Cookie Notice

Which cookies and similar technologies we use, and how you can allow, refuse, or withdraw them

Last updated: October 4, 2026

This notice explains which cookies and similar technologies pavalogistics.com uses, what they do, and how you control them.

1. About This Notice

This website, pavalogistics.com, is operated by Pava Logistics Inc, 484 Miles Pkwy UNIT A, Bartlett, IL 60103, United States. How we handle personal information in general, and how to exercise your privacy rights, is described in our Privacy Policy.

2. What These Technologies Are

Cookies are small files that a website stores in your browser. Similar technologies include browser storage (local storage and session storage), scripts and pixels that send information about your visit to a provider, and identifiers that recognize your browser on later visits. In this notice, “cookies” covers all of them.

3. How We Ask for Permission

When you arrive, only strictly necessary technologies run, including the font described in Maps, Fonts, and Other Third-Party Content. Analytics and advertising technologies stay off: they are not loaded, do not run, and do not store identifiers until you allow them. This applies to every visitor, wherever they are.
On your first visit, a notice offers Reject non-essential, Accept all, and Manage choices. Rejecting is as easy as accepting. Scrolling, clicking elsewhere on the page, closing the preferences window, or sending a form does not count as permission.
After you select Manage choices, you can switch Analytics and Advertising on or off separately. Changes take effect when you select Save choices; closing the window without saving changes nothing.
You can request a freight quote, apply to drive, call us, and use the whole site without allowing anything optional.
Your choice is stored in this browser for up to 12 months in the adc_consent cookie, which records only your choice, the time you made it, and the policy version, with no identifiers, IP address, or form data. Our website does not keep a separate record of your choice on its server. Your browser may delete the cookie sooner, for example when you clear site data; we then ask again.
If your choice cannot be saved, for example because your browser blocks cookies, optional technologies stay off and the notice tells you that your choice was not saved.
If we change our optional technologies in a material way, we ask you again; an opt-out of sale/sharing stays in place for as long as this cookie is kept.
If JavaScript is turned off in your browser, no analytics or advertising technology can run on this site.

4. Categories

Strictly necessary — always active

These keep the site working and secure, deliver your requests to our team, add the approximate location of the IP address a request comes from to our records, remember your privacy choices, and display the site’s font. They cannot be switched off here. You can block the ones that run in your browser, but then the site cannot remember your choices, optional technologies stay off, and parts of the site may not work. Others run on our server and receive the details of requests you send, as listed in Providers and Technologies; browser settings do not affect them.

Analytics — off until you allow it

Measures how the site is used, including device information and pages viewed, so that we can improve it. Google Analytics loads only with this permission. It runs without Google signals and without ad personalization; its other advertising-related consent settings stay off unless you also allow Advertising.

Advertising — off until you allow it

Measures which ads and pages lead to quote and contact requests, truck lease applications, and clicks on our phone and email links, and supports our advertising on Facebook and Instagram. It may share device and browsing data with Meta and, if you also allow Analytics, lets Google Analytics data be used for Google’s advertising features other than ad personalization; some U.S. state privacy laws may treat this as a “sale” or “sharing” of personal information. The Meta Pixel loads only with this permission, with Meta’s automatic event detection and advanced matching turned off, and this website’s server does not send events to Meta. This website does not report completed driver applications to Meta. With this permission, the forms also send campaign information with your request (see Providers and Technologies). Advertising stays off while Global Privacy Control or your opt-out applies.

5. Providers and Technologies

Durations are the longest lifetimes these technologies set; some browsers shorten them. Information that a provider receives is also kept on the provider’s side under its own policies. The table also lists the services that receive the details of a request from our server; your browser does not connect to them.

Strictly necessary

Pava Logistics (this website) — privacy choices

Purpose: Remembers your choices for Analytics and Advertising and any opt-out of sale or sharing, and applies them on every page, in your browser and on our server. The cookie is set only after you make a choice or opt out, or when your browser sends Global Privacy Control while JavaScript is on (to record that opt-out).
Data: Your choices, the policy version, and the time you made them. No identifier, IP address, browser details, or form data.
Cookies / storage: adc_consent cookie — up to 12 months (set for this website only); adc_gpc, adc_flash session storage (whether your browser sends Global Privacy Control; the confirmation shown after you change your choices) — removed when you close the browser
Domains: pavalogistics.com
Retention: Up to 12 months from your latest choice; your browser may delete the cookie sooner, and then we ask again. Your choice is kept only in this cookie, not on our server.

Pava Logistics (this website) — pages and request forms

Purpose: Runs the website and its freight quote, contact, driver application, and truck lease forms. Each submission is saved in our website database when you send it, including attempts that the form then rejects (for example, because a required field is empty) and submissions that our spam filter flags, except a repeat of a recent request of the same type with the same email address or phone number, which only updates the time of the earlier request; our team uses the saved requests to respond.
Data: What you enter in a form; the IP address of the request, your browser (user agent), the address of the page you sent it from, and the date and time; the approximate location of that IP address (from ipwho.is, see below). Campaign information only with Advertising permission (see campaign attribution under Advertising).
Cookies / storage: wpEmojiSettingsSupports session storage (whether your browser can display emoji, checked by WordPress on every page) — removed when you close the browser
Domains: pavalogistics.com
Retention: Requests are kept until we delete them; there is currently no automatic deletion, except that submissions flagged as spam are deleted after 30 days. Backup copies of the website, which include its database, are kept until deleted.

Hostinger (web hosting)

Purpose: Hosts this website and its database, including the requests you send, and sends the website’s notification emails.
Data: Technical data of every visit — IP address, browser details, and the address requested — including in server logs; the contents of our website database.
Cookies / storage: None in your browser
Domains: pavalogistics.com
Retention: Server logs are kept under Hostinger’s own practices.

Pava Logistics — email notifications to our team

Purpose: Sends an email about each request that the form accepts, including submissions that our spam filter flags, to a Pava Logistics email address, so that our team can respond.
Data: What you entered in the form; the time; the IP address of the request and its approximate location (city, region, and country, from ip-api.com); your browser (user agent); the address of the page you sent it from. Only with Advertising permission: that address with its campaign parameters, and the Google and Meta click identifiers (gclid, fbclid).
Cookies / storage: None in your browser
Domains: pavalogistics.com (sent by our web server)
Retention: Email copies are kept until they are deleted.

HighLevel (CRM)

Purpose: The customer relationship management (CRM) system our team uses to follow up on requests. Each request from the freight quote, contact, driver application, and truck lease forms is added to it as a contact with the details of the request when you submit the form — including attempts that the form then rejects (for example, because a required field is empty). Submissions that our spam filter flags are not sent. A repeat of a recent request sends the earlier request again instead.
Data: Your name, phone number, and email address (the truck lease form does not ask for one); the type of form; for a freight quote, the service you selected and your message, and for a contact request, your message — added as a note; for a driver application, your experience, CDL type, and message; for a truck lease application, your experience; the address of the page you sent it from. Only with Advertising permission (or, for a repeat of a recent request, as stored with the earlier request): campaign parameters, Google and Meta click identifiers (gclid, fbclid), and the address of the site you came from. Your IP address and browser details are not sent.
Cookies / storage: None in your browser
Domains: services.leadconnectorhq.com (from our server; your browser does not connect to it)
Retention: Kept in the CRM until deleted. On our server, a log keeps the time, the result, and the name given in the request for each of the 20 most recent transfers, each entry replaced by newer ones; if sending a request to HighLevel fails, a copy of the request is kept on our server until one retry runs.

Telegram (team notifications)

Purpose: Posts a notification about each request to a Telegram chat used by our team — including attempts that the form then rejects (for example, because a required field is empty). Submissions that our spam filter flags are not posted. A repeat of a recent request may post the earlier request again instead.
Data: The type of form; your name, phone number, and email address; the service type, CDL type, or experience you entered; up to 500 characters of your message; the page you sent it from, without its query string; the IP address of the request. Only with Advertising permission (or, for a repeat of a recent request, as stored with the earlier request): the campaign source, medium, and name (utm_source, utm_medium, utm_campaign).
Cookies / storage: None in your browser
Domains: api.telegram.org (from our server; your browser does not connect to it)
Retention: Kept in the chat until deleted.

ip-api.com and ipwho.is (IP geolocation)

Purpose: Look up the approximate location of the IP address a request comes from. ip-api.com, queried over an unencrypted (HTTP) connection for each request that the form accepts (including those that our spam filter flags), adds the city, region, and country to the notification email. ipwho.is adds the country, region, city, and internet provider to the request in our website database, for every submission, including attempts that the form rejects and submissions that our spam filter flags.
Data: The IP address of the request, sent from our server.
Cookies / storage: None in your browser
Domains: ip-api.com, ipwho.is (from our server; your browser does not connect to them)
Retention: The location is kept with the request or in the notification email. Our server also keeps a temporary copy of each lookup result, which expires after 1 hour (ip-api.com) or 7 days (ipwho.is). On their side, under each service’s own policies.

Google Fonts (Google)

Purpose: Delivers the Ubuntu font used on every page of this website.
Data: Your IP address, browser details, and the address of this website are sent to Google when a page loads the font.
Cookies / storage: None on this website
Domains: fonts.googleapis.com, fonts.gstatic.com
Retention: Under Google’s own policies.

WordPress.org (emoji images)

Purpose: If your browser cannot display an emoji used on a page, WordPress shows it as an image from WordPress.org instead.
Data: Your IP address, browser details, and the address of this website — only when such an image loads.
Cookies / storage: None on this website
Domains: s.w.org
Retention: Under WordPress.org’s own policies.

Embedded maps and content

Google Maps (Google)

Purpose: Shows a map of our office on the Contact page. The map loads only after you choose to show it; until then no map content is requested from Google. The “Open in Google Maps” link opens the location on Google Maps instead.
Data: When the map loads, your IP address, browser details, and the address of this website are sent to Google, which may set or read its own cookies on its domains.
Cookies / storage: Set by Google on its own domains, not on this website
Domains: www.google.com and other Google domains that the map uses
Retention: Under Google’s own policies.

Analytics

Google Analytics 4 (Google)

Purpose: Measures how the site is used: pages viewed and how you use them (for example, scrolling, time on page, and starting to fill in a form), device and browser type, approximate location from your IP address, clicks on our phone and email links, and completed requests (the type of form only, without the details you type). Runs without Google signals and without ad personalization; its other advertising-related consent settings stay off unless you also allow Advertising.
Data: Pseudonymous browser identifier; page addresses, including any campaign parameters and click identifiers in them; device, browser, and interaction data.
Cookies / storage: _ga, _ga_42JLG6JN4H cookies — up to 2 years (some browsers, such as Chrome, limit cookies to 400 days)
Domains: www.googletagmanager.com, www.google-analytics.com, www.google.com
Retention: Under Google’s own policies and the data retention setting of this site’s Google Analytics property.

Advertising

Meta Pixel (Meta)

Purpose: Measures and supports our advertising on Facebook and Instagram: page views, completed freight quote, contact, and truck lease requests (the type of form only), and clicks on our phone and email links. This website does not report completed driver applications to Meta.
Data: Browser identifier; the click identifier that Facebook and Instagram add to links (fbclid); page addresses and the site you came from; events, with the type of form only; IP address and browser details.
Cookies / storage: _fbp cookie — 90 days; _fbc cookie when you arrive from a Facebook or Instagram link — 90 days; lastExternalReferrer, lastExternalReferrerTime, multiFbc local storage (the site you came from and when; Facebook click identifiers) — no fixed expiry; removed when you withdraw permission or clear site data
Domains: connect.facebook.net, www.facebook.com
Retention: Under Meta’s own policies.

Pava Logistics (this website) — campaign attribution

Purpose: Remembers which campaign or link brought you to the site and sends it with a request you submit, so that we can see which advertising leads to requests.
Data: Campaign parameters in the address of the page you arrive on (utm_source, utm_medium, utm_campaign, utm_term, utm_content), Google and Meta click identifiers (gclid, fbclid), and, if you came from another website, its address without the query string. With a request, they are stored in our website database and sent to HighLevel; the notification email includes the click identifiers and the page address with its campaign parameters, and the Telegram notification includes the campaign source, medium, and name.
Cookies / storage: adc_attr_utm_source, adc_attr_utm_medium, adc_attr_utm_campaign, adc_attr_utm_term, adc_attr_utm_content, adc_attr_gclid, adc_attr_fbclid, adc_attr_landing_referrer cookies — 90 days
Domains: pavalogistics.com
Retention: The cookies last 90 days and are removed when you withdraw permission. Information sent with a request is kept with that request. Without Advertising permission, our server removes campaign information from every form request before it is stored or forwarded, and the page address is kept without its query string; a repeat of a recent request can still forward an earlier request with its campaign information again.

What our forms send with your request. With Advertising permission, the forms also send the campaign parameters (such as utm_source) and ad click identifiers (such as gclid and fbclid) from the link that brought you to this website, the full address of the page from which you send the form, and the address of the website that referred you, without its query string. Your browser keeps the campaign parameters, click identifiers, and referring address for up to 90 days in cookies whose names start with adc_attr_, set only with Advertising permission. Without Advertising permission, our server removes them before your request is stored, emailed, or sent to HighLevel or Telegram, and the page address is kept without its query string. If a request repeats a recent one of the same type with the same email address or phone number, the website may keep only the earlier request and send it to HighLevel and Telegram again, with any campaign information stored with it, even after you withdraw Advertising or opt out (see Technical and Device Data in our Privacy Policy). The website is set up so that the details you type into the forms, such as your name, phone number, email address, shipment details, and application details, are not sent to analytics or advertising providers.

Use Cookie settings at the bottom of any page, or the button below, to see your current choice, switch Analytics and Advertising on or off, or reject everything optional.

You can opt out of the sale or sharing of personal information for advertising at any time. You do not need an account, and you do not need to give us any information: the choice is stored in this browser and keeps Advertising off on this website. If JavaScript is turned off in your browser, the button below sends a simple form, and our server saves the same choice in this browser’s adc_consent cookie. If you use several browsers or devices, opt out in each of them, or turn on Global Privacy Control. The opt-out does not delete information already collected; to ask for deletion or for a copy of your information, see How to Make a Privacy Request.

8. Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale and sharing of personal information for that browser. While GPC is on, Advertising stays off and cannot be switched on here, and, when JavaScript is on, we also record the opt-out in this browser. The notice then offers Keep optional off or Allow analytics, because Analytics remains a separate choice. Our website does not respond to “Do Not Track” signals, for which there is no common standard.

9. Withdrawing Permission

When you switch a category off, we stop loading its technologies, block new requests to its providers, remove the cookies and browser storage of that category that this site can access, and reload the page so that no optional code keeps running. After you withdraw Advertising, the forms send your requests without campaign information. A request that repeats a recent one can still lead to campaign information stored with the earlier request being sent again (see Providers and Technologies). A withdrawal applies to new optional activity in this browser. It does not delete information that a provider has already received, or campaign information included in requests you sent earlier; for that, see your rights in our Privacy Policy.

10. Maps, Fonts, and Other Third-Party Content

Google Maps: the map of our office on the Contact page is not loaded until you select Show map. When it loads, your browser sends your IP address, browser details, and the address of this website to Google, which may set or read its own cookies on its domains. The Open in Google Maps link takes you to Google Maps only when you follow it. Our office address is also shown as text on the Contact page.
Font: the site’s font (Ubuntu) is loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com) on every page, as one of the strictly necessary technologies that display the site. When it loads, your browser sends your IP address, browser details, and the address of this website to Google. No cookies are set on this website’s domain for the font.
Emoji images: if your browser cannot display an emoji used on a page, it loads the image from WordPress.org (s.w.org), which receives your IP address, browser details, and the address of this website.
Instagram: the Instagram link at the bottom of each page is a plain link; nothing is loaded from Instagram until you follow it.

11. Browser Controls

Most browsers let you see, block, and delete cookies and other site data, and some let you turn on Global Privacy Control. Deleting this site’s cookies also deletes your saved choice, so the notice appears again; if you block them, your choice cannot be saved, optional technologies stay off, and parts of the site may not work. Browser settings apply only to the browser and device in which you change them, and deleting cookies does not delete information that providers have already received.

12. Changes to This Notice

We update this notice when our technologies change and show the date of the latest version at the top. If we add optional technologies or new purposes, we ask for your choice again before using them; an existing opt-out stays in place.

13. Contact

Questions about cookies or your choices:

Pava Logistics Inc
484 Miles Pkwy UNIT A
Bartlett, IL 60103, United States
Phone: (224) 604-4630
Email: hr@pavalogistics.com