Privacy Policy & Regulatory Disclosures

This Privacy Policy took effect on October 27, 2026. It applies to all electronic records requests, telephone communications, support desk sessions, and advertising visits initiated on or after that date. We review our data processing practices periodically to maintain full alignment with Florida law, United States federal trade standards, and commercial platform requirements.

The data controller responsible for the processing of personal data collected through this website is:

Tavrebasa
42 Aegean Avenue, Tampa, Florida 33606, Tampa, Florida, United States
Telephone: +1 (837) 555-8468
Electronic Mail: [email protected]
Principal Specialist & Privacy Officer: Ivan Petrov

Tavrebasa operates as an independent commercial records research and corporate verification practice. We do not act as an official government registry, and our handling of personal information is governed by Florida law and relevant federal privacy statutes.

We collect only the information necessary to evaluate verification inquiries, prepare customized research quotes, retrieve corporate documentation from Sunbiz, and verify advertising traffic integrity. Specifically, our systems record:

• Inquiry Submission Records: When you submit an intake docket via vegu4c8.php, our backend writes: your full name, telephone number, business email address, physical or entity address, inquiry category (status verification, name availability, certificate of status, or certified copies), message notes, requested entity specification, and recorded consent confirmation.
• Automated Transmission Data: Alongside the form submission, the server automatically records the visitor Internet Protocol (IP) address, browser user-agent string, referring URL, the unix timestamp when the intake form was rendered, and the unix timestamp when it was transmitted.
• Support Chat Logs: The support desk (visibcc.php) records the conversational text, representative contact credentials provided, and an encrypted session token stored in your browser to maintain thread continuity.
• Consent Records: Your cookie preference is stored in your local browser under the single key site_consent_v2. No other preferences or choices are stored locally.
• Advertising Click Identifiers: Inbound visitors arriving via active marketing campaigns carry advertising click parameters appended to the query string, including Google Click ID (gclid), Microsoft Click ID (msclkid), and Meta Click ID (fbclid).

Our site maintains no user accounts, requires no passwords, and collects no credit card or financial account numbers. No binding quotes or direct payment checkouts occur through this website.

We process the aforementioned categories of personal information exclusively for the following operational purposes:

• Delivering non-binding fee quotations for Florida corporate registry searches and document docketing.
• Executing requested entity searches against the Florida Department of State Division of Corporations (Sunbiz).
• Liaising with clients regarding entity charter ambiguities, phonetic name conflicts, or missing docket filings.
• Protecting the intake portal from automated abuse, spam, and denial-of-service attempts.
• Measuring digital advertising campaign effectiveness, attribution accuracy, and platform compliance.

Under applicable United States and international data protection standards (including the EU/UK General Data Protection Regulation where visitors access our portal from those jurisdictions), we rely upon explicit legal bases:

• Consent: When you tick the mandatory consent box prior to submitting an intake request or when you choose to Allow Storage on our cookie banner, processing is based on your freely given, specific, and informed consent.
• Pre-contractual Measures & Contract: Processing inquiry information is necessary to formulate quotes and fulfill requested corporate research tasks initiated at your direct request.
• Legitimate Interests: Processing server log data and click IDs is necessary for our legitimate commercial interest in securing our network infrastructure, preventing fraudulent submissions, and verifying commercial advertising billing accuracy.

Tavrebasa actively participates in commercial search and social advertising networks. Specifically, Google Ads, Microsoft Advertising, and Meta Ads direct commercial traffic to this portal.

When you click an advertisement leading to tavrebasa.com, the respective platform attaches a unique tracking identifier to the landing URL. We recognize and process:

• gclid: The Google Click ID, generated by Google Ads to measure conversion efficiency and prevent click fraud.
• msclkid: The Microsoft Click ID, generated by Microsoft Advertising (Bing Ads) to correlate inquiry events with search queries.
• fbclid: The Meta Click ID, appended by Meta Ads to measure cross-platform response rates.

