We process your service requests with direct accountability and full transparency regarding ad tracking and data retention.

Effective Date & Standing

These pages and policies take effect on October 17, 2026. This privacy statement governs all service interactions, quote inquiries, work orders, electronic communications, and digital visits conducted on mickeyshandymanservice.us.

Any future modifications to operational procedures or data processing terms will update this document along with an incremented revision timestamp.

Data Controller Identity & Operator Facts

The data controller responsible for personal information processed through this website is:

Policy Amendments & Notifications

We reserve the right to amend this Privacy Policy to reflect evolving legal frameworks, technological updates, or adjustments in our dispatch operations.

Any revisions will be posted directly to this URL with an updated effective date at the head of the page. Material changes affecting how we process previously submitted personal records will be communicated via direct email notice to active work-order contacts where feasible.

Direct Human Contact for Privacy Inquiries

If you have questions, feedback, or concerns regarding our privacy standards, Consent Mode v2 implementation, or physical record handling, please reach a human member of our trade team directly:

Categories of Personal Data Collected

We collect only the personal and technical data strictly necessary to communicate with property owners, evaluate physical trade requirements, schedule on-site repairs, and maintain functional site operations. This encompasses:

• Inquiry & Dispatch Form Inputs: Client full name, contact telephone number, email address, physical jobsite street address in Gulf Shores or Baldwin County, selected service category, punch-list repair notes, technical material specifications, and affirmative consent confirmation.
• Automated Transmission Metadata: Client IP address, browser user-agent header, HTTP referring URL, page rendering timestamp, and transmission execution time captured upon form submission to prevent automated spam and confirm request authenticity.
• Support Chat Communications: Real-time repair inquiry messages submitted through our interactive chat interface, along with an ephemeral session token stored locally in the visitor's browser to allow conversation resumption.
• Consent State Records: Visitor storage choices recorded locally under the key site_consent_v2.
• Advertising Click Identifiers: Inbound advertising parameters transmitted via URL query parameters when a visitor clicks an active advertisement, specifically gclid (Google Ads), msclkid (Microsoft Advertising), and fbclid (Meta Ads).

What We Never Collect: This website operates strictly on an inquiry and quotation basis. We do not maintain customer registration accounts, create user passwords, process credit card payments, store billing accounts, or gather sensitive demographic traits. No financial transactions are executed online.

Purposes of Data Processing

Personal data gathered on this site is processed solely for explicit business purposes:

• Work-Order Evaluation & Quotations: Reviewing drywall patch square footage, plumbing fixture types, paint surface conditions, or exterior grounds specifications to calculate accurate, transparent repair estimates.
• Dispatch Logistics & Travel Scheduling: Coordinating driving routes and physical site visits for Ivan Petrov across Gulf Shores, Orange Beach, Foley, and Baldwin County.
• Direct Client Communication: Transmitting quotes, answering technical repair inquiries via telephone, SMS, email, or chat, and confirming on-site arrival windows.
• Advertising Campaign Attribution & Measurement: Analyzing campaign effectiveness and conversion tracking across Google Ads, Microsoft Advertising, and Meta Ads in compliance with user consent choices.
• Platform Security & Fraud Prevention: Identifying bot abuse, malicious input injections, and invalid form spam via honeypot traps and server access logs.

Legal Bases for Processing

Under applicable US state privacy legislation and international data protection standards (including the GDPR for European visitors), our processing activities rest on the following lawful bases:

Children's Privacy Protection

MICKEYS HANDYMAN SERVICE CORPORATION provides commercial and residential physical trade repairs exclusively to property owners, property managers, and adult residents. Our website and services are not directed to children under the age of 18, and we do not knowingly solicit, collect, or store personal information from individuals under 18 years of age.

If we discover that a minor has submitted personal information through our inquiry form or chat widget, we will permanently purge those records immediately upon identification.

Advertising Platforms & Campaign Attribution

This website receives paid traffic from commercial ad campaigns. Specifically, google ads, microsoft advertising, and Meta Ads send traffic here.

When a prospective client clicks our commercial advertisement on a search engine or partner network, the advertising platform appends a unique click identifier to the landing URL. We process these parameters in the present tense:

• Google Ads: Uses the click parameter gclid to correlate the ad click with quotation inquiries.
• Microsoft Advertising: Uses the click parameter msclkid for conversion tracking and campaign attribution.
• Meta Ads: Uses the click parameter fbclid where targeted campaigns operate across Meta properties.

Consent Mode v2 Implementation

In compliance with Google and industry ad standards, our website integrates consent mode v2. Prior to any interaction with our cookie banner, the following four consent states are held strictly denied by default:

These signals ensure that no advertising cookies or personalized tracking parameters are stored in the visitor's browser unless and until the visitor clicks "Allow Storage" on our consent banner.

If the visitor clicks "Decline", closes the banner without consent, or subsequently withdraws permission via our footer preferences link, the four signals—ad_storage, ad_user_data, ad_personalization, and analytics_storage—remain set to 'denied'. No tracking identifiers will be persisted.

Global Privacy Control (GPC) Compliance

Our website recognizes and respects the global privacy control signal transmitted via the HTTP header Sec-GPC or browser-level JavaScript settings.

