Verifiable data requests under Colorado privacy law.

Statutory Framework & Scope. This formal intake mechanism facilitates statutory data subject rights administered by Oak Merton, an independent brand identity and strategy studio operating at 300 East 17th Avenue in Denver, Colorado. Under the Colorado Privacy Act (CPA, C.R.S. § 6-1-1301 et seq.), as well as applicable federal privacy regulations, Colorado consumers and client representatives hold explicit legal rights regarding the personal data we process. These rights encompass the right to confirm whether our studio processes your personal data, the right to access and export that data in a portable format, the right to correct documented inaccuracies in your identity or billing records, and the right to delete personal data collected through studio correspondence, intake audits, or marketing interactions.

Controller Identification. The sole legal controller responsible for data processing decisions at this domain is Oak Merton, maintained under active Colorado business registration since 2021 by brand consultant Anna Kozlova. You may communicate directly with the data controller by addressing written notices to Oak Merton, Attn: Data Privacy Desk, 300 East 17th Avenue, Denver, Colorado 80203, by telephone at +1 (803) 555-5338, or by transmitting an authenticated electronic inquiry to [email protected]. Because our practice operates with single-practitioner governance, every data request is handled personally by Anna Kozlova without delegation to third-party data processing brokers or automated triage clearinghouses.

Categories of Maintained Records. Oak Merton collects personal data solely to evaluate commercial inquiries, schedule private diagnostic consultations ($198–$200 per session), structure fixed-fee branding packages ($2,500–$7,500), draft positioning strategies ($3,500–$9,500), and execute hourly editorial copywriting ($45–$80 per hour). The categories of records maintained include: direct contact credentials (full name, email address, direct telephone number, billing address); project specifications (business trade, trademark history, messaging parameters, naming briefs); financial records (invoicing receipts, transaction dates, bank wire acknowledgments); and technical ad engagement identifiers captured through active marketing campaigns.

Advertising Platform Identifiers. Oak Merton actively directs paid advertising traffic to this domain from Google Ads, Microsoft Advertising, and Meta Ads. In accordance with platform audit standards, our server logs and analytics measurement endpoints record specific digital click identifiers associated with inbound advertising campaigns. These parameters include Google Ads click identifiers (gclid), Microsoft Advertising click identifiers (msclkid), and Meta Ads click identifiers (fbclid). Our web infrastructure operates Google Consent Mode v2, holding all marketing and telemetry consent states—specifically ad_storage, ad_user_data, ad_personalization, and analytics_storage—in a default denied state until a visitor provides affirmative consent through our consent controls. When a visitor declines storage, all four consent parameters remain or revert immediately to denied.

Microsoft Advertising Disclosures. Pursuant to Microsoft Advertising specifications and network creative guidelines, Oak Merton does not utilize cookies or Locally Shared Objects (LSOs) to store unique user IDs, cross-site interest segments, behavioral browsing histories, or persistent consumer tracking profiles across unaffiliated domains. Data captured during paid search referrals is restricted strictly to session attribution and inquiry validation. You may review Microsoft’s comprehensive data processing standards by examining the official Microsoft Privacy Statement.

Verification Thresholds & Identity Proof. Under C.R.S. § 6-1-1306, Oak Merton is not obligated to act upon an access, correction, or deletion request if we cannot verify using commercially reasonable methods that the consumer making the request is the individual about whom the personal data was collected. To protect your commercial confidentiality, we verify submissions by matching the name, phone number, and email address provided in your DSAR transmission against records established during prior studio correspondence or contract archiving. If a request is submitted by an authorized agent, we require signed written authorization from the consumer and direct verification of the agent’s legal capacity. We do not demand government-issued identity cards or sensitive documentation unless statutory verification cannot be achieved by less intrusive means.

Statutory Response Windows. Upon receipt of a verified request, Oak Merton will respond without undue delay and in all events within forty-five (45) calendar days. If reasonably necessary taking into account the complexity and volume of the request, we may extend this period by an additional forty-five (45) days, provided we deliver written notification of the extension and the specific grounds for delay within the initial forty-five-day window. Information provided in response to a verified consumer request will be transmitted free of charge up to two times per calendar year. Where requests are manifestly unfounded or excessive, Oak Merton reserves the statutory right to charge a reasonable administrative fee or decline to act, stating the factual basis for refusal.

Appeals Protocol. If Oak Merton declines to take action regarding your statutory request, we will provide written notice within forty-five days detailing the reasons for our decision and explicit instructions explaining how to appeal. Appeals must be submitted within thirty calendar days of receiving our denial by directing an email to [email protected] with the subject line “DSAR Appeal – Attn: Anna Kozlova.” Within forty-five calendar days of receiving an appeal, our studio will provide a written explanation of any action taken or not taken, accompanied by a written explanation of the reasons for the decision. Should our internal appeal be resolved against your petition, you hold the legal right under Colorado law to submit a formal complaint to the Office of the Colorado Attorney General via their public consumer portal (coag.gov).

Non-Discrimination Assurance. Oak Merton never discriminates against any consumer or client representative for exercising statutory privacy rights. We do not deny studio services, adjust standard consultation fees ($198–$200), alter branding package estimates ($2,500–$7,500), inflate hourly rates ($45–$80), or deliver differing qualities of identity systems simply because you exercise your rights under the Colorado Privacy Act or complementary state statutes.

Notice on Selling & Targeted Advertising. Oak Merton does not sell personal data for monetary consideration, nor do we disclose personal data to commercial data brokers for independent profiling. Our transmission of online identifiers via Google Ads, Microsoft Advertising, and Meta Ads pixels constitutes targeted advertising under Colorado legal definitions. You retain the absolute right to opt out of targeted advertising at any time by toggling your preferences via the “Cookie Settings” control in the persistent footer of this website, which immediately sets ad_storage, ad_user_data, and ad_personalization to denied in our Consent Mode v2 implementation.