Privacy policy and statutory data protection disclosures.

1. Effective Date & Scope

This privacy policy took effect on October 16, 2026. It applies to all electronic communications, inquiries submitted to our intake forms, live dispatch desk chat interactions, and browsing activity conducted across the domain trenvios.com.

2. Data Controller & Operator Identification

The data controller operating this site and responsible for data handling is Trenvios, trading at trenvios.com.

The operator postal address, written out in full, is: 720 South Michigan Avenue, Chicago, Illinois 60605, Chicago, Illinois, United States. Telephone communications are conducted via +1 (586) 555-0528, and official privacy correspondence is received at office@trenvios.com.

3. Categories of Data Collected

Trenvios collects and stores only the data strictly required to calculate courier delivery quotes, conduct physical mail intake, maintain dispatch logs, and measure site interactions. What this site's own code records includes:

• Inquiry Form Submissions (jakidcc.php): Name, phone number, email address, physical pickup or delivery street address, selected service kind, shipment specification, written notes, and the affirmative consent confirmation.
• Automated Transmission Telemetry: Internet Protocol (IP) address, browser user-agent string, referring URL, the exact timestamp when the form was rendered on screen, and the moment it was submitted.
• Live Support Chat (wefoe3f.php): Conversation transcripts, customer contact details if voluntarily volunteered during the conversation, and a local browser session token enabling message continuity.
• Attribution & Click Identifiers: Digital advertising click identifiers attached to inbound URLs, specifically gclid, msclkid, and fbclid.
• Consent Records: The visitor's explicit preference recorded in localStorage under the key site_consent_v2.

No account registration, no user password, no automated payment card intake, and no checkout processing exists on this website. Nothing is sold directly online, and no financial account data is gathered or stored.

4. Purposes of Data Processing

Every item of personal data collected through trenvios.com serves an explicit operational purpose:

• Preparing binding courier delivery quotes based on distance, weight, vehicle class, and Chicago ZIP codes.
• Verifying legal identity and executing USPS Form 1583 applications for physical postal forwarding at 720 South Michigan Avenue.
• Coordinating route timing, loading dock instructions, and delivery handoffs with sender and recipient.
• Preventing malicious form submissions, bot abuse, spam, and fraudulent dispatch bookings through honeypot detection.
• Measuring advertising channel efficiency and conversion attribution across paid promotional campaigns.

5. Legal Bases for Processing

Where processing is governed by the General Data Protection Regulation or comparable frameworks, each processing activity is anchored to a specific legal basis:

• Contractual Performance: Processing intake manifests, street addresses, and contact numbers is necessary to evaluate routing and enter into a binding courier agreement.
• Consent: Storing conversion attribution parameters, activating marketing analytics, and maintaining non-essential browser cookies occurs solely upon affirmative consent.
• Legitimate Interests: Monitoring transmission telemetry, defending against server abuse, and maintaining routing network security constitutes a legitimate commercial interest.
• Legal Obligation: Maintaining identity records and USPS Form 1583 documentation satisfies United States Postal Service statutory compliance requirements.

6. Advertising Platforms & Click Identifiers

This site receives paid traffic today from major commercial networks. Active campaigns run on Google Ads (google ads), Microsoft Advertising (microsoft advertising), and Meta Ads.

When an ad is clicked, these advertising systems append specific click identifiers to the query string of our destination URLs:

• Google Ads: Appends the Google Click Identifier (gclid) to incoming links from google ads campaigns.
• Microsoft Advertising: Appends the Microsoft Click Identifier (msclkid) to incoming links from microsoft advertising campaigns.
• Meta Ads: Appends the Facebook Click Identifier (fbclid) where campaigns are active.

These parameters are read by client-side scripts solely to connect a specific inquiry or conversion to the originating campaign.

7. Google Consent Mode v2 Implementation

Trenvios strictly implements Google Consent Mode v2 (consent mode) on every page. Prior to affirmative visitor consent, the four operational parameters are initialized to a denied state:

• ad_storage: 'denied'
• ad_user_data: 'denied'
• ad_personalization: 'denied'
• analytics_storage: 'denied'

These four signals are held denied until the visitor explicitly clicks "Accept Storage" on our consent interface. If the visitor selects "Decline" or subsequently withdraws permission, each parameter is immediately set back to denied, terminating non-essential tracking and attribution storage.

