Legal
Privacy Policy
Last updated 1 September 2026
1. Who we are
Rowdy Customs is a custom truck lighting and accessories shop in Sheridan, Indiana. We do fiber-optic starlight headliners, rock and wheel-well lighting, LED builds, lifts, weight reduction, teardowns, and paint matching. All work is done in our shop — we are not a remote or mail-order service.
You can reach us:
- Phone / text: 812-870-2028
- Email: rowdy.customs.lighting@gmail.com
- Hours: Daily, 5 PM – midnight
- Location: Sheridan, Indiana
This policy covers this website. It does not cover our Instagram page or any other site we link to — those are run by other companies under their own policies.
2. The short version
We collect the contact details you type into our quote form, and nothing else. We use them to get back to you about your truck. We do not sell your information, we do not run advertising trackers, and this website does not use cookies.
3. What we collect
3.1 Information you give us
Everything we collect, you type in yourself. When you submit the quote form it goes to a private spreadsheet the shop owns, held with Google. Our quote form asks for:
| Field | Required? | What it is |
|---|---|---|
| Your name | Required | So we know who we are talking to |
| Phone | Required | The number you want us to reach you on |
| Optional | An alternative way to reach you | |
| Year, make and model | Required | The vehicle the work is for |
| What you are after | Pre-set choice | Starlight headliner / Rock and wheel-well lighting / Full lighting build / Not sure yet |
| Anything else | Optional | Free text — colours, patterns, a deadline |
We also record that you ticked the box agreeing we may call or text you, the exact wording you were shown, and when you ticked it. That record exists to prove we had your permission.
If you call, text, or email us instead of using the form, we have whatever you tell us in that conversation, plus your phone number or email address.
There is no account, no login, and no password anywhere on this site. Nothing to register for and nothing for us to leak.
3.2 Information collected automatically
The only thing this website collects automatically is a count of visits. Specifically, it contains:
- No cookies. See our Cookie Policy.
- No Google Analytics, no Meta Pixel, no Hotjar, no heatmaps, no session recording, no tag manager.
- No advertising or retargeting trackers.
- No fingerprinting and no session storage. The merch page stores one entry in your browser recording that you accepted its terms notice, so you are not asked repeatedly. It never leaves your device and says nothing about you — details in the Cookie Policy.
- No social media tracking widgets. Our Instagram link is an ordinary link. Nothing from Instagram loads unless you click it, at which point you are on Instagram’s site under Instagram’s policy.
- No third-party fonts. Ours are served from our own site rather than fetched from Google, so visiting our pages does not tell anyone else you were here.
What we do use: Vercel Web Analytics. It counts page views, unique visitors and where people arrived from. It sets no cookies, collects no personal information, builds no profile of you, and cannot follow you to any other website. It is one small script loaded from Vercel, the company that hosts this site. We use it to know whether the site is working — nothing more.
If you would rather not be counted, most browsers’ tracking-protection settings and standard content blockers will stop it loading, and the site works exactly the same.
If anything else changes — an ad pixel, a chat widget, an embedded video player — we will update this section and the Cookie Policy, and say so plainly rather than adding trackers quietly.
Our web host may keep standard server logs (IP addresses, pages requested, timestamps) as part of running any website. We do not use those logs to build a profile of you or to advertise to you.
Hosting provider: Vercel, which serves the pages, provides the visit counting above, and keeps standard server logs.
3.3 What we never ask for on this website
We do not collect Social Security numbers, driver’s licence numbers, bank account details, or card numbers through this website. If a page ever asks you for a card number, it is not us.
4. How we use your information — and how we may contact you
We use what you give us to:
- Respond to your quote request and answer your questions
- Work out what your build involves and what it costs
- Schedule work, order parts, and keep in touch while the job is underway
- Handle warranty claims and follow-up service
- Keep the records a business has to keep — invoices, work orders, tax records
We will contact you the way you asked us to. Because you gave us a phone number for the purpose of getting a quote, and agreed to be contacted about it, we may reply by phone call or text message to that number.
Standard message and data rates from your carrier may apply. We do not charge for messages.
To stop hearing from us, reply STOP to any text, or tell us on the phone or by email. We will stop. You can ask us to stop at any time, by any reasonable method, and we do not need a specific magic word — but “STOP” is the one that is hardest to miss.
We do not use your number for autodialled marketing blasts, and we do not send you offers about unrelated products.
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We have never done either.
5. Who we share it with
We share your information only in these situations:
- People who help us run the business. For example our web host, our email provider, or (once the merch store launches) a payment processor. They only get what they need to do their job, and they are not allowed to use it for their own purposes.