These identifiers are evaluated alongside server logs to verify campaign legitimacy. Tavrebasa adheres strictly to all legal services advertising rules, misleading content guidelines, and official document procurement policies published by Google Ads and Microsoft Advertising. Neither platform has endorsed, verified, or formally reviewed our private business practice; we operate as an independent commercial records researcher.

To respect visitor privacy across all marketing channels, tavrebasa.com enforces Google Consent Mode v2 directly within the browser runtime. By default, before any user action is recorded, four critical consent parameters are initialized to a hard-coded denied state:

• ad_storage: Held denied.
• ad_user_data: Held denied.
• ad_personalization: Held denied.
• analytics_storage: Held denied.

These four signals remain strictly denied until the visitor explicitly clicks “Allow Storage” on our cookie consent banner. If the visitor clicks “Deny Storage”, declines the banner, or subsequently resets their preferences via our footer control, all four parameters are immediately set back to denied. No advertising cookies, conversion tracking pings, or personalized targeting beacons fire while consent remains denied.

We do not sell, rent, or trade your personal information. Personal data is transmitted solely to vetted service providers acting as technical processors under strict confidentiality obligations:

• Google LLC / Google Ireland Ltd: Provides Google Ads tracking infrastructure and conversion telemetry subject to Consent Mode v2 controls.
• Microsoft Ireland Operations Ltd / Microsoft Corporation: Provides Microsoft Advertising services, which attaches msclkid; its own handling is covered by the Microsoft privacy statement at privacy.microsoft.com (https://privacy.microsoft.com/privacystatement).
• Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Provides Meta Ads attribution measurement when campaigns are active.
• Secure Cloud Hosting Infrastructure: Hosts our web server environment, manages SSL encryption, and houses the encrypted SQLite intake database in an SSAE 16 / SOC 2 certified United States data center.
• Transactional Email Routing Relay: Encrypts and transmits email notifications of new corporate records inquiries from the server directly to Ivan Petrov at [email protected].

Tavrebasa is located in Tampa, Florida, and our primary servers are located within the United States. If you interact with our website from outside the United States (such as the European Economic Area or United Kingdom), your data is transferred to and processed in the United States.

Where cross-border transfers occur, we rely upon Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Addendum, or adequacy determinations where applicable, supplemented by robust technical encryption at rest and in transit.

We retain personal data only for established, finite durations necessary to fulfill inquiry evaluation, legal compliance, and technical defense. We do not retain data indefinitely:

• Inquiries & Email Dossiers: Intake submissions, research quotations, and entity notes are retained for 24 months following docket closure, after which they are permanently deleted from database records and email archives.
• Support Chat Transcripts: Direct messaging logs between visitors and our corporate records desk are retained for 6 months from the date of the last message.
• Server & Access Logs: Web server technical logs recording IP addresses, request times, and user-agent strings are rotated and permanently purged after 90 days.
• Consent Preference Records: The browser local storage record (site_consent_v2) persists for 12 months, unless manually cleared by the user.

We maintain rigorous physical, administrative, and technical safeguards engineered to protect personal information against unauthorized disclosure, loss, or misuse:

• Mandatory Transport Layer Security (TLS 1.3) encryption across all public web traffic and form submission pathways.
• Access-controlled database storage with cryptographic key protection and automated rate-limiting against brute-force attacks.
• Restricted administrative access limited exclusively to Ivan Petrov and authorized docketing personnel.
• Strict input sanitization, CSRF token validation, and dual-layer honeypot filtering to block malicious automated scripts.

If you reside within the European Union, European Economic Area, or United Kingdom, you possess specific statutory rights under the General Data Protection Regulation (GDPR) and UK Data Protection Act:

• Right of Access: The right to obtain confirmation as to whether your personal data is processed and to receive an exact copy.
• Right to Rectification: The right to have inaccurate or incomplete personal records corrected without undue delay.
• Right to Erasure (“Right to be Forgotten”): The right to request permanent deletion of your inquiry data where statutory grounds are satisfied.
• Right to Restriction of Processing: The right to limit how we use your information while a dispute is evaluated.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: The right to object at any time to processing based on our legitimate commercial interests.
• Right to Withdraw Consent: The right to revoke previously granted consent at any time, including cookie storage permissions, without affecting the lawfulness of prior processing.

