Before you read
This document is a good-faith draft based on best practices and regulations applicable to a small business in Florida (USA): CCPA/CPRA (California), GDPR (European Union), CAN-SPAM (federal), and the Florida Information Protection Act (FIPA). The Florida Digital Bill of Rights (FDBR) does not apply to Mac Gyver Wraps and Signs because it targets companies with annual revenue over USD 1 billion.
This is not a substitute for legal advice. Before publishing the site in production, we recommend that a Florida-licensed attorney specialized in privacy and consumer law reviews these terms.
Privacy policy
Mac Gyver Wraps and Signs (hereinafter "we", "the company", or "Mac Gyver") respects your privacy and is committed to protecting the personal data you provide. This policy explains what information we collect, how we use it, and what rights you have over it.
Data controller: Mac Gyver Wraps and Signs, 788 Montgomery Ave, Ocoee, FL 34761. For privacy questions you can reach us at privacy@macgyverwrapsandsigns.com or by phone at +1 (407) 969-7969.
Data we collect
We collect only the information needed to provide you with a quote and deliver the service you request. Specifically:
- Contact data: name, email address, phone (including WhatsApp), business name if applicable. Collected via our contact form, quote request form, or direct communication.
- Vehicle or surface data: type (car, van, food truck, trailer, signage), make, model, year, dimensions, photos you voluntarily upload, desired timeline, and requested service (full wrap, partial, stickers, PPF, etc.).
- Account data: if you sign up via Google OAuth or with email and password, we store your email, name, and the profile picture Google shares with us. The password is stored hashed — never in plain text.
- Technical data: IP address, browser type, operating system, and pages visited. Used for anti-spam protection (rate limiting) and operational diagnostics.
- Cookies and session tokens: see the Cookie policy section.
Notice at Collection (CCPA): on every form where we ask for personal data, you will find a link to this policy. We do not sell your personal data in the traditional sense, but when using Google OAuth or our hosting provider we may share information to make the service work (see Sharing with third parties).
How we use your data
We use your data only to:
- Reply to your inquiry and send you a formal quote.
- Coordinate the design, production, and installation of the service you contract.
- Show you the status of your project in your personal panel (
/dashboard) if you have an account. - Communicate operational project information by email, phone, or WhatsApp (no marketing unless you explicitly opt in).
- Comply with legal, accounting, and tax obligations (invoicing, retention of records for the period required by law).
- Improve our services and prevent fraud (internal analytics, without individual profiling or automated decisions).
Legal basis (GDPR): contract performance (when you request a service), legitimate interest (site operation and improvement), or your explicit consent (for marketing communications if applicable).
CAN-SPAM: if we send you marketing communications by email in the future, you will be able to unsubscribe with a single click from every message. We do not send spam.
Sharing with third parties
We do not sell or rent your personal data. We share strictly necessary information with the following providers that keep the service running:
| Provider | Purpose | Data shared |
|---|---|---|
| Google (OAuth) | Authentication with Google account | Email, name, public profile photo |
| Convex | Database and image storage (USA) | All lead/project information |
| Vercel | Website hosting (USA) | Server logs, IP, user agent |
| Anthropic (Claude) | AI-assisted catalog SEO descriptions (internal) | Only public service names and descriptions — no personal data |
All our providers meet their own security and privacy standards. When a service crosses borders (e.g., hosting in the USA), standard safeguards for international transfers under GDPR apply.
Additionally, we may disclose your information if required by a competent authority (court order, tax request, fraud investigation) or to protect our legal rights.
Data retention
- Leads without contract: 24 months from the last contact. After that, anonymized or deleted.
- Customers with contracted project: duration of the business relationship + 7 years (Florida tax/accounting retention period).
- Inactive user accounts: 36 months without activity → we notify you by email; if you don't reply, the account is deleted.
- Technical logs and rate limits: 30 days.
- Project photos: duration of the project + 5 years for internal portfolio (with your authorization to display on the site).
Your rights
Regardless of where you live, you can exercise the following rights over your personal data by writing to us at privacy@macgyverwrapsandsigns.com:
- Access: obtain a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete information.
- Deletion: have us delete your data (with legal exceptions — e.g., billing retained for tax obligation).
- Objection: object to processing based on legitimate interest.
- Portability: receive your data in a structured and portable format.
- Restriction: ask us to pause processing while a dispute is resolved.
- Withdrawal of consent: if you gave explicit consent (e.g., marketing), you can withdraw it at any time.
We respond to verifiable requests within 45 days (CCPA) or 30 days (GDPR), extendable for justified reasons. We do not charge for these requests unless they are manifestly excessive or unfounded.
California residents (CCPA/CPRA): you also have the right not to be discriminated against for exercising these rights, and the right to opt out of the "sale" or "sharing" of personal data for cross-context advertising (does not apply in our case, but is guaranteed).
