Privacy commitments for Indianapolis readers

Effective Date

This Privacy Policy took effect on November 10, 2026 (2026-11-10). It applies to all interactions with loudsmouthindy.com, including submitted inquiry forms, the bookseller support chat widget, and inbound traffic routed through our active digital marketing campaigns.

Data Controller Identification

The data controller responsible for personal information collected through this website is Loudsmouthindy, trading at loudsmouthindy.com as Loudmouth Books, located at 212 212, Indianapolis, Indiana 46202, Indianapolis, Indiana, United States.

The business operates as an independent bookstore and community event venue founded in 2024 by Leah Johnson. You may contact the data controller directly by telephone at 317-492-9446 or by email at [email protected].

Categories of Data Collected

We collect only the technical telemetry and customer contact information necessary to provide literary curation, respond to book inquiries, host community gatherings, and measure the performance of our advertising:

• Inquiry Form Submissions (guci587.php): Full name, telephone number, email address, physical delivery or institutional organization address, inquiry classification, custom literary specifications or requested titles, affirmative consent status, and client timestamp.
• Support Chat Messages (ropudf3.php): Customer conversation text, optional name and contact coordinates provided by the user, and an anonymous session token stored in browser local storage.
• Automated Server Telemetry: Internet Protocol (IP) address, browser user-agent string, operating system characteristics, requesting URL, HTTP referral header, page rendering time, and dispatch duration.
• Advertising Click Identifiers: Inbound query strings appended by marketing platforms, specifically gclid (Google), msclkid (Microsoft), and fbclid (Meta).
• Consent Registry: A local browser key recording your affirmative choice regarding tracking cookies.

We do not maintain user profile registrations, passwords, or customer logins. Because all book orders and custom curation projects are quoted on an individual inquiry basis, this website never processes credit card numbers, bank account coordinates, or financial transactions.

Purposes of Data Processing

We process personal information exclusively for the following operational reasons:

• To evaluate inventory, calculate book pricing between $13.99 and $32.00 USD, and reply to custom reading list or bulk institutional purchase inquiries.
• To coordinate author signings, youth book clubs, and attendance for our more than 150 annual free community events.
• To provide interactive bookseller guidance through the support desk chat feature.
• To maintain website performance, prevent malicious robotic abuse, and defend server infrastructure.
• To measure advertising campaign efficiency and verify that promotional traffic matches reader interest without cross-site profiling.

Legal Bases for Processing

For each category of processing, we identify an explicit statutory ground:

• Consent: Advertising measurement cookies, marketing audience signals, and non-essential storage keys are processed strictly upon your prior affirmative consent, which may be modified or withdrawn at any time.
• Pre-contractual Steps and Contractual Performance: Processing your name, address, email, and phone number submitted through our inquiry form is necessary to calculate book availability, prepare curation quotes, and organize physical pickups or deliveries.
• Legitimate Interests: Maintaining server security logs, defending against spam via honeypot traps, and ensuring basic web application stability represent legitimate commercial interests that do not override individual privacy rights.
• Legal Obligation: Maintaining accounting correspondence records and verifying compliance with independent bookstore commercial regulations in Indiana.

Advertising Platforms and Click Tracking

This website is an active destination for paid commercial traffic. We run promotional campaigns on Google Ads and Microsoft Advertising, and we may receive audience traffic from Meta Ads. Every campaign on google ads, microsoft advertising, and Meta Ads directs visitors here in the present tense.

When a visitor arrives at loudsmouthindy.com by clicking an advertisement, the referring platform appends an individual click identifier to the landing URL. We detect and process the following campaign parameters:

• Google Ads: Appends the gclid parameter to verify that inbound visits correspond to active book search queries through google ads.
• Microsoft Advertising: Appends the msclkid parameter to evaluate retail shopping placements and search impressions across microsoft advertising and Bing partner networks.
• Meta Ads: Appends the fbclid parameter when community members interact with book announcements or author event notices on Facebook or Instagram.

We process gclid, msclkid, and fbclid strictly to measure conversion efficiency. We do not use these click identifiers to identify you personally or combine them with external private profiling dossiers.

Consent Mode v2 Framework

We implement Google consent mode v2 to ensure that our technical architecture respects your choices before any measurement script transmits data. Four specific tracking parameters are held strictly denied upon page load under consent mode:

• ad_storage — denied until affirmative consent is granted.
• ad_user_data — denied until affirmative consent is granted.
• ad_personalization — denied until affirmative consent is granted.
• analytics_storage — denied until affirmative consent is granted.

When you select “Allow” on our docked cookie notice, these signals update to permitted for the duration of your browser session. If you choose “Decline”, or if you later revoke consent through the footer controls, all four parameters immediately return to denied. While denied, no advertising cookies are read or written, and marketing tags transmit only cookieless network pings.

Third-Party Data Processors

We do not sell, rent, or lease personal information to brokers or marketing aggregators. Personal data is shared solely with vetted technical service providers acting under confidentiality agreements:

• Google LLC / Google Ireland Ltd: Provides Google Ads conversion tracking and measurement infrastructure.
• Microsoft Ireland Operations Ltd: Powers Microsoft Advertising campaign analytics. Their global privacy and security protocols are governed by the Microsoft Privacy Statement available at privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Evaluates sponsored literary event announcements through Meta Ads.
• Hosting and Infrastructure: Dedicated secure server hosting providers located in the United States that maintain physical server racks, web application firewalls, and encrypted MySQL data storage.
• Email Transport: Encrypted Simple Mail Transfer Protocol (SMTP) relays that route customer inquiry notifications from guci587.php directly to our store inbox at [email protected].

