Your appointment inquiry is kept 24 months, then deleted.

This notice takes effect on September 30, 2026 and was last updated on that same date. It replaces anything this site said about privacy before it. If you sent us an inquiry earlier, the retention periods below still apply to it, counted from the day it arrived.

The site at aandbebridalshop.us is operated by Aandbebridalshop, trading at aandbebridalshop.us as a&bé bridal shop. We are the controller of the personal data described here, which means we decide what is collected and why.

Postal address: 1506 S Congress Ave, Austin, Texas 78704, Austin, Texas, United States. Email: [email protected]. Phone: +1 512-580-555.

There is no parent company, no franchise head office and no separate data team. A person at the shop reads what you send.

There is no account, no password, no card field and no checkout. Nothing is sold through this site and no payment is taken on it. What arrives is this, and only this:

The inquiry form

When you send the booking or inquiry form, ridua7d.php writes down your name, phone, email, the address or ZIP you gave, the kind of inquiry you picked (an appointment, a question about a piece, alterations), your message, the specification you asked about (for example "The Crepe Column" when you arrive from the collection) and whether you ticked the consent box.

Alongside that, automatically: your IP address, your browser's user-agent string, the page that referred you, the moment the form was rendered and the moment you sent it. The two timestamps exist to catch bots that fill a form in 0.4 seconds.

The support chat

tepe821.php keeps the conversation itself, plus any name, phone or email you choose to type into it. A token is stored in your own browser so you can close the tab and come back to the same thread.

Technical and log data

Our host's web server logs each request: IP address, time, the page asked for, the response code, the user-agent and the referrer.

Cookie and storage identifiers

Your consent choice is kept in your browser under site_consent_v2. Advertising cookies from Google, Microsoft and Meta are set only after you allow them. The full list lives on the cookie notice.

Advertising click identifiers

If you reach us from an ad, the link carries a click identifier: gclid, msclkid or fbclid. Section 06 explains each.

Inquiry details are used to answer you, confirm a bridal appointment, tell you what a designer's current list price is before you try anything on, and follow up about fittings and alterations on a piece you ordered. That is it. We do not add you to a newsletter because you asked about a veil.

Chat messages are used to answer the question you asked in the chat, and to pick the thread back up if you return.

Log data is used to keep the site running, find broken pages and block abuse. Timestamps and the hidden honeypot fields on the form are used to filter spam.

Click identifiers and advertising cookies, once you allow them, are used to measure whether an ad on Google, Bing or Instagram led to an inquiry. We look at counts. We do not build a profile of you.

For visitors covered by the GDPR, each purpose rests on one stated basis. Consent can be withdrawn at any time without affecting what was done before.

This site receives paid traffic today. People searching "bridal shop austin" or "wedding dresses austin tx" see our ads on Google Ads and Microsoft Advertising, and Meta Ads runs our campaigns on Facebook and Instagram when we have one live.

• Google Ads adds gclid to the address of the page you land on.
• Microsoft Advertising adds msclkid.
• Meta Ads adds fbclid.

The identifier is a random string tied to the click, not to your name. It becomes useful to the platform only when a tag on our page reads it and reports back that a click turned into an inquiry. That reporting waits for your permission, as the next section explains. No platform has reviewed or approved this notice; it is ours.

The site runs Google Consent Mode v2. Before anything else loads, four signals are set to denied: ad_storage, ad_user_data, ad_personalization and analytics_storage.

They stay denied while the cookie banner sits at the bottom of the screen. Press Allow and all four switch to granted. Press Decline, or change your mind later from "Cookie settings" in the footer, and all four go straight back to denied on that page load, not on the next visit. Microsoft and Meta tags follow the same choice.

While denied, Google may receive a cookieless ping that says a page was viewed, with no ad cookie read or written. That ping sets nothing in your browser and carries no click identifier.

• Google Ireland Ltd / Google LLC runs Google Ads. It attaches gclid to a click and receives the consent signals. Its policy: policies.google.com/privacy.
• Microsoft Ireland Operations Ltd runs Microsoft Advertising and attaches msclkid. Its own handling is covered by the Microsoft privacy statement at privacy.microsoft.com/privacystatement.
• Meta Platforms Ireland Ltd runs Meta Ads and attaches fbclid, where a campaign runs there. Its policy: facebook.com/privacy/policy.
• Our hosting provider serves this site and stores the inquiry database and chat threads on its servers.
• Our mail provider carries the notification of each new inquiry to the shop's inbox, and holds the email copy.

Nobody else. Designers whose gowns we carry do not receive your details; if you order a piece, the designer gets the measurements and the order, under the shop's name.

We do not sell personal data, and we do not share it for cross-context behavioral advertising unless you have pressed Allow.

The shop is in the United States and the data is held for us in the United States. If you write from Europe, your inquiry travels to the US to reach us; that transfer is necessary to answer the request you made.