When our server detects an active Global Privacy Control signal from your web browser, our consent management script automatically treats this as a binding opt-out request for third-party advertising tracking. All four Consent Mode v2 signals (ad_storage, ad_user_data, ad_personalization, analytics_storage) will remain strictly denied without requiring manual interaction with our consent banner.

Third-Party Processors & Service Providers

We share personal information strictly with vetted service providers who execute core technical operations. Each processor is contractually bound to handle data securely:

• Google LLC / Google Ireland Ltd: Advertising delivery and conversion measurement for Google Ads, receiving consent signals and click identifiers subject to user consent.
• Microsoft Ireland Operations Ltd: Advertising delivery and attribution for Microsoft Advertising, which attaches msclkid. For details regarding Microsoft's independent data handling, review the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Delivery and conversion measurement for Meta Ads campaigns, processing fbclid parameters under affirmative consent.
• Infrastructure Hosting Provider: Secure web hosting servers that house our website files, host PHP submission handlers, and store the private inquiry database under encryption.
• Direct Email Carrier Route: Encrypted SMTP mail transport services delivering incoming work-order submissions directly to the operator's private inbox.

International Data Transfers

Our corporate operations and primary server infrastructure are located within the United States. If you access mickeyshandymanservice.us from the European Economic Area, the United Kingdom, or other jurisdictions outside the United States, your submission data will be transferred to and processed within the United States.

Such transfers are conducted under recognized lawful transfer mechanisms, including the European Commission Standard Contractual Clauses (SCCs) entered into by global technology partners (such as Google, Microsoft, and Meta) or based on explicit contractual necessity to deliver the trade quotes and repair services you requested.

Data Retention Periods

We retain personal data only for defined, practical timeframes tied to trade warranties, tax compliance, and communication needs. We do not retain data under vague or open-ended standards:

Security & Data Safeguards

We enforce technical and administrative safeguards to protect your personal information against unauthorized disclosure, alteration, interception, or loss:

• TLS Encryption: High-grade 256-bit Transport Layer Security (HTTPS) encrypting all communications between your browser and our web server.
• Access Controls: Restricted administrative access protected by multi-factor authentication, so only authorized operational personnel handle dispatch records.
• Input Sanitization: Rigorous server-side verification and filtering on all POST inputs to prevent SQL injection, cross-site scripting (XSS), and automated buffer exploits.
• Honeypot Anti-Bot Defenses: Invisible form traps to reject malicious spam robots without capturing extraneous user data.

European Data Protection Rights (GDPR)

For visitors accessing our site from the European Union, European Economic Area, or United Kingdom, the General Data Protection Regulation (gdpr) grants specific statutory rights regarding your personal data:

• Right of Access: Obtain confirmation whether your personal information is being processed, along with a readable copy of your records.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal data.
• Right to Erasure ('Right to be Forgotten'): Request permanent deletion of your personal records where continued retention lacks a lawful basis.
• Right to Restriction of Processing: Request that we temporarily halt processing while an accuracy dispute or objection is investigated.
• Right to Data Portability: Receive your provided inquiry data in a structured, commonly used, machine-readable format (e.g., CSV or JSON).
• Right to Object: Object to processing carried out under legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Revoke previously granted cookie or communication consent at any time without affecting the lawfulness of processing carried out prior to revocation.

United States Privacy Rights & California Disclosures (CCPA)

This section provides mandated disclosures under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (ccpa), along with privacy laws enacted across other US states (including Virginia, Colorado, Connecticut, Utah, and Texas):

• Notice of Collection: In the preceding 12 months, we have collected identifiers (name, email, phone, IP address, jobsite address) and internet activity records (inbound click parameters gclid, msclkid, fbclid) solely to evaluate repair jobs and deliver service quotes.
• Right to Know & Access: You have the right to request disclosure of the specific pieces of personal information we have collected about you over the past 12 months.
• Right to Delete: You have the right to request deletion of personal information collected directly from you, subject to statutory exceptions (such as fulfilling contractual warranty commitments or tax accounting).
• Right to Correct: You have the right to correct inaccurate personal data retained in our active systems.
• Sale or Sharing of Personal Information: We do not sell personal data for monetary compensation. To the extent that cross-context behavioral advertising through Google Ads or Meta Ads is classified as "sharing" under California law, you may opt out via our consent banner, by enabling Global Privacy Control, or by submitting a request below.
• Non-Discrimination: We will never discriminate against you, deny trade services, adjust hourly rates, or alter quotation standards because you exercised your statutory privacy rights.

Right to Lodge Regulatory Complaints

If you believe that our collection, storage, or processing of your personal data violates applicable privacy laws, you have the right to lodge a formal complaint with relevant regulatory authorities:

• State Attorney General: Residents of Alabama may submit concerns to the Office of the Alabama Attorney General (Consumer Protection Division). Residents of other states may contact their respective State Attorney General.
• California Privacy Protection Agency (CPPA): California residents may file complaints regarding CCPA/CPRA rights directly with the CPPA at cppa.ca.gov.
• European Supervisory Authorities: European visitors may lodge a complaint with their national Data Protection Authority (DPA) in the member state of their habitual residence or place of work.

How to Exercise Your Privacy Rights (DSAR Intake)

To submit a Data Subject Access Request (DSAR) to access, correct, port, or permanently delete your personal information, contact our designated privacy desk: