Privacy Statement, DSAR Procedure & Accessibility Terms

1. Effective Date • This privacy policy took effect on October 27, 2026 and governs all active client correspondence, operational dispatch logging, technical telemetry collection, and marketing attribution channels operated across drabento.com from that calendar day onward. Any previous informal administrative notices are revoked and superseded in their entirety.

2. Data Controller Identity • The sole data controller responsible for personal information processed through this website is Drabento, trading at drabento.com from dedicated trade practice premises situated at 740 West Colfax Avenue, Denver, Colorado 80204, Denver, Colorado, United States. Drabento operates as an independent trade firm managed by master tradesman Ivan Petrov, performing mechanical repairs, door and latch assemblies, fixture mountings, and plumbing valve replacements across the Denver metro area under Colorado contractor registration and commercial general liability insurance.

3. Data Categories Collected • We collect and record only the specific operational details required to quote, coordinate, and execute trade callouts. When a visitor submits the dispatch request form wired to citu047.php, our system writes the submitted client name, telephone number, electronic mail address, service site address located in Denver or adjacent municipalities, selected category of trade work (handyman callout, single repair dispatch, residential small works, or commercial punch-list), detailed physical job notes, technical fixture specifications, and an affirmative consent timestamp. Simultaneously, the server environment automatically logs the visitor’s IP address, browser user-agent string, referring URL, the exact timestamp when the form markup was rendered, and the submission execution timestamp. When engaging our live support desk dialog handled by luve2cd.php, the message body is logged alongside a persistent session token stored locally in the visitor’s browser cache. We record cookie identifiers and marketing click identifiers appended to inbound requests, specifically gclid, msclkid, and fbclid. We record no account passwords, issue no consumer login profiles, and process no credit card or direct electronic banking transactions through this domain; all invoices are settled directly upon verified trade completion.

4. Operational Processing Purposes • Every piece of data captured by Drabento serves a direct physical or statutory purpose: verifying the technical scope and structural feasibility of requested engineering repairs; calculating transparent hourly brackets ($40–$100/hr residential, $60–$120/hr handyman engineering callouts, $68–$77/hr commercial punch-lists) or flat dispatch sums ($100–$250/job); routing our service cargo van loaded with trade tools to your Denver physical address; communicating arrival estimates or material procurement constraints; diagnosing malicious bot spam and honeypot field manipulation; and measuring aggregate marketing conversion efficiency across paid digital acquisition channels.

5. Explicit Legal Bases • Under applicable state and international data privacy laws, Drabento processes personal records under three explicit legal bases: First, contractual necessity and pre-contractual steps requested by the data subject, specifically when evaluating your repair inquiry, calculating dispatch pricing, and traveling to your Denver premises to perform mechanical repairs. Second, explicit consent, which is freely given and captured via affirmative checkboxes prior to form submission, and via our client consent panel regarding telemetry and cookie storage. Third, legitimate interests pursued by Drabento, including securing our web infrastructure against automated denial-of-service attempts, preventing fraudulent service dispatch requests, maintaining commercial liability audit trails, and validating digital advertising traffic authenticity.

6. Paid Advertising Platforms & Identifiers • Drabento actively runs paid advertising campaigns to acquire commercial punch-list contracts and residential repair inquiries across Denver. We receive traffic directly from Google Ads, Microsoft Advertising, and Meta Ads. When a prospective client clicks an advertisement, these platforms append unique click parameters to the landing URL: Google Ads appends the gclid query identifier; Microsoft Advertising attaches the msclkid tracking token; and Meta Ads appends the fbclid campaign parameter. Drabento reads these tokens strictly to evaluate ad campaign efficacy and measure landing page engagement. We maintain an independent business identity and make no claim that any advertising platform has reviewed, approved, or officially endorsed our practice.

7. Google Consent Mode v2 Implementation • Our website implements Google Consent Mode v2 as a mandatory privacy control across all landing routes. By default, before any interaction with our consent interface, four core telemetry signals are held in an absolute denied state: ad_storage, ad_user_data, ad_personalization, and analytics_storage. No marketing cookies, measurement tags, or audience profile identifiers are stored or read while these parameters remain denied. Only when a visitor clicks “Accept Storage” on our consent panel are these four states elevated from denied to granted. If the visitor selects “Keep Denied” or subsequently alters their choices through our footer preferences trigger, all four parameters are restored immediately to denied, instructing advertising scripts to halt persistent storage.

8. Third-Party Data Processors • Drabento shares personal records only with authorized third-party service providers performing essential hosting, communications, and attribution processing. Our infrastructure hosting provider maintains our server environment and stores our raw inquiry database within secure North American facilities. Our transactional mail relay routes dispatch notifications directly to our operational inbox at [email protected]. For campaign measurement, Google LLC / Google Ireland Ltd receives advertising signals via Google Ads subject to Consent Mode controls. Microsoft Ireland Operations Ltd processes query signals via Microsoft Advertising, governed by the official Microsoft privacy statement available at privacy.microsoft.com. Where campaigns run on social channels, Meta Platforms Ireland Ltd processes attribution data through Meta Ads. No consumer information is ever traded, bartered, or leased to lead aggregators or marketing brokers.

