Privacy
Every disclosure below is a real fold — open the one you need or open the whole page at once.
This page says what the inquiry form and the chat widget collect, which advertising platforms send traffic here, how long each record is kept, and how to ask us to change or delete it.
01This policy took effect on 14 September 2026, and that date moves whenever we revise it.
This version of the Ziruqen privacy policy took effect on 14 September 2026. If you read a printed copy or a saved page from before that date, ask us for the current version — the address and email at the bottom of this page reach a person, not a queue.
02Ziruqen, trading at ziruqen.com, is the business that controls this data — not an agency and not a franchise.
Ziruqen operates the workshop and this website from 122 Oak Lane, Suite 4, Austin, Texas 52041, United States. There is no separate holding company and no marketing agency standing between you and the bench. Any question about this policy goes to the same three people who cut keys and answer the phone.
03The inquiry form, the chat widget, and the plain act of loading a page each hand us a different set of data.
The inquiry form on this page, on the homepage, and on each service page's short strip writes down your name, phone number, email address, job address, the kind of job you picked, your message, any specification you typed in, and the tick confirming you agree to be contacted. Alongside that, the form itself records the moment the page was rendered and the moment you sent it.
The support chat keeps the conversation you have with us, plus a token stored in your browser so you can pick that conversation back up. If you give a name, phone or email in chat, that travels with the transcript.
Every visit, regardless of whether you fill in anything, hands the server your IP address, your browser's user-agent string, and the page that referred you here. If you arrive from a paid link, the URL usually carries an advertising click identifier — gclid, msclkid or fbclid, covered fully below. Cookie and local-storage identifiers, including the consent choice itself, fall into this same bucket.
04Nothing here is collected for its own sake — each category has one plain job to do.
Name, phone, email and address exist to get someone to your door, or to call you back about a key you need cut. The kind of job and the specification field help us bring the right pins, plates or blanks the first time, instead of a second trip. Chat transcripts let a conversation about a sticking cylinder carry over two visits without you repeating yourself.
IP address, user-agent and referrer data are used to keep the site working and to spot abuse of the form. Click identifiers and the Consent Mode signals described below are used to measure whether a Google Ads, Microsoft Advertising or Meta Ads click turned into an actual enquiry — and only that, never to build a profile you didn't ask us to keep.
05Each purpose above rests on a specific legal basis, not a blanket "because we can."
Where GDPR applies — visitors reaching us from Europe — here is the basis for each purpose:
| Purpose | Basis |
|---|---|
| Replying to an inquiry or chat message | Contract — taking the steps you asked for before any job is agreed |
| Keeping server and access logs | Legitimate interest — running and securing the site |
| Advertising cookies and click identifiers | Consent — held denied until you allow storage |
| Analytics storage | Consent — held denied until you allow storage |
| Responding to a data request | Legal obligation, once a request is made |
06Google Ads, Microsoft Advertising and, where a campaign is running, Meta Ads send paying traffic to this site today.
This site runs paid campaigns on google ads and microsoft advertising, and may run them on meta ads. Each platform attaches its own identifier to the link you clicked to arrive here: gclid for a Google Ads click, msclkid for a Microsoft Advertising click, and fbclid for a Meta Ads click. None of that is hidden or disguised — it is the standard mechanism each platform uses to tell whether its ad led to your visit.
No platform has reviewed, approved or verified this website or its content. Running ads through a platform is not an endorsement by that platform, and this page makes no such claim.
07Consent Mode v2 keeps every ad and analytics signal switched off until you say otherwise.
This site runs consent mode with four signals: ad_storage, ad_user_data, ad_personalization and analytics_storage. All four start denied on every visit. They only move to granted after you actively choose "Allow" on the cookie banner shown at the bottom of the page, and they are set straight back to denied the moment you decline, or if you later withdraw that choice from the cookie settings link in the footer.
Your device also sends a Global Privacy Control signal if your browser supports it, and this site treats that signal as an opt-out without asking you again — see the Global Privacy Control disclosure below.
08A short, named list of who else touches this data — no list of unnamed "partners."
Google Ireland Ltd and Google LLC receive the gclid identifier and the consent signals through Google Ads. Microsoft Ireland Operations Ltd receives the msclkid identifier through Microsoft Advertising; how Microsoft itself handles that data is set out at privacy.microsoft.com. Meta Platforms Ireland Ltd receives the fbclid identifier through Meta Ads on any campaign that runs there.
Beyond the ad platforms, two further parties see this data: the hosting provider that serves this website and stores the enquiry database, and the mail provider that carries the notification email from the form to our own inbox. Neither is given the data for their own marketing use.
09Some of the parties above are based outside the United States, so data does cross a border.