8. Third-Party Data Processors & Recipients

Trenvios engages selected enterprise service providers to host infrastructure, transmit notifications, and measure campaigns. These processors are named individually:

• Google LLC / Google Ireland Ltd: Provides Google Ads conversion tracking and measurement tags under strict enterprise processing contracts.
• Microsoft Ireland Operations Ltd / Microsoft Corporation: Provides Microsoft Advertising attribution services. Visitors may review their handling procedures in the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Facilitates Meta Ads conversion tags and measurement.
• Web Hosting Provider: Delivers secure server infrastructure, SSL termination, and hosts the MySQL intake database.
• Mail Relay Route: Handles encrypted transit notifications forwarding inquiry submissions to desk dispatchers.

9. International Data Transfers

Trenvios is located in Chicago, Illinois, within the United States. Inquiries originated by individuals outside the United States are transmitted directly to our Chicago servers. International transfers rely upon Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy determinations where applicable.

10. Data Retention Periods

Personal data is retained only for definite operational durations rather than indefinitely:

• Inquiries and Email Manifest Records: Retained for 24 months to support repeat dispatch records, account history, and billing verification.
• Chat Transcripts: Maintained for 18 months for customer service continuity and quality audits.
• Server Access and Telemetry Logs: Retained for 60 days before automatic deletion by server log rotation.
• Consent Choice Logs: Retained in browser localStorage for 6 months, after which the selection must be renewed.

11. Technical & Organizational Security Measures

We apply layered safeguards to protect client records from unauthorized inspection:

• 256-bit Transport Layer Security (TLS/SSL) encryption enforced across all web pages and form endpoints.
• Honeypot fields and transmission rate-limiting to prevent brute-force injection and unauthorized data harvesting.
• Restricted server access governed by cryptographic key authentication.
• Physical storage of confidential mail documentation in lockable file cabinets at 720 South Michigan Avenue.

12. Individual Rights Under GDPR

Visitors accessing our site from the European Union or European Economic Area are entitled to statutory rights under the gdpr:

• Right of Access: Obtain confirmation of whether your personal data is processed and receive an itemized copy.
• Right to Rectification: Request correction of inaccurate contact or shipment details.
• Right to Erasure: Demand deletion of personal information where operational retention is no longer justified.
• Right to Restriction: Request suspension of processing during dispute evaluations.
• Right to Data Portability: Receive your provided records in a structured, machine-readable format.
• Right to Object: Oppose processing rooted in legitimate business interests.
• Right to Withdraw Consent: Revoke consent for marketing and analytics tracking at any moment.

13. United States & California Privacy Rights (CCPA / CPRA)

Under United States state privacy frameworks, including the California Consumer Privacy Act as amended by the CPRA (ccpa), California residents and residents of comparable state jurisdictions enjoy specific statutory rights:

• The right to know what personal categories are collected, disclosed, or shared.
• The right to delete personal information held by our dispatch desk.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising. Trenvios does not sell personal information for monetary payment.
• The right to non-discrimination for exercising statutory privacy privileges.

14. Global Privacy Control (GPC)

Trenvios respects universal opt-out signals. When our server or client script detects a global privacy control (Sec-GPC) signal transmitted by your browser, we automatically interpret it as a valid, binding opt-out from non-essential storage, analytics tags, and advertising attribution without prompting you again.

15. Protection of Minors

Our services and website are intended strictly for commercial businesses, adult travelers, and individuals aged 18 and older. We do not intentionally solicit or collect personal information from children under 16 years of age. Any record discovered to have originated from a minor will be purged immediately upon notice.

16. Right to Lodge a Complaint

If you believe your privacy rights have been infringed, you maintain the legal right to lodge a formal complaint with a competent supervisory authority. United States residents may contact their respective state Attorney General or the California Privacy Protection Agency (CPPA). European visitors may contact their national Data Protection Authority.

17. Exercising Your Statutory Privacy Rights

To exercise access, erasure, correction, or opt-out rights, write directly to our desk at office@trenvios.com or submit a statutory inquiry through our dedicated Data Subject Access Request (DSAR) intake page.

A formal response to a verified data request is issued within 5 days of receipt. We do not levy administrative fees for standard statutory requests.

18. Modifications to This Policy

Trenvios reviews this policy periodically to reflect operational adjustments or statutory developments. Any revision will be posted on this page with an updated effective date. Material alterations will be flagged through an administrative notice on our homepage.

19. Privacy Inquiries & Human Contact

For direct privacy queries, identity verification questions, or record rectifications, reach our operations team through the following coordinates:

• Postal Address: 720 South Michigan Avenue, Chicago, Illinois 60605, Chicago, Illinois, United States
• Direct Desk Phone: +1 (586) 555-0528
• Direct Privacy Email: office@trenvios.com

This policy and all data handling under it are governed by the law of Illinois, United States, with disputes heard in the courts of Chicago.

Review our companion Cookie Policy and governing Terms of Service for complete operational guidelines.