Privacy Policy and Data Clause Ledger
Published by Sleeoffroads, operated by Slee Off-Road LLC at sleeoffroads.com. Effective November 10, 2026. Every clause below governs inquiry records, paid advertising telemetry, and browser consent state in plain operational terms.
2026-11-10
Effective Date & Registry Standard
This ledger pairs each statutory clause with what our PHP handlers and Consent Mode v2 scripts actually record on disk, plus the legal ground supporting that processing.
| Clause | What It Means in Plain Words | Legal Ground & Why It Applies |
|---|---|---|
| Effective Date | This privacy policy took effect on November 10, 2026 (2026-11-10) and reflects the current code running on sleeoffroads.com, including liko64d.php, tise752.php, and our consent controller. | Establishes the operative version for inquiries, paid advertising visits, and data subject requests handled from this date forward. |
| Data Controller | Sleeoffroads, operated by Slee Off-Road LLC and trading at sleeoffroads.com, controls personal data gathered through this site from 700 Pine Ridge Rd, Golden, Colorado 80403, Golden, Colorado, United States. | Direct controller identification under United States state privacy statutes and applicable international frameworks, governed by the law of Colorado, United States. |
| Data Collected | The inquiry form (liko64d.php) records your name, phone, email, address, inquiry kind, notes, requested vehicle specification, and consent tick, alongside your IP address, browser user-agent string, referring URL, render timestamp, and submission timestamp. Support chat (tise752.php) stores your messages and a browser token. We store your consent decision under site_consent_v2 and capture ad click parameters when present in the landing URL. We create no user accounts, hold no passwords, and take no payment or card numbers on this site. | Strictly limited to information entered by you for vehicle fitment quotes or shop communication, plus network request headers required to deliver web pages and prevent automated spam. |
| Purposes of Processing | We use inquiry and chat records to verify Toyota or Lexus chassis fitment, prepare stamped work order estimates, and schedule Golden bay installations. Technical headers secure form endpoints against abuse. Consent state and click parameters measure paid campaign performance when permitted. | Pre-contractual engineering review, workshop security, and measurable advertising attribution where authorized by the visitor. |
| Legal Bases | Inquiry and chat details are processed at your request to prepare a build quote or contract step. Server access logs and honeypot checks rely on legitimate interest to keep the workshop site operational and stop bots. Advertising cookies and storage signals rely exclusively on explicit prior consent. | Contractual steps requested by the visitor, legitimate business security interest, and affirmative opt-in consent for advertising storage. |
| Advertising Platforms | This site is an active destination for paid campaigns on google ads, microsoft advertising, and Meta Ads. Inbound links carry click identifiers attached by those platforms: gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads. | Present-tense disclosure of active paid acquisition channels and URL query parameters passed into inquiry source fields for conversion attribution. |
| Consent Mode v2 | We enforce Google consent mode v2 on every page load. The four storage signals—ad_storage, ad_user_data, ad_personalization, and analytics_storage—remain set to denied until you click Accept Storage. Clicking Decline or withdrawing consent via the footer control immediately sets all four signals back to denied. | Technical enforcement of affirmative consent before any advertising or analytics storage activates in your browser. |
| Third-Party Processors | Data is routed only to named infrastructure and ad partners: Google Ireland Ltd / Google LLC for Google Ads (receiving gclid and consent signals), Microsoft Ireland Operations Ltd for Microsoft Advertising (receiving msclkid, governed by the Microsoft privacy statement at privacy.microsoft.com/privacystatement), Meta Platforms Ireland Ltd for Meta Ads (receiving fbclid where campaigns run), our web hosting provider storing inquiry databases, and our business mail provider delivering inquiry notices to [email protected]. | Service delivery, email routing, and authorized ad measurement under processor agreements and platform privacy terms. |
| Cross-Border Transfers | Slee Off-Road LLC operates in the United States, where inquiries and hosting servers reside. When visitors reach us from the United Kingdom or European Economic Area, transmitting inquiry forms or approved ad telemetry involves transfer to the United States under Standard Contractual Clauses and platform adequacy frameworks where applicable. | Necessary for fulfilling requests directed to a Golden, Colorado workshop, backed by contractual safeguards used by named infrastructure providers. |
