Privacy Policy

This policy describes how OCRV Center handles personal information collected through the website at ocrv.guru. It covers the contact and request forms, the spam prevention control attached to them, the optional analytics script, and the two browser storage keys this site writes. It does not describe records created when you become a customer, because a repair order, an estimate, a photograph in a repair file and a payment record are business records held under California Bureau of Automotive Repair requirements rather than website data.

The site is a set of prerendered pages. There is no account system, no login, no member area, no forum and no comment facility, so there is no profile associated with you and nothing to sign in to. Reading this site anonymously is the default and requires nothing of you.

Every form on this site posts to a Next.js server action running on Vercel, the hosting platform for the site. The fields are the ones shown on the form: your name, a contact method, the vehicle and a description of what you need. Nothing is collected that the form does not display, and no field is prefilled from a previous visit.

The submission is delivered by email through Resend, an email delivery provider, to info@ocrvcenter.com. Resend processes the message in order to deliver it. The submission is not written to a database on this site, because this site has none. What persists is the email in the shop's mailbox, which is where the reply comes from and where the enquiry lives until it becomes a repair order or is discarded.

Cloudflare Turnstile runs on the form to distinguish a person from an automated submission. Turnstile receives technical signals from your browser for that purpose, which is the mechanism by which the shop's mailbox stays usable. It is loaded because the form exists, so it is a strictly necessary component rather than an optional one, and turning it off would mean turning the form off.

Google Analytics may be loaded on this site, and it is loaded only after you have agreed to it. Before that decision the script is not requested, no analytics identifier is created, and no measurement event is sent. If you decline, or if your browser sends a Global Privacy Control signal, the script is not loaded at all and your refusal is recorded so you are not asked again on the next page.

Where analytics is running it reports aggregate page views, referring sources, approximate region and device category. The shop uses that to decide which pages to expand and which to retire. It is not used to build an advertising profile, it is not joined to a form submission, and it is not exported to any advertising platform.

This site sets no cookies of its own. Two keys are written to local storage instead, which keeps the values on your device rather than attaching them to every request. Clearing site data in your browser removes both, and the site continues to work without either: the consent banner reappears and the booklet dialog may show again.

• ocrv.consent.v1 | local storage | your analytics consent decision, granted or refused | persists until you clear site data | strictly necessary, because it is what records a refusal
• ocrv.booklet.seen | local storage | a flag recording that the booklet dialog has been shown once | persists until you clear site data | not strictly necessary, and its absence only means the dialog can appear again
• Cloudflare Turnstile | set by Cloudflare on the form page | technical signals used to tell a person from an automated submission | session scoped by Cloudflare | strictly necessary while the form is in use

Stated as a list because an absence is easier to check than a promise. There is no advertising pixel on this site, from any network. There is no cross site tracking and no third party identity resolution. No personal information is sold, and none is shared with a data broker or an advertising network. There is no payment processing on the site, so no card number ever reaches it: deposits and balances are taken at the shop.

There is no data protection officer, because the shop is not of a size that requires one, and claiming otherwise would be more comfortable than accurate. Traffic to this site is served over HTTPS. Beyond that, the shop makes no representation about the security arrangements of the platforms named above other than that each is a commercial provider with its own published terms.

A form submission arrives as an email and is retained in the shop's mailbox while the enquiry is live and thereafter as an ordinary business record. An enquiry that becomes a repair order joins the repair file, which is kept for the period California requires records of automotive repair to be kept. An enquiry that goes nowhere is deleted on request, and you do not need a reason to ask.

Analytics data, where consent has been given, is retained according to the retention window configured in Google Analytics and is aggregate rather than identified. The two local storage keys persist on your device until you clear them.

If you are a California resident you have the right to know what personal information has been collected about you and to receive a copy of it, the right to have it deleted, the right to have inaccurate information corrected, the right to opt out of the sale or sharing of personal information, the right to limit the use and disclosure of sensitive personal information, and the right not to be treated worse for exercising any of them.

Two of those need a plain answer rather than a form. OCRV Center does not sell personal information and does not share it for cross context behavioural advertising, as the CCPA defines those terms, so there is nothing to opt out of on that side. The opt out route exists anyway and is honoured, and it is described in full at /legal/do-not-sell/. The shop does not knowingly collect sensitive personal information through this website, and none of the fields on any form on this site asks for a category the statute treats as sensitive.

The shop operates a single facility in California and its customers are in Southern California, so this is a baseline rather than a full compliance programme. Where the GDPR applies to a visitor, the lawful basis for handling a form submission is the performance of a contract or the steps preparatory to one, and for analytics it is consent, which is why analytics waits. Legitimate interests covers spam prevention on the form.

Data subject rights of access, rectification, erasure, restriction, portability and objection are handled through the same request route as the California rights above. Personal information submitted through this site is processed in the United States, and a visitor outside the United States should treat a submission as a transfer to the United States. Withdrawing analytics consent is done by clearing site data or by declining when asked again.

Email info@ocrvcenter.com with the request in the subject line, or call (949) 799-3387 during opening hours, which are Monday to Friday 8:00 to 17:00 and Saturday 9:30 to 15:00. State what you want done. Say whether you are asking about a website enquiry, a repair record, or both, because those live in different places.

Verification is kept to the minimum that lets the shop match a request to a record. For a website enquiry that is usually the email address the submission came from. For a repair record it is usually the vehicle identification number or the repair order number. The shop does not ask for a government identification document to answer a request of this kind, and it will not create a new record about you in order to verify one.

This policy carries an effective date and a version number at the top of the page. A change of substance raises the version and moves the date, and the previous text stops applying from that date forward. A correction of a typographical error does not. If the site ever adds a tool that changes the description above, the description is updated before the tool ships, not afterwards.