Privacy / Vexbun / Visitor information
Your inquiry and your advertising choices stay separate.
A short website project inquiry gives Vexbun information to answer your request. It does not give permission for optional advertising storage. This statement explains the records we keep and the controls available to you.
Effective:
Last updated:

What reaches the studio
Vexbun is responsible for this site.
The operator and controller is Vexbun, trading at vexbun.com. This statement covers the public website, project inquiry forms and support conversations. It applies when you ask about a website scope consultation as well as when you simply browse the service pages.
Postal address: 7 Workshop Way, Werkstatt 2, Austin, Texas 31523, Austin, Texas, United States.
To discuss how Vexbun handles your information, email [email protected] or call +1 (784) 555-7475. You do not need to create an account to contact us.
The fields you send and the request around them
The inquiry form records your name, phone number, email address, postal address, kind of inquiry, message, requested specification and consent tick. Name and consent are required, together with either a phone number or an email address. A postal address is optional; do not supply it just to discuss a web page.
With an inquiry, the site also records the IP address, the browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent. These records distinguish a submitted request from a page view and help identify abusive submissions. A referring URL can contain parameters that arrived with a paid click.
Support chat keeps the conversation, the contact information you supply and the consent you give for a reply. A conversation token is stored in your browser's localStorage after you start a conversation, so the chat can find that conversation again. A token is not an account password; nevertheless, do not share browser storage or a conversation token with another person.
Technical and access logs contain request information such as IP addresses, browser information and requested or referring URLs. Storage-related records include the consent preference under site_consent_v2, the support token and, when authorized, optional analytics or advertising identifiers. The site's consent choice is persisted only under site_consent_v2.
Advertising landing links carry gclid from Google, msclkid from Microsoft and fbclid from Meta. A parameter can be present in the incoming URL before you make a storage choice. Its presence does not authorize saving it in optional browser storage.
No account, password, payment or card data is collected as part of this service catalogue. Nothing is sold through the website and no payment is taken. Do not put credentials, medical information or other sensitive material into a form or support conversation.
Use a public page URL where possible. Remove private information from a description of a fault before sending it.
This site is not directed to children.
Vexbun offers business web project services, not services for children, and does not knowingly collect personal information from children. Children should not use the inquiry form or support chat. If you believe a child has supplied information here, contact the studio so the record can be located and removed.
Why records are kept
Responding is the first purpose.
Your contact details and message let Vexbun answer an inquiry, ask scope questions and keep service correspondence. The specification and kind of request help identify the work being discussed. If a project is agreed, relevant correspondence supports its administration and the record of what was accepted.
Technical request data and logs support security, abuse prevention and investigation of failed requests. The rendered and submitted times help distinguish ordinary use from automated misuse. Support messages are used to continue your conversation; the browser token connects the returning browser with that record.
The consent preference is used to apply and remember your storage choice. Authorized advertising and analytics data is used for measurement and attribution, including understanding which paid clicks lead to inquiries. That optional use is separate from the consent required to send your message.
The basis depends on the purpose.
Where GDPR or another law requires a legal basis, the following distinctions apply. Consent to respond does not provide blanket permission to reuse a message for advertising. Nor does a legitimate interest in security replace consent for optional storage.
| Purpose | Information used | Legal basis |
|---|---|---|
| Answer an inquiry | Contact details, message, specification and relevant correspondence | Consent to respond; steps at your request before a contract where applicable |
| Administer agreed work | Accepted scope and project correspondence | Contract; legal obligation where a record must be retained |
| Maintain a support conversation | Messages, supplied contact details and conversation token | Consent to respond; legitimate interest in delivering the support function you request |
| Protect the site | IP address, browser information, request timing and access logs | Legitimate interest in security and abuse prevention |
| Remember a choice | Consent preference record | Legal obligation where applicable; legitimate interest in respecting and recording preferences |
| Optional measurement and advertising | Authorized browser identifiers and advertising click identifiers | Consent for optional storage and its associated use |
| Handle a privacy request | Request correspondence and proportionate verification information | Legal obligation; legitimate interest in protecting information from unauthorized disclosure |
Who receives information
The following recipients support the website or its advertising. Their roles differ: an advertising platform may process information under its own privacy terms rather than act solely on Vexbun's instructions.
