What Totex collects when you write, call or click an ad, and who else ever sees it
This policy covers the inquiry form, the front-desk chat, ordinary log data, and the advertising tags that carry paid clicks from Google, Microsoft and Meta to this site. It took effect on and applies to every page under totexi.com.
| Question | Answer |
|---|---|
| Who holds this data | Totexi, trading as Totex Movement Studio, 109 Oak Lane, Suite 4, Austin, Texas 34275, United States. |
| Where it's processed | On servers used by our hosting provider in the United States, with copies passing through the advertising and mail processors named below. |
| How long we keep it | Inquiries and their email copies for 24 months, chat transcripts for 18 months, server logs for 90 days, and a record of your cookie choice for 12 months. |
| Who else sees it | Google Ads, Microsoft Advertising and Meta Ads where a campaign runs there, plus the hosting provider and the mail provider that delivers our notifications. Nothing is sold. |
| How to get a copy or ask for deletion | Email office@totexi.com or use the data request page. We answer within 7 days. |
| Who to write to | Totexi, 109 Oak Lane, Suite 4, Austin, Texas 34275, or office@totexi.com, or +1 (810) 555-6769. |
| Effective date | September 7, 2026. |
| Governing law | The law of Texas, United States. Disputes are heard in the courts of Austin, Texas. |
Effective date
This policy took effect on September 7, 2026. It governs data collected from that date forward on every page of totexi.com, including this one, the inquiry form on contact.html, and the front-desk chat.
Who operates this site
This site is operated by Totexi, trading as Totex Movement Studio, a movement-technique coaching studio at 109 Oak Lane, Suite 4, Austin, Texas 34275, United States. Totexi is the controller of the data described below and the party responsible for answering the requests in this policy.
What we collect
The inquiry form on contact.html and the homepage takes your name, phone number, email address, the class or program your message concerns, the kind of inquiry, your message, any specification you enter, and your consent tick. Alongside that submission our server automatically records the IP address it arrived from, the browser's user-agent string, the page that referred you, the moment the form rendered, and the moment you sent it.
The front-desk chat keeps the conversation itself and a token stored in your browser so you can return to the same thread. Ordinary browsing on this site generates technical and log data: IP address, browser and device information, pages requested, and timestamps. If you arrive from a paid ad, the link may carry an advertising click identifier — gclid from Google Ads, msclkid from Microsoft Advertising, or fbclid from Meta Ads — and a cookie identifier tied to whichever platform placed it.
What each category is used for
Contact details answer your inquiry and let a coach call or email you back about a class, a coaching slot, an assessment or a return-to-activity program. Log data keeps the site secure and diagnoses faults. Cookie and click identifiers measure which ad brought a visitor here and let Google Ads, Microsoft Advertising and Meta Ads report on campaign performance for whoever runs those accounts. Chat transcripts let the front desk pick a conversation back up without asking you to repeat yourself.
Legal basis for each purpose
Where the GDPR applies, we rely on consent for advertising and analytics cookies and the click identifiers attached to them; on contract, or steps toward one, for handling your inquiry and replying about a class or program you asked about; and on legitimate interest for basic security logging needed to keep the site running and free of abuse. You can withdraw consent for advertising and analytics at any time through the cookie banner without affecting a reply already in progress.
Advertising platforms sending traffic here
Google Ads, Microsoft Advertising and Meta Ads currently send paid traffic to this site. A click from one of those campaigns can attach an identifier to the landing link: gclid from google ads, msclkid from microsoft advertising, or fbclid from Meta Ads. Those identifiers, and any cookie the platform sets, are read by that platform's own systems to measure and report on the ad that brought you here.
Consent Mode v2
This site runs Google's consent mode, holding four signals denied by default: ad_storage, ad_user_data, ad_personalization and analytics_storage. None of the four is set to granted until you actively allow storage through the cookie banner. If you decline, or later withdraw, all four are set back to denied immediately, and no advertising or analytics cookie is written from that point on.
Who receives this data
We share data, only as described above, with: Google Ireland Ltd and Google LLC for Google Ads, which attaches gclid and receives your consent signals; Microsoft Ireland Operations Ltd for Microsoft Advertising, which attaches msclkid and handles its own data under the Microsoft privacy statement at privacy.microsoft.com; Meta Platforms Ireland Ltd for Meta Ads, which attaches fbclid, where a campaign runs there; the hosting provider that serves this site and stores the inquiry database; and the mail provider that carries the notification email to our inbox. None of these processors is permitted to use your data for anything beyond the service they provide us.
Transfers outside the country of collection
Google, Microsoft and Meta process advertising data on servers located outside the United States, including in the European Union. Where that happens, the transfer relies on the mechanism each platform publishes for it, typically the standard contractual clauses recognised under the GDPR. Our hosting and mail providers store data primarily within the United States.
How long we keep it
Inquiries submitted through the form, and the email copy they generate, are kept for 24 months. Chat transcripts are kept for 18 months. Server and access logs are kept for 90 days. The record of your cookie consent choice is kept for 12 months, after which the banner asks again. We do not keep payment data, because this site takes no payment and holds no card details.
Security
Form submissions travel over an encrypted connection. The inquiry database sits behind access controls limited to staff who need it to answer you, and honeypot fields on every form filter out automated submissions before a human ever sees them. No system is unbreakable; if a breach affecting your data occurred, we would notify affected people and any authority the law requires.
Your rights under the GDPR
If you reach this site from Europe, the GDPR gives you the right to access the data we hold about you, to have it corrected, to have it erased, to restrict how we process it, to receive a copy in a portable format, to object to processing based on legitimate interest, and to withdraw consent at any time without affecting anything done before the withdrawal. Write to office@totexi.com to use any of these rights.
US state privacy rights
Residents of California and other states with comparable laws have rights under the CCPA and similar statutes to know what personal information we hold, to request its deletion, to correct it, and to opt out of the sale or sharing of personal information. We do not sell personal information, and we do not knowingly share it for cross-context behavioural advertising outside the ad platforms disclosed in this policy. To exercise a state privacy right, use the data request page or email office@totexi.com.
Global Privacy Control
This site honours Global Privacy Control. If your browser sends a Sec-GPC signal, that signal is recorded as an opt-out of the sale or sharing of your personal information, and the advertising consent signals stay set to denied, without asking you to repeat the choice through the cookie banner.
Children
This site is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has submitted information to us, write to office@totexi.com and we will remove it.
Complaints
You may complain to your state Attorney General, and, if you are a California resident, to the California Privacy Protection Agency. If the GDPR applies to you, you may complain to your local data protection authority. We would rather hear from you first at office@totexi.com so we can try to fix the problem directly.
How to exercise these rights
Write to office@totexi.com or use the form on the data request page, telling us which right you are exercising and enough detail to find your record — usually the name, phone number or email you gave us. We answer within 7 days. You can also write to Totexi, 109 Oak Lane, Suite 4, Austin, Texas 34275, United States.
Changes to this policy
If we change this policy, we will update the effective date above and post the new version on this page. Where a change materially affects how we use data already collected, we will say so plainly rather than folding it into a routine update.
Contact
Reach a person at office@totexi.com, by phone at +1 (810) 555-6769, or by post at Totexi, 109 Oak Lane, Suite 4, Austin, Texas 34275, United States.