We keep an inquiry for 24 months and ad identifiers only when you allow them.

This notice takes effect on October 7, 2026, and that is also the date of its last update.

You should know which version you read. The date at the top changes whenever the text does.

Lekvaro, trading at lekvaro.com, a small preserves kitchen at 68 Oak Lane, Office 12, Austin, Texas 86853, United States. We decide what is collected and why.

Every law below needs a named business with a real address you can write to. This is ours.

Inquiry form: name, phone, email, address, the kind of inquiry, your message, the products and sizes you asked for, and your consent tick.

Sent with it automatically: IP address, browser user-agent string, referring URL, the moment the form was shown and the moment it was sent.

Support chat: the conversation, and a token kept in your browser so you can come back to it.

Consent choice: stored in your browser under site_consent_v2.

Ad click identifiers: gclid, msclkid or fbclid when you arrive from an ad, and cookie identifiers set by those platforms if you allow them.

Server logs: IP, time, requested page and status.

No account, no password, no card. Nothing is sold or paid for on this site, so we never see payment data. The list stops here.

Inquiry and chat data: to answer you, confirm stock, price and handover, and deliver if you asked. Timing and IP data: to spot bots and spam. Click identifiers and ad cookies: to measure which ads bring inquiries, so we stop paying for the ones that do not. Logs: to keep the site running and secure.

We do not build profiles, sell lists or send newsletters you did not ask for.

Consent for ad and analytics cookies and for storing your inquiry (the tick box). Contract, or steps before one, for handling your order inquiry. Legitimate interest for spam checks, security logs and keeping records of what we agreed.

The GDPR asks for a stated basis per purpose. The table below the ledger lays them side by side.

This site runs paid ads today. Google Ads adds gclid to the link you click. Microsoft Advertising adds msclkid. Meta Ads adds fbclid where a campaign runs there. The identifier rides in the address bar; with your permission, it is used to report a conversion back to the platform that sent you.

Ads are how most people find a jam kitchen they have never heard of. You should know which platforms see your click.

We use Google Consent Mode v2. Four signals start as denied: ad_storage, ad_user_data, ad_personalization and analytics_storage. They switch to granted only when you press Allow. Press Decline, or withdraw later, and all four are set back to denied at once.

Nothing that stores an ad identifier runs until you say so. The banner never blocks the page while you decide.

Google Ireland Ltd / Google LLC: Google Ads, which attaches gclid and receives the consent signals.

Microsoft Ireland Operations Ltd: Microsoft Advertising, which attaches msclkid. Its handling is described in the Microsoft privacy statement at privacy.microsoft.com.

Meta Platforms Ireland Ltd: Meta Ads, which attaches fbclid, where a campaign runs there.

Our hosting provider, which serves the site and stores the inquiry database, and our mail provider, which carries the notification of your inquiry to our inbox.

Nobody else. We do not sell or rent data to anyone.

We are in the United States, so data from a visitor in Europe crosses to the US. The ad platforms may move data between their EU and US entities. Those transfers rely on the EU-US Data Privacy Framework where the recipient is certified, and on the European Commission's standard contractual clauses otherwise.

Most of our visitors are in Texas. The ones who are not still get the safeguard.

Inquiries and their email copies: 24 months. Chat transcripts: 12 months. Server and access logs: 60 days. The record of your consent choice: 12 months, then the banner asks again.

Twenty-four months covers a bakery reordering next season. After that the record is deleted, not archived.

The site is served over HTTPS only. The inquiry store sits outside the public web folder and is reached through a password-protected panel used by the three of us. Forms carry spam checks. Old records are deleted on the schedule above, which is itself a protection.

No system is perfect. If a breach touches your data, we tell you and the relevant authority without delay.

If you reach us from the EU or UK, the GDPR gives you the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time without affecting what happened before.

Ad traffic does not stop at borders, so these sections are written for European visitors.

Under the CCPA as amended by the CPRA, California residents can know what we hold, delete it, correct it, and opt out of the sale or sharing of personal information, including sharing for cross-context behavioral advertising. Residents of other states with privacy laws in force, Texas included, have matching rights. We do not sell data. Allowing ad cookies counts as sharing; Decline is your opt-out.

We will not treat you differently, or price a jar differently, for using any of these rights.

If your browser sends the Global Privacy Control signal (the Sec-GPC header), we treat it as an opt-out of sale and sharing. All four consent signals start denied, the banner records a Decline for you without asking again, and ad_storage, ad_user_data and ad_personalization stay denied even if you later press Allow.

You already said no in your browser settings. Saying it twice is pointless.

This site is not meant for children under 13, and we do not knowingly take data from them. If a child has sent us an inquiry, tell us and we delete it.

Ordering preserves is a job for adults with a kitchen.

You can complain to your state Attorney General. In California you can also go to the California Privacy Protection Agency. Visitors from Europe can complain to their local data protection authority.

Writing to us first is usually faster, but you do not have to.

Email [email protected], use the data request form, or write to 68 Oak Lane, Office 12, Austin, Texas 86853, United States. We may ask one question to confirm it is you. We answer within 14 days.

Fourteen days is shorter than the law requires. We are three people; it is easy to find your record.

When this notice changes, we update the date at the top and the effective date in this ledger. A change to what we collect or who receives it is also shown in the cookie banner on your next visit.

A quiet rewrite would defeat the point of the notice.

Email [email protected], phone +1 (971) 555-5462, or post to Lekvaro, 68 Oak Lane, Office 12, Austin, Texas 86853, United States.

A person reads it. The same person who answers jar inquiries.