What Xolimeq records about a visit, and why

Section 01. This version took effect September 14, 2026

Everything below describes the policy as it stands from that date forward. If a repair customer asks what was collected before that date, we answer from the same records — the practices have not materially changed, only the wording naming them has.

Section 02. Xolimeq is who you're dealing with

Xolimeq is the trading name of the appliance repair shop operating xolimeq.com, based at 157 Market Street, Büro 5, Austin, Texas 65042, United States. We are the controller of the data described on this page: the party that decides why an enquiry gets recorded and how long it stays on file.

Reach the shop directly at office@xolimeq.com or +1 (824) 555-9503. This is the same line technicians use to confirm a call-out, not a routed call centre.

Section 03. What actually gets recorded

The repair inquiry form (submit.php) writes down your name, phone number, email, the address the technician should come to, the kind of enquiry, your notes on the fault, the specification you're asking about, and the tick confirming you agreed to be contacted. Two hidden fields on that form, company and website, exist only to catch automated spam and are never shown or filled by a real visitor.

Alongside the form, the server automatically logs your IP address, your browser's user-agent string, the page that referred you, and the two timestamps — when the form was rendered on your screen and when you actually submitted it.

The support chat widget (chat.php) keeps the conversation itself and a token in your browser's storage so you can come back to the same thread. If you leave a phone number or email in chat, that is recorded with the transcript.

Two more categories: cookie and local-storage identifiers that remember your cookie choice, and — only if you arrived through a paid link — the advertising click identifiers a platform attaches to that link.

Section 04. Why each of those gets used

Your name, phone, email and address exist to get a technician to the right door, or to get a call-back scheduled, and nothing else — we don't build a mailing list out of repair enquiries. The kind of enquiry, your notes and the specification tell the technician what to bring on the van before the visit.

IP address, user-agent and referrer are used to keep the enquiry form working, to catch spam submissions, and to understand which page a genuine enquiry came from. The chat transcript exists so you don't have to repeat yourself to whoever answers next. Cookie identifiers remember that you already made a storage choice so we don't ask twice. The advertising click identifiers let Google Ads, Microsoft Advertising or Meta Ads credit the enquiry to the campaign that produced it, but only once you have allowed storage.

Section 05. The legal basis for each of those uses

Contacting you about a repair you asked for runs on contract — you asked us to act, we need your details to do it. Keeping spam logs and access logs running for a short period is our legitimate interest in a working, unspammed form. Storing a cookie choice is also a legitimate interest: remembering a preference you already stated.

Everything tied to advertising — the click identifiers, the analytics storage, the personalised ad signals — runs strictly on consent. Consent Mode holds those signals denied until you actively allow storage, described in full below. Nothing in this list runs on "necessary for our business" as a catch-all; each use has a named basis.

Section 06. The advertising platforms sending traffic here

This site currently runs paid traffic from three places, and each attaches its own tracking parameter to the link a visitor clicks: Google Ads attaches gclid, Microsoft Advertising attaches msclkid, and Meta Ads attaches fbclid where a campaign is active there. None of the three has reviewed, approved or verified the content of this site — they carry the click, that's all.

If your visit arrived through one of those links, the identifier is read and, subject to the consent described next, shared back to that platform so it knows the click led to an enquiry.

Section 07. Consent Mode v2, and what "denied" actually means here

This site runs Google Consent Mode v2. Four signals — ad_storage, ad_user_data, ad_personalization and analytics_storage — start every visit set to denied. They stay denied until you actively allow storage in the cookie banner. If you decline, or if you had allowed storage and change your mind, all four are set back to denied immediately, not at the end of the visit.

Denied does not mean the ad platforms never see the click happened; a basic, storage-free ping can still register that an ad was clicked. It does mean no cookie or identifier is written to your browser for advertising or analytics purposes until you say yes.

Section 08. Who else touches this data

Google Ireland Ltd and Google LLC receive the gclid identifier and the consent signals through Google Ads, when storage is allowed. Microsoft Ireland Operations Ltd receives msclkid through Microsoft Advertising; its own handling of that data is covered by the Microsoft privacy statement at privacy.microsoft.com. Meta Platforms Ireland Ltd receives fbclid through Meta Ads on any campaign running there.

Two more parties see this data as a matter of running the site at all: the hosting provider that serves these pages and stores the enquiry database, and the mail provider that carries the notification email from a submitted form to the shop's inbox. Neither is given the data for their own marketing use.

Section 09. Data crossing a border

Xolimeq is a Texas business and the enquiry database sits on hosting inside the United States. If you are visiting from outside the United States — most often from Europe, reading the GDPR sections below — your enquiry data is transferred into the United States to reach that hosting. The advertising platforms named above also process data outside the country you're browsing from, under their own standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. We don't operate a separate international data centre; there is one enquiry database, and it sits in the US.

Section 10. How long each category is actually kept

Repair enquiries and their email notification copies: 36 months, long enough to cover a repeat fault on the same appliance without keeping a record forever. Chat transcripts: 12 months. Server and access logs: 60 days. The record of a cookie consent choice: 6 months, after which we ask again. None of these periods renew automatically on their own just because the file was opened; they run from the date the record was created.

Section 11. What protects it while it's kept

Form submissions travel over an encrypted connection. The enquiry database and chat store sit behind the hosting provider's access controls, not on a shared drive anyone in the shop can browse — only the person answering enquiries and scheduling visits has a login to it. We don't email full form contents in plain text beyond the notification the office already needs to schedule the visit, and we don't keep card or payment data at all, because this site never takes a payment.

Section 12. If you're reaching us from Europe: your GDPR rights

Under the GDPR, you hold seven rights over the data described above: access (ask to see what we hold), rectification (have it corrected if it's wrong), erasure (have it deleted), restriction (have its processing limited), portability (receive a copy in a usable format), objection (object to processing based on legitimate interest), and withdrawal of consent — the advertising signals most of all — at any time and without it affecting a repair already booked.

Send that request to office@xolimeq.com. See the data-request section below for what happens next.

Section 13. US state privacy rights, California and beyond

If you're a California resident, the CCPA, as updated by the CPRA, gives you the right to know what personal information we hold, to delete it, to correct it, and to opt out of the sale or sharing of it. Xolimeq does not sell personal information and does not share it for cross-context behavioural advertising outside the consented ad-platform reporting described above. Residents of other US states with their own privacy laws in force have equivalent rights to know, delete and correct their data on request.

Section 14. Global Privacy Control is honoured automatically

If your browser sends the Global Privacy Control signal, we treat it as an opt-out of advertising and analytics storage the moment you land on the site — the same result as clicking Decline in the cookie banner, without you having to click anything. Consent Mode's four signals are set to denied for that visit and we don't ask you to repeat the choice through the banner.

Section 15. This site is not built for children

Xolimeq is a repair service for households and property managers. We don't knowingly collect data from children, and the inquiry and chat forms are not directed at them. If a parent or guardian believes a child's details ended up in an enquiry, write to office@xolimeq.com and we'll remove it.

Section 16. Where to complain if our answer isn't good enough

You can complain to your state Attorney General, or, if you're in California, to the California Privacy Protection Agency. If you're in Europe, you can complain to your national data protection supervisory authority. We'd rather you wrote to office@xolimeq.com first so we can actually fix the problem, but that's a preference, not a requirement.

Section 18. How a change to this page gets announced

When this policy changes in a way that matters — a new ad platform, a different retention period — we update the effective date at the top of this page and describe the change in the text itself rather than burying it in a changelog nobody reads. We don't notify by email for a wording change, only for something that would change what you'd have agreed to.

Section 19. A person, not a form, answers this

Email office@xolimeq.com or call +1 (824) 555-9503. Post reaches us at 157 Market Street, Büro 5, Austin, Texas 65042, United States. The person who answers the phone for a repair booking is the same person who answers a privacy question.