Privacy Policy & Tracking Disclosures

Effective Date & Scope

This privacy policy and technical telemetry notice took effect on 2026-10-18. It governs all personal and electronic identification data processed across the domain alchemii.click, including inquiries submitted through our web terminals, conversations logged via the formulation desk chat interface, and telemetry collected from commercial advertising campaigns.

Data Controller Entity

The data controller responsible for the capture, retention, and routing of personal data processed on this site is:

Alchemii
Trading domain: alchemii.click
Physical headquarters: 224 Southwest 1st Avenue, Portland, Oregon 97204, United States
Corporate contact: office@alchemii.click
Operational telephone: +1 (464) 575-5061

Alchemii operates as a verified enterprise holding Florida company registration and active membership in our national cosmetic trade association.

Categories of Data Collected

We restrict data collection to technical information necessary for formulation inquiry review, commercial allocation communication, and advertising campaign attribution:

• Inquiry Form Records (sizab05.php): Full personal name, professional clinic entity, contact email address, telephone number, shipping or facility street address, requested product specifications, allocation notes, and explicit consent check states.
• Support Chat Transcripts (lifaba9.php): Customer conversation history, browser-generated session token stored in local storage, and optional identity parameters supplied during live dialogues.
• Automated Diagnostic Metadata: Internet Protocol (IP) address, browser user-agent string, HTTP referring URL, page rendering timestamp, and transmission execution timestamp.
• Advertising Click Identifiers: Inbound query string tokens appended by verified advertising networks upon inbound referral, specifically Google gclid, Microsoft msclkid, and Meta fbclid.
• Consent Verification State: User selection record maintained under browser storage key site_consent_v2.

Alchemii does not create user accounts, does not store passwords, and does not process payment cards or banking credentials. No commercial transactions occur directly on this website.

Purposes of Processing

Every data point recorded by Alchemii serves a declared technical or commercial objective:

• Evaluating cosmetic chemical requirements and drafting non-binding allocation quotes for facial serums ($33–$125) and hair/body topicals ($28–$150).
• Transmitting lot-specific certificates of analysis and chemical assay documentation to verified clinics and professional distributors.
• Maintaining communication threads between buyers and Product Manager Irina Petrova.
• Measuring return on investment and marketing conversion efficacy across paid digital advertising networks.
• Defending server infrastructure against programmatic form injection, denial of service attacks, and fraudulent automated submissions.

Legal Bases for Processing

Data processing activities conform to recognized statutory justifications under applicable United States state laws and international standards:

• Consent: User approval obtained prior to activating marketing cookies, advertising telemetry tags, or customer inquiry processing checkboxes.
• Pre-Contractual & Commercial Necessity: Processing contact details and facility addresses to prepare custom batch quotations, packaging specifications, and cold-chain freight estimates requested by the user.
• Legitimate Interests: Monitoring network security logs, blocking malicious automation, and evaluating aggregated traffic volumes across our catalogue.
• Legal Obligation: Retaining commercial correspondence and corporate transaction logs to comply with tax, corporate trade, and regulatory reporting rules in Oregon and Florida.

Advertising Platforms & Click Identifiers

This website receives active paid traffic through campaigns deployed across google ads, microsoft advertising, and meta ads. These platforms attach proprietary click identifiers to inbound hyperlinks to measure advertisement interaction:

• Google Ads: Attaches the gclid (Google Click Identifier) query parameter to destination URLs to track ad conversions and campaign effectiveness.
• Microsoft Advertising: Attaches the msclkid (Microsoft Click Identifier) query parameter to evaluate Bing advertising performance.
• Meta Ads: Attaches the fbclid (Facebook Click Identifier) query parameter when visitors arrive via commercial links on Facebook or Instagram.

These click identifiers are read and mapped solely in accordance with our Consent Mode v2 policy detailed below.

Consent Mode v2 Implementation

In accordance with contemporary privacy frameworks and digital advertising standards, Alchemii executes consent mode v2 across all analytics and advertising integrations. By default, prior to user interaction with our consent interface, four critical telemetry parameters are maintained strictly in the denied state:

• ad_storage: Denied by default. Blocks storage of persistent cookies used for advertising targeting.
• ad_user_data: Denied by default. Restricts transmission of personal identifiers to advertising networks.
• ad_personalization: Denied by default. Prohibits behavioral profiling and retargeting audiences.
• analytics_storage: Denied by default. Disables persistent tracking cookies for statistical visitor measurement.

Only when a visitor grants explicit affirmative permission via the cookie consent banner do these four signals update to granted. If a visitor declines or later revokes permission, the system immediately reverts all four states to denied, halting data flow.

Third-Party Processors

Alchemii partners with certified technical service providers to maintain website hosting, messaging infrastructure, and campaign evaluation:

• Google LLC / Google Ireland Ltd: Advertising delivery, conversion measurement, and Consent Mode signal integration. Disclosures governed by Google Privacy Policies.
• Microsoft Ireland Operations Ltd: Microsoft Advertising telemetry and Bing search attribution. Details regarding Microsoft data governance are set forth in the Microsoft Privacy Statement.
• Meta Platforms Ireland Ltd: Social advertising conversion telemetry for Meta advertising inventory.
• Infrastructure Hosting Provider: High-security web server cluster hosting static assets, PHP processing terminals, and SQLite database storage in certified US data facilities.
• Mail Routing Gateway: Encrypted SMTP transport layer relaying formulation inquiries from sizab05.php to office@alchemii.click.

