Disciplined Privacy Policy and Data Rights

This privacy policy took effect on October 27, 2026

This privacy notice is effective as of October 27, 2026, and governs all personal data collected through felnorias.com, our inquiry channels, and our Austin studio desk. Any future updates to this disclosure will be published directly on this URL with an updated chronological revision date.

Felnorias serves as the primary data controller for all collected information

The data controller responsible for the processing of your personal information is Felnorias, trading at felnorias.com as a sole proprietorship registered in the state of Texas. Our postal address is 701 West Riverside Drive, Austin, Texas 78704, Austin, Texas, United States. The practice is operated by principal web designer Irina Petrova.

We only collect data necessary to evaluate inquiries and deliver technical projects

Our website collects information through three specific interactions: the studio project inquiry form (mawe44f.php), the interactive client support chat widget (sofa8cb.php), and automated web server access logging.

When you submit an inquiry through our site, our backend handler writes your full name, telephone number, email address, physical or project address, selected project offering, technical specifications, project notes, and explicit consent choice. Concurrently, the server records technical transmission metadata: your Internet Protocol (IP) address, browser user-agent string, referring URL, the exact timestamp the form was rendered, and the moment it was submitted.

Our interactive support chat stores the conversational transcript along with a local browser session token so you can resume discussions. For incoming traffic arriving via paid advertising campaigns, our systems read official advertising click identifiers (gclid, msclkid, fbclid) attached to the destination URL.

We do not operate visitor user accounts, do not store passwords, and do not process credit cards or digital payments on this site. Nothing is sold via automated e-commerce checkout, eliminating financial transaction storage entirely.

Every collected data element serves an explicit business purpose

We use contact details and project specifications strictly to formulate itemised cost estimates within our 1,500 to 12,000 USD rate card, schedule discovery consultations, and execute contracted web development deliverables. Technical server logs are examined exclusively to protect the studio’s infrastructure from abusive bot submissions, mitigate denial-of-service attempts, and ensure server uptime. Advertising click parameters and consent records are evaluated solely to calculate advertising channel performance without creating cross-site behavioural user dossiers.

We process your personal information under lawful and documented legal bases

Under applicable international data protection standards, including European data protection directives for international visitors, our processing relies on defined legal grounds:

1. Consent: We store analytical cookies, process marketing measurement identifiers, and record consent choices solely when you provide explicit opt-in consent through our consent controls.

2. Contractual Necessity: Processing project parameters, contact emails, and phone numbers is necessary to evaluate requested project scopes, establish fixed quotes, and execute service agreements.

3. Legitimate Interests: Maintaining server access logs and safeguarding our form handlers against automated bot abuse represents a legitimate interest in operating a secure and resilient web presence.

We receive incoming traffic through Google Ads, Microsoft Advertising, and Meta Ads

Felnorias actively runs paid advertising campaigns to reach prospective design clients. Google Ads and Microsoft Advertising direct traffic to our website, and Meta Ads may deliver traffic for selected announcements. Each advertising network appends a specific URL click parameter when a visitor clicks our advertisement: Google Ads utilizes gclid, Microsoft Advertising utilizes msclkid, and Meta Ads utilizes fbclid.

These click identifiers are evaluated in the present tense to attribute inbound project inquiries to the corresponding campaign. We do not sell this attribution data to data brokers, and we do not use cross-site tracking to follow your browsing habits on third-party domains. No advertising platform has reviewed, approved, or certified our business or this website.

Google Consent Mode v2 holds all advertising and analytics keys denied by default

To preserve visitor privacy before any choice is made, felnorias.com enforces Google Consent Mode v2. When you load any page on this site, our consent architecture immediately sets four fundamental storage signals to denied: ad_storage='denied', ad_user_data='denied', ad_personalization='denied', and analytics_storage='denied'.

These parameters remain strictly denied until you explicitly grant consent through our cookie banner or preferences panel. If you select decline or subsequently revoke consent, all four storage parameters are immediately set back to denied. When denied, advertising measurement tags execute exclusively in a cookieless, non-identifying operational mode that does not access your device storage.

We disclose every third party and infrastructure vendor that processes studio data

We work exclusively with recognized enterprise infrastructure providers to host our website and process studio communications. Below are the verified processors engaged by Felnorias:

1. Google Ireland Ltd / Google LLC: Operates Google Ads measurement infrastructure, subject to Google Consent Mode v2 signals.

2. Microsoft Ireland Operations Ltd: Operates Microsoft Advertising infrastructure. In compliance with advertising network guidelines, our site sets no cookies on Microsoft domains and does not execute Flash or cross-domain tracking scripts. For detailed information regarding Microsoft data handling, review the Microsoft privacy statement at privacy.microsoft.com/privacystatement.