| Retention Periods | We enforce fixed deletion clocks: submitted vehicle inquiries and their email copies are kept for 24 months; support chat transcripts are kept for 12 months; consent choice records under site_consent_v2 are kept for 12 months; server and web access logs are rotated and deleted after 90 days. | Fixed-term retention ensures fitment history remains available during multi-month custom fabrication cycles without indefinite storage. |
| Security Controls | Traffic moves over TLS encryption. Form submissions undergo server-side validation, timestamp verification, and silent honeypot screening inside liko64d.php. Inquiry records are restricted to authorized Slee Off-Road LLC shop personnel handling work orders. | Reasonable administrative and technical safeguards matched to non-financial contact and vehicle specification data. |
| European & UK Rights (GDPR) | Visitors protected under gdpr hold the full right of access to personal records, rectification of inaccurate vehicle or contact details, erasure of records, restriction of processing, data portability in a structured format, objection to legitimate-interest processing, and withdrawal of consent at any time without affecting prior lawful processing. | Statutory rights available to visitors reaching sleeoffroads.com from the European Economic Area or United Kingdom. |
| US State Privacy Rights (CCPA) | Under United States state privacy laws—including California ccpa and CPRA statutes and comparable state laws in Colorado and other active jurisdictions—residents may request disclosure of collected categories, deletion of personal records, correction of inaccurate entries, and opt-out of any sale or cross-context behavioral sharing of personal information. | Compliance with US state consumer privacy frameworks; declining storage in our banner or footer blocks ad sharing signals immediately. |
| Global Privacy Control | This site detects and honors browser global privacy control signals (Sec-GPC / navigator.globalPrivacyControl). When an active signal is present, ad_storage, ad_user_data, ad_personalization, and analytics_storage stay denied as an automatic opt-out without prompting you again. | Mandatory universal opt-out recognition under CCPA/CPRA and Colorado Privacy Act rules. |
| Children Under 16 | Slee Off-Road LLC sells heavy automotive chassis armor and installation services intended solely for adult vehicle owners. This site is not directed at children under 16 and knowingly collects no data from minors. | Preventive restriction ensuring no minor inquiries or youth ad profiles are processed; any accidental submission is erased upon notice. |
| Supervisory Complaints | You may file a privacy complaint with your state Attorney General, with the California Privacy Protection Agency if you reside in California, or with your local European data protection authority. Disputes under Colorado law are heard in the courts of Golden, Colorado, United States. | Preserves full administrative and judicial avenues for unresolved data handling disputes. |
| Data Subject Requests (DSAR) | To inspect, export, correct, or delete inquiry or chat records held under your name or email, write to [email protected] or send postal mail to 700 Pine Ridge Rd, Golden, Colorado 80403, Golden, Colorado, United States. We verify identity against your submitted inquiry and complete every request within 10 days. | Direct intake mechanism fulfilling US state and international data access and deletion timelines. |
| Policy Revisions | When workshop software, retention clocks, or advertising tools change, we update this clause ledger and revise the effective date at the top of the page. Material shifts affecting active consent state re-trigger the consent preference banner. | Keeps published disclosures synchronized with live scripts and backend database fields. |
| Human Privacy Contact | Reach a person on the shop desk by emailing [email protected], calling 303-278-8287, or writing to Slee Off-Road LLC, 700 Pine Ridge Rd, Golden, Colorado 80403, United States. | Direct unautomated contact channel for privacy questions, consent withdrawals, and record removals. |
Submitting a Direct Data Request or Opt-Out
Email [email protected] with the subject line “Data Request” alongside the name, phone number, or email address used on your inquiry. Requests are acknowledged and fulfilled within 10 days at no charge. To alter browser advertising storage immediately, use the Cookie Preferences control below or in the page footer, or inspect exact storage keys in our Cookie Disclosures.
10
Calendar Days Max DSAR Turnaround
Every access, deletion, correction, or portability request sent to 700 Pine Ridge Rd or [email protected] is processed directly by Slee Off-Road LLC staff without third-party ticketing delays.
Related Workshop Policies
Storage keys, Consent Mode v2 signal tables, and cookie expiration windows live in our Cookie Disclosures. Commercial fabrication deposits, built-on-order rules, chassis warranty terms, and accessibility standards are detailed in Workshop Terms.
- Inquiries Retention24 Months
- Chat Transcripts12 Months
- Consent Choice Record12 Months
- Server & Access Logs90 Days
- DSAR Turnaround10 Days