Your enquiry stays 36 months, your chat 12, our server logs 30 days.

The site is operated by Velorenta, trading at velorenta.us. We are a three-person studio that photographs bicycles and sports equipment for listings, shop catalogues and rental fleets. For every piece of personal data described on this page, Velorenta decides why it is collected and what happens to it. That makes us the controller.

Postal address: 3 Station Road, Office 12, Austin, Texas 21868, Austin, Texas, United States. Email: [email protected]. Phone: +1 (220) 555-1197.

The enquiry form

When you send the form on the home page, the contact page or this page, fusuc68.php writes the fields you filled in: name, phone, email, address, the kind of enquiry, your message, the requested specification (for a shoot that usually means bike count, sizes and whether they are clean) and whether you ticked the consent box.

With it, automatically, the server records your IP address, your browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent. The two timestamps exist to catch bots that fill a form in under a second. Nothing else rides along.

The support chat

The chat widget in the corner sends what you type to fusi7b2.php. We keep the conversation, plus a name, phone, email and consent tick if you chose to give them when starting. A token is stored in your browser so you can come back to the same conversation later. Clear your browser storage and the token goes; the transcript on our side stays until its clock runs out.

Technical, cookie and ad-click data

The web server logs each request: IP address, time, the page asked for, the response code and the user-agent. Your consent choice is stored in your browser under site_consent_v2. Nothing else on this site persists a choice.

If you reach us from a paid ad, the link carries a click identifier: gclid, msclkid or fbclid. Advertising and analytics cookies that read those identifiers are only set after you press Allow.

There is no account, no password, no payment and no card data. Nothing is sold on this site and no payment is taken, so we never hold a card number.

Form and chat details are used to answer you: to quote a basis for a listing set or a fleet visit, to book a drop-off at Station Road, or to arrange a pickup. The address field tells us whether the bikes are inside our 25-mile radius. We do not add you to a newsletter. We do not have one.

The IP address, user-agent and timestamps on a form submission are used to filter spam and abuse. Server logs are used to keep the site running and to trace faults. The consent record is used to remember your choice so the banner does not ask again on every page.

Click identifiers and ad cookies, once you allow them, are used to measure which campaign produced an enquiry. That is the whole of it. We do not build profiles of visitors and we do not sell lists.

For visitors covered by the GDPR, every use above rests on one of three bases. Consent, which you can withdraw. Steps you ask for before a contract, or the contract itself. Or our legitimate interest, which we weigh against yours and which you can object to.

We pay for ads. Google Ads and Microsoft Advertising send traffic to this site today, and Meta Ads does when a campaign runs there. Each platform adds its own click identifier to the link you follow:

• gclid from Google Ads, operated by Google Ireland Ltd and Google LLC.
• msclkid from Microsoft Advertising, operated by Microsoft Ireland Operations Ltd.
• fbclid from Meta Ads, operated by Meta Platforms Ireland Ltd.

The identifier arrives in the address bar whether or not you accept cookies. What changes with your choice is whether a platform tag may store it and report the click back. Until you press Allow, it may not.

The first script on every page sets Google Consent Mode v2 defaults before any tag can load. Four signals start as denied: ad_storage, ad_user_data, ad_personalization and analytics_storage. They stay denied until you press Allow on the banner.

If you press Decline, or later withdraw through the Cookie settings button in the footer, all four are set back to denied at that moment. Tags that respect Consent Mode then stop writing cookies and stop sending ad user data. Microsoft's UET tag reads the same choice.

Named one by one:

• Google Ireland Ltd / Google LLC for Google Ads. It attaches gclid to a click and receives the consent signals. Policy: policies.google.com/privacy.
• Microsoft Ireland Operations Ltd for Microsoft Advertising. It attaches msclkid. Its own handling is covered by the Microsoft privacy statement at privacy.microsoft.com/privacystatement.
• Meta Platforms Ireland Ltd for Meta Ads. It attaches fbclid, where a campaign runs there. Policy: facebook.com/privacy/policy.
• Our hosting provider, which serves this site and stores the enquiry and chat database.
• Our mail provider, which carries the notification of a new enquiry to the studio inbox.

Nobody else. We do not sell personal data and we do not share it for cross-context advertising beyond the ad measurement you allow.

We collect in the United States. If you write from Europe, your details travel to the US to reach us. Google, Microsoft and Meta also move data between their EU entities and the US. Those transfers rely on the EU–US Data Privacy Framework where the recipient is certified under it, and on the European Commission's Standard Contractual Clauses otherwise. You can ask us for a copy of the safeguard that applies to your data.

Real periods, counted from the day the record is made. When a clock runs out the record is deleted, not archived.

The site is served only over HTTPS. The enquiry and chat database is not in a public folder and cannot be fetched from a browser. The studio panel that reads enquiries sits behind a login held by the three of us, nobody else. Forms carry two hidden honeypot fields and a render-time check to throw out automated submissions. We do not print enquiries or keep them on a shared studio laptop.

No system is perfect. If a breach puts your data at risk, we tell you by email and tell the authority the law requires, without waiting to be asked.

If you reach the site from the European Economic Area, the UK or Switzerland, the GDPR (or its UK version) gives you these rights over your data:

• Access: a copy of what we hold on you.
• Rectification: correcting anything wrong.
• Erasure: deleting it, unless we must keep it for a booked job's records.
• Restriction: freezing use while a dispute is sorted out.
• Portability: your form and chat data in a plain machine-readable file.
• Objection: to any use based on legitimate interest.
• Withdrawing consent at any time, without affecting what was done before.

US state privacy law applies to us. In California that is the CCPA as amended by the CPRA. Residents of the other states with a privacy law in force, including Texas, Virginia, Colorado, Connecticut and Oregon, hold similar rights.

You can ask to know what personal information we collected, from where, for what and who received it. You can ask for it to be corrected or deleted. You can opt out of the sale or sharing of personal information, and out of targeted advertising. We do not sell personal information for money. Allowing ad cookies may count as sharing under the CCPA, so Decline, the footer Cookie settings button and a Global Privacy Control signal each act as an opt-out. We will not treat you differently for using any of these rights.

If your browser sends the Global Privacy Control signal (the Sec-GPC header), we treat it as an opt-out of sale, sharing and targeted advertising. We do not ask you again, and the four Consent Mode signals stay denied.

This site is for bike shops, rental outfits and adults selling a bike. It is not meant for children under 16 and we do not knowingly take any data from them. If a child has sent us an enquiry, write to us and we delete it.

Write to us first if you can; most things get fixed in one email. You also have the right to complain to a regulator. In the US, that is your state Attorney General, and in California also the California Privacy Protection Agency. In Europe, it is the data protection authority of the country you live or work in.

Email [email protected], post a letter to 3 Station Road, Office 12, Austin, Texas 21868, United States, or use the form below. Say which right you want to use. Give the email or phone you used with us so we can find the record; we may ask one question to confirm it is you, and nothing more.

We answer within 14 days. A request is free. If you want an erasure, we confirm in writing which records were deleted and which, if any, we must keep for a booked job, and why.

We aim for WCAG 2.2 level AA across velorenta.us. Body text is ink on sandy paper at about 13 to 1 contrast. The burnt accent colour is used for text only at 18 px and above. Every page works with a keyboard: a skip link comes first, the full-screen menu traps focus while open and closes on Esc. Every button and link has a visible label and a tap area of at least 44 px.

With reduced motion set in your system, the spec tickers stop and sit as a still line, and the sticky picture columns fall back to plain stacked picture and text. Photographs carry written descriptions. Layouts reflow from 320 px wide without sideways scrolling, and text can be enlarged to 200% without loss.

Known gaps: the shot-plan diagram on the home page is described in text, but the camera positions are best read visually. Photos delivered to clients are files, not web pages, so they carry no alt text of their own. If something on the site stops you, call +1 (220) 555-1197 or email [email protected] and we take the enquiry by phone instead.

A change is dated at the top of this page. If it changes what we collect or who receives it, we also email anyone with an open enquiry before the new version takes effect. Old versions are kept and sent on request.

Privacy questions go to the same inbox as bookings, and the person who handles bookings answers them. Email [email protected], call +1 (220) 555-1197, or write to Velorenta, 3 Station Road, Office 12, Austin, Texas 21868, United States.

Want a shoot instead? The contact page takes the booking, and services lists every price basis.