Charlie's Angels Dogwalking
Official Policy Document

Privacy Policy, Consent Signals & Advertising Disclosures

Document: CADOGWALKING Privacy & Data Contract Effective Date: October 17, 2026 Version: 2.4 (Consent Mode v2 Active) Controller: Cadogwalking (CADOGWALKING, INC.)
Clause 1.0 • Effective Date & Validity

Effective Date and Version Baseline

This Privacy Policy and Advertising Disclosure took effect on 2026-10-17 (October 17, 2026). It governs all personal and technical data processing across the domain cadogwalking.us, our scheduling correspondence, intake forms, live support messaging, and paid advertising attribution workflows.

Clause 2.0 • Data Controller Identification

Data Controller & Corporate Identification

The data controller for this website and associated companion care operations is Cadogwalking, trading at cadogwalking.us as an active California corporation (CADOGWALKING, INC., dba Charlie's Angels Dogwalking).

Full postal address: 230 TRUMBULL ST, SAN FRANCISCO, CA 94112, SAN FRANCISCO, CA, United States.
Direct administrative telephone: (415) 595-7913.
Direct privacy and administrative email: [email protected].

Clause 3.0 • Categories of Information Collected

Categories of Information Collected

We gather only data necessary to arrange companion care, respond to inquiries, protect our infrastructure, and assess marketing campaigns. We take no account registrations, issue no passwords, store no credit card numbers, and execute no online payment transactions.

  • Inquiry Form Data: Submissions through the inquiry form (submit.php / fedu36e.php) write: name, phone, email, address (physical San Francisco street address or neighborhood), the kind of enquiry (dog walking, sitting, boarding, day care, drop-in visit), the message, the requested specification, the consent tick.
  • Automated Technical & Log Data: With every form submission, our server records automatically: the IP address, the browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent. Server and access logs record network requests and are kept for 60 days.
  • Support Chat Data: The support chat (chat.php / home4ea.php) keeps the conversation and a token in the visitor's browser (under localStorage) so they can return to it.
  • Cookie Identifiers & Consent Decision: The consent choice is stored in the browser under site_consent_v2, and nothing else on this site persists a choice. Cookie identifiers include first-party tokens and, where consented, third-party analytics and advertising cookies.
  • Advertising Click Identifiers: When visitors arrive via paid advertising campaigns, inbound URLs carry platform click identifiers: Google Ads (gclid), Microsoft Advertising (msclkid), and Meta Ads (fbclid).
Clause 4.0 • Purpose of Processing

Purposes of Data Processing

Collected data is deployed strictly for clear operational tasks:

  1. To evaluate companion pet compatibility, review vaccination records, schedule intake consultations, and deliver contracted dog walking, boarding, sitting, and day care services.
  2. To respond directly to prospective client inquiries and live support messages regarding rates, availability, and route locations.
  3. To prevent automated bot abuse, spam submissions, and denial-of-service attempts against our forms and servers using hidden honeypot validation fields (department and site).
  4. To attribute campaign traffic and measure conversion efficiency across commercial search platforms when you grant affirmative consent.
Clause 5.0 • Lawful Bases for Processing

Lawful Legal Bases for Processing

We process every category of data under an explicit legal basis — consent, contract, or legitimate interest:

Category & Processing Purpose Legal Basis Operational Ground
Inquiry form and support chat handling, pack intake, service delivery contract Contractual necessity: taking steps at the visitor's request prior to entering into a companion care agreement.
Technical and server access logs, honeypot validation, network security legitimate interest Legitimate interest: securing IT infrastructure, preventing automated fraud, and maintaining trail operations.
Cookie identifiers, advertising click attribution, and analytics storage consent Consent: deploying optional ad attribution and analytics tags only after explicit affirmative visitor agreement.
Clause 6.0 • Paid Advertising Platforms & Identifiers

Advertising Platforms & Active Attribution Identifiers

This website receives live traffic from paid digital advertising campaigns. The advertising platforms that send traffic here are google ads, microsoft advertising, and Meta Ads.

Each advertising platform attaches a specific click identifier to a link arriving at this site:

  • gclid: The Google Click Identifier attached to links by google ads to measure search traffic and conversion actions.
  • msclkid: The Microsoft Click Identifier attached to links by microsoft advertising to evaluate Bing and network search ad performance.
  • fbclid: The Meta Click Identifier attached to destination links by Meta Ads (Facebook and Instagram) when campaigns run there.

Nothing anywhere claims a platform has reviewed, approved or verified this site.

Clause 7.0 • Google Consent Mode v2 Architecture

Consent Mode v2 Operational Implementation

Our website implements consent mode v2. Under Consent Mode v2, the four signals are held denied until the visitor allows storage, and set back to denied when they decline:

  • ad_storage: held denied until consent is granted.
  • ad_user_data: held denied until consent is granted.
  • ad_personalization: held denied until consent is granted.
  • analytics_storage: held denied until consent is granted.

These four signals — ad_storage, ad_user_data, ad_personalization, and analytics_storage — remain denied until the visitor gives permission. If the visitor declines or later withdraws consent via Cookie Settings, all four signals are immediately set back to denied.

