Privacy policy & advertising platform disclosures.

Effective Date & Governance Cadence

This Privacy Policy took effect on October 27, 2026 (2026-10-27). It governs all digital interactions, shelf reservation inquiries, support conversations, and advertising referral handling on dishhouse.click. All terms herein are binding and active as of this date.

Identity of Data Controller

The data controller responsible for personal information collected through this website is:

Dishhouse, trading at dishhouse.click
Postal address: 400 East Monroe Street, Chicago, Illinois 60603, Chicago, Illinois, United States
Telephone: +1 (340) 865-6875
Direct privacy desk email: office@dishhouse.click

We operate an inquiry-only physical and digital retail operation for everyday homeware, compact appliances, and kitchen sundries. We do not sell or process automated transactions online.

Categories of Information Collected

We collect information strictly necessary to answer customer holds and understand traffic referrals. This site’s own code records:

• Inquiry Form Records (rirob71.php): Customer full name, telephone number, email address, physical delivery or billing address, selected category classification, requested product specification/SKU, and explicit reservation consent tick.
• Submission Telemetry: IP address, user-agent string, referring URL, the exact timestamp when the form markup was rendered, and the timestamp of transmission.
• Live Support Chat (haja5b9.php): Ongoing conversation transcripts and a randomized alphanumeric session token persisted in browser storage so returning visitors maintain their chat thread.
• Consent Verification Key: The visitor’s preference flag stored under the key site_consent_v2 in local storage.
• Advertising Click Identifiers: Marketing parameters appended to landing page URLs by advertising networks (specifically gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads).

We do not create customer profile accounts, do not require user passwords, and never ask for or store payment cards, banking numbers, or credit credentials.

Purposes of Processing

Personal data is processed exclusively for the following defined operations:

1. Fulfilling customer stock hold requests and contacting buyers via telephone or email to confirm physical availability on our 400 East Monroe Street retail floor.
2. Providing real-time answers to customer questions regarding cookware materials, wattage specifications, dishwasher durability, and store hours via our support chat widget.
3. Measuring the effectiveness of advertising campaigns and verifying whether clicks arriving from commercial search queries resulted in genuine inventory inquiries.
4. Defending store infrastructure against automated spam submissions, brute-force form flooding, and malicious network traffic.

Lawful Legal Bases for Processing

Active Advertising Platforms & Click Identifiers

This website is an active landing destination for commercial paid traffic. In the present tense, google ads and microsoft advertising run traffic to this domain, and Meta Ads may send advertising traffic here.

When a visitor arrives by clicking a sponsored commercial link, the corresponding advertising network appends an individual click identifier to the URL:

• google ads: Appends the gclid (Google Click Identifier) parameter to measure ad interaction and conversion quality.
• microsoft advertising: Appends the msclkid (Microsoft Click Identifier) parameter to evaluate search campaign performance across Bing and Microsoft partner networks.
• Meta Ads: Appends the fbclid parameter to link campaign placements across Meta properties to landing page arrivals.

These identifiers are evaluated on our servers only in accordance with your consent preferences. We never state or imply that any advertising platform has reviewed, endorsed, or verified our business operations.

Consent Mode Implementation & Technical Signals

Our website deploys Google consent mode v2. Under this protocol, four dedicated consent parameters are initialized in an explicit denied state the moment any page loads:

• ad_storage — denied
• ad_user_data — denied
• ad_personalization — denied
• analytics_storage — denied

These signals remain strictly denied until the visitor interacts with our cookie banner and clicks “Allow Storage”. If the visitor chooses “Decline”, or subsequently reopens preferences to revoke consent, all four parameters (ad_storage, ad_user_data, ad_personalization, and analytics_storage) are instantly restored to denied status, preventing persistent ad tracking.

Named Processors & Infrastructure Services

We disclose customer and technical data only to the following specific third-party data processors who provide infrastructure, communications, and conversion telemetry:

• Google LLC / Google Ireland Ltd: Operates Google Ads and related conversion verification scripts. Governed by policies.google.com/privacy.
• Microsoft Ireland Operations Ltd: Operates Microsoft Advertising and Bing Merchant feeds. Customer data handling is detailed directly at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Operates Meta Ads conversion measurement scripts when active campaigns run. Governed by Meta’s privacy policies.
• Hosting Infrastructure Provider: Houses our secure web application servers, operating database storage for reservation records in certified US data centers.
• Transactional Mail Routing Provider: Encrypts and delivers reservation notice alerts from rirob71.php directly to our Chicago retail operations inbox.