International Data Transfers

Alchemii operates from Portland, Oregon, within the United States. If you interact with our website from jurisdictions outside the United States, your electronic transmissions cross international borders. We ensure lawful transfer mechanisms by executing Standard Contractual Clauses (SCCs) with cloud service partners, implementing strict end-to-end transport layer encryption (TLS 1.3), and restricting third-party processing to SOC-2 and ISO-27001 certified entities.

Retention Schedules

We do not store information indefinitely. Alchemii applies fixed retention windows based on technical relevance and legal utility:

• Formulation Inquiries & Email Records: Retained for exactly 24 months following initial submission to manage client allocation re-orders, after which records are purged from application databases.
• Support Chat Logs: Stored for exactly 18 months to provide continuity for returning facility inquiries.
• Server & Access Logs: Automatically overwritten after 90 days on rolling firewall cycles.
• Consent Registry (site_consent_v2): Persisted in local browser storage for exactly 12 months before re-prompting.
• Data Subject Access Requests (DSAR): Answered within 14 days of verified identity receipt.

Data Security Safeguards

We deploy defensive engineering controls to safeguard personal information: all web sessions are enforced over HTTPS utilizing modern TLS cryptographic suites, database storage employs parameterized query architectures preventing SQL injection vulnerabilities, anti-bot honeypots defend form endpoints against harvesting, and administrative operational access requires hardware token multi-factor authentication.

European Data Subject Rights (GDPR)

For visitors accessing our catalogue from the European Economic Area, Switzerland, or the United Kingdom, the General Data Protection Regulation (gdpr) confers specific legal prerogatives:

• Right of Access: Request a full machine-readable extract of personal data held about your entity.
• Right to Rectification: Correct erroneous clinic names, addresses, or phone records.
• Right to Erasure ("Right to be Forgotten"): Mandate deletion of inquiry records, subject to statutory accounting retentions.
• Right to Restriction: Limit ongoing processing while an accuracy dispute is investigated.
• Right to Data Portability: Receive structured CSV or JSON records of submitted specifications.
• Right to Object: Oppose processing conducted under legitimate interest grounds.
• Right to Withdraw Consent: Revoke previously granted cookie or marketing approvals at any moment without penalty.

United States State Privacy Rights (CCPA/CPRA)

Residents of California under the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), along with residents of Oregon, Colorado, Connecticut, Virginia, and Utah, possess distinct privacy rights:

• Right to Know & Access: Inspect specific personal details collected over the prior 12 months.
• Right to Opt Out of Sale or Sharing: Alchemii does not sell personal data for monetary compensation. However, the sharing of click identifiers (gclid, msclkid, fbclid) for cross-context behavioral advertising constitutes "sharing" under CCPA. You may opt out at any time by declining cookies in our banner.
• Right to Correct: Modify incomplete or inaccurate contact entries.
• Right to Delete: Direct permanent removal of collected contact records.
• Non-Discrimination: Exercising your privacy rights will never result in altered pricing tiers, degraded service response times, or denied allocation inquiries.

Global Privacy Control (GPC)

Our web infrastructure natively recognizes and respects global privacy control signals transmitted via the Sec-GPC HTTP header or browser JavaScript properties. When an active GPC signal is detected, the site automatically switches Consent Mode v2 advertising and analytics parameters to denied, treating the signal as a universal opt-out request without displaying secondary prompts.

Children's Privacy Protection

Alchemii distributes commercial cosmetics and technical ingredients solely to professional practices, cosmetic distributors, and adults aged 18 and older. We do not intentionally harvest, solicit, or maintain records from children under 16 years of age. If we ascertain that an inquiry originated from a minor, the record is immediately purged from our servers.

Supervisory Complaints Authority

You have the statutory right to lodge an administrative complaint with an appropriate privacy supervisory body if you consider our data processing unlawful:

• In the United States: Contact your state Attorney General's consumer protection bureau, or in California, file with the California Privacy Protection Agency (CPPA).
• In Oregon: Contact the Oregon Department of Justice, Financial Fraud and Consumer Protection Division.
• In the European Union: File with the Data Protection Authority (DPA) situated in your member state of habitual residence.

Data Subject Access Request (DSAR) Protocol

To exercise statutory rights of access, correction, restriction, or erasure, submit a verified request directly to our Portland legal desk. All requests are answered in writing within 14 days of identity confirmation. You may email office@alchemii.click or complete the structured electronic dispatch form below:

Policy Revision Notices

Alchemii reviews this privacy disclosure annually or upon implementation of altered advertising platform protocols. When amendments occur, the revised document is posted directly to this URL with an updated effective date timestamp at the document masthead. Substantive modifications impacting processing rights will be announced through an alert banner across catalogue landing pages.

Human Verification & Privacy Contact

To reach our compliance officers or discuss telemetry handling directly with a human team member, use our verified communication lines:

Alchemii Compliance Operations
224 Southwest 1st Avenue, Portland, Oregon 97204, United States
Direct Electronic Inquiries: office@alchemii.click
Direct Telephone Inquiries: +1 (464) 575-5061
Hours: Monday through Friday, 08:30 to 17:00 Pacific Standard Time (PST)