Plain questions and honest answers about how your repair inquiry data is handled
We believe in total transparency. Every heading below is a plain question a real homeowner would ask about what information is collected, who sees it, how long it is kept, and how your privacy rights are enforced under New Jersey, US state, and European regulations.
When did this privacy policy take effect?
This Privacy Policy and statutory data disclosure took effect on 2026-10-17. It applies to all electronic transmissions, repair requests, direct messaging interactions, and measurement signals processed across newjerseyshandyman.net. Every inquiry received after this date is governed by the protocols, retention limits, and opt-out mechanisms detailed below.
Who operates this website and controls my data?
The data controller responsible for the collection, retention, and routing of personal information on this site is Newjerseyshandyman, trading at newjerseyshandyman.net, based at:
145 NEWARK POMPTON TURNPIKE, PEQUANNOCK, NJ 07440, PEQUANNOCK, NJ, United States
Telephone: (973) 874-0463. Email: [email protected]. Governing law: the law of NJ, United States, with disputes heard in the courts of PEQUANNOCK. The company operates as a registered residential home improvement service in the State of New Jersey under the direct leadership of craftsman Ivan Petrov.
What categories of personal and technical data do you collect?
This website collects only the factual technical and operational data required to assess residential repair scopes, schedule contractor attendance, and evaluate advertising conversions. Specifically:
- Inquiry Form Data (submit.php / sijuc5b.php): What the inquiry form receives is full name, phone number, email address, physical street address or municipality, the kind of enquiry (repair category), the message (user-supplied descriptive notes), the requested specification, and the consent tick.
- Technical & Log Data (Automatically Recorded): With the form submission, the server automatically records the visitor's IP address, the browser's user-agent string, the referring URL, the moment the form was rendered, and the moment it was sent.
- Support Chat (chat.php / ducu04a.php): The support chat keeps the conversation and a token in the visitor's browser (stored in localStorage) so they can return to the conversation.
- Cookie & Consent Identifiers: The consent choice is stored in the visitor's browser under
site_consent_v2, and nothing else on this site persists a choice. - Advertising Click Identifiers: When traffic arrives from commercial marketing campaigns, click identifiers attached to inbound links (
gclid,msclkid,fbclid) are read to link ad traffic with repair inquiry goals.
This website maintains no user accounts, requires no passwords, and never processes payment cards or financial accounts: nothing is sold on this site and no payment is taken online.
For what specific purposes is my data used?
Personal data collected across this portal is utilized exclusively for genuine trade and operational objectives:
- Evaluating residential repair conditions, door sticking issues, plumbing valve leaks, and drywall moisture problems.
- Determining whether a preliminary photographic diagnosis or a $75–$200 on-site callout inspection is required.
- Communicating direct labor rates ($60–$125/hr labor band, standard median $83–$90/hr) and scheduling contractor arrival windows.
- Maintaining required trade service records in compliance with New Jersey contractor regulations.
- Verifying inbound traffic authenticity to suppress automated spam, script injection, and click fraud.
- Measuring ad platform effectiveness across Google Ads, Microsoft Advertising, and Meta Ads in accordance with user consent selections.
What legal bases justify your processing of each category?
Under applicable privacy statutes, each processing activity is grounded in an explicit legal basis:
- Contract: Processing of inquiry submissions, location details, repair notes, and phone contacts proceeds on the basis of contract performance or pre-contractual steps taken at the direct request of the prospective customer to prepare an estimate and schedule a service visit.
- Consent: Analytical measurement and advertising conversion tracking proceed exclusively on the basis of affirmative, freely given consent.
- Legitimate Interest: Automated server logging, abuse prevention, security verification, and honeypot field checks proceed on the basis of our legitimate interest in maintaining website operational security, preventing click fraud, and protecting our business infrastructure.
Which advertising platforms send traffic here and what click identifiers do they attach?
This website receives paid clicks today from three commercial platforms: google ads, microsoft advertising, and Meta Ads.
Each advertising platform attaches a specific click identifier parameter to inbound links:
- Google Ads: attaches gclid (Google Click Identifier).
- Microsoft Advertising: attaches msclkid (Microsoft Click Identifier).
- Meta Ads: attaches fbclid (Facebook Click Identifier).
These identifiers measure campaign attribution, allowing our systems to verify that advertising expenditure connects to genuine residential inquiries. Nothing anywhere claims a platform has reviewed, approved or verified this site.
How does Consent Mode v2 govern tracking signals?
Our site implements consent mode v2. By default, upon the arrival of any visitor, the four core advertising and analytical telemetry signals are held strictly denied until the visitor allows storage:
ad_storage• held deniedad_user_data• held deniedad_personalization• held deniedanalytics_storage• held denied
Only when the visitor activates the affirmative "Accept All" button are these four signals updated to granted. If the visitor selects "Essential Only", declines, or subsequently revokes consent via the cookie preferences trigger, all four signals are set back to denied the moment they decline without requiring a page reload.
Who are the third parties that receive my data?
Data collected through this domain is shared only with vetted third parties named one by one:
- Google Ireland Ltd / Google LLC (Google Ads): receives consent signals and the gclid click identifier for conversion attribution.
- Microsoft Ireland Operations Ltd (Microsoft Advertising): receives the msclkid click identifier; its own handling is covered by the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement (privacy.microsoft.com).
- Meta Platforms Ireland Ltd / Meta Platforms, Inc. (Meta Ads): receives the fbclid parameter where a campaign runs there.
- Hosting Provider: the hosting provider that serves this site and stores the enquiry database under secure TLS encryption.
- Mail Provider: the mail route that carries the notification of your repair inquiry directly to the operator's inbox at [email protected].
