Effective Date and Document Scope
This privacy policy and disclosure framework took effect on 2026-11-10. It governs all technical, commercial, and communication interactions across thefjcomp.com, direct telephone channels, and workshop visits at our facility in Miami, Florida.
We operate as a bespoke vehicle restoration studio and RestoManufacturing coachbuilder. We process personal and vehicular data solely to assess restoration eligibility, prepare technical specifications, manage build milestone agreements, and maintain direct communications with prospective vehicle commissioners.
Data Controller Identification
The data controller responsible for personal information processed on this website is Thefjcomp, trading at thefjcomp.com. Our physical workshop and administrative headquarters are located at 6897 NE 4th Ave, Miami, Florida 33138, Miami, Florida, United States.
You can contact our designated privacy officer directly by telephone at 305-257-8045 or by electronic mail at [email protected]. Any communication regarding data processing or rights fulfillment is handled by our senior workshop management.
Categories of Personal Data Collected
We collect and record only the specific categories of data necessary to scope and execute classic Toyota Land Cruiser FJ restoration projects:
1. Inquiry Submissions: When you complete an intake form, our handler (submit.php) writes your full name, telephone number, email address, physical delivery address or country, project kind (FJ40, Signature, or G40), custom engineering notes, donor specifications, and your affirmative consent confirmation.
2. Automated System Telemetry: Every web form submission captures the originating IP address, browser user-agent string, referring URL, time of initial form rendering, and exact unix timestamp of form dispatch.
3. Support Chat Transcripts: Conversations initiated through our support chat widget (chat.php) store the conversational messages and an anonymous session token in your browser localStorage to enable continuous multi-message consultations.
4. Advertising & Analytics Telemetry: Click identifiers delivered via paid campaigns, specifically gclid from Google Ads, msclkid from Microsoft Advertising, and fbclid from Meta Ads, alongