Privacy Policy & Advertising Tracking Disclosures

§ 1.0 Effective Date & Scope

This Privacy Policy took effect on 2026-11-11 and governs all technical inquiries, component dispatch communications, and digital marketing interactions processed through factorysfive.com. This document establishes our compliance with state and federal data protection standards and platform advertising rules. The law of Massachusetts, United States governs this document, with disputes heard in the courts of Wareham.

§ 2.0 Data Controller Identification

The data controller responsible for the collection and processing of personal data on this site is Factorysfive, trading at factorysfive.com. Our physical fabrication bays, administrative offices, and parts inspection facilities are located at:

§ 3.0 Categories of Personal & Technical Data Collected

Factorys Five records data necessary to evaluate vehicle component compatibility, answer inquiries, and satisfy advertising audit logs. This site’s own code collects the following categories, and nothing beyond them:

• Inquiry Form Data (facib21.php): Name, phone number, email address, delivery or workshop address, kind of inquiry, requested specification, message notes, and the consent tick.
• Automated Transmission Telemetry: Visitor IP address, browser user-agent string, referring URL, the moment the form was rendered, and the moment it was sent.
• Interactive Support Chat (cuno2fe.php): The conversation transcript and a session token stored in your browser localStorage so you can return to it.
• Consent Choice Record: Your consent choice stored in the browser under site_consent_v2. Nothing else on this site persists a preference.
• Paid Advertising Click Identifiers: Inbound click identifiers appended by advertising networks including Google Ads, Microsoft Advertising, and Meta Ads, alongside first-party cookie identifiers when storage is allowed.

No account, no password, no payment, and no card data are processed or stored on this website. Nothing is sold online here and no payment is taken through the site.

§ 4.0 Purposes of Data Processing

Every data element collected by Factorysfive serves an explicit operational purpose:

• Cross-referencing chassis dimensions, steering column clearances, and manifold flanges against shelf stock at 9 Tow Rd.
• Direct builder-to-client telephone or email communication to quote part retail pricing ($5.99 to $629.99 USD) and estimate fabrication lead times.
• Securing web application endpoints against automated abuse, denial-of-service attempts, and form submission spam.
• Measuring the performance of digital advertising campaigns and auditing conversion attribution signals.

§ 5.0 Statutory Legal Bases for Processing

We process personal data under clearly defined legal bases as recognized under Massachusetts state law and international data frameworks:

§ 6.0 Paid Advertising Networks & Click Identifiers

Factorys Five runs active paid acquisition campaigns. This website is a live destination for paid search and social campaigns across three primary advertising platforms:

• Google Ads: When you arrive via Google Ads, Google attaches the gclid (Google Click Identifier) query parameter to destination URLs to attribute conversions and optimize bid placement.
• Microsoft Advertising: When you arrive via Microsoft Advertising (Bing Ads), Microsoft attaches the msclkid (Microsoft Click Identifier) parameter to evaluate campaign efficacy.
• Meta Ads: When you arrive via Meta Ads (Facebook or Instagram), Meta attaches the fbclid (Meta Click Identifier) parameter to measure ad interactions.

These click identifiers are processed in the present tense to measure traffic quality, campaign reach, and technical fitment queries. Neither Google, Microsoft, nor Meta has reviewed, approved, or verified the specific claims on this website.

§ 7.0 Google Consent Mode v2 Implementation

Factorys Five strictly enforces Google Consent Mode v2 across all browser sessions. Prior to user interaction with our docked consent banner, the four foundational consent signals are initialized and held in a denied state:

• ad_storage: denied
• ad_user_data: denied
• ad_personalization: denied
• analytics_storage: denied

When a visitor clicks “Allow Storage”, these parameters are updated to granted. If a visitor clicks “Decline” or withdraws consent through our footer control, all four parameters are set back to denied immediately, terminating ad storage and network tracking cookies.

§ 8.0 Authorized Third-Party Data Processors

Factorys Five shares data with external service providers required to host infrastructure, transmit inquiries, and measure paid advertising campaigns:

• Google Ireland Ltd / Google LLC: Google Ads, which attaches gclid to ad clicks and receives Google Consent Mode v2 signals.
• Microsoft Ireland Operations Ltd: Microsoft Advertising, which attaches msclkid; its own handling is covered by the Microsoft Privacy Statement.
• Meta Platforms Ireland Ltd: Meta Ads, which attaches fbclid when paid social campaigns run.
• Hosting Provider: The web host that serves this site and stores the inquiry database in isolated server storage.
• Mail Provider: The encrypted mail route that carries inquiry notifications directly to the operator inbox at [email protected].

§ 9.0 Cross-Border Data Transfers

Factorys Five operates its primary computational assets and machine shop in Wareham, Massachusetts, United States. Data submitted by visitors outside the United States is transferred to and processed within the US. All international transfers are safeguarded under Standard Contractual Clauses (SCCs) and applicable data transfer frameworks to ensure protections equivalent to international standards.

