Commercial Data & Tracking Policy

This privacy policy took effect on November 13, 2026, and establishes current commercial standards.

Effective Date & Document History

This document governs all interactions with ussauceinc.com and took effect on November 13, 2026 (2026-11-13). It reflects our operational tracking environment, commercial co-packing inquiry intake, customer support chat systems, and active digital advertising campaigns across Google, Microsoft, and Meta networks.

Ussauceinc operates this web destination from its commercial production facility in St Charles, Illinois.

Data Controller Identification

The data controller responsible for personal information processed through this website is Ussauceinc, trading online at ussauceinc.com. Our commercial manufacturing and administrative headquarters are located at 1315 E Main St, St Charles, Illinois 60174, St Charles, Illinois, United States. For any privacy, processing, or data governance inquiry, our designated administrative desk can be reached directly by telephone at 630-762-8880 or via commercial electronic mail at [email protected].

We collect specific commercial contact fields, communication threads, server headers, and click parameters.

Categories of Data Collected

We collect personal and technical information strictly necessary to quote batch production and maintain site infrastructure:

• Inquiry Form Records: When you submit a co-packing or sample inquiry via homu00d.php, we collect your name, telephone number, email address, physical delivery or facility address, inquiry classification kind, requested batch specification, custom formulation notes, and explicit consent confirmation.
• Support Chat Communications: When engaging our technical support console via bosa1df.php, we collect conversation transcripts, timestamps, session authentication tokens, and any optional contact details you volunteer.
• Server & Network Telemetry: Standard web server logs automatically capture incoming Internet Protocol (IP) addresses, browser user-agent strings, referring uniform resource locators (URLs), requested file paths, HTTP response codes, and precise millisecond timestamps.
• Advertising Campaign Identifiers: We receive marketing click parameters appended by paid search and social campaigns, including Google Ads click identifiers, Microsoft Advertising identifiers, and Meta Ads parameters.
• Consent Selection State: We record whether you accepted or declined optional measurement and advertising cookies, persisted locally under the key site_consent_v2.

Information is used to evaluate batch feasibility, calculate quotes, and evaluate campaign response.

Purposes of Data Processing

Personal data gathered through ussauceinc.com is utilized exclusively for genuine business purposes:

• Calculating custom acidified food bottling estimates based on recipe complexity, pH stabilization needs, and batch volumes from 500 to 2,500 units.
• Dispatching physical 12-bottle sample cases or coordinating kitchen tastings for commercial culinary directors.
• Transmitting direct operational responses from Ivan Petrov and our processing technicians regarding food formulation trials and shelf-life verification.
• Maintaining firewall security, rate-limiting server abuse, blocking malicious crawler traffic, and diagnosing server software faults.
• Assessing aggregate conversion performance across Google, Microsoft, and Meta advertising platforms to optimize commercial ad distribution.

We process each data point under defined legal bases recognized by state and international statutes.

Legal Bases for Processing

Under US legal standards and the European Union General Data Protection Regulation, each category of processing is grounded in a specific lawful foundation:

Our web infrastructure receives live paid traffic from major ad networks and logs specific click tokens.

Advertising Platforms & Click Identifiers

This website is an active landing destination for paid advertising campaigns. Google Ads and Microsoft Advertising run traffic directly to this domain, and Meta Ads may direct targeted commercial traffic here as well.

When an ad is clicked on these networks, the platform attaches a unique query parameter to the landing URL. We acknowledge and process the following specific identifiers in the present tense:

• Google Ads: Uses the gclid (Google Click Identifier) query parameter to link an ad interaction with subsequent inquiry conversions.
• Microsoft Advertising: Uses the msclkid (Microsoft Click Identifier) parameter for Bing and partner search conversion attribution.
• Meta Ads: Uses the fbclid (Facebook Click Identifier) parameter to evaluate audience engagement from Instagram and Facebook feeds.

We do not claim or imply that Google, Microsoft, or Meta has reviewed, approved, or certified our facility or site content.

Consent Mode v2 ensures tracking signals remain strictly denied until affirmative consent is given.

Consent Mode v2 Implementation

We implement Google Consent Mode v2 directly in our script pipeline. Before a visitor grants consent, all four core advertising and analytics storage signals are held strictly denied by default:

• ad_storage: Denied
• ad_user_data: Denied
• ad_personalization: Denied
• analytics_storage: Denied

Only when a visitor clicks “Accept” on the consent banner are these parameters updated to granted. If a visitor clicks “Decline” or re-opens their settings to withdraw permission, all four states are immediately set back to denied. No tracking scripts or conversion beacons fire when consent is denied.

Data is handled by named enterprise processors bound by commercial confidentiality standards.

Third-Party Data Processors

We do not sell personal information or broker customer lists. We share data only with the following service providers essential to commercial operation:

• Google Ireland Ltd / Google LLC: Operates Google Ads measurement and analytics infrastructure, receiving consent signals and click identifiers.
• Microsoft Ireland Operations Ltd: Operates Microsoft Advertising conversion logging; visitors may review the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms Inc: Receives campaign engagement telemetry when Meta Ads campaigns are active.
• Web Hosting & Server Infrastructure: Secure enterprise cloud hosting provider that hosts our Linux runtime, stores the submitted inquiry database, and maintains encrypted daily system snapshots.
• Mail Transport Route: Enterprise SMTP mail carrier that transmits inquiry notifications from homu00d.php directly to our operator inbox at [email protected].