Is my data transferred outside the country of collection and what makes it lawful?
Because Newjerseyshandyman is based in Pequannock, New Jersey, United States, information submitted through this website is stored on servers within the United States. Where visitors access this portal from Europe (EEA/UK), cross-border transfers are made lawful pursuant to Standard Contractual Clauses (SCCs) incorporated into our vendor agreements or in reliance on applicable adequacy decisions recognizing equivalent protections under US data privacy frameworks.
How long is each category of data kept?
We do not retain customer data indefinitely. Every category of information is maintained according to real, enforced periods:
- Enquiries and their email copies: 24 months (to support workmanship warranty verification and recurring punch list history).
- Chat transcripts: 6 months.
- Server and access logs: 30 days.
- The record of a consent choice (site_consent_v2): 6 months.
- Statutory data requests: answered within 14 days.
What technical and organizational measures protect my data?
We protect personal information through rigorous technical and practical measures: all transmissions across newjerseyshandyman.net are encrypted via modern 256-bit TLS (HTTPS); enquiry databases are restricted behind locked daemon permissions; honeypot security fields dynamically suppress malicious automated bots; administrative tools are isolated from public routing; and physical workshop records at 145 Newark Pompton Turnpike are secured behind keyed access under Ivan Petrov's direct supervision.
What rights do European visitors have under GDPR?
For visitors who reach the site from Europe, the General Data Protection Regulation (gdpr) guarantees comprehensive rights in full:
- Access: The right to obtain confirmation and a copy of your personal data.
- Rectification: The right to correct inaccurate or incomplete domestic contact records.
- Erasure: The right to request the deletion of your personal records ("right to be forgotten").
- Restriction: The right to restrict processing under specific legal grounds.
- Portability: The right to receive your personal data in a structured, machine-readable format.
- Objection: The right to object to data processing based on legitimate interests.
- Withdrawing Consent: The right to withdraw consent at any time without penalization.
What privacy rights apply to United States and California residents?
United States state privacy law applies—with California named under the California Consumer Privacy Act / California Privacy Rights Act (ccpa), alongside consumer privacy laws in New Jersey and other states in force. Under these laws, residents have the right to know what personal data categories are collected, to request correction or deletion of their records, and to opt out of the "sale" or "sharing" of personal data for cross-context behavioral advertising.
Newjerseyshandyman does not sell consumer names, telephone numbers, or email addresses to data brokers. We share tracking identifiers only with declared advertising networks when explicit affirmative consent is provided.
Do you honour Global Privacy Control signals?
Yes. global privacy control (the Sec-GPC header and navigator.globalPrivacyControl property) is honoured as an opt-out without asking again. When your browser transmits this signal, the site automatically locks ad_storage, ad_user_data, ad_personalization, and analytics_storage in the denied status without displaying redundant pop-up prompts.
Is this website suitable for children and do you collect data from minors?
No. The site is not for children and takes no data from them. Our services are directed solely at adult homeowners and property managers capable of entering trade agreements. We do not knowingly solicit or collect data from anyone under 16 years of age; any such submission discovered is deleted immediately.
Where can I lodge a formal regulatory complaint?
Visitors have the right to complain to a data protection authority:
- The visitor may complain to their state Attorney General (in New Jersey, the New Jersey Division of Consumer Affairs / Office of the Attorney General).
- In California, visitors may complain directly to the California Privacy Protection Agency (CPPA).
- Visitors from Europe may lodge a complaint with their national Data Protection Authority (DPA).
How do I exercise my privacy rights and how long does an answer take?
To exercise your rights of access, correction, portability, or erasure, write to our data request desk at:
Email: [email protected]
Postal Address: Newjerseyshandyman, 145 NEWARK POMPTON TURNPIKE, PEQUANNOCK, NJ 07440, PEQUANNOCK, NJ, United States
Please specify your name, contact phone number, and the nature of your request. We verify your identity using previous inquiry records, charge no fee, and a data request is answered within 14 days.
How is a change to this privacy policy announced?
A change to this policy is announced by updating this page directly at newjerseyshandyman.net/privacy.html with an updated effective date header at the top of the document. We recommend reviewing this page periodically when submitting new repair requests.
How do I reach a real human with a privacy inquiry?
For any privacy question, you can contact a human directly:
What digital accessibility standards does this site maintain?
New Jersey's Handyman, LLC is committed to ensuring that our trade documentation, rate disclosures, and repair booking forms remain fully accessible to all individuals, including persons with visual, auditory, motor, or cognitive disabilities. This portal is built to comply with the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards. Features include semantic HTML headings, full keyboard navigation with high-visibility focus indicators, skip-to-content links, sufficient color contrast ratios (surpassing 4.5:1), responsive layout scaling without truncation down to 320px, and descriptive alternative text for all photographic work samples. If you encounter any accessibility barrier or require assistance requesting repair dispatch, contact Ivan Petrov at (973) 874-0463 or [email protected], and reasonable accommodations will be provided immediately.
Advertising Telemetry & Consent Signal Matrix
The table below documents the live behavioral state of Google Consent Mode v2 signals on this domain before and after explicit user authorization.
| Signal Parameter | Default Initial State | State Upon "Accept All" | Functional Operational Purpose |
|---|---|---|---|
ad_storage |
denied | granted | Permits writing and reading of cookies associated with advertising measurement. |
ad_user_data |
denied | granted | Permits transmission of user-provided inquiry signals to Google for ad attribution. |
ad_personalization |
denied | granted | Controls whether conversion data can be used for remarketing and audience building. |
analytics_storage |
denied | granted | Permits storage of technical telemetry to measure website dwell time and error rates. |