Google, Microsoft and Meta move data between their Irish entities and the US. They rely on the EU–US Data Privacy Framework and on the European Commission's standard contractual clauses for that. Where our own host or mail provider holds data outside the US, the same clauses apply under their terms.

Advertising cookies set by the platforms have their own lifetimes, listed on the cookie notice. If you ask us to delete something sooner, we do, unless Texas law requires us to keep a sales record for a piece you actually bought.

Every page is served over HTTPS, so the form and chat travel encrypted. The inquiry store sits outside the public web folder and is reachable only behind a password-protected operator login. Access is limited to the people at the shop who answer inquiries. Form input is validated on the server; the honeypot fields and timing check turn away most automated junk before it is saved.

No system is unbreakable. If we learn of a breach that puts your data at risk, we tell you by email and tell the authorities where the law requires it.

The GDPR gives visitors who reach this site from the European Economic Area, and the UK GDPR gives visitors from the United Kingdom, the following rights over their data:

• Access: a copy of what we hold on you.
• Rectification: correcting something wrong, like a misspelled name or an old number.
• Erasure: deleting it.
• Restriction: telling us to keep it but stop using it.
• Portability: receiving it in a plain, machine-readable file.
• Objection: objecting to anything we do on legitimate interest, such as log analysis.
• Withdrawing consent: at any time, for the consent tick or for cookies, without it affecting anything done before.

You also have the right not to be subject to a decision made solely by automated means. We make none.

US state privacy law applies to this site. In California that is the CCPA as amended by the CPRA; Texas, Colorado, Virginia, Connecticut, Oregon and the other states with laws in force give similar rights. You can:

• know which categories and specific pieces of personal information we collected and why;
• correct inaccurate information;
• delete it;
• opt out of the sale or sharing of personal information, including sharing for targeted advertising;
• limit the use of sensitive personal information (we do not collect any on purpose; do not put health details in a form);
• not be treated differently for using any of these rights.

We do not sell personal information for money. Allowing advertising cookies may count as "sharing" under the CCPA. Declining on the banner, or sending Global Privacy Control, opts you out. An authorized agent can make a request for you with your signed permission.

If your browser sends Global Privacy Control, the Sec-GPC header, we treat it as an opt-out of sale and sharing without asking you again. The four Consent Mode signals stay denied and the advertising tags do not set cookies, whatever the banner last said. Firefox, Brave and DuckDuckGo send it by default or with one setting.

This is a bridal shop's site, written for adults planning a wedding. It is not directed at anyone under 16 and we do not knowingly take data from children. If a minor has sent us an inquiry, a parent or guardian can write to us and we delete it. A flower girl's measurements come through the adult who books.

Tell us first if you can; most problems are a two-line email. You are not required to, though. In the United States you may complain to the Attorney General of your state; in Texas that is the Office of the Texas Attorney General. In California you may also complain to the California Privacy Protection Agency.

If you are in Europe or the UK, you may complain to the data protection authority where you live or work, such as the Information Commissioner's Office in the UK.

A change to this notice gets a new date in section 01 and in the header of this page. If it changes what we collect or who receives it, we also show the cookie banner again so you choose afresh, and we email anyone with an open inquiry at least 14 days before the change applies to their data. Old versions are available on request.

We build this site to WCAG 2.2 level AA. In practice: every page has a skip link, one heading structure you can navigate by, labels on every form field, focus you can see in hot pink, and tap targets at least 44 pixels square. Text holds contrast against the plum ground. The page works from a 320-pixel phone to a wide monitor, zoomed to 200 percent, and with motion switched off in your system settings, which also stops the scrolling spec ticker.

Known gaps: the photographs of the collection carry descriptive alt text but cannot show you how a fabric feels. Ask and we will describe drape, weight and lining in writing.

For the shop itself, call +1 512-580-555 before your bridal appointment if you need step-free access, a seat in the fitting room, a longer slot, a quieter time or someone to read labels aloud. We plan the appointment around it. If something on this site does not work with your screen reader or keyboard, email [email protected] with the page and what happened. We reply within 10 days and fix what we can.

Email [email protected] with "Data request" in the subject, or post a letter to 1506 S Congress Ave, Austin, Texas 78704, United States. Say which right you are using: a copy, a correction, a deletion, a restriction, a portable file, an objection, or an opt-out of sharing.

Write from the email address you used on the form or in the chat. That is how we confirm it is you; we will not ask for ID for a simple request. If you used a different address, give us the phone number you left and we will call it.

We answer within 10 days. There is no charge. A copy comes as a plain text or CSV file by email. A deletion covers the inquiry store, the chat thread and the email copies in our inbox; we confirm when it is done.

Questions about this notice go to the same people who book fittings.

Email: [email protected]
Phone: +1 512-580-555
Post: a&bé bridal shop, 1506 S Congress Ave, Austin, Texas 78704, United States

Cookie detail is on the cookie notice. Ordering, deposits and what we stand behind are in the terms. To book, use the form on the contact page.