• Support Chat Transcripts: Retained for exactly 18 months from the date of the last message in the session.
• Server & Access Logs: Retained for exactly 30 days before automatic system rotation and permanent deletion.
• Consent Choice Records: Stored in the browser under site_consent_v2 for 6 months before the prompt re-appears.
• Data Subject Rights Requests: Acknowledged and fulfilled within 7 days of verified receipt.

All data transmitted to glassware.click is secured using Transport Layer Security (TLS 1.3). Server endpoints enforce strict file permissions, sanitized parameter checking in backend scripts, honeypot spam protection, and isolated database storage. Administrative access to email and inquiry logs is restricted to authorized personnel under multifactor authentication.

For individuals located within the European Economic Area or United Kingdom, the General Data Protection Regulation (gdpr) grants specific rights regarding personal data:

• Right of Access: You may request confirmation of whether we process your data and receive a complete copy.
• Right to Rectification: You may correct inaccurate or incomplete venue contact details.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your inquiry data where no statutory retention basis applies.
• Right to Restriction: You may restrict the processing of your data while a dispute or verification is pending.
• Right to Data Portability: You may request your project specifications in a structured, machine-readable JSON format.
• Right to Object: You may object at any time to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time without affecting past lawful processing.

Residents of California (under the California Consumer Privacy Act as amended by the CPRA, ccpa), Texas, Virginia, Colorado, Connecticut, and other states enjoy rights regarding personal information:

• Right to Know & Access: You may request the specific pieces and categories of personal information we have collected.
• Right to Delete: You may request deletion of personal information subject to business record exceptions.
• Right to Correct: You may demand correction of inaccurate records.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal data for monetary consideration. Any tracking for cross-context behavioral advertising via Google Ads, Microsoft Advertising, or Meta Ads is governed by our consent banner and can be opted out of at any time.
• Right to Non-Discrimination: We will not deny services, adjust price tiers ($5,000–$35,000), or provide different service quality if you exercise statutory rights.

Our website recognizes and respects the global privacy control (GPC) signal transmitted by compatible browsers via the Sec-GPC request header. If your browser broadcasts an active GPC signal, our system treats it as an automatic opt-out of marketing identifiers, holding Consent Mode v2 signals in a denied state without requiring manual banner interaction.

This website is exclusively intended for commercial hospitality professionals, retail procurement agents, and trade buyers over eighteen years of age. We do not knowingly solicit, collect, or store personal information from children under sixteen years old. If we learn that an inquiry originated from a minor, the information is immediately expunged from our database.

If you believe our data processing violates applicable privacy laws, you have the right to file a formal complaint with a competent supervisory authority:

• In the United States: with the Office of the Attorney General of Texas, or with the California Privacy Protection Agency (CPPA) for California residents.
• In the European Union: with your local national Data Protection Authority (DPA) in the member state of your residence or workplace.

To exercise your rights of access, correction, erasure, or opt-out, submit a written request directly to our Austin data compliance desk:

Please specify your name, associated email address, and the nature of your request. We verify requestor identity through email confirmation. Every verified data request is processed and answered within 7 days without administrative charge.

We update this Privacy Policy periodically to reflect enhancements in catalogue architecture, operational procedures, or regulatory directives. When amendments occur, we update the “Effective Date” at the top of this document. Material changes affecting how personal inquiry information is processed will be highlighted via a prominent notice on our website header for thirty days.

For immediate questions regarding privacy compliance, data protection agreements, or catalogue specification handling, contact our Austin operations desk: