Privacy Policy & Data Clause Ledger
Structured in sticky section index architecture with numbered visible labels, tracking real-time reading progress down to 320px viewports. We state every tracking parameter, ad platform click identifier, storage lifetime, and data subject access rule in direct, unhedged operational terms.
Effective Date & Policy Scope
This privacy policy took effect on October 17, 2026 (last updated on October 17, 2026). It governs all dispatch inquiries, diagnostic records, browser storage keys, and inbound advertising click telemetry received at masterpiecehandyman.us.
We run live paid advertising campaigns. When you arrive on this website through paid search or social media marketing, technical parameters are recorded strictly to verify genuine dispatch traffic and prevent bot-generated click fraud.
Data Controller & Operator Identity
The data controller operating this site is Masterpiecehandyman, trading online at masterpiecehandyman.us (legal entity Masterpiece Handyman Solutions LLC).
Full physical postal address: 612 GENE AVE, PALMYRA, MO 63461, PALMYRA, MO, United States. Country: United States. Telephone: (573) 719-6920. Dedicated inquiry and data request email: [email protected]. Registered trade agent and lead master tradesman: Thomas Kroeger.
Categories of Data Collected
We collect specific, delimited categories of information directly through user interaction and automated technical protocols:
- Inquiry Form (submit.php / gifaae5.php): Name, phone number, email address, physical project street address, the kind of enquiry (general repair, maintenance, drywall patch, ceiling fan, interior painting), the message text, the requested specification, and the consent tick. Automatically with it: the IP address, the browser's user-agent string, the referring URL, the moment the form was rendered, and the moment it was sent.
- Support Chat (chat.php / saka2b4.php): The support chat keeps the conversation text and a token stored in the visitor's browser (
chat_token) so they can return to the conversation across page loads. - Technical and Server Log Data: Client IP address, browser user-agent header, referring URL, HTTP request method, timestamps of access, and system diagnostic error codes.
- Cookie Identifiers & Choice Keys: The consent choice is stored in the browser under
site_consent_v2, and nothing else on this site persists a choice. Standard analytics cookies (_ga,_ga_*) when enabled. - Advertising Click Identifiers: Inbound advertising parameters attached to landing URLs:
gclid,msclkid, andfbclid.
No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.
Purposes of Processing
Every piece of information collected by Masterpiece Handyman Solutions LLC fulfills a concrete operational purpose:
- Site Estimate Delivery: Calculating accurate labor hours, material lists, and structural feasibility from your submitted scope notes.
- Physical On-Site Dispatch: Routing our trade service vehicle directly to your Palmyra or Marion County address to perform inspection and repairs.
- Customer Support & Chat Continuity: Maintaining live chat transcripts so questions about framing, pricing, or schedules can be answered without repeating background facts.
- Contractual Documentation: Drafting written trade contracts itemizing labor and materials based on your requested service.
- Commercial Ad Accounting: Verifying genuine clicks from google ads, microsoft advertising, and Meta Ads to monitor campaign performance and defend against bot fraud.
- Infrastructure Integrity & Security: Server logs guard against automated injection attacks, denial of service attempts, and malicious spam.
Legal Bases for Processing
We process each category of data strictly under recognized legal bases:
- Contract: Processing inquiry form submissions, project addresses, and trade specifications is necessary for taking steps at the customer's request prior to entering into a contract, and for performing the written trade contract on-site.
- Consent: Support chat sessions, non-essential analytics cookies, and advertising storage keys run strictly on the visitor's affirmative consent, captured through explicit interaction or the Consent Mode banner. Consent may be withdrawn at any time.
- Legitimate Interest: Processing server access logs, verifying advertising click identifiers (
gclid,msclkid,fbclid), and protecting our web infrastructure against automated click fraud and abuse represents our legitimate commercial interest, balanced against visitor privacy rights.
Advertising Platforms & Click Identifiers
This site receives paid clicks today. The advertising platforms that send traffic here are google ads, microsoft advertising, and Meta Ads.
Each ad network attaches a unique cryptographic click identifier to inbound links:
- google ads: Attaches the gclid (Google Click Identifier) parameter to evaluate ad clicks and monitor referral traffic.
- microsoft advertising: Attaches the msclkid (Microsoft Click Identifier) parameter to links originating from Bing and syndicated ad placements.
- Meta Ads: Attaches the fbclid parameter when visitors arrive via paid campaigns across Facebook or Instagram.
These parameters are held temporarily in browser memory to confirm that dispatch requests originate from genuine human searchers rather than automated web-crawling spiders. Nothing anywhere claims a platform has reviewed, approved or verified this site.
Consent Mode v2 Implementation
This website deploys Google consent mode v2 natively in the browser runtime. Under Consent Mode v2, the four core platform signals are held strictly denied until the visitor allows storage:
- ad_storage: Held denied until granted; blocks local storage of advertising cookies.
- ad_user_data: Held denied until granted; blocks transmission of user telemetry to advertising endpoints.
- ad_personalization: Held denied until granted; disables behavioral retargeting and personalized audience profiles.
- analytics_storage: Held denied until granted; prevents analytics tracking cookies and session storage.
When a visitor allows storage via the consent banner, these signals update to granted. The moment the visitor declines or withdraws consent, all four signals are set back to denied immediately.
Third-Party Data Processors
We do not sell personal data to data brokers. The third parties that receive data from this site are named one by one:
- Google LLC / Google Ireland Ltd: Operates Google Ads, attaches the
gclididentifier, and receives Consent Mode v2 signals. Governed by policies at policies.google.com. - Microsoft Ireland Operations Ltd: Operates Microsoft Advertising and attaches the
msclkidparameter. Microsoft's privacy statement is available at privacy.microsoft.com. - Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Operates Meta Ads and attaches
fbclidfor ad attribution. Governed by facebook.com/privacy/policy. - Hosting Provider: The hosting provider that serves this site and stores the enquiry database securely on hardened servers within the United States.