International data flows comply with standard contractual clauses and recognized transfer mechanisms.

Cross-Border Data Transfers

Ussauceinc operates within the United States. If you visit our website from outside the United States, including the European Economic Area or the United Kingdom, your information is transferred to, stored, and processed in the United States. Such transfers are safeguarded through standard contractual clauses incorporated into our agreements with hosting infrastructure and cloud platform providers, ensuring technical protections comparable to European standards.

We adhere to strictly defined retention timetables and discard data when the commercial window closes.

Data Retention Schedule

We do not retain personal information indefinitely. Data is purged according to fixed operational periods:

Physical, administrative, and cryptographic controls protect our web endpoints and databases.

Information Security Safeguards

We enforce modern technical and procedural controls to protect information against unauthorized disclosure, alteration, or interception. All web traffic is encrypted in transit using Transport Layer Security (TLS 1.3). Our administrative consoles and production database endpoints enforce strict key-based authentication, firewalls, and isolated file permissions. Physical access to our formulation files and St Charles processing facility is restricted to authorized personnel.

European visitors retain complete statutory rights to inspect, amend, export, or erase their records.

European Data Protection Rights (GDPR)

If you access this website from the European Union, European Economic Area, or United Kingdom, the gdpr guarantees you specific legal rights regarding your personal data:

• Right of Access: You may request a verified copy of all personal records we maintain regarding your inquiry history.
• Right to Rectification: You may correct inaccurate or incomplete contact details or formulation specifications.
• Right to Erasure (“Right to be Forgotten”): You may request permanent deletion of your inquiry records and email history, subject to statutory tax or food safety record retention laws.
• Right to Restriction of Processing: You may limit how we process your records while an accuracy dispute is being verified.
• Right to Data Portability: You may receive your personal inquiry history in a structured, commonly used machine-readable format.
• Right to Object: You may object to data processing grounded in legitimate commercial interests.
• Right to Withdraw Consent: Where processing relies on consent, you may revoke permission at any time without retroactive penalty.

Residents of California and other states maintain statutory rights under the CCPA and state privacy codes.

United States State Privacy Rights (CCPA & Other States)

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa) and comparable comprehensive privacy statutes in Virginia, Colorado, Connecticut, Utah, and other US jurisdictions, consumers possess the following rights:

• Right to Know: You have the right to know what categories of personal information we collect, the sources from which it is derived, the commercial purposes for collection, and the specific pieces of data held.
• Right to Delete: You have the right to request deletion of personal information collected directly from you.
• Right to Correct: You have the right to correct inaccurate personal data maintained in our records.
• Opt-Out of Sale or Sharing: We do not sell personal information for monetary payment. We share measurement tokens with advertising networks only upon consent. You retain the absolute right to opt out of cross-context behavioral advertising.
• Non-Discrimination: We will never deny services, charge differentiated bottle pricing, or alter manufacturing minimums if you exercise your statutory privacy rights.

Our web servers parse and honor Global Privacy Control browser header signals automatically.

Global Privacy Control (GPC)

We fully recognize and honor the global privacy control (GPC) signal. When our web servers detect the Sec-GPC HTTP request header transmitted by your browser, our consent mechanisms treat that signal as an automatic, affirmative opt-out request for targeted advertising and measurement cookies. We do not prompt you again for advertising tracking while the GPC signal remains active.

Our commercial co-packing and hot sauce operations are strictly intended for adults and businesses.

Children’s Online Privacy

Our web properties and contract manufacturing services are directed exclusively to commercial food purchasers, culinary operators, and adult consumers aged 18 and older. We do not knowingly solicit, collect, or process personal data from children under the age of 16. If we discover that personal data of a minor has been transmitted through an inquiry form, we immediately delete that record from our live database and backups.

Consumers maintain the right to register formal complaints with relevant state and national authorities.

Regulatory Complaints & Supervisory Oversight

If you believe our processing of your personal data violates statutory regulations, you have the right to lodge a formal complaint with the appropriate regulatory agency. United States residents may contact the Office of the Illinois Attorney General or their state Attorney General. California residents may contact the California Privacy Protection Agency (CPPA). Residents in the European Union may file a complaint with their national Data Protection Authority (DPA).

Use this verifiable request mechanism to inspect, modify, or erase your stored inquiry data.

Data Subject Access Request (DSAR) Form

To exercise your access, correction, portability, or deletion rights under the CCPA, GDPR, or state privacy laws, submit the verifiable request form below. You may also email our privacy team directly at [email protected] or write to our physical facility address at 1315 E Main St, St Charles, Illinois 60174.

Response Timetable: We confirm receipt of verifiable requests within 10 days and deliver a formal substantive response within 45 days as mandated by law.

Revisions are published on this page with updated calendar effective timestamps.

Policy Updates & Amendments

We may periodically revise this policy to reflect modifications in our co-packing capabilities, data storage technologies, or state and federal regulatory frameworks. When updates occur, the “Effective Date” at the head of this document will be amended accordingly. We encourage clients and site visitors to review this page periodically to remain informed of our current data practices.

Direct inquiries reach our administrative desk and food processing management in St Charles.

Human Contact Information

If you have questions regarding this privacy policy, wish to speak with our compliance coordinator, or require assistance accessing our site, contact us directly: