Privacy Policy
We collect only what an inquiry, a chat message or an ad click actually needs, and we say exactly what that is.
This page names every category of data Tavlixos handles, why, on what legal basis, who else sees it, how long it stays on file, and how to ask for a copy or a deletion.
01This policy took effect on September 24, 2026, and that is the version below.
This is the privacy policy for tavlixos.com. It took effect on September 24, 2026, and describes how the site handles data today — not a plan for later. If we change it, the date at the top of this page moves and we say what changed, under the changes section below.
02Tavlixos, operating from Austin, Texas, is the company responsible for this data.
Tavlixos, trading at tavlixos.com, is the controller of the data described on this page. The company operates from 77 Industrial Blvd, Büro 5, Austin, Texas 16719, United States. That address is where correspondence and data requests should be sent if you are writing rather than emailing.
03We collect inquiry details, chat messages, technical logs, cookie identifiers and advertising click IDs.
The inquiry form on this site writes down your name, phone number, email address, delivery address, the kind of inquiry you selected, your message, the specification you typed or the configurator built for you, and the tick confirming you agree to be contacted. Alongside that, the form records your IP address, your browser's user-agent string, the page that referred you, and the two moments that bracket the submission: when the page rendered and when you sent it.
The support chat keeps the conversation you have with us and a token stored in your browser so you can pick the conversation back up. If you give a name, phone number or email in the chat, that is stored with the transcript.
Separately from either form, the site sets a cookie identifier that records your consent choice, and — only if you allow it — advertising and analytics identifiers described in the next two sections, including click identifiers a search or social ad may attach to the link you clicked.
04Each category above is used for one job: answering you, running the site, or measuring an ad.
Inquiry details are used to check a part against your model or task, quote a price and ship date, and get the part to you. Chat messages are used to answer the question you asked, and the token lets you continue that conversation later without re-explaining it. Technical and log data is used to keep the site running and to investigate abuse or errors. Cookie and advertising identifiers are used, only once you allow storage, to measure whether an ad you clicked led to an inquiry, and to avoid showing the same ad to someone who already ordered.
05We rely on contract, legitimate interest or your consent, depending on the data.
Processing your inquiry and shipping a part rests on contract — we need your address and item details to do what you asked. Keeping server logs and investigating abuse rests on legitimate interest — running the site safely without your data being used for anything beyond that. Advertising and analytics storage rests on consent — nothing in that category is stored until you actively allow it in the cookie banner, and it stops the moment you decline.
06Google Ads, Microsoft Advertising and Meta Ads send paid traffic here today.
This site runs paid campaigns on google ads and microsoft advertising, and may run them on Meta Ads. Each platform attaches its own click identifier to the link a visitor clicks: gclid from Google, msclkid from Microsoft, and fbclid from Meta. Those identifiers arrive in the page URL and, if you allow advertising storage, are stored so a later inquiry can be attributed back to the click that brought you here.
None of this means any of these platforms has reviewed, approved or verified this site. Running a campaign is not an endorsement.
07Consent Mode v2 holds four storage signals denied until you say otherwise.
This site runs Google's consent mode, version 2. Four signals — ad_storage, ad_user_data, ad_personalization and analytics_storage — start denied on every visit and stay denied until you press Allow in the cookie banner. If you decline, or if you later withdraw your choice, all four are set back to denied immediately, not left at whatever they were before.
| Signal | Default state | On decline |
|---|---|---|
| ad_storage | Denied | Denied |
| ad_user_data | Denied | Denied |
| ad_personalization | Denied | Denied |
| analytics_storage | Denied | Denied |
08Four kinds of third party ever see this data: ad platforms, our host, our mail route and nobody else.
Google Ireland Ltd and Google LLC receive the consent signals and the gclid parameter through Google Ads. Microsoft Ireland Operations Ltd receives the msclkid parameter through Microsoft Advertising; its own handling of that data is covered by the Microsoft privacy statement at privacy.microsoft.com. Meta Platforms Ireland Ltd receives the fbclid parameter through Meta Ads where a campaign runs there. Separately, the hosting provider that serves this site and stores the inquiry database, and the mail provider that carries the notification email to our inbox, both process data strictly to keep the site and its replies running.
09Some data leaves the United States when an advertising platform processes it abroad.
Tavlixos is based in the United States and stores inquiry and chat data with providers in the United States. Where an advertising identifier is shared with Google, Microsoft or Meta, those companies may process it in Ireland or elsewhere outside the country where you are browsing. Each of those platforms maintains its own standard contractual safeguards for that movement of data; we do not control those safeguards, but we do not send data to any processor without one in place.
10Enquiries stay 36 months, chats 12 months, logs 60 days, and consent records 12 months.
| Data | Retention period |
|---|---|
| Inquiries and their email copies | 36 months |
| Chat transcripts | 12 months |
| Server and access logs | 60 days |
| Record of a consent choice | 12 months |
11Access to the inquiry and chat database is limited to the people who answer it.
Submissions travel to our hosting provider over an encrypted connection. The database holding inquiries and chat transcripts is only reachable by the staff who check fit and answer messages, not the whole team. We do not keep payment card data anywhere on this site, because we do not take payment through it — every order is confirmed and paid outside the catalog pages.
12Visitors reaching us from Europe have the full set of GDPR rights over this data.
If GDPR applies to you, you can ask us to let you access the data we hold, correct it, erase it, restrict how we use it, receive a portable copy of it, or object to processing based on legitimate interest. Where a purpose relies on consent, such as advertising storage, you can withdraw that consent at any time and it takes effect immediately.
13California residents, and residents of other US states with privacy laws, can opt out of sale or sharing.
Under the CCPA and its amendments, California residents can ask what personal information we hold, ask us to delete or correct it, and opt out of its sale or sharing, which for this site means opting out of advertising storage. Residents of other US states with their own privacy laws in force have equivalent rights over the same categories of data. We do not sell personal information for money; the closest equivalent here is the advertising identifiers described above, and declining consent stops that sharing.
14We honour the Global Privacy Control signal as an opt-out, without asking again.
If your browser sends the Global Privacy Control signal, we treat that as an opt-out request for advertising and analytics storage automatically, the same as if you had pressed Decline in the banner yourself, and we do not prompt you to confirm it again.
15This site is not built for children, and we do not knowingly collect data from them.
Tavlixos sells parts for animal-care equipment to adults placing an order on behalf of a household or a business. We do not knowingly collect data from children, and if we learn that a submission came from a child, we delete it.
16You can complain to your state Attorney General or, in California, to the CPPA.
If you are not satisfied with how we have handled a request, you can complain to your state Attorney General, and, if you are a California resident, to the California Privacy Protection Agency. Visitors covered by the GDPR can complain to their own country's data protection authority.
17Write to office@tavlixos.com to exercise any of these rights; we answer within 14 days.
Email office@tavlixos.com, or write to Tavlixos at 77 Industrial Blvd, Büro 5, Austin, Texas 16719, United States, telling us which right you want to use. We answer within 14 days. We may ask for enough detail to confirm the request is yours before we act on it — usually just the email or phone number the original inquiry used.
There is also a dedicated request page at dsar.html with a short form that routes the same request to us.
18A changed policy gets a new effective date at the top of this page.
If we change what this policy says, we update the effective date at the top of this page to the day the change applies from. We do not backdate a change to cover something we already did under the old wording.
19Reach a person directly by phone or email, not a form that goes nowhere.
77 Industrial Blvd, Büro 5
Austin, Texas 16719
United States office@tavlixos.com
+1 (222) 555-3617