We protect visitor information with explicit consent boundaries.
This privacy policy sets out how Ace Valley Hub processes inquiry records, technical logs, and advertising campaign metrics. We operate with strict Swiss typographic restraint and zero hidden trackers.
Effective Date & Document Governance
This privacy notice took effect on October 30, 2026. It applies to all electronic transmissions, inquiry submissions, and telemetry received across the acevalleyhub.com domain and its related service routes.
When revisions occur due to legal statutory adjustments or studio operational expansions, the amended version is posted immediately to this location with a recalculated publication timestamp.
Data Controller Identification
The statutory controller responsible for data collection on this website is Acevalleyhub, trading as Ace Valley Hub LLC at acevalleyhub.com.
Physical headquarters and correspondence address: 740 West Colfax Avenue, Denver, Colorado 80204, Denver, Colorado, United States. Telephone: +1 (407) 555-1639. Studio inquiries and data privacy inquiries are managed directly by web designer Alexey Smirnov via office@acevalleyhub.com.
Categories of Personal Data Collected
We collect information in three direct categories: client consultation submissions, interactive support dialogue, and automated infrastructure telemetry.
When you submit our commission inquiry form, the handler records your name, phone number, email address, physical workshop address, inquiry kind, project notes, requested card website specification, and your explicit consent confirmation. Concurrently, server systems record technical telemetry: source IP address, browser user-agent header, referring URL, timestamp of form render, and timestamp of transmission.
When you interact with our support chat, the message body and a temporary session token are maintained. When arriving from paid marketing campaigns, inbound links may carry advertising click identifiers including Google gclid, Microsoft msclkid, and Meta fbclid parameters.
Operational Processing Purposes
Ace Valley Hub processes recorded data solely for genuine studio functions. Contact information enables us to respond to creative inquiries, evaluate card website scope requirements, and prepare custom proposals between $3,500 and $8,000 USD.
Support chat records maintain ongoing technical conversations during active sessions. Telemetry data ensures network defense, stops spam bots, and verifies server integrity. Advertising click identifiers allow our studio to measure campaign conversion efficiency and verify paid traffic quality.
Statutory Legal Bases for Processing
Under applicable state and international data protection laws, Ace Valley Hub grounds every processing activity upon a recognised lawful condition:
| Processing Purpose | Data Category | Statutory Legal Basis |
|---|---|---|
| Inquiry consultation & quote delivery | Name, email, phone, project brief | Consent & pre-contractual steps |
| Chat support interaction | Session message records | Consent & legitimate interest |
| Security defense & error analysis | IP address, server headers | Legitimate interest |
| Advertising attribution & metrics | Click tokens (gclid, msclkid, fbclid) | Consent (Consent Mode v2) |
Advertising Platforms & Click Identifiers
This website runs active digital acquisition campaigns. Traffic is directed to this landing destination by google ads, microsoft advertising, and Meta Ads.
When a visitor arrives via a paid promotion, the destination URL may append a unique attribution parameter: Google Ads transmits the gclid identifier, Microsoft Advertising attaches the msclkid token, and Meta Ads appends the fbclid string. These identifiers help verify campaign reach and validate conversion performance without profiling personal identities until explicit consent is granted.
Consent Mode v2 Implementation Standards
We implement Google consent mode v2 directly within our client-side architecture. By default, before any user action is taken on our privacy storage banner, the four foundational tracking signals are held in a denied status: ad_storage, ad_user_data, ad_personalization, and analytics_storage.
No promotional or analytical cookie is read or created while these parameters remain denied. Only when the visitor explicitly triggers the accept control are these signals elevated to granted. If the visitor selects decline, or changes their selection through our settings control, all four parameters are immediately restored to denied, stopping persistent tracking.
Sub-Processors & Service Providers
Personal data received through acevalleyhub.com is transferred only to designated sub-processors required to operate our studio web services:
1. Google LLC / Google Ireland Ltd: Provides Google Ads measurement services and analytics processing subject to Google advertising policies.
2. Microsoft Ireland Operations Ltd: Provides Microsoft Advertising campaign syndication and conversion analytics. Read Microsoft data policies at privacy.microsoft.com.
3. Meta Platforms Ireland Ltd: Facilitates Meta Ads measurement and ad delivery.
4. Infrastructure & Mail Providers: Host our web server infrastructure, MySQL transactional database, and encrypted SMTP relay services carrying notifications to our office inbox.
International Data Transfers
Ace Valley Hub is located in Denver, Colorado, United States. When clients or visitors reach our website from outside the United States, including the European Economic Area or the United Kingdom, their data is transferred to and processed on secure servers within the United States.
Where international cross-border transfers occur, our sub-processors utilize standard contractual clauses approved by the European Commission, UK International Data Transfer Agreements, or verified data privacy framework self-certifications to protect visitor information.
Definite Data Retention Periods
We maintain strict lifecycle policies for all recorded information and do not keep data indefinitely. Retention clocks operate on measured timelines:
- Client Inquiries & Email Records: Kept for exactly 18 months from the date of submission to accommodate studio proposal reviews and seasonal commissions.