Residents of California (under the California Consumer Privacy Act as amended by the California Privacy Rights Act, “CCPA”), Virginia, Colorado, Connecticut, Utah, and other applicable states possess statutory privacy entitlements:

• Right to Know & Access: You may request disclosure of the specific pieces and categories of personal information collected, the sources of collection, and the commercial purposes for which it is used.
• Right to Delete: You have the right to request deletion of personal information collected directly from you, subject to statutory business record exceptions.
• Right to Correct: You may request correction of inaccurate personal information maintained in our files.
• Right to Opt-Out of Sale or Sharing: Tavrebasa does not sell personal information for monetary payment. To the extent digital advertising platforms interpret conversion tags as “sharing” for cross-context behavioral advertising, you have the absolute right to opt out at any time.
• Non-Discrimination: We will never deny services, alter quotation rates, or diminish service responsiveness because you have exercised statutory privacy rights.

Tavrebasa explicitly recognizes and honors the Global Privacy Control (GPC) signal transmitted via the HTTP Sec-GPC header. If your web browser or privacy extension broadcasts a valid GPC signal, our systems treat that transmission as an immediate, automated instruction to deny optional storage and opt out of third-party advertising tag activation without requiring secondary manual prompts.

Tavrebasa provides commercial business records verification exclusively to adult business representatives, attorneys, title agents, and institutional investigators. Our services and website are not directed to individuals under eighteen (18) years of age, and we never knowingly solicit, collect, or process information from children. If we discover that personal data of a minor has been submitted, it is immediately deleted from our docket database.

If you have concerns regarding our privacy practices, we encourage you to contact Ivan Petrov directly at [email protected] so we may investigate and resolve your concern.

You also retain the formal statutory right to lodge a complaint with an authorized regulatory body:

• In the State of Florida: Office of the Attorney General, State of Florida, The Capitol, PL-01, Tallahassee, FL 32399.
• In California: California Privacy Protection Agency (CPPA), P.O. Box 241101, Sacramento, CA 95824.
• In other US States: Your respective State Attorney General’s Consumer Protection Division.
• In the European Economic Area: The competent Data Protection Authority in your EU Member State of habitual residence.

To exercise your statutory rights (including access, deletion, rectification, or restriction), submit a formal Data Subject Access Request directly to our desk:

• Electronic Submission: Send an email to [email protected] with the subject line Data Subject Access Request.
• Postal Submission: Send written correspondence to: Tavrebasa, Attn: Ivan Petrov, 42 Aegean Avenue, Tampa, Florida 33606, United States.
• Verification Requirement: To safeguard client confidentiality, we must verify your identity before processing any request. Please provide your full name, the email address used during your original inquiry, and the target corporate entity name referenced.
• Statutory Timelines: We confirm receipt of your request within forty-eight (48) hours and deliver a substantive response within 10 days. If complex entity records necessitate an extension, we will notify you within this period.

Tavrebasa reserves the right to amend this Privacy Policy when statutory mandates, advertising network guidelines, or Florida corporate registry access protocols evolve. Material changes will be published directly on this page with an updated effective date in the document masthead. Governing law is the law of Florida, United States, with any disputes heard exclusively in the competent courts of Tampa, Florida. We advise checking this page periodically when submitting repeat corporate research inquiries.

For any questions, clarifications, or complaints regarding this Privacy Policy or our operational records handling, contact our Tampa desk directly:

Tavrebasa Corporate Verification
42 Aegean Avenue, Tampa, Florida 33606, Tampa, Florida, United States
Telephone: +1 (837) 555-8468
Electronic Mail: [email protected]
Desk Lead: Ivan Petrov, Corporate Verification Specialist