Clause 8.0 • Third-Party Processors & Service Providers

Third-Party Data Processors

The third parties that receive this data, named one by one:

  • Google Ireland Ltd / Google LLC: Google Ads, which attaches gclid to a click and receives the consent signals.
  • Microsoft Ireland Operations Ltd: Microsoft Advertising, which attaches msclkid; its own handling is covered by the Microsoft privacy statement at privacy.microsoft.com.
  • Meta Platforms Ireland Ltd: Meta Ads, which attaches fbclid, where a campaign runs there.
  • Hosting Provider: The hosting provider that serves this site and stores the enquiry database on secure California servers.
  • Mail Route Provider: The mail provider that carries the notification to the operator's inbox at [email protected].
Clause 9.0 • International Data Transfers

Cross-Border Data Transfers & Safeguards

CADOGWALKING, INC. operates in San Francisco, California, United States. Personal data collected from visitors outside the United States is transferred to and stored in the United States. These transfers are made lawful through Standard Contractual Clauses (SCCs) approved by the European Commission, relevant international adequacy determinations, and the direct necessity of processing data to perform pre-contractual steps and contracts for pet care requested by the visitor.

Clause 10.0 • Defined Data Retention Periods

Data Retention Periods

We keep data for real, defined periods:

  • Enquiries and their email copies: 36 months
  • Chat transcripts: 12 months
  • Server and access logs: 60 days
  • The record of a consent choice: 12 months (stored in site_consent_v2)
  • A data request is answered within 7 days
Clause 11.0 • Technical & Operational Security Measures

Data Security Measures

We implement robust technical and operational measures protecting the data: Transport Layer Security (TLS 1.3) encryption in transit across all pages and endpoints, encrypted database storage, perimeter firewalls, least-privilege administrative access controls, regular security updates, and automated abuse detection via honeypot fields. No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.

Clause 12.0 • European Economic Area & UK Rights

European Data Protection Rights (GDPR)

For visitors who reach the site from Europe, the full rights under the General Data Protection Regulation (gdpr) are respected:

  • Access: The right to obtain confirmation and copies of personal data held about you.
  • Rectification: The right to have inaccurate or incomplete personal data rectified without undue delay.
  • Erasure: The right to obtain the erasure of personal data ("right to be forgotten").
  • Restriction: The right to restriction of processing under specified statutory circumstances.
  • Portability: The right to data portability in a structured, commonly used, machine-readable format.
  • Objection: The right to objection to processing based on legitimate interests or for marketing.
  • Withdrawing consent: The right to withdrawing consent at any time without affecting prior lawful processing.
Clause 13.0 • United States State Privacy Rights

United States State Privacy Rights (CCPA / CPRA)

US state privacy law applies. Under California law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), and other state privacy laws in force, visitors have specific privacy rights.

California residents have the right to know what personal information is collected, disclosed, or sold; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use of sensitive personal information; and the right not to receive discriminatory treatment. We do not sell personal data for monetary payment. To exercise the right to opt out of sale or sharing, use our Cookie Settings or send a Global Privacy Control signal.

Clause 14.0 • Universal Opt-Out Mechanisms

Global Privacy Control (GPC)

Global Privacy Control (the Sec-GPC header) is honoured as an opt-out without asking again. When your browser transmits global privacy control, our scripts automatically treat it as an opt-out of advertising storage and tracking signals across the entire session.

Clause 15.0 • Protection of Minors

Children's Privacy Protection

This site is not for children and takes no data from them. CADOGWALKING, INC. provides professional animal care services exclusively to legal adults capable of entering into binding contracts. We do not knowingly solicit, collect, or retain personal data from children under 16 years of age. If a child under 16 has submitted personal information, please notify [email protected] and the information will be deleted promptly.

Clause 16.0 • Regulatory Oversight & Complaints

Regulatory Authority & Complaints

If you have concerns about our data practices, the visitor may complain to their state Attorney General, and to the California Privacy Protection Agency in California (CPPA at privacy.ca.gov). Visitors reaching this site from Europe may complain to their competent national Data Protection Authority (DPA).

Clause 17.0 • Data Subject Access Request (DSAR) Protocol

How to Exercise Your Privacy Rights

To exercise your data protection rights (access, correction, erasure, portability, or opt-out), send a written request to our real contact address:

Email for Data Requests: [email protected]

Postal Address for Data Requests: CADOGWALKING, INC., 230 TRUMBULL ST, SAN FRANCISCO, CA 94112, SAN FRANCISCO, CA, United States

Phone: (415) 595-7913

How long an answer takes: a data request is answered within 7 days of receipt, free of charge.

Clause 18.0 • Policy Revision Procedures

Policy Modifications & Notifications

How a change to this policy is announced: any changes to this privacy policy will be announced directly on this page with an updated effective date and revision notice. Where revisions are material, a prominent notice will be displayed on the website or communicated directly to active clients prior to the changes taking effect.

Clause 19.0 • Direct Privacy Contact Details

Direct Privacy & Operational Inquiries

A contact that reaches a human — for any question about this policy or your personal data:

  • Operator / Controller: Cadogwalking (CADOGWALKING, INC. dba Charlie's Angels Dogwalking)
  • Real Email: [email protected]
  • Phone: (415) 595-7913
  • Postal Address: 230 TRUMBULL ST, SAN FRANCISCO, CA 94112, SAN FRANCISCO, CA, United States