EU/UK residents (GDPR): you also have the right to file a complaint with your local data protection authority if you believe we have not respected your rights.
Data security
We implement reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:
- In-transit encryption (HTTPS/TLS 1.2+) across the entire site.
- At-rest encryption through infrastructure providers (Convex, Vercel).
- Passwords hashed with modern algorithms (we never store passwords in plain text).
- Rate limiting and server-side validation to prevent form abuse.
- Restricted admin panel access for authorized staff only (server-side email validation).
- Periodic review of providers and security practices.
Incident notification (FIPA Florida): in the event of a security incident compromising your personal data, we will notify you without undue delay and within 30 days, as required by the Florida Information Protection Act. We will also notify the Florida Attorney General's Office when applicable.
No system on the internet is 100% secure. We cannot guarantee absolute security of internet transmission, but we make our best ongoing effort.
Minors
This site and our services are intended for people 18 years or older. We do not knowingly collect personal data from children under 13 (COPPA compliance). If you become aware that a minor provided us with data without a guardian's authorization, contact us at privacy@macgyverwrapsandsigns.com and we will delete the data without delay.
Terms and conditions
By using this website and/or contracting our services, you accept these terms. If you do not agree, please refrain from using the site.
Services offered
Mac Gyver Wraps and Signs offers full and partial vehicle wraps, stickers and lettering, paint protection film (PPF), signage, and visual branding for clients in Florida (USA), with a physical location at 788 Montgomery Ave, Ocoee, FL 34761.
Quotes, timelines, and prices
- Quotes are estimates and are based on the information you provide (dimensions, photos, project description). If significant variations arise upon in-person inspection of the vehicle or surface, we will adjust the quote and seek your approval before proceeding.
- Quotes are valid for 30 days from issuance, unless expressly stated otherwise.
- Prices are in United States dollars (USD) and do not include taxes unless specified.
- Delivery timelines are estimates and depend on the complexity of the work, material availability, and your timely approval of the design.
- To start production we may require a deposit (typically 50% of the total). The balance is paid on delivery.
Intellectual property
Customer logos and brands: you represent that you hold the necessary rights to use the logos, photos, fonts, and other graphic material you provide for inclusion in your wrap. Mac Gyver is not responsible for third-party claims arising from the misuse of trademarks you instructed us to reproduce.
Designs created by Mac Gyver: original designs we create for your project remain for your exclusive use on the contracted vehicle or surface. We retain the right to use images of the finished work in our portfolio (web, social media) unless you request otherwise in writing.
Site content: the code, design, logos, and text of this site are property of Mac Gyver Wraps and Signs unless otherwise indicated. 3M® and Avery Dennison® are registered trademarks of their respective owners and are mentioned as references to the materials we use.
Liability limitation
To the maximum extent permitted by applicable law:
- Mac Gyver does not guarantee the website is free of errors, interruptions, or security vulnerabilities. You use the site at your own risk.
- Our wrap services come with a material manufacturer warranty (3M, Avery Dennison) — typically 5 to 7 years depending on the product. Professional installation is covered by our workmanship warranty for 12 months under normal use. Damage from accidents, abrasive washing, exposure to aggressive chemicals, or wear from intensive use is not covered.
- We are not liable for indirect, incidental, or consequential damages arising from your use of the site or our services, including lost revenue or business opportunities.
- Our total liability under any claim will not exceed the amount actually paid by the customer for the specific service giving rise to the claim.
Governing law and jurisdiction
These terms are governed by the laws of the State of Florida (USA), without regard to its conflict of laws principles. Any dispute arising from or related to these terms or our services will be submitted to the exclusive jurisdiction of the competent courts of Orange County, Florida (USA).
If any provision of these terms is found to be invalid or unenforceable, the remainder will remain in full force and effect.
Accessibility statement
Mac Gyver Wraps and Signs is committed to website accessibility for people with disabilities. We work to ensure the site complies with WCAG 2.1 level AA (Web Content Accessibility Guidelines) and respects the spirit of the Americans with Disabilities Act (ADA), Title III.
If you encounter accessibility barriers using this site (issues with screen readers, insufficient contrast, keyboard navigation, etc.), please write to us at privacy@macgyverwrapsandsigns.com or call us at +1 (407) 969-7969 describing the problem. We commit to respond and seek a reasonable alternative solution as soon as possible.
Contact for legal matters
Privacy and personal data
privacy@macgyverwrapsandsigns.comLegal and contractual matters
legal@macgyverwrapsandsigns.comPhone
+1 (407) 969-7969Address
788 Montgomery Ave, Ocoee, FL 34761
This policy is in effect as of April 29, 2026. We reserve the right to modify it; any substantive change will be announced on this same page and, where applicable, we will notify you by email.