3. Meta Platforms Ireland Ltd: Operates Meta Ads infrastructure for campaign attribution where campaigns run.

4. Studio Web Hosting & Mail Infrastructure: Our web host provides hardened server environments storing the inquiry database, and our enterprise mail provider securely routes inbound client inquiries to Irina Petrova’s studio inbox at [email protected].

International data transmissions are safeguarded by standard contractual clauses

Because Felnorias operates from Austin, Texas in the United States, information submitted by visitors outside the United States is transmitted to and processed on secure servers located within the United States. Where cross-border transfers occur from the European Economic Area, the United Kingdom, or Switzerland, transmissions are governed by European Commission approved Standard Contractual Clauses (SCCs) and binding data processing agreements that mandate equivalent levels of security and privacy protection.

We enforce fixed retention periods rather than storing data indefinitely

Felnorias maintains strict chronological data retention schedules. We do not retain personal information longer than required for our studio practice. Our operational retention periods are defined as follows:

Upon the expiration of these defined periods, stored records are permanently deleted or irreversibly anonymized.

Technical and organizational measures protect all studio communications

We safeguard personal data using contemporary physical, electronic, and administrative safeguards. All data in transit across felnorias.com is encrypted using Transport Layer Security (TLS 1.3) with modern cryptographic cipher suites. Form submissions employ hidden honeypot validation fields (department and domain) alongside precise client-side submission timestamps to deflect automated bot injection. Server access is restricted to Irina Petrova using encrypted key pairs, hardware-backed multi-factor authentication, and regular server patching.

Visitors from the European Union exercise full rights under the GDPR

For visitors accessing our studio website from the European Union, the General Data Protection Regulation (GDPR) guarantees specific statutory rights regarding personal data. You have the right to request access to the personal data we hold about you, the right to rectification of inaccurate records, the right to erasure ('right to be forgotten'), the right to restriction of processing, the right to data portability in a machine-readable format, the right to object to processing based on legitimate interests, and the right to withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

We honour United States state privacy rights including California CCPA provisions

Under United States privacy legislation, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), as well as consumer data privacy laws in Texas, Virginia, Colorado, and other states, residents possess distinct legal protections. These include the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate details, and the right to non-discrimination for exercising privacy choices.

Felnorias does not sell your personal information to third parties, and we do not share personal information for cross-context behavioral advertising. You have the right to confirm this non-sale stance or opt out of any future transfer mechanisms by submitting a formal request.

Our platform automatically honours the Global Privacy Control signal

If your web browser broadcasts the Global Privacy Control (GPC) signal via the Sec-GPC HTTP request header or corresponding JavaScript browser settings, our website recognizes this signal automatically as a valid universal opt-out of analytical and advertising tracking. No additional user configuration or account sign-in is required to enforce this preference.

Our professional web design services are not directed to children under 16

Felnorias provides bespoke website design and engineering services exclusively to businesses, cultural organizations, and adult professionals. We do not knowingly solicit or collect personal information from individuals under sixteen years of age. If we discover that personal data from a child under 16 has been transmitted without verified parental authorization, we purge that data immediately from our systems.

You retain the right to lodge a formal complaint with data protection regulators

If you believe our processing of your personal information infringes statutory privacy standards, you have the right to lodge a formal complaint with a supervisory authority. In the United States, you may contact the Office of the Texas Attorney General or, for California residents, the California Privacy Protection Agency (CPPA). European visitors may lodge a complaint with their national Data Protection Authority (DPA) within their EU Member State.

How to exercise your data subject rights through our studio intake

To exercise your rights of access, rectification, erasure, portability, or restriction, you may submit a verifiable consumer request directly to Irina Petrova. Send your request by electronic mail to [email protected] with the subject line Data Subject Access Request, or mail your written correspondence to our physical studio address at 701 West Riverside Drive, Austin, Texas 78704.

Please specify your full name, the email address originally used for project inquiries, and the specific statutory right you wish to exercise. To protect client confidentiality, we verify identity before executing requests. A data request is answered within 5 days of receipt without charge.

Policy modifications are published openly with clear chronological tracking

We review this privacy disclosure periodically to reflect evolutions in our technical architecture, operational tooling, and regulatory requirements. Material revisions will be posted openly on this page alongside an updated effective date. We encourage clients to review this document periodically to stay informed of our data stewardship practices.

Contact our studio desk directly for any privacy inquiries or clarifications

If you have questions regarding this Privacy Policy, our Consent Mode v2 implementation, or our handling of personal information, contact our studio desk directly: