Privacy notice and formal ad transparency disclosures

This Privacy Notice took effect on October 16, 2026, and supersedes any preceding informal data descriptions. It governs all personal data, network telemetry, intake details, and advertising click identifiers received by Zavalorin through the website zavalorin.com, our inquiry dispatch handlers, and direct communications with our Denver editorial desk.

The data controller responsible for personal information processed on this website is Zavalorin, operating as an independent pharmaceutical reference and healthcare educational drafting practice at 740 West Colfax Avenue, Denver, Colorado 80204, Denver, Colorado, United States. Communications regarding editorial commissions, operational records, and data protection matters may be directed by telephone to +1 (432) 555-7004 or by electronic transmission to office@zavalorin.com.

Zavalorin collects personal and technical data strictly within deliberate operational bounds. Our inquiry form (submit.php) writes and receives information explicitly submitted by the user: name, phone, email, address, the kind of enquiry, the message, the requested specification, and the consent tick. Concurrently and automatically, the server stack captures the IP address, the browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent. The support chat (chat.php) keeps the conversation and a token in the visitor's browser so they can return to it.

The consent choice is stored in the browser under site_consent_v2, and nothing else on this site persists a choice. Our site processes advertising click identifiers appended to inbound queries, specifically gclid from Google, msclkid from Microsoft, and fbclid from Meta, alongside cookie identifier tokens where storage has been granted. No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken. All reference commissions are quoted and billed via direct invoice rather than online checkout mechanisms.

Every data category collected serves an explicit functional purpose: (a) evaluating project feasibility, monograph scopes, and delivering specific fee quotations for drug reference drafting; (b) maintaining verifiable editorial records of commissioning instructions and source parameters; (c) answering real-time inquiries through the Denver desk support widget; (d) defending our server infrastructure against automated spam, denial-of-service attempts, and crawler intrusion via silent honeypot monitoring (office and weblink fields); (e) measuring inbound campaign efficiency and landing page relevance across paid network placements; and (f) maintaining documented compliance with statutory consumer privacy regulations and consent preferences.

We process each category under clearly defined legal grounds: Contract (contractual necessity) governs the evaluation and execution of commissioned drug reference writing and scope estimates initiated by prospective clients. Consent forms the foundation for placing non-essential advertising cookies, analytics scripts, and recording direct contact permissions, which can be modified or revoked at any point. Legitimate interest underlies our maintenance of server access logs, network security defenses, rate-limiting protections, and the preservation of business records necessary to resolve commercial disputes. Legal obligation mandates our compliance with regulatory tax filings, lawful subpoenas, statutory audit inspections, and formal data subject requests.

Zavalorin actively receives commercial traffic from paid promotional campaigns today. We run campaigns on google ads, microsoft advertising, and Meta Ads. When a visitor reaches our website through these promotional channels, the platforms append unique alphanumeric click identifiers to the landing page uniform resource locator: google ads appends gclid, microsoft advertising appends msclkid, and Meta Ads appends fbclid.

These parameters allow attribution of website visits to specific ad groups, search terms, and regional campaigns. We process these parameters to evaluate landing page relevance and calculate acquisition costs. We state unequivocally that neither Google, Microsoft, nor Meta has reviewed, approved, verified, or endorsed the editorial content, drug monographs, or services offered by Zavalorin.

Our infrastructure operates in strict compliance with Google Consent Mode v2 (consent mode). Before a visitor interacts with our consent interface, four core tracking signals are initialized to a default denied state across all scripts: ad_storage, ad_user_data, ad_personalization, and analytics_storage.

In this initial denied posture, advertising identifiers are blocked, personalized ad profiling is disabled, and no analytics cookies are written to the browser cache. If the visitor clicks "Allow Storage", these four signals transition to granted, permitting conversion tracking and performance measurement. If the visitor selects "Decline Non-Essential", or subsequently withdraws permission via our footer controls, the four signals—ad_storage, ad_user_data, ad_personalization, and analytics_storage—are immediately set back to denied, terminating non-essential tracking operations.

Data collected through zavalorin.com is transmitted exclusively to vetted processors named one by one:

(a) Google Ireland Ltd / Google LLC receives telemetry signals and click parameters associated with google ads campaigns under their data processing terms; (b) Microsoft Ireland Operations Ltd receives campaign attribution signals under microsoft advertising, whose data governance practices are described at privacy.microsoft.com; (c) Meta Platforms Ireland Ltd processes referral parameters for campaigns conducted on Meta services; (d) the hosting provider serves this site and stores the enquiry database on hardened infrastructure located in the United States; and (e) the mail provider carries the notification to the operator's inbox at office@zavalorin.com using TLS 1.3 encryption.

Our primary servers, databases, and operational desks reside within the United States. When visitors access zavalorin.com from the European Economic Area, the United Kingdom, or Switzerland, their communications and technical data are transferred directly to our infrastructure in the United States. Such cross-border transfers are conducted pursuant to Standard Contractual Clauses (SCCs) approved by the European Commission, relevant International Data Transfer Addenda, or on the basis of explicit consent provided when initiating inquiries or submitting project specifications.

We reject indefinite data retention. Personal data is maintained strictly for defined, verifiable operational periods:

Enquiries and their email copies are preserved for 24 months to support follow-on revisions and tax documentation. Chat transcripts generated via chat.php are purged from server storage after 6 months. Server and access logs, IP connection registers, and firewall telemetry are retained for 90 days, after which they are automatically overwritten. The record of a consent choice stored under site_consent_v2 is kept for 12 months before requiring re-affirmation. A data request is answered within 14 days of receipt.

Zavalorin maintains rigorous administrative, physical, and technical safeguards designed to protect personal data against unauthorized disclosure, loss, or manipulation. All web sessions are secured using Transport Layer Security (TLS 1.3) with modern cipher suites. Inbound submissions undergo input sanitization, automated parameter validation, and rate-limiting to prevent injection and brute-force harvesting. Administrative databases are protected by multi-factor authentication, network-isolated IP whitelisting, and strict least-privilege role separation.

Visitors accessing our services from the European Economic Area or the United Kingdom retain full statutory protections under the General Data Protection Regulation (gdpr). These rights comprise: (a) access to confirmed personal records and operational categories; (b) rectification of inaccurate or incomplete biographical details; (c) erasure ("right to be forgotten") where retention is no longer justified; (d) restriction of processing under pending verification; (e) data portability in a structured, machine-readable format; (f) objection to processing founded upon legitimate interest; and (g) withdrawing consent at any time without compromising the lawfulness of processing preceding withdrawal.

Residents of California, Colorado, Virginia, Connecticut, Utah, and other jurisdictions with active state consumer privacy frameworks enjoy specific legal prerogatives. Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), California residents have the right to know what personal information is collected, disclosed, or shared; the right to delete personal information collected from them; the right to correct inaccurate records; the right to limit the use of sensitive personal information; and the right to opt out of the sale or sharing of personal data, including the right not to face discriminatory pricing or service denial for exercising privacy rights.

Zavalorin does not sell personal information for monetary remuneration, nor do we disclose personal data to data brokers. Furthermore, Colorado residents retain comparable rights under the Colorado Privacy Act (CPA) regarding access, deletion, and opt-out rights for targeted advertising.

Our infrastructure actively recognizes and respects the global privacy control (GPC) signal. When our web servers detect the Sec-GPC header transmitted by a compatible browser or privacy extension, we interpret it as an immediate, affirmative request to opt out of targeted advertising and third-party data sharing without asking again. In such instances, advertising storage is held denied without requiring the visitor to interact with our consent banner.

Zavalorin provides professional pharmaceutical reference drafting and educational guides intended exclusively for healthcare platforms, medical practitioners, and adult researchers. The site is not for children and takes no data from them. The website is not directed toward, designed for, or marketed to minors under the age of 18, and we do not knowingly solicit or collect personal information from children under 16 years of age. If we discover that personal information of a minor has been submitted without verified parental consent, we take immediate steps to delete the record from our active databases.

If you believe your personal data has been handled inconsistently with applicable statutes, you have the right to complain to a data protection authority or supervisory body. Residents of Colorado may submit complaints to the Office of the Colorado Attorney General. California residents may contact the California Privacy Protection Agency (CPPA) or the California Attorney General. Visitors in the European Union may file complaints with their national Data Protection Authority (DPA) in the member state of their habitual residence or place of work.

To exercise any statutory privacy rights, submit a verifiable Data Subject Access Request by emailing office@zavalorin.com or dispatching written correspondence to Zavalorin, Attn: Privacy Desk, 740 West Colfax Avenue, Denver, Colorado 80204, Denver, Colorado, United States. Your request must supply adequate biographical detail to enable identity verification (such as your full name, email used in project communications, and approximate inquiry date). We do not levy fees for standard requests, and our editorial office delivers an answer within 14 days of receipt.

Zavalorin periodically reviews and updates this notice to reflect changes in regulatory standards, judicial precedents, ad platform requirements, or internal editorial procedures. Modifications become effective upon publication on this page with an updated effective date in the header metadata. For material adjustments impacting user consent terms, active commission partners are notified directly via electronic mail prior to implementation.

For questions regarding this policy, source documentation retention, or our compliance posture under Google Ads, Microsoft Advertising, and Meta Ads standards, contact our human editorial desk directly:

Zavalorin Editorial Desk
740 West Colfax Avenue
Denver, Colorado 80204
Denver, Colorado, United States
Telephone: +1 (432) 555-7004
Electronic Mail: office@zavalorin.com