Legal / Privacy
We keep an inquiry for 24 months, then delete it.
This notice lists what qelzavo.com takes from you, which ad platforms send visitors here, how long each piece is kept and how you get it back or erased. It covers the site and the inquiries that come through it, nothing else.
Effective date
This version took effect on October 6, 2026.
It was last updated on the same day. When it changes, the earlier version stays on file and we send it to anyone who asks at [email protected].
Who runs this site
Qelzavo decides what is collected here and is answerable for it.
Qelzavo, trading at qelzavo.com, is a two-person domain practice. Postal address: 138 River Road, Suite 4, Austin, Texas 48482, United States. Email [email protected], phone +1 (861) 555-8670.
We have no data protection officer. With two people there is nobody to delegate to, so the person who reads your inquiry is also the person who answers for how it is stored.
What we take, and from where
Four sources: the inquiry form, the support chat, the server log and the ad click that brought you.
The inquiry form
When you send the form, jecu072.php stores your name, phone, email, address, the kind of inquiry, your message, the domain names or specification you wrote, and whether you ticked the consent box. Alongside it, automatically: your IP address, your browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent. Those two timestamps exist to catch automated spam.
The support chat
The chat keeps the conversation on our server, plus any name, phone or email you choose to give. A token is stored in your browser so you can come back to the same thread.
Technical and log data
The web server records IP address, requested page, time, status code and user-agent for every request. That is how a server works; we do not build profiles from it.
Cookie and storage identifiers
Your consent choice is kept in your browser under site_consent_v2. If you allow storage, the ad platforms set their own identifiers. The full list is in the cookie ledger.
Advertising click identifiers
If you arrive from an ad, the link carries a click identifier: gclid, msclkid or fbclid. Section 05 explains each one.
We take no account, no password, no payment and no card data. Nothing is sold on this site.
What each piece is used for
Your inquiry is used to answer you. Ad data is used to see which ads bring inquiries.
- Form and chat content: to reply with a quote, and to do the work on the domain if you hire us.
- IP, user-agent and timestamps: to block spam and abuse of the form and chat.
- Server logs: to keep the site running and diagnose faults.
- Click identifiers and ad cookies: to measure whether a paid click led to an inquiry, only once you allow storage.
- The consent record: to remember your choice so the banner does not ask on every page.
We do not sell your data and we do not use it to train anything.
Legal bases
Each purpose rests on one basis: consent, contract or legitimate interest.
| Purpose | Basis | Kept for |
|---|---|---|
| Answering an inquiry and quoting | Steps taken at your request before a contract, then the contract itself | 24 months |
| Support chat | Consent, given when you start the conversation | 12 months |
| Spam and abuse checks | Legitimate interest in a form that works | 24 months, with the inquiry |
| Server logs | Legitimate interest in running the site | 90 days |
| Ad measurement and click identifiers | Consent, through the banner | Set by each platform |
| Remembering your consent choice | Legal obligation to record consent | 6 months |
Advertising platforms that send visitors here
Google Ads, Microsoft Advertising and Meta Ads send paid traffic to this site today.
Someone searching "spf too many dns lookups" or "domain transfer help" may see our ad and click it. When they do, the platform adds an identifier to the link:
- Google Ads attaches
gclid. - Microsoft Advertising attaches
msclkid. - Meta Ads attaches
fbclid, where a campaign runs there.
The identifier tells the platform which ad was clicked. If you allow storage, the platform's tag reads it and can report back that the click turned into an inquiry. If you decline, the identifier sits in the address bar and nothing reads it. None of these platforms has reviewed or vouched for this site, and we do not suggest otherwise.
Consent Mode v2, signal by signal
Every signal starts denied. Only your click on Allow changes that.
The site runs Google's consent mode, version 2. Before the page loads any ad tag, four signals are set to denied:
ad_storage: may advertising cookies be written.ad_user_data: may data about you be sent to Google for advertising.ad_personalization: may that data be used for personalised ads.analytics_storage: may measurement cookies be written.
They stay denied until you press Allow. Press Decline, or later withdraw through "Cookie settings" in the footer, and all four are set back to denied at that moment. While denied, Google receives at most a cookieless ping with no identifier stored on your device.
Who else receives data
Five recipients, named. Nobody buys data from us.
- Google Ireland Ltd and Google LLC for Google Ads. Receives the gclid and the consent signals. Its policy: policies.google.com/privacy.