Google, Microsoft and Meta each operate internationally, and the click identifiers they receive may be processed on servers outside the United States, including in the European Union and Ireland where their advertising entities are based. Each of those companies maintains its own safeguards for cross-border transfer under its standard contractual terms; we rely on those published safeguards rather than negotiating our own for a workshop this size.
10Nothing here is kept "as long as necessary" — every category has a real number of months attached.
| Category | Kept for |
|---|---|
| Inquiry form submissions and their email copies | 36 months |
| Chat transcripts | 18 months |
| Server and access logs | 90 days |
Your consent choice, stored as site_consent_v2 | 12 months |
After each period, the record is deleted from active systems on the next routine pass rather than kept indefinitely on the theory it might be useful later.
11The enquiry database sits behind access controls, and the site is served over an encrypted connection.
Form and chat data reach the server over HTTPS. Access to the enquiry database and chat store is limited to the people who run the workshop and the hosting provider that stores it on our behalf — there is no public admin panel or shared login. We don't claim a certification we don't hold; this is a small workshop's own housekeeping, not an audited enterprise security programme.
12Visitors covered by the GDPR have seven specific rights over this data, spelled out here rather than summarised.
If you're reaching this site from somewhere the GDPR applies, you can ask to access what we hold about you, correct it if it's wrong, have it erased, have its use restricted, receive a portable copy of it, object to a particular use, and withdraw consent at any point without affecting anything already done under that consent. Use the data request route below for any of these.
13US visitors, including under California's CCPA, can ask what's held, ask for deletion, and opt out of sale or sharing.
Depending on where you live, US state privacy law gives you rights over the data described in this policy. California's CCPA, as amended by the CPRA, gives California residents the right to know what personal information is held, to request its deletion, to correct it, and to opt out of its sale or sharing — including the advertising identifiers described above. Other states with similar laws in force give comparable rights. Ziruqen does not sell personal information for money; the advertising identifiers count as "sharing" for cross-context advertising, and you can opt out of that sharing by declining the cookie banner or using the cookie settings link in the footer.
14If your browser sends Global Privacy Control, we treat that as an opt-out and don't ask you again.
Global Privacy Control is honoured on this site. If your browser or extension sends that signal, advertising and analytics storage stay denied automatically, the same as if you'd clicked "Decline" on the cookie banner yourself, and the banner won't reappear to ask again on that device.
15This site is built for adults arranging locksmith work and takes no data from children.
Ziruqen's services are aimed at adults responsible for a household, and this site is not directed at children. We don't knowingly collect data from anyone under 16 through the inquiry form or chat. If you believe a child has submitted information here, contact us using the details below and we'll remove it.
16If you're unhappy with how we've handled a request, you can complain to a regulator, not just to us.
You're welcome to raise a problem with us directly first, but you don't have to. You can complain to your state Attorney General, and California residents can complain to the California Privacy Protection Agency. Visitors covered by the GDPR can complain to their own country's data protection authority.
17Asking to see, correct or delete your data means one email or letter, answered within 10 days.
To access, correct, delete or export the data described above, or to withdraw consent, email office@ziruqen.com or write to Ziruqen, 122 Oak Lane, Suite 4, Austin, Texas 52041. Tell us which record you mean — an inquiry, a chat conversation, or a general request — and we answer within 10 days. We may ask you to confirm the phone number or email tied to the original submission, so we don't hand your job details to someone else.
18A future change to this policy moves the effective date at the top and stays on this same page.
If we change what we collect or why, we update this page and move the effective date shown near the top. We don't announce changes by email unless the change affects a request you already have open with us. Check the date before relying on a printed or saved copy.
19Every question above reaches the same inbox and phone the workshop itself uses.
For anything in this policy, write to office@ziruqen.com, call +1 (429) 555-0256, or post to Ziruqen, 122 Oak Lane, Suite 4, Austin, Texas 52041, United States. There's no separate privacy department — the person who answers is the same one who reads the inquiry form.
See also the cookie policy for the specific cookies and storage keys in use, and the terms of service for the warranty and refusal policy referenced throughout this page.
AZiruqen wants this site usable with a keyboard, a screen reader, or a phone held one-handed on a job site.
This site is built with a single fluid layout from a 320px phone up to a large desktop, a visible focus outline on every control, labelled form fields, and text that resizes without breaking the page. Buttons and links meet a minimum touch target of 44 pixels, and motion — the magnetic buttons, the hover-follow image preview on the offer list — is switched off entirely for anyone whose system asks for reduced motion, and for anyone using a touchscreen, where a static image and a plain row take its place.
We haven't paid for a third-party accessibility audit and won't claim a conformance level we haven't tested against. If something on this site is hard to use with a screen reader, a keyboard, or at high zoom, tell us directly at office@ziruqen.com or +1 (429) 555-0256 and describe the page and the problem — we fix what we hear about.