- When the law requires it. A subpoena, court order, or lawful request from an authority.
- To protect people. If we genuinely believe it is necessary to prevent fraud, injury, or illegal activity.
- If the business is sold or merged. Your information may transfer with it. We would tell you first.
That is the entire list. We do not trade, rent, or sell customer lists.
Current service providers:
- Vercel — hosts this website, serves the pages to you, and provides the cookieless visit counting described in 3.2.
- Google (Apps Script and Google Sheets) — receives your quote request and stores it in a private spreadsheet the shop owns. Nobody else can read it.
6. How long we keep it
| What | How long |
|---|---|
| Quote requests that never became a job | [[ RETENTION — QUOTE REQUESTS ]] |
| Customer and job records | At least as long as the warranty runs (one year from completion), plus any period Indiana law or our tax obligations require |
| Text and call history | [[ RETENTION — CALL AND TEXT HISTORY ]] |
| Invoices and financial records | As long as tax and accounting rules require, typically 7 years |
When we no longer need something, we delete or destroy it.
7. How we protect it
We take reasonable steps to keep your information safe — the site is served over HTTPS, access to enquiries is limited to the people who need it, and we do not store payment card data.
No method of transmission or storage is completely secure, and we cannot promise absolute security. If a breach affects your personal information, we will notify you and the Indiana Attorney General as Indiana’s breach notification law requires.
8. Your choices and rights
Whatever state you live in, you can always:
- Ask what we have about you
- Ask us to correct anything wrong
- Ask us to delete it, subject to records we are legally required to keep
- Tell us to stop contacting you, or to use one method and not another
Email or call us using the details in section 1. We will not charge you and we will not treat you differently for asking. Please give us enough information to find your record and to be confident it is really you — if we cannot reasonably verify who you are, we may not be able to act on the request.
8.1 A straight answer about state privacy laws
Twenty US states now have comprehensive consumer privacy laws. Most of them, including Indiana’s own Consumer Data Protection Act, in effect since 1 January 2026, only apply to businesses above a size threshold.
Those thresholds are large. As examples:
- Indiana applies to businesses handling the personal data of 100,000 or more Indiana residents in a year, or 25,000 or more while making over half their revenue from selling personal data.
- California applies at over $26,625,000 in annual gross revenue, or 100,000 California consumers or households, or 50% or more of revenue from selling or sharing personal information.
- Maryland is one of the lowest at 35,000 consumers, with no revenue threshold and no small-business exemption.
A single-location truck shop in Sheridan almost certainly falls below every one of these, so we are most likely not legally obligated to comply with them — and we are not going to claim a compliance status we do not have.
We honour the requests in section 8 anyway. They are what a straight-dealing business should do regardless of whether a statute compels it.
If you believe a state privacy law does apply to us and we have got this wrong, contact us and we will look at it properly.
9. Children
This website is for people shopping for truck work, and is not directed at children. We do not knowingly collect personal information from anyone under 13.
The federal children’s privacy rule (COPPA) was significantly amended, with full compliance required as of 22 April 2026. Among other changes, it now expressly treats phone numbers as protected personal information when collected from a child.
If you believe a child under 13 has given us information, contact us and we will delete it.
10. Other websites
Our site links to Instagram and may link elsewhere. We are not responsible for other companies’ privacy practices. Read their policies.
11. Changes to this policy
If we change this policy we will update the date at the top. If the change is significant — for example if we start using analytics, or begin taking payments online — we will make that clear rather than quietly editing the page.
12. Planned features — not live yet
Nothing in this section describes anything happening today. It is here so it is obvious what has to change before it does.
Merch store — planned, not live
Our merch page currently shows placeholder content only. There are no real products, no real prices, no cart, and no checkout. You cannot buy anything on this website, and we do not collect payment information anywhere.
Before the merch store goes live, all of the following must be added to this policy:
- The name of the payment processor and confirmation that card details go straight to them and never touch our servers
- What order information we keep and for how long
- Shipping and delivery information — what we collect, who we give it to
- A refund and return policy
- Whether the checkout uses cookies (it almost certainly will), which means updating the Cookie Policy and probably adding a consent banner
- Sales tax handling
Payment processor: [[ PAYMENT PROCESSOR ]]
Email marketing — not currently done
We do not send marketing emails or newsletters. If we start, we will comply with the federal CAN-SPAM Act: a working unsubscribe link honoured within 10 business days, our real physical postal address in every message, and honest subject lines.
Accounts and logins — not planned
There are no user accounts on this site and none are planned.
This document is a starting template, not legal advice. It should be reviewed by a licensed attorney before publishing — and especially before the merch store starts taking payments.