§ 10.0 Definite Data Retention Schedules

We do not hold personal information indefinitely. Data records are subject to strict calendar retention ceilings:

• Specification Inquiries & Email Records: Retained for exactly 24 months to support recurring vehicle builds and fabrication warranty records, then permanently expunged.
• Interactive Support Chat Transcripts: Retained for exactly 6 months from the date of the session.
• Server Access & Security Logs: Retained for exactly 60 days to monitor security incidents and server health, after which log files rotate and overwrite.
• Consent Choice Persistence: The site_consent_v2 token remains in browser storage for exactly 12 months unless cleared manually by the visitor.
• Data Subject Rights Requests: All verified data access, deletion, or correction requests are answered within 7 days.

§ 11.0 Technical & Operational Security Measures

We employ modern physical, electronic, and procedural safeguards to protect your personal details:

• Transport Layer Security (TLS 1.3) encryption across all public web and API endpoints.
• Isolated server architecture with strict Linux file permissions and encrypted database storage behind hardware firewalls.
• Automated rate-limiting on inquiry endpoints to eliminate brute-force payload injections and malicious harvesting.
• Access controls restricting customer inquiry readouts solely to authorized Wareham shop fabricators.

§ 12.0 European Data Subject Rights (GDPR)

For visitors reaching factorysfive.com from the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR) grants you specific statutory rights:

• Right of Access: You may request an itemized copy of your personal data processed by Factorys Five.
• Right to Rectification: You may correct inaccurate or incomplete technical build records or contact details.
• Right to Erasure (“Right to be Forgotten”): You may request permanent deletion of your inquiry data subject to statutory commercial record-keeping laws.
• Right to Restriction of Processing: You may halt active processing while contesting data accuracy.
• Right to Data Portability: You may request your technical specifications delivered in a structured, machine-readable format.
• Right to Object: You may object to data processing grounded in legitimate interest.
• Right to Withdraw Consent: You may revoke consent at any time via our footer consent control.

§ 13.0 US State Privacy Rights & California Disclosures (CCPA)

Residents of California under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), as well as residents of Virginia, Colorado, Connecticut, Utah, and other applicable states, possess statutory consumer rights:

• Right to Know & Access: Learn the specific categories of data collected, sources, and commercial purposes.
• Right to Delete: Request destruction of collected personal data held in our active databases.
• Right to Correct: Update inaccurate contact or vehicle specification data.
• Right to Opt-Out of Sale or Sharing: Factorys Five does not sell personal data for monetary payment. However, the sharing of click identifiers with Google Ads, Microsoft Advertising, and Meta Ads for cross-context behavioral advertising may constitute “sharing” under CCPA. You may opt out instantly by declining storage in our banner or transmitting Global Privacy Control.
• Right to Non-Discrimination: We provide identical parts specifications, retail pricing ($5.99–$629.99 USD), and shop consultations regardless of your privacy choices.

§ 14.0 Global Privacy Control (GPC) Compliance

Factorys Five honors the Global Privacy Control signal. If your browser broadcasts the Sec-GPC header, our scripts automatically treat it as a valid, binding opt-out request for ad personalization and third-party data sharing without requiring additional manual input.

§ 15.0 Children’s Online Privacy Protection

Factorys Five develops automotive kits and competition racing parts intended exclusively for adult vehicle fabricators. We do not knowingly solicit or collect personal information from individuals under the age of 18. If we discover that personal data of a minor has been submitted, it will be deleted immediately from our active records.

§ 16.0 Regulatory Complaints & Oversight

If you believe Factorys Five has processed your personal information in violation of applicable laws, you retain the right to lodge a formal complaint with a competent regulatory authority:

• US State Authorities: Your state Attorney General, including the Massachusetts Attorney General for Massachusetts matters.
• California Residents: The California Privacy Protection Agency (CPPA) or the California Attorney General.
• European Visitors: The national Data Protection Authority (DPA) in the EU member state of your habitual residence or workplace.

§ 17.0 Data Subject Access Request (DSAR) Procedure

To submit a formal request for access, rectification, portability, or erasure of your technical project details, transmit your written request to our dedicated privacy contact:

We require proof of identity to protect against unauthorized data disclosure. Every verified data request is processed and answered within 7 days of formal receipt without charge.

§ 18.0 Policy Amendments & Notifications

Factorys Five reserves the right to amend this Privacy Policy to reflect modifications in machine shop operations, statutory obligations, or ad network technical mandates. Any revision will be published directly on this page with an updated “Effective Date” header. Ongoing use of our web forms following an amendment signifies acknowledgment of the updated terms.

§ 19.0 Direct Human Privacy Contact

For any inquiries, questions regarding component data logging, or assistance with privacy choices, you may reach our Wareham compliance team directly:

§ 20.0 Digital Accessibility Statement

Factorys Five is dedicated to ensuring digital accessibility for people with disabilities. We continually refine the user experience of factorysfive.com by conforming to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA benchmarks.

• High-contrast visual language (minimum 9.3:1 for secondary text, 15.2:1 for primary ink against #141212 ground).
• Fully accessible keyboard navigation across all interactive elements, modal drawers, and form controls.
• Strict respect for prefers-reduced-motion media queries, instantly disabling layered parallax transforms.
• Clear semantic landmarking with persistent skip links and descriptive ARIA controls.

If you encounter accessibility hurdles on our site, please notify our team at 508-291-3443 or [email protected]. We provide full technical specifications, quotation reviews, and phone-based consultation services to accommodate your accessibility requirements.