- Chat Session Transcripts: Stored for 6 months from the conclusion of dialogue.
- Server & Access Logs: Rotated and erased automatically after 30 days.
- Cookie Consent Records: The client-side storage key site_consent_v2 persists for 12 months before requiring re-confirmation.
- Data Requests: Formal requests are logged and fulfilled within 10 days of verified identity.
Security Safeguards & Infrastructure Defenses
Ace Valley Hub enforces robust technical and physical safeguards to defend against unlawful destruction, alteration, unauthorized disclosure, or compromised access.
All traffic is encrypted in transit using modern TLS 1.3 cryptographic protocols. Server software receives automated kernel security updates, database connections are strictly authenticated over localhost loops, and access to internal administration tools requires multi-factor authentication with hardware tokens.
European Visitor Rights Under GDPR
For visitors connecting from the European Economic Area, Switzerland, or the United Kingdom, statutory provisions of the gdpr grant the following irrevocable rights:
1. Right of Access: You may request formal copies of any personal records maintained by our studio.
2. Right to Rectification: You may correct inaccurate or incomplete contact records.
3. Right to Erasure: You may request the deletion of your consultation history, subject to statutory bookkeeping duties.
4. Right to Restriction: You may restrict processing while factual disputes are investigated.
5. Right to Data Portability: You may receive your provided records in a structured, machine-readable JSON format.
6. Right to Object: You may object at any time to processing grounded in legitimate interests.
7. Right to Withdraw Consent: Where processing relies on consent, you may revoke it freely without retroactive penalty.
United States & California Privacy Rights
Residents of California, Colorado, Virginia, Connecticut, Utah, and other US states with active comprehensive privacy statutes maintain specific legal guarantees.
Under the California Consumer Privacy Act and California Privacy Rights Act (ccpa), California residents have the right to know what personal data categories we collect, the right to request deletion of their personal information, the right to correct inaccurate data, and the right to non-discrimination for exercising these privileges.
Notice of Sale or Sharing: Ace Valley Hub does not sell personal information for monetary compensation. We do not share personal information with third parties for cross-context behavioral advertising without affirmative consent. You have the statutory right to opt out of any future sale or sharing.
Global Privacy Control Signal Recognition
Our front-end architecture detects and strictly respects the Sec-GPC browser header. When your browser transmits a global privacy control signal, our system interprets this automatically as a valid statutory request to opt out of advertising storage and tracking cookies.
No pop-up questioning or friction is introduced: if a GPC signal is active, promotional storage remains locked at denied, and Consent Mode v2 parameters are kept in their restricted status.
Children’s Privacy Protection
Ace Valley Hub provides specialized brand card web design services exclusively for commercial enterprises, natural product makers, and independent business founders.
Our website and services are not directed to individuals under the age of 18. We do not intentionally solicit, gather, or maintain personal information from children under 16 years of age. If we learn that a minor has submitted personal data through our inquiry portal, we immediately erase the record from our systems.
Supervisory Authority Complaints
If you believe our studio has failed to honor your statutory privacy entitlements, you have the right to lodge a formal complaint with an authorized regulatory body:
In the United States, you may file a complaint with the Colorado Attorney General (Consumer Protection Division) or your respective state Attorney General. In California, you may contact the California Privacy Protection Agency (CPPA). In the European Union, you may contact your national Data Protection Authority (such as the Irish Data Protection Commission or CNIL).
Data Subject Access Requests (DSAR Protocol)
To exercise any statutory privacy right—including requests for data disclosure, correction, or permanent deletion—submit a written inquiry to our studio office.
Direct your transmission to office@acevalleyhub.com with the subject line “Statutory Data Request”, or mail your request to our registered address: Ace Valley Hub, 740 West Colfax Avenue, Denver, Colorado 80204, United States.
We verify the identity of the requester to ensure client confidentiality. We do not charge fees for standard statutory requests, and we provide a comprehensive response within 10 days of verification.
Accessibility Statement & Digital Standards
Ace Valley Hub is committed to ensuring full digital accessibility for individuals with disabilities. We build all web pages to conform with the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA specifications.
Our design features high-contrast typographic pairings (minimum 7.2:1 for body copy and 12.4:1 for headlines against our cool slate background), clear focus indicators, logical heading hierarchies, keyboard-operable navigation, and semantic ARIA labeling across all interactive components. If you experience any barrier, contact us at office@acevalleyhub.com for direct assistance.
Amendments & Policy Revisions
We review our data handling procedures regularly to ensure total alignment with advertising network requirements, Colorado state statutes, and international privacy standards.
Any material modifications to this notice will be published directly on this URL with an updated effective date at the top of the reading column. For active clients under contract, formal notice of significant policy shifts will be transmitted via email.
Studio Contact & Privacy Officer
For immediate questions regarding this privacy notice, our advertising tracking boundaries, or our Colorado studio operations, reach out directly to our principal web designer: