Privacy policy

Last updated:

Data controller

Traxylonaz, operating community ride coordination information at traxylonaz.world, acts as the data controller for personal data described here. Registered postal address: 1653 W Big Beaver Rd, Troy, MI 48084, United States. Email contact for privacy requests: question@traxylonaz.world. Telephone: +1 248 522 7935.

Scope and principles

This statement aligns with the EU General Data Protection Regulation (GDPR), UK GDPR where applicable, and United States state consumer privacy laws where they apply to our processing—including, for example, the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, “CCPA”), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and similar laws enacted in other states as they become effective. We collect only what we need, explain the purpose in plain language, and provide pathways to exercise your rights. We do not sell personal information in the ordinary sense of exchanging data for money. We also do not “share” personal information for cross-context behavioral advertising as defined under the CCPA. If our practices change, we will update this policy and provide any legally required notices or opt-out mechanisms.

Categories of data and purposes

  • Contact form submissions: name, email address, free-text message, and consent timestamp. Purpose: responding to questions and planning volunteer coordination. Lawful basis: consent that you provide before submission.
  • Technical logs from hosting infrastructure: IP address, user agent, timestamp, requested URL. Purpose: security monitoring and troubleshooting. Lawful basis: legitimate interests in maintaining a secure informational site, balanced against your rights.
  • Cookie-related records when you interact with the cookie banner preferences stored locally in your browser. Purpose: respecting analytics and marketing selections. Lawful basis: consent for non-essential cookies; legitimate interests or consent for necessary cookies as described in the cookie policy.

Retention

Contact inquiries are retained up to twenty-four months from the last reply unless a longer period is required for documented legal claims. Server logs roll according to hosting partner defaults, typically ninety days unless extended for incident review. When retention ends, we delete or irreversibly anonymize records.

Processors and transfers

We rely on infrastructure and email providers located in the United States and, where applicable, the European Economic Area. If data moves outside the EEA or UK, we apply standard contractual clauses or equivalent safeguards. Subprocessors are bound by written agreements requiring GDPR-aligned confidentiality and security.

Your rights (EEA, UK, and Switzerland)

Depending on jurisdiction, you may request access, correction, deletion, restriction, portability, or objection. You may withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with your local supervisory authority. Submit requests to the email above; we respond within thirty days unless complex cases require an extension we will explain.

Your rights (United States)

Residents of states with comprehensive privacy laws may have rights to know what personal information we collect, use, and disclose; to request deletion or correction of inaccurate personal information; to receive a portable copy of certain personal information you provided; to opt out of the sale of personal information or sharing for cross-context behavioral advertising (we state above that we do not sell or share in those ways); and not to receive discriminatory treatment for exercising these rights. Where a law requires an appeal process for denied requests, describe your concern in writing to the contact email and we will explain how to appeal.

California residents. The categories of personal information we collect are described in “Categories of data and purposes.” We use and retain each category as stated there. We do not use or disclose “sensitive personal information” for purposes that would require a separate “Limit the use of my sensitive personal information” link under the CCPA. You may designate an authorized agent to submit a request on your behalf; we may require proof of your identity and the agent’s authority. For metrics on consumer privacy requests, if required by law, we will publish them in this policy or an annual disclosure.

Nevada residents. Nevada law permits consumers to direct certain operators not to sell “covered information” we have collected or will collect. We do not sell covered information as defined by Nevada law. If that changes, we will provide a designated request address and follow applicable procedures.

Submit U.S. privacy requests using the email address shown under “Data controller.” We will verify your request in line with applicable law and respond within the timeframe that law requires (for example, 45 days for many California requests, with one reasonable extension where permitted).

Security measures

We apply TLS encryption in transit, access controls on operational accounts, least-privilege credentials, and periodic review of vendors supporting this site. No method of storage is flawless; if we learn of a breach affecting your personal data, we notify regulators and affected individuals where the law requires it.

Children

This site is not directed at children under thirteen (13) years of age, consistent with the U.S. Children’s Online Privacy Protection Act (COPPA), and we do not knowingly collect personal information from children under thirteen. For visitors in the EEA, UK, or Switzerland, we do not target children under sixteen (16). If you believe we collected personal information from a child in violation of applicable law, contact us using the email under “Data controller” so we can delete it promptly.

Financial incentives

We do not offer price or service differences, payments, or other financial incentives in exchange for the retention, sale, or sharing of personal information.

Automated decision-making and profiling

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects concerning you, and we do not conduct profiling in that sense for this informational website.

Changes

We revise this policy when our practices or laws evolve. Material updates appear here with a refreshed “Last updated” date above. Data subjects who previously contacted us may receive a notice when contact details remain on file.