9. International Cross-Border Data Transfers • Drabento operates primarily within the United States. Where visitors access drabento.com from the European Economic Area, the United Kingdom, or other jurisdictions with cross-border data transfer limitations, personal records submitted via digital forms are transferred to and processed within the United States. These transfers are executed pursuant to standard contractual clauses adopted by the European Commission, binding corporate rules of our technology vendors, or the explicit consent of the data subject who voluntarily requests a service quote for a property located in Denver, Colorado.

10. Strict Data Retention Schedules • We enforce strict retention horizons rather than open-ended indefinite storage. Inbound repair inquiries, scope documentation, and corresponding electronic mail notifications are retained for 36 months following receipt to support Colorado contractor liability verification, warranty enforcement, and accounting records. Transcripts generated via our interactive support desk luve2cd.php are retained for 12 months from the final recorded message. Web server diagnostic logs, IP records, and access timestamps are purged automatically after 90 days. The record of your cookie and consent election stored in browser local state persists for 12 months unless cleared manually.

11. Technical & Operational Security Measures • Drabento maintains rigorous technical safeguards to prevent unauthorized data access, disclosure, or alteration. All web communications traverse encrypted Transport Layer Security (TLS 1.3) protocols. Backend inquiry handling scripts enforce strict sanitization on input parameters, incorporate invisible honeypots (department, url) and unix execution timestamps (ts) to intercept malicious bots, and isolate sensitive client correspondence within secured directories protected by strict filesystem permissions. On-site dispatch files are restricted exclusively to Ivan Petrov and authorized operational personnel.

12. Data Subject Rights Under GDPR • For clients and website visitors residing within the European Economic Area or the United Kingdom, the General Data Protection Regulation (gdpr) guarantees distinct statutory rights. You hold the right to obtain confirmation as to whether your personal records are processed and to access a copy of such data; the right to rectify inaccurate contact or site details; the right to demand erasure of records where retention is no longer justified; the right to restrict processing during dispute reviews; the right to receive your records in a portable, structured, machine-readable format; the right to object to processing grounded in legitimate interests; and the unconditional right to withdraw previously granted consent at any time without penalizing pre-existing lawful processing.

13. State Consumer Privacy Rights & CCPA Disclosures • Pursuant to the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), Colorado Privacy Act (CPA), and complementary US state privacy laws, residents of California, Colorado, and other qualifying states enjoy comprehensive rights regarding their personal information. You possess the right to know the specific pieces and categories of personal information collected, the sources of collection, and the commercial purpose for collecting it; the right to delete personal records held by Drabento; the right to correct inaccurate records; and the right not to receive discriminatory treatment or diminished trade service for exercising these statutory rights. Drabento does not sell your personal data for monetary consideration and does not share personal records for cross-context behavioral advertising outside the explicit consent choices captured by our interface.

14. Recognition of Global Privacy Control (GPC) • Our website architecture natively detects and honours the global privacy control (GPC) signal transmitted through HTTP request headers (Sec-GPC). When your browser broadcasts a valid global privacy control preference, Drabento immediately treats the signal as an affirmative instruction to restrict advertising storage and withhold consent for secondary marketing attribution, overriding any contrary pre-existing browser state without prompting you with supplementary opt-out dialogs.

15. Protection of Children’s Privacy • Drabento provides commercial and residential engineering repairs exclusively to property owners, facility managers, and adults authorized to contract mechanical trade services. Our site is not directed toward minors, and we knowingly collect no personal information from children under the age of 16. In the event that we identify an inquiry submitted inadvertently by a minor without verified parental authorization, all associated records, telephone numbers, and site addresses are purged immediately from our active databases.

16. Supervisory Authorities & Complaints • If you believe our processing of your personal information violates applicable state or federal privacy legislation, you have the statutory right to lodge a formal complaint with relevant enforcement bodies. Colorado residents may submit complaints directly to the Colorado Attorney General’s Office. California residents may contact the California Privacy Protection Agency (CPPA) or the California Attorney General. European visitors may submit complaints to their local national Data Protection Authority (DPA) within their respective EU Member State.

17. Data Subject Access Request (DSAR) Procedure • To exercise any statutory right under GDPR, CCPA, or Colorado state law, including requesting an audit summary, data modification, or complete file deletion, you must submit a written request to our trade desk. Address your transmission via electronic mail to [email protected] or via postal dispatch to Drabento, 740 West Colfax Avenue, Denver, Colorado 80204, Denver, Colorado, United States. Your submission must articulate the specific nature of your inquiry, provide your full legal name, and supply sufficient verifying details (such as the telephone number or Denver service address used during prior dispatches). Drabento will verify your identity, process your file, and deliver a formal substantive response within 14 days of receipt, free of charge.

18. Modifications to This Privacy Statement • Drabento reserves the right to amend or update these privacy terms to reflect statutory revisions, modifications in our trade operations, or evolving advertising network requirements. When revisions occur, the updated text will be published directly to this page accompanied by an updated effective date at the head of the document. Continued utilization of drabento.com following the posting of amendments constitutes an explicit acknowledgment of the updated terms.

19. Direct Human Contact & Trade Inquiries • If you have questions regarding this privacy document, technical log handling, or our service van dispatch procedures, direct your correspondence to our Denver headquarters: Drabento, Attention: Ivan Petrov, 740 West Colfax Avenue, Denver, Colorado 80204, United States; direct telephone line: +1 (396) 555-5636; direct electronic mail: [email protected].