- Mail Route Provider: The mail provider that carries the notification of work orders and estimates directly to the operator's inbox via encrypted TLS protocols.
International Data Transfers
Masterpiece Handyman Solutions LLC operates and maintains its physical workshop and primary web hosting servers in the United States. For visitors who reach the site from Europe or other jurisdictions outside the United States, referral telemetry handled by global ad platforms (Google, Microsoft, Meta) may involve data transfers outside the country of collection.
What makes these transfers lawful: data flows rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and certifications under the EU-U.S. Data Privacy Framework.
Data Retention Periods
We reject vague phrases such as "as long as necessary." Retention is governed by real, explicit operational periods:
- Enquiries and their email copies: 24 months, to support 12-month workmanship warranty validations, Missouri trade liability records, and customer follow-ups.
- Chat transcripts: 12 months, stored to preserve project notes and dialogue context for recurring repairs.
- Server and access logs: 60 days, after which server logs rotate and overwrite automatically.
- The record of a consent choice: 6 months, stored in
site_consent_v2, after which the choice expires and the banner re-prompts. - A data request is answered within 5 days: Data subject access, rectification, or deletion requests are verified and answered within 5 days of receipt.
Security Measures
We implement comprehensive technical and organizational safeguards to protect customer data:
- Full TLS 1.3 transport layer encryption enforced across all web pages with HSTS headers.
- Anti-spam honeypot fields and transmission rate limiting on inquiry forms to neutralize malicious automated scripts.
- Access control restricted to authorized hardware with SSH key-only authentication; direct root login disabled.
- No online payment processing: no card numbers, banking details, or customer account credentials are ever accepted, stored, or transmitted through the site.
GDPR Data Protection Rights
For individuals visiting from the European Economic Area or the United Kingdom, we recognize and uphold the gdpr rights in full:
- Access: The right to obtain confirmation and request copies of your personal data.
- Rectification: The right to demand correction of inaccurate or incomplete records.
- Erasure: The right to request the deletion of your personal records ("right to be forgotten"), subject to statutory contractor record obligations.
- Restriction: The right to restrict the processing of your data under specific statutory conditions.
- Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
- Objection: The right to object at any time to processing based on legitimate interests.
- Withdrawing Consent: The right to withdraw consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.
US State Privacy Rights (California CCPA)
Under US state privacy laws, with California (ccpa / CPRA) named, plus other state privacy laws in force (including Virginia, Colorado, Connecticut, and Utah):
- You have the right to know what personal information is collected, disclosed, or retained.
- You have the right to request deletion of your personal data.
- You have the right to correct inaccurate personal data.
- You have the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising. Masterpiecehandyman does not sell your personal data for money or other consideration.
- You have the right not to receive discriminatory treatment for exercising your privacy rights. Our service rates ($65–$120/hr general repair, $75–$150/task maintenance, $85–$160/task drywall, $85–$150/task fans, $2–$4.60/sq ft painting) remain unchanged regardless of your privacy choices.
Global Privacy Control (GPC)
We explicitly recognize and honor global privacy control (the Sec-GPC header signal).
When your browser transmits the Global Privacy Control signal, our site treats this as a valid opt-out of advertising storage and marketing telemetry without asking again. The four Consent Mode v2 signals remain locked to denied automatically.
Children's Privacy Protection
This site is not for children and takes no data from them. Our services are directed solely to adults capable of contracting for property repair, remodeling, and maintenance services.
We do not knowingly solicit or collect personal information from individuals under 16 years of age. If you believe a child has submitted personal details through our forms, contact us at [email protected] and we will purge the data immediately.
Right to Complain to Authorities
You retain the right to lodge a complaint with a supervisory data protection authority if you believe our data processing violates applicable law:
- The visitor may complain to their state Attorney General, including the Missouri Attorney General Consumer Protection Division.
- In California, consumers may complain to the California Privacy Protection Agency (CPPA) or the California Attorney General.
- In the European Economic Area or UK, residents may complain to their competent national Data Protection Authority (DPA).
Governing law for operational disputes is the law of MO, United States, with disputes heard in the courts of PALMYRA.
How to Exercise Data Rights (DSAR)
To exercise any of your privacy rights (access, rectification, erasure, restriction, portability, or opt-out), submit a request to our verified desk:
Attn: Thomas Kroeger, Data Compliance Desk
612 GENE AVE, PALMYRA, MO 63461, PALMYRA, MO, United States
Email: [email protected]
Phone: (573) 719-6920
How long an answer takes: A data request is answered within 5 days of receipt without charge. We verify requester identity against the email address or telephone number previously provided on dispatch tickets before releasing records.
Changes to This Privacy Policy
How a change to this policy is announced: When updates occur due to legal amendments, ad platform integrations, or trade changes, the revised policy is published directly to this page at masterpiecehandyman.us.
Material modifications are announced by updating the visible "Effective Date" at the head of the policy. Continued use of our dispatch booking services following posted changes confirms your review and acknowledgment of the updated terms.
Direct Human Contact
We provide contact that reaches a human, Thomas Kroeger, without robotic filters or call centers:
- Electronic Mail: [email protected] (monitored daily for estimates and privacy inquiries)
- Direct Phone: (573) 719-6920 (available Mon–Fri 7:00 AM – 5:30 PM CST)
- Postal Address: 612 GENE AVE, PALMYRA, MO 63461, PALMYRA, MO, United States
- Operating Lead: Thomas Kroeger, Registered Agent and Master Craftsman