- Google Ireland Ltd / Google LLC. Google Ads attaches
gclidto a click and receives consent signals. Its handling of platform data is described in the Google privacy policy. - Microsoft Ireland Operations Ltd. Microsoft Advertising attaches
msclkid. Read the Microsoft privacy statement at privacy.microsoft.com for its own handling of data. - Meta Platforms Ireland Ltd. Meta Ads attaches
fbclidto traffic from its campaigns. Read the Meta privacy policy. - The hosting provider. The provider serving this website stores the inquiry database and processes the request and log information needed to operate it.
- The mail provider. The provider carrying inquiry notifications to the operator's inbox processes the email copy and the information needed to deliver it.
The public statement does not name a hosting or mail company. Contact Vexbun for information about the recipients relevant to your record. Information may also be disclosed where an applicable legal obligation requires it or where needed to establish or defend a legal claim.
Processing can cross a national border.
Vexbun operates in the United States. Information sent from another country reaches a US business, and service or advertising providers can process information outside the country where it was collected. Privacy protections are not identical in every jurisdiction.
Where European transfer rules apply, a transfer must have a lawful basis under those rules, such as an applicable adequacy decision or appropriate safeguards including standard contractual clauses. Consent to an inquiry is not a substitute for a required transfer safeguard. Ask Vexbun for the mechanism and relevant safeguards for the transfer that concerns your information; the platform policies above explain their separate arrangements.
Retention has stated limits.
| Record category | Period | Purpose during that period |
|---|---|---|
| Inquiries and their email copies | 36 months | Inquiry handling and the record of service correspondence |
| Chat transcripts | 18 months | Continuity and reference for the support conversation |
| Server and access logs | 60 days | Operation, request diagnosis and abuse investigation |
| Consent choice record | 12 months | Remembering and applying the browser's preference |
Deleting a browser token does not itself delete the server's conversation transcript. Use the data-request route to request deletion of a record. A legal requirement or a specific dispute can require a relevant record to be retained beyond its ordinary period; that is not permission to retain unrelated information without a purpose.
Protection includes limiting what is sent.
The site uses HTTPS for transmission. Form validation and submission checks help reject malformed or abusive requests. Public pages do not provide access to the inquiry database. Support messages are displayed as text rather than executable markup.
No website or email route can promise absolute security. Send only what the inquiry needs. If a message accidentally includes a credential or private information, contact Vexbun promptly; do not repeat the sensitive content in a second message. You remain responsible for protecting access to the device and browser that hold your support token.
Paid clicks and your choices
This site receives paid traffic.
Google Ads, Microsoft Advertising and Meta Ads send traffic to vexbun.com. Advertising measurement and storage choices apply now, including when an advertisement brings you directly to an interior service page.
google ads / gclid
Google's click identifier can appear in the landing URL. Google receives the consent signals used to control advertising and analytics storage and related data use.
microsoft advertising / msclkid
Microsoft's click identifier associates a landing request with a paid click. Microsoft advertising storage follows the visitor's advertising choice, not just Google's consent flags.
Meta Ads / fbclid
Meta's click identifier can arrive with a campaign link. Meta advertising storage follows the same visitor advertising choice. The presence of this identifier in a URL is not permission to save it in optional storage.
Identifiers may be part of an incoming URL or a technical request before a decision is made. Declining optional storage does not mean that all network requests stop, that no tags load or that all forms of measurement cease.
Consent Mode v2 starts denied.
The consent mode settings ad_storage, ad_user_data, ad_personalization and analytics_storage are held denied until the visitor allows storage. Consent Mode v2 grants only the categories the visitor authorizes and sets the relevant settings back to denied the moment they decline or withdraw. A decline of optional storage returns all four to denied.
A valid stored preference can be restored on a later visit. Denied remains the safe initial state until that record is read. Microsoft and Meta storage choices also follow the advertising decision; Google's four signals do not by themselves control every provider.
Necessary storage is different. The local preference record under site_consent_v2 remembers your decision. A visitor-initiated support conversation stores a token in localStorage to reconnect the browser with the conversation. Neither requires permission for optional advertising storage.
Declining does not block the service catalogue, direct contact or the inquiry form. Required consent to process an inquiry is not bundled with advertising permission. Closing a preference panel is not acceptance.
Use Allow optional storage or Decline optional storage for an overall choice, or Manage choices to choose categories. Optional choices are not preselected. Cookie settings remains available in the footer so you can change your decision without sending a message.
The cookie statement gives the storage explanation and preference controls. Withdrawing a choice changes future use; it does not undo lawful processing that took place before withdrawal.
A browser opt-out counts.
Vexbun honours global privacy control. The Sec-GPC header is treated as an opt-out of sale or sharing and targeted advertising without asking again. The signal does not remove necessary preferences or stop a support conversation you request. You can still ask for access or deletion of existing records.
Ask about your information
European visitors / gdpr rights
For visitors from Europe, where the General Data Protection Regulation (GDPR) applies, you can request access to personal information and a copy of it, rectification of inaccurate information, erasure, restriction of processing and data portability where the legal conditions apply. You may object to processing based on legitimate interests and to direct marketing.
You can withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing. Rights have conditions and exceptions: for example, a record subject to a legal retention obligation may not be erased immediately. Vexbun explains a limitation rather than treating every request as an automatic deletion instruction.
US visitors / California and other state laws
US state privacy law applies as relevant to the visitor and the processing. California's CCPA/CPRA framework, also referred to as ccpa rights, includes rights to know and access personal information, request correction and deletion, and opt out of sale or sharing. Other state laws in force provide applicable rights, including access and portability and opt-outs from targeted advertising or certain profiling.
Advertising-related disclosures can fall within a law's definition of sharing even when no money is exchanged for a record. Use the advertising controls or Global Privacy Control to opt out, or send a request directly. Where applicable, you may limit use of sensitive personal information and use an authorized agent. Vexbun does not ask for sensitive information in the initial inquiry.
You are not penalized for exercising applicable privacy rights. Where state law provides an appeal, you may ask Vexbun to reconsider a decision about your request and explain why you believe it should change. The response will explain the applicable next route.
A data request receives an answer within 7 days.
Write to [email protected] or use the data-request page. Explain whether you want access, correction, deletion or help with a storage choice. Include a reply route and enough context to find the record, such as the email used for an inquiry. Do not send a password or identity document in your first message.
Vexbun answers a data request within 7 days. That answer may ask for proportionate verification or explain a legal restriction affecting completion; it is not a promise that every deletion or third-party action finishes within that period. Applicable statutory rights and deadlines still apply.
Verification is limited to what is needed to protect the record from an unauthorized request. If an agent writes for you, we may need confirmation of their authority. A full postal address is not required merely to ask about an inquiry sent by email.
You can take a concern to an authority.
You may complain to your state Attorney General and, in California, to the California Privacy Protection Agency. European visitors may complain to the competent data protection authority, including the authority where they live or work or where they believe an infringement occurred. Contacting Vexbun first is useful for resolving a record issue but is not a condition of making a complaint.
Changes are published here.
A revised statement carries an updated date at the top of this page. Material changes to data use are identified on the site, and a new consent choice is requested when a change requires it. An existing preference is not treated as permission for an unrelated new purpose. Policy publication and the deployed consent version are managed together.
Contact the operator directly.
Privacy questions go to Vexbun, not a separate automated advice service. Email [email protected] or call +1 (784) 555-7475. For correspondence by post, use: 7 Workshop Way, Werkstatt 2, Austin, Texas 31523, Austin, Texas, United States.
If a control or document is difficult to use, describe the barrier rather than sending sensitive information through an unsuitable channel. The accessibility statement explains the reporting route.
For service scope and inquiry acceptance, the project terms are separate from these privacy choices.
Read the terms