FIRST-STAGE NOTICE

Privacy information

The indexed site publishes reference, identity, and supplier-trial process information. Online commercial forms, accounts, and checkout controls are not enabled at this stage.

Traffic measurement

The production site uses Plausible Analytics to measure aggregate traffic trends. Plausible does not use cookies. We do not use these analytics for advertising targeting.

Before sending analytics events, the site removes non-essential query parameters and fragments from page URLs. We do not intentionally send site search terms, shade queries, contact notes, or contact information to the analytics service. We may retain restricted utm_source, utm_medium, and utm_campaign identifiers for basic marketing attribution; each must use only letters, numbers, hyphens, underscores, or periods and be no longer than 80 characters. Unknown, encoded, empty, or invalid values are removed.

Referrer URLs are reduced before sending: external referrers retain only their origin, while same-origin referrers may retain the page path. Query parameters and fragments are removed from both. Page paths remain available for aggregate page-level reporting. Custom interaction events use fixed names without contact content or destination-URL properties.

Hosting and site security

The production site is delivered through Cloudflare. Cloudflare processes ordinary connection and security data needed to deliver and protect the site and may set a strictly necessary security cookie, including for bot management. Havelock Hair does not use this processing for advertising.

Online submission forms, accounts, and checkout remain disabled on the first-stage site. The shade lookup runs in the browser; its comparison-request form keeps a draft in same-tab session storage for review on the contact page. Draft contents are not placed in the URL or sent to analytics. You can clear the draft on the contact page; the browser normally clears it when that tab session ends. The site opens an email draft only when you choose that action, and you decide whether to send it in your email application. Aggregate interaction events may record a lookup, result, source-link click, or request handoff without attaching search text or draft contents. A visitor may independently choose to use the published business email; the first message should not contain sensitive client information.

Owner-reviewed policy

The commercial privacy policy, effective date, retention schedule, and service-provider disclosures are intentionally not published until owner review is complete.

Publisher contact

Questions about this reference site may be sent to sales@havelockhair.com.