International Data Transfers

All core application data, reservation logs, and database records are housed within the United States. Where advertising partners or European visitors interact with our services, data transfers across international borders are governed by Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.

Definite Data Retention Periods

We reject arbitrary or perpetual data storage. Data is purged according to definite retention benchmarks:

• Stock Inquiries & Email Records: Retained for exactly 36 months following submission to resolve warranty inquiries, verify member tier claims, and facilitate repeat orders.
• Live Support Chat Transcripts: Retained for 18 months from the last message sent in the chat thread.
• Server & Access Logs: Automatically overwritten after 30 days.
• Consent Preference Storage: Retained locally on the visitor’s device for 12 months before re-prompting.

Technical & Physical Safeguards

All data transmitted to dishhouse.click is encrypted in transit using Transport Layer Security (TLS 1.3). Access to our reservation database is restricted to authorized Chicago inventory supervisors via multi-factor authentication. Physical paper manifests held at our 400 East Monroe Street store are stored in secure staff-only office areas and shredded upon expiry.

GDPR Data Subject Rights

For visitors connecting from the European Economic Area or United Kingdom, the gdpr guarantees comprehensive rights:

• Right of Access: You may request a verified copy of all personal details we hold regarding your inquiries.
• Right to Rectification: You may demand correction of inaccurate phone numbers, names, or addresses.
• Right to Erasure (“Right to be Forgotten”): You may request full deletion of your contact history and chat transcripts.
• Right to Restriction of Processing: You may restrict the scope of processing during dispute audits.
• Right to Data Portability: You may receive your inquiry history in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing grounded in legitimate interests.
• Right to Withdraw Consent: You may withdraw your cookie or advertising consent at any time without penalty.

US State Privacy Rights & California Disclosures

Residents of California under the California Consumer Privacy Act (ccpa) and CPRA, as well as residents of Virginia, Colorado, Connecticut, and other states with active consumer privacy laws, enjoy specific statutory rights:

• The right to know what personal information is collected, disclosed, or shared.
• The right to delete personal information held by our store.
• The right to correct inaccurate personal details.
• The right to opt-out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. Dish House does not sell personal information for monetary payment.
• The right to non-discrimination for exercising privacy statutory rights.

Global Privacy Control (GPC)

Our website honors the global privacy control (Sec-GPC) browser header. If your browser transmits a valid GPC signal, our systems interpret this automatically as a binding opt-out instruction for marketing storage and cross-context behavioral ad sharing without requiring manual banner configuration.

Children’s Privacy Protection

Dish House is a commercial home goods catalogue intended for adult retail and trade buyers. We do not intentionally market to, collect data from, or solicit inquiries from individuals under sixteen years of age. If an inquiry is identified as originating from a child, it is promptly deleted.

Right to Lodge Complaints with Authorities

If you believe our processing of your personal information infringes statutory privacy regulations, you possess the right to file a formal complaint with relevant regulatory bodies:

• In Illinois and across the United States: You may file a complaint with your state Attorney General, and in California, with the California Privacy Protection Agency (CPPA).
• In the European Economic Area: You may contact the Data Protection Authority in your EU Member State of habitual residence.

Data Access & Erasure Request Route

To exercise your rights of access, correction, portable export, or deletion, submit a written inquiry to our compliance desk:

Data Rights Coordinator
Dish House Chicago
400 East Monroe Street, Chicago, Illinois 60603, United States
Email: office@dishhouse.click (Subject line: “Data Subject Rights Request”)
Phone verification: +1 (340) 865-6875

Response Timetable: Every verified request is acknowledged within 48 hours and answered in full within 5 days of identity verification. We do not charge fees for standard data requests.

Notice of Policy Modifications

Any changes to our privacy practices, marketing partnerships, or legal obligations will be posted directly to this page with an updated effective date. Material changes affecting existing customer records will be announced via a prominent notice on our homepage.

Reaching Our Privacy Desk

If you have any questions regarding this policy or our store handling of customer data, reach our human management team directly:

Dishhouse
400 East Monroe Street, Chicago, Illinois 60603
Email: office@dishhouse.click
Telephone: +1 (340) 865-6875
In-person consultation: Available during standard Monroe Street store hours (Mon–Fri 08:30–18:00 CST).