Privacy disclosures and marketing transparency standards.

Categories of Personal Data Collected

We restrict data collection exclusively to information necessary to evaluate home repairs, communicate dispatch windows, maintain technical uptime, and verify online advertising campaign performance. We collect the following categories:

• Inquiry Form Submissions (via submit.php / wunaba5.php): Customer full name, contact telephone number, email address, physical repair street address, service category selection (kind of enquiry), message notes, requested technical specifications, consent tick, timestamp of form rendering, and timestamp of form submission. Automatically with it: the IP address, browser user-agent string, and referring URL.
• Support Chat (chat.php / rezoe2e.php): Conversation transcripts, timestamp markers, and a cryptographic session token stored in the visitor's browser so they can return to the conversation.
• Technical and Log Data: Visitor internet protocol (IP) address, browser user-agent string, operating system version, HTTP referrer URL, and resource load request timestamps recorded in secure server logs.
• Cookie Identifiers: The consent choice stored in the browser under site_consent_v2 (and nothing else on this site persists a choice), and session security tokens.
• Advertising Click Identifiers: Tracking parameters passed in the query string of landing URLs by paid search and social campaigns, including Google click identifiers (gclid), Microsoft Advertising click identifiers (msclkid), and Meta click identifiers (fbclid).

We operate no customer login accounts, collect no passwords, and process no credit card or payment transactions through this website. Our catalog is strictly inquiry-only.

Purposes of Data Processing

We process each category of personal information strictly for defined commercial purposes:

• Inquiry Form Data: Evaluating structural repair descriptions, estimating on-site labor hours ($50–$80/hr) and diagnostic fees ($60–$100), planning travel routes from 289 Murphy Ln, and confirming appointment schedules.
• Support Chat Transcripts & Tokens: Answering immediate homeowner inquiries, clarifying tooling requirements, and providing continuity of service discussion.
• Technical & Log Data: Maintaining server uptime, identifying automated spambots, and protecting network integrity.
• Cookie Identifiers: Remembering consent preferences without repeatedly displaying the cookie banner.
• Advertising Click Identifiers: Measuring which keyword search queries and marketing campaigns successfully connect Nicholasville residents with our master craftsman.

Legal Bases for Processing

Every processing purpose conducted by Fitzpatrick's Handyman Service LLC is explicitly justified under recognized legal bases:

Advertising Platform Disclosures

This website receives paid traffic today from three primary advertising platforms:

• google ads: Operated by Google LLC / Google Ireland Ltd. When a prospective client clicks an ad, Google attaches the click identifier gclid to the link and receives consent signals.
• microsoft advertising: Operated by Microsoft Ireland Operations Ltd. Paid advertisements on Bing attach the click identifier msclkid to the link.
• Meta Ads: Operated by Meta Platforms Ireland Ltd. Advertisements across Facebook or Instagram attach the click identifier fbclid to the link where a campaign runs there.

These platforms receive landing page parameters and measurement events only in strict accordance with the consent signals set by the visitor. Nothing anywhere claims a platform has reviewed, approved or verified this site.

Implementation of Google Consent Mode v2

This website implements consent mode v2 across all advertising integrations. The four signals are held denied until the visitor allows storage, and set back to denied the moment the visitor declines or withdraws consent:

• ad_storage: Held denied until granted, reset to denied upon decline.
• ad_user_data: Held denied until granted, reset to denied upon decline.
• ad_personalization: Held denied until granted, reset to denied upon decline.
• analytics_storage: Held denied until granted, reset to denied upon decline.

When the visitor allows storage via our banner, these four parameters are updated to granted. If the visitor declines or withdraws consent via the Consent Settings control, all four signals are immediately returned to denied status.

Global Privacy Control (GPC) Compliance

Our website programmatically detects and honours the global privacy control (Sec-GPC header). When your browser broadcasts the global privacy control signal, our system honours it as a valid opt-out of advertising storage and data sharing without asking again.

Third-Party Data Processors

We do not sell personal data. The third parties that receive this data, named one by one, include:

• Google Ireland Ltd / Google LLC: Google Ads, which attaches gclid to a click and receives the consent signals.
• Microsoft Ireland Operations Ltd: Microsoft Advertising, which attaches msclkid; its own handling is covered by the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Meta Ads, which attaches fbclid where a campaign runs there.
• Hosting Provider: The hosting provider that serves this site and stores the enquiry database under encrypted Linux architecture.
• Mail Route Provider: The transactional mail provider that carries notification of customer inquiries directly to the operator's inbox.

Transfers of Data Outside the Country of Collection

Data captured through this website is stored primarily within the United States. Transfers of data outside the country of collection occur when European visitors access our portal or when global processor networks route traffic.

These transfers are made lawful through recognized legal mechanisms: Standard Contractual Clauses (SCCs) executed with processors, adequacy decisions under the EU-U.S. Data Privacy Framework, and adherence to international data transfer agreements ensuring equivalent protection.

Data Retention Periods

We hold personal information strictly for defined, real periods — we never retain records "as long as necessary":

• Enquiries and their email copies: Retained for exactly 24 months for service records and tax auditing.
• Chat transcripts: Retained for exactly 12 months from the close of the conversation.
• Server and access logs: Retained for exactly 90 days, after which they are automatically purged.
• The record of a consent choice: Stored under site_consent_v2 in the visitor's browser for 6 months.
• A data request is answered within: Exactly 5 days of receipt.

Technical & Physical Security Measures

Fitzpatrick's Handyman Service LLC protects visitor information using industry-standard engineering defenses:

• TLS 1.3 cryptographic transport encryption across all website routes, safeguarding transmission in transit.
• Hardened access controls and SSH key authentication required to access web hosting backends.
• SQL parameterization and strict input sanitization on all forms to neutralize SQL injection and script injection attacks.
• Visually hidden honeypot fields and timestamp validation to block automated harvesting robots without tracking human visitors.

European Data Subject Rights (GDPR)

For visitors reaching the site from Europe, the gdpr provides the following rights in full:

• Access: The right to obtain confirmation and inspect copies of your personal data held by us.
• Rectification: The right to demand correction of inaccurate or incomplete personal information.
• Erasure: The right to require deletion of your records ("right to be forgotten").
• Restriction: The right to restrict processing of your data under specific statutory circumstances.
• Portability: The right to receive your data in a structured, commonly used, machine-readable format.
• Objection: The right to object at any time to processing predicated on our legitimate interests.
• Withdrawing consent: The right to withdraw consent at any time where processing was based on consent, easily and without detriment.

United States State Privacy Rights (CCPA / CPRA)

Under United States state privacy frameworks, California named under the California Consumer Privacy Act (ccpa) and California Privacy Rights Act (CPRA), plus other state privacy laws in force, consumer rights include:

• Right to Know: Disclosure of categories and specific pieces of personal information collected over the preceding 12 months.
• Right to Delete: Deletion of personal information collected from you.
• Right to Correct: Correction of inaccurate personal details.
• Opting out of sale or sharing: The right to opt out of the sale or sharing of your personal data for cross-context behavioral advertising. We do not sell data for money, and we honour all opt-outs immediately.
• Right to Non-Discrimination: We never deny service, charge different prices, or provide a lower quality of craft because you exercise statutory privacy privileges.

Children's Privacy Protection

This website is not for children and takes no data from them. Our services are directed solely at adult homeowners and property managers aged 18 and older. We do not knowingly solicit or collect data from children under 16, and any inadvertently received data is permanently purged immediately upon notice.

Right to Complain to a Data Protection Authority

If you believe your personal data has been handled improperly, you have the right to lodge a formal complaint with a competent supervisory authority:

• In the United States: The visitor may complain to their state Attorney General (in Kentucky, the Office of the Attorney General of Kentucky Consumer Protection Division), and to the California Privacy Protection Agency in California.
• In Europe: The supervisory data protection authority in the EU Member State of your habitual residence or place of work.

How to Exercise Your Privacy Rights

To exercise any statutory privacy rights, write to our real address or email desk:

Policy Changes & Amendments

A change to this policy is announced by updating the effective date and publishing the revised terms directly on this page. Where material modifications occur, prominent notification is displayed on our website.

Direct Human Contact

To reach a human for any privacy question, contact: