Privacy policy
Google AdSense advertising
We use Google AdSense from Google Ireland Limited to place ads automatically. With your consent where required and where Google policies permit, ads may be personalized using your interests and previous activity. Otherwise Google may serve non-personalized or limited ads, or no ads.
Google and its advertising partners may process your IP address, browser and device details, current page and cookie identifiers to select, deliver, measure and secure ads. Google Privacy & messaging lists the purposes, partners and choices. You can refuse or withdraw consent using Privacy settings. We do not add form entries, tool inputs or account details to advertising tags.
Read about Google advertising technologies and data from partner sites.
Short version: we collect what you type into a form, plus a compliance record proving you consented. Google AdSense may use advertising cookies and identifiers according to your consent choices, as described on this page. We share form submissions only with the partners named on the page you submitted from.
| Effective | 2026-08-15 |
|---|---|
| Operator | BEXPANDER, s.r.o., Ruská 705/70, 101 00 Praha 10, Czech Republic, IČO 06409202 |
| Contact | eshop@hafio.cz |
What we collect
- Optional analytics: Google Analytics 4 loads only after analytics consent. Google Analytics advertising personalization and Google signals are disabled; AdSense personalization follows your consent choices. The ZIP lookup happens in your browser against a static file.
- Quote forms: name, ZIP, email, phone, selected problem, notes.
- Consent record: consent wording and version, timestamp, IP address, user agent, referring page, and a TrustedForm certificate URL where generated. Kept because the law requires the party calling you to be able to prove consent.
- Price and photo submissions: what you enter. Do not include your name or address; we do not want it and we strip what we find.
- Local storage: the crack tracker stores your measurements in your own browser. It is never transmitted to us.
Who we share it with
Quote submissions go to the partners named on the page. With your analytics consent, Google also processes basic usage measurements as described below. We do not sell browsing data.
How long we keep it
Consent records for five years, which is the practical limit of TCPA exposure. Do-not-contact entries indefinitely, because suppression only works if the record survives. Approved public submissions indefinitely; rejected ones are deleted within 30 days.
Your rights
Ask us what we hold, ask for a correction, or ask for deletion, at the email above. If you are covered by the CCPA/CPRA or a comparable state law, the same address is the request channel and we do not charge or discriminate for using it. We will keep the minimum needed to honour a suppression request and tell you exactly what that is.
Optional website analytics and cookies
We use Google Analytics 4 only after analytics consent is confirmed by the Google consent message. Rejecting or withdrawing consent stops analytics. Use the Privacy settings button to change your choice. Where the consent service cannot establish consent, analytics stays off.
Analytics uses a generic BasementSoil page title and homepage URL. We do not send entered addresses, ZIP codes, form values, search terms or actual page paths to Google Analytics. In Google Analytics, Google signals, advertising personalization and enhanced measurement are disabled. Analytics cookies expire after 180 days without automatic extension; user and event data retention is two months. Google may process data outside your country under its applicable safeguards. Ordinary server logs and the form processing described here are separate from optional analytics.
Children
Not directed at anyone under 16 and we do not knowingly collect their data.
Security
Submissions travel over TLS and are stored on a server we control. We are a small operation, not a bank — the honest mitigation is that we collect very little in the first place.
Page data updated