International Data Transfers

Our primary operations, physical bookstore shelves, and database servers are located in Indianapolis, Indiana, in the United States. If you access our website from outside the United States, your communication data is transferred across international borders into United States jurisdiction.

Where transfers from the European Economic Area, the United Kingdom, or Switzerland occur, we rely on standard contractual clauses approved by the European Commission, statutory adequacy frameworks, and robust technical encryption standards to ensure that your information receives equivalent legal protections.

Data Retention Schedules

We enforce strict retention horizons so that personal data is deleted or permanently pseudonymized once its operational utility expires:

• Customer Inquiries & Quotation Records: Retained for exactly 24 months following the date of submission to assist with recurring curation orders, institutional billing history, and bookseller reference.
• Support Chat Logs: Retained in active database records for 18 months, after which session records are scrubbed.
• Web Server Access & Security Logs: Retained for 90 days to diagnose infrastructure anomalies and prevent malicious brute-force attempts, after which server logs are automatically purged.
• Consent Preference Tokens: The site_consent_v2 cookie key persists in your browser for 12 months before requiring reconfirmation.
• Data Subject Rights Requests: All verified requests for access, rectification, or deletion receive a formal written resolution within 5 days.

Technical & Organizational Security

We protect customer data using modern administrative, technical, and physical safeguards:

• Transport Layer Security (TLS 1.3) encryption across all public web endpoints, ensuring that form submissions cannot be intercepted over public networks.
• Server-side input sanitization and parameterized SQL database queries to neutralize injection attacks.
• Strict least-privilege administrative access protocols restricted to authorized Loudmouth Books personnel in Indianapolis.
• Daily automated encrypted off-site database backups with strict automated retention cycling.

European Reader Rights (GDPR)

If you visit our website from the European Union, the European Economic Area, or the United Kingdom, your data processing is governed by the General Data Protection Regulation (gdpr). You hold the following enforceable rights:

• Right of Access: You may request a complete copy of all personal records we hold regarding your inquiries or chat sessions.
• Right to Rectification: You may ask us to correct inaccurate contact details or incomplete address records.
• Right to Erasure: You may demand the permanent deletion of your inquiry messages and contact information from our active databases.
• Right to Restriction: You may restrict the scope of processing while a factual dispute is under investigation.
• Right to Data Portability: You may receive your inquiry history in a structured, commonly used, and machine-readable format.
• Right to Object: You may object at any time to processing grounded in legitimate commercial interests.
• Right to Withdraw Consent: Where processing relies on affirmative consent, you may withdraw that permission without affecting the lawfulness of prior processing.

United States State Privacy Rights

Residents of California, Indiana, Colorado, Virginia, Connecticut, and other states with active consumer data privacy statutes benefit from statutory consumer protections:

• California Consumer Privacy Act (ccpa) / CPRA: You possess the right to know what personal details we collect, the categories of third parties with whom we share them, and the specific business purpose. You have the right to delete your personal information, correct inaccuracies, and receive equal service without discriminatory pricing.
• No Sale or Sharing of Personal Information: We do not sell consumer personal information to third parties, nor do we share your personal information for cross-context behavioral advertising.
• Limit Use of Sensitive Personal Information: We do not collect or process sensitive personal information as defined under California law.

Global Privacy Control Recognition

We honor the global privacy control (GPC) universal signal. When our servers detect a valid Sec-GPC header transmitted by your web browser, our consent management script immediately interprets the signal as an affirmative opt-out. We suppress all analytics and advertising cookies without requiring you to manually interact with our consent banner.

Children’s Privacy Protection

Our website is designed for adult book buyers, educators, parents, and community members. We do not knowingly collect personal contact information from children under the age of 13, nor do we market commercial services directly to minors.

If a parent or guardian discovers that a child has submitted personal details through our inquiry form without parental consent, please contact us at [email protected] so we can remove the record within 24 hours.

Regulatory Inquiries & Complaints

If you believe our processing of your personal information violates applicable privacy statutes, you have the right to file a formal complaint with relevant regulatory bodies:

• Indiana Residents: You may file a consumer complaint with the Office of the Indiana Attorney General, Consumer Protection Division, located in Indianapolis.
• California Residents: You may lodge complaints with the California Privacy Protection Agency (CPPA) or the California Attorney General.
• European Visitors: You may contact the Data Protection Authority in the EU Member State of your habitual residence or place of work.

Policy Revisions & Notifications

We review our data handling practices periodically to reflect changes in our bookstore offerings, marketing campaigns, or applicable legal standards. When modifications occur, we update the “Effective Date” at the top of this policy and provide a notification banner on our website when material changes take place. Continued use of loudsmouthindy.com following published updates constitutes acknowledgment of the revised policy.

Contacting the Bookstore

For any questions regarding our data practices, cookie settings, or literary events, please reach out directly to our Indianapolis team:

This policy is governed by the law of Indiana, United States, with disputes heard in the courts of Indianapolis.