Data handling protocols govern every client submission.

This privacy charter took effect on November 8, 2026 and governs all active client intakes, digital inquiries, and advertising tracking on blueharborly.com.

The standards codified in this document reflect our operational procedures as of November 8, 2026. Prior revisions are superseded in their entirety. Any prospective adjustments to data collection categories or transmission partners will be posted directly to this URL with a corresponding updated calendar index.

The sole data controller for this online property is Blueharborly, an independent commercial legal practice seated in Charlotte, North Carolina.

Blueharborly trades online under the domain blueharborly.com. The operational seat and physical office of the practice is 435 East Trade Street, Charlotte, North Carolina 28202, Charlotte, North Carolina, United States. Ivan Petrov, Attorney at Law, manages the practice under North Carolina State Bar Registration No. 1234567. Formal communications regarding legal processing may be addressed to our Charlotte office or transmitted electronically to [email protected].

Our web infrastructure records eight distinct client intake items alongside standard network header information and campaign attribution parameters.

When a prospective commercial client submits the direct matter intake form at benoe04.php, the server captures: legal requester name, contact telephone, professional email address, business street address or county of operation, commercial dispute classification, matter notes, requested forum or document specification, and explicit affirmative consent.

Simultaneously, the hosting infrastructure automatically records the visitor’s IP address, browser user-agent header, HTTP referrer address, and exact millisecond timestamps marking form rendering and transmission. The real-time intake chat interface at raha48b.php maintains the conversation text alongside an ephemeral local session token so a returning client can maintain dialogue continuity. We collect advertising click identifiers (including gclid, msclkid, and fbclid) when visitors arrive via commercial campaign links. We collect no user account passwords, no payment card details, and no consumer credit information.

Client data serves three operational requirements: professional conflict checks, pre-engagement matter assessment, and technical defense of the practice’s digital infrastructure.

We process personal and organizational identifiers first to run mandatory professional conflict clearance against current clients, adverse banking entities, and regional commercial litigators before any confidential advisory begins. Second, intake facts allow Ivan Petrov to evaluate whether a dispute falls within Mecklenburg County Superior Court or North Carolina Business Court subject-matter criteria and calculate initial retainer scope. Third, network headers, timestamps, and hidden security tokens allow our server to identify automated intrusion attempts, prevent form spam, and audit conversion efficiency across paid acquisition channels.

Processing activities rely upon three lawful bases recognized under North Carolina law, federal privacy frameworks, and international data standards: consent, contract, and legitimate interest.

• Affirmative Consent: Applied to pre-engagement contact submissions, optional intake disclosures, and the deployment of non-essential analytical cookies via Consent Mode v2.
• Pre-contractual Measures & Contract: Applied to factual reviews required to prepare commercial engagement agreements, run conflicts audits, and determine litigation retainer requirements.
• Legitimate Interest: Applied to the protection of server endpoints, network logging, security audit tracking, and defending the practice against fraudulent filings.

Blueharborly actively runs commercial legal advertising across Google Ads, Microsoft Advertising, and Meta Ads to connect with commercial banking institutions and regional corporate clients.

Traffic directed from these commercial ad networks appends specific tracking parameters to arriving URLs: Google Ads transmits the gclid parameter, Microsoft Advertising attaches the msclkid identifier, and Meta Ads supplies the fbclid token. These parameters allow our infrastructure to attribute inbound inquiries to specific campaign creative and measure keyword relevance. Blueharborly uses these identifiers strictly in the ordinary course of paid advertising administration without combining click data with unrelated commercial dossiers.

Our site implements Google Consent Mode v2 with four mandatory storage parameters held strictly denied until a visitor affirmatively consents.

Prior to any visitor interaction with the consent banner, our technical tag architecture initializes ad_storage, ad_user_data, ad_personalization, and analytics_storage in a hard denied state. If a visitor declines non-essential cookies or selects the decline option in the cookie banner, each of those four parameters remains denied, preventing advertising pixels from depositing client-side persistent storage or transmitting remarketing identifiers. If consent is granted, the status shifts to granted; if consent is subsequently withdrawn via the site footer control, all four parameters are instantly reverted back to denied.

Four verified enterprise service providers process digital transmissions on behalf of Blueharborly under strict data processing agreements.

1. Google Ireland Ltd & Google LLC: Operates Google Ads measurement and infrastructure, receiving gclid tokens and real-time consent telemetry.

2. Microsoft Ireland Operations Ltd: Powers Microsoft Advertising campaign reporting via msclkid click attribution. Microsoft’s privacy governance and data handling are documented directly at privacy.microsoft.com.

3. Meta Platforms Ireland Ltd: Powers Meta Ads campaign attribution when commercial litigation notices run on Meta networks.

4. Infrastructure & Mail Relay Host: High-security web hosting facilities that store relational database records for benoe04.php and secure SMTP relay servers that route prospective matter notices directly to Ivan Petrov at [email protected].

Client matter submissions and network logs are hosted within the continental United States under North Carolina commercial jurisdiction.

If a European or international visitor accesses blueharborly.com, their personal data is transferred directly to our servers in the United States. Such cross-border transfers are legitimized through standard contractual clauses (SCCs) executed with our enterprise hosting providers and cloud processors, ensuring technical protections that meet or exceed European Commission adequacy determinations.

Data categories are governed by rigid retention clocks rather than open-ended storage periods.

• Commercial Inquiries & Email Records: Retained for exactly 24 months from submission to complete conflict audits and procedural records.
• Support & Intake Chat Transcripts: Maintained for exactly 12 months from the final recorded message.
• Server & Network Access Logs: Rotated and overwritten on a strict 30 days schedule.
• Consent Verification Log: Preserved in client localStorage under site_consent_v2 for exactly 12 months before requiring reconfirmation.
• Statutory DSAR Inquiries: Final determination and fulfillment dispatched within 5 days of identity verification.

All digital transit across blueharborly.com is protected by authenticated modern cryptographic ciphers and hardened perimeter access rules.

Every page request and form payload is encrypted using TLS 1.3 with SHA-256 digital certificates. Backend intake records are isolated behind multi-factor authentication controls accessible solely to Ivan Petrov and authorized legal staff. Network endpoints feature rate-limiting firewalls, automated CSRF verification tokens, honeypot filters (guarding unlabelled fields department and url), and continuous database integrity hashing.

For visitors protected under the General Data Protection Regulation (GDPR), Blueharborly honors seven fundamental statutory entitlements.

Qualified data subjects residing within the European Economic Area or United Kingdom hold enforceable rights under GDPR:

• Right of Access: Obtain confirmation of whether your matter data is processed and receive a clean electronic copy.
• Right to Rectification: Demand immediate correction of inaccurate or incomplete corporate or individual contact facts.
• Right to Erasure: Request permanent deletion of intake communications subject to legal file retention obligations.
• Right to Restriction: Limit ongoing processing during active dispute over data precision or conflict status.
• Right to Data Portability: Receive structured intake archives in a commonly used, machine-readable format.
• Right to Object: Oppose processing rooted in legitimate business interests or direct commercial outreach.
• Right to Withdraw Consent: Revoke previously submitted consent at any time without retroactive invalidation.

Blueharborly does not sell or share personal commercial information under the California Consumer Privacy Act (CCPA) or similar state privacy enactments.

Under the CCPA, the California Privacy Rights Act (CPRA), and state privacy statutes in Virginia, Colorado, Connecticut, and Texas, business owners and corporate representatives possess explicit statutory rights. You may request disclosure of the categories of personal data collected, request deletion of non-privileged information, correct factual errors, and opt out of any hypothetical commercial data exchange. Blueharborly never exchanges, rents, or monetizes client intake registries with data brokers.

Blueharborly automatically recognizes and honors the Global Privacy Control (GPC) browser specification as a universal opt-out request.

When our web server detects an incoming Sec-GPC header transmitting a positive opt-out signal, the technical tags automatically initialize Consent Mode v2 in the denied state for advertising storage and user data parameters. Visitors broadcasting the global privacy control header require no manual interaction with our consent banner; their election is respected globally across all page sessions.

The services provided by Blueharborly are strictly intended for adult corporate executives, banking officers, and commercial business proprietors.

We do not knowingly solicit, record, or maintain personal records from minors under eighteen years of age. If our office receives an inquiry identifying the sender as a minor, that submission and all associated log records are purged immediately from our active database and email relays.

Visitors maintain the legal right to submit formal complaints directly to designated state regulatory agencies and supervisory tribunals.

In North Carolina, consumers may register inquiries with the North Carolina Department of Justice, Office of the Attorney General (Consumer Protection Division, 9001 Mail Service Center, Raleigh, NC 27699). In California, complaints may be lodged with the California Privacy Protection Agency (CPPA) or the Office of the California Attorney General. European residents may petition the data protection authority in their specific member state.

Every formal Data Subject Access Request (DSAR) submitted to Blueharborly is authenticated, processed, and answered within 5 business days.

To initiate a statutory inquiry regarding records held by this practice, submit your written request to our data protection officer via email at [email protected] with the subject header “Statutory Data Subject Request”. Alternatively, transmit your request via registered mail to our Charlotte practice address:

Blueharborly • Practice Intake Review
Attn: Ivan Petrov, Commercial Dispute Counsel
435 East Trade Street
Charlotte, North Carolina 28202
Telephone: +1 (724) 555-0191

To safeguard commercial confidentiality, our office requires reasonable proof of corporate identity or representative authority before releasing records. We assess no fee for standard access requests. Where requests are manifestly unfounded or repetitive, the practice reserves the right to charge a reasonable administrative fee or decline the petition in accordance with applicable rules.

Material updates to this privacy schedule are published directly to blueharborly.com ten days prior to practical operational enforcement.

When statutory mandates, court rulings, or platform specifications necessitate substantive modifications to our data handling protocols, an updated revision date will be reflected at the head of this document. Continued engagement with our digital intake channels following published amendments constitutes acknowledgment of revised terms.

Inquiries regarding data governance, matter intake privacy, or commercial representation reach Ivan Petrov directly at our Charlotte office.

Direct contact channels:

• Electronic Mail: [email protected]
• Direct Telephone: +1 (724) 555-0191
• Physical Chambers: 435 East Trade Street, Charlotte, North Carolina 28202, United States
• Practice Counsel: Ivan Petrov, Commercial Dispute and Banking Attorney