Privacy
What we take from an inquiry, a chat message or an advertising click, and how long we keep it.
Effective September 7, 2026 · Controller Gerixaq, 157 Oak Lane, Austin, Texas 45808 · Contact office@gerixaq.com
Effective date
This policy took effect on September 7, 2026. It applies to gerixaq.com, to the inquiry form on the contact page, and to the support chat widget available on every page of this small curated home goods catalog.
Who runs this site
Gerixaq operates gerixaq.com from 157 Oak Lane, Austin, Texas 45808, in the United States. Six people work here: two who source and test items, two who pack and ship, one who answers the phone and the inquiry form, one who keeps the books. There is no separate data office; office@gerixaq.com reaches the person who handles a request the same week it arrives.
What we collect
The inquiry form on the contact page writes down your name, phone number, email, delivery or pickup address, the kind of enquiry, your message, any specification you type, and the consent tick beside the submit button. The support chat keeps the conversation you type and a token stored in your browser so the thread can be reopened.
Alongside both, the site records technical and log data automatically: your IP address, your browser's user-agent string, the page that referred you, and the moment the form was rendered and the moment it was sent. A cookie identifier and, where you arrive from a paid ad, a click identifier are also captured on landing.
What each category is used for
Contact details and message content are used to answer your inquiry and, if it becomes an order, to arrange delivery or pickup. Technical and log data are used to keep the site working and to investigate abuse. Cookie identifiers and click identifiers are used to measure whether an advertising click led to an inquiry, and, once you allow storage, to shape which ad a visitor sees again.
Why we are allowed to hold it
For a visitor covered by the GDPR, each purpose above rests on a specific basis: answering an inquiry and arranging a delivery rest on contract, because you asked us to act; log data and fraud checks rest on our legitimate interest in keeping the site secure; cookie storage and any advertising measurement or personalization rest on consent, given through the banner described in the Cookie Policy, and nothing in that category runs before you say yes.
The advertising platforms sending traffic here
Google Ads, Microsoft Advertising and Meta Ads currently run paid campaigns pointing at this site. When a visitor arrives from one of those campaigns, the link often carries a click identifier: gclid from Google Ads, msclkid from Microsoft Advertising, or fbclid from Meta Ads. We record whichever identifier is present on landing so a later inquiry can be matched back to the campaign that paid for the click. None of these three platforms has reviewed or approved this site; the identifiers only tell us which click, if any, led to a visit.
Consent Mode v2, plainly
This site runs Google's consent mode. Four signals — ad_storage, ad_user_data, ad_personalization and analytics_storage — are held denied for every visitor until that visitor actively allows storage through the cookie banner. If a visitor later declines or withdraws consent, all four signals are set back to denied immediately, and no further advertising storage or measurement is written to that browser from that point on.
Who else sees this data
Four kinds of third party receive some part of it: Google Ireland Ltd and Google LLC, who operate Google Ads and receive the consent signals and the gclid identifier; Microsoft Ireland Operations Ltd, who operates Microsoft Advertising and receives msclkid, with its own handling described at privacy.microsoft.com; Meta Platforms Ireland Ltd, who operates Meta Ads and receives fbclid on campaigns that run there; and, separately, the hosting provider that serves this site and stores the enquiry database, plus the mail provider that carries the notification email to our inbox. None of them is allowed to use your data for their own unrelated purposes.
Data leaving your country
Gerixaq and its hosting provider operate from the United States, so data from a visitor anywhere else, including Europe, is transferred there for processing. Where that visitor is in the European Economic Area, the transfer relies on the advertising platforms' own standard contractual clauses with their European entities, since Google Ireland Ltd, Microsoft Ireland Operations Ltd and Meta Platforms Ireland Ltd are themselves European entities passing data onward under those clauses.
How long each category stays
Enquiry records and their email copies are kept for 36 months. Chat transcripts are kept for 6 months. Server and access logs are kept for 60 days. The record of your consent choice is kept for 12 months, after which the banner asks again. We do not extend these periods to build a longer profile.
| Category | Kept for |
|---|---|
| Enquiries and email copies | 36 months |
| Chat transcripts | 6 months |
| Server and access logs | 60 days |
| Consent choice record | 12 months |
How it is protected
Form submissions travel over an encrypted connection. Access to the enquiry database and the chat transcripts is limited to the six people who work here, not to any wider staff, because there is no wider staff. Two hidden fields on the inquiry form catch automated spam before it ever reaches a person. We do not claim a certification we do not hold; this is a small operation with tight access, not a security department.
Rights under the GDPR
A visitor covered by the GDPR may ask to access the data we hold, have it corrected, have it erased, have its use restricted, receive a portable copy, object to processing based on legitimate interest, and withdraw consent at any time without affecting anything done before the withdrawal. Write to office@gerixaq.com to use any of these.
Rights under US state law
A California resident has rights under the CCPA and its later amendments: to know what is collected, to have it deleted, to correct it, and to opt out of the sale or sharing of personal information. We do not sell personal information and share it only with the ad platforms and service providers named above for the purposes stated. Residents of other states with a comparable privacy law hold equivalent rights and may use the same contact route.
Global Privacy Control
If your browser sends the Global Privacy Control signal, we treat it as an opt-out of the sale and sharing of your personal information automatically, without asking you to repeat the choice through the banner.
Children
This site is built for adults arranging a household purchase. It is not directed at children, and we do not knowingly collect data from anyone under 16. If we learn that a child's data reached us through the form or the chat, we delete it.
Complaints
If you are unhappy with how we have handled your data, you may complain to your state Attorney General, or, if you are in California, to the California Privacy Protection Agency. We would rather hear from you first at office@gerixaq.com so we can put it right.
How to ask
Write to office@gerixaq.com, or by post to Gerixaq, 157 Oak Lane, Austin, Texas 45808, describing what you want: a copy, a correction, a deletion, or an opt-out. We answer within 5 days of receiving the request, and we may ask for enough detail to confirm it is really you asking.
Changes to this policy
If this policy changes, we update the effective date at the top of this page and, for a change that matters to how we handle your data, we say what changed in the paragraph you are reading right now the next time we revise it.
Reaching a person
Email office@gerixaq.com or call +1 (743) 555-1641 during the hours in the utility bar above. A person answers both, not a queue. You can also write to 157 Oak Lane, Austin, Texas 45808.