- Microsoft Ireland Operations Ltd for Microsoft Advertising. Receives the msclkid. Its handling is set out in the Microsoft privacy statement at privacy.microsoft.com/privacystatement.
- Meta Platforms Ireland Ltd for Meta Ads. Receives the fbclid where a campaign runs there.
- Our hosting provider, which serves this site and stores the inquiry database and server logs.
- Our mail provider, which carries the notification of your inquiry to our inbox.
The ad platforms receive data only after you allow storage. Hosting and mail act on our instructions and may not use your data for their own purposes.
Data crossing borders
We work from the United States, so data from European visitors leaves Europe.
If you write to us from the EU or the UK, your inquiry is stored and read in the United States. Google, Microsoft and Meta move data between their Irish entities and US entities. Those transfers rely on the EU-US Data Privacy Framework where the recipient is certified, and on the European Commission's standard contractual clauses otherwise. Ask and we will tell you which applies to a given recipient.
How long each thing is kept
Fixed periods. When one runs out, the record is deleted.
| Record | What happens | Period |
|---|---|---|
| Inquiries and their email copies | Deleted from the database and the inbox | 24 months |
| Chat transcripts | Deleted from the server | 12 months |
| Server and access logs | Rotated out | 90 days |
| Record of a consent choice | Expires; the banner asks again | 6 months |
If you become a client, the domain card and our working notes for that job sit under the inquiry and follow its 24-month period unless you ask us to keep them longer.
How the data is protected
Encrypted in transit, behind a login, read by two people.
Every page and form is served over HTTPS. The inquiry database sits outside the public web folder and is reachable only through a password-protected panel with two accounts, one each. We never ask for your registrar password by email; delegated access in your own account is safer for both sides. No system is beyond breach. If one affects your data, we tell you by email within 72 hours of finding out.
Your rights if you write from Europe
The GDPR gives you seven rights over what we hold. All of them are free to use.
- Access: a copy of everything we hold about you.
- Rectification: fix what is wrong.
- Erasure: delete it, unless we must keep it for a legal claim.
- Restriction: keep it but stop using it while a dispute is settled.
- Portability: receive your inquiry and chat in a machine-readable file.
- Objection: object to anything we do on legitimate interest.
- Withdrawing consent: at any time, through "Cookie settings" in the footer or by email. Withdrawal does not undo what was lawful before it.
Your rights under US state law
California's CCPA, as amended by the CPRA, and the other state privacy laws in force apply here.
California residents, and residents of other states with similar laws, may know what personal information we collect and why, get a copy, correct it, delete it, and opt out of its sale or sharing. We do not sell personal information for money. Letting an ad platform measure a click can count as "sharing" for cross-context advertising under the CCPA, so Decline on the banner is your opt-out, and so is a Global Privacy Control signal. Using a right never changes the price or the service you get from us.
Global Privacy Control
If your browser sends the signal, you have already opted out.
We honour Global Privacy Control, sent by your browser as the Sec-GPC: 1 header and the matching browser signal. When it is present, the site treats it as Decline: all four consent signals stay denied, no ad tag reads a click identifier, and the banner does not ask you again.
Not for children
This site serves business owners and buyers of domain names.
It is not meant for anyone under 16 and we do not knowingly take data from children. If a child has sent us an inquiry, a parent can write to us and we delete it.
Complaining about us
Write to us first if you like. You do not have to.
You may complain to the Attorney General of your state. In California you may also complain to the California Privacy Protection Agency. If you write from Europe, the data protection authority of the country you live in will hear a complaint about how we handle your data.
How to use these rights
One email or one form. An answer within 5 days.
Use the data request page, write to [email protected], or send a letter to Qelzavo, 138 River Road, Suite 4, Austin, Texas 48482, United States. Say which right you are using and give the email address you wrote to us from. We may ask one question to confirm it is you. We answer within 5 days and charge nothing.
When this notice changes
A new date at the top, and an email if the change touches you.
Every change moves the "Last updated" date in the header. If a change adds a new recipient or a new use of data you already gave us, we email the people whose inquiries are still within their retention period before it takes effect. A new ad platform means the banner asks you again.
Reach a person
The same two people who answer domain questions answer privacy ones.
Email [email protected]. Phone +1 (861) 555-8670. Post: Qelzavo, 138 River Road, Suite 4, Austin, Texas 48482, United States. For anything about a specific cookie, see the cookie ledger; for the terms of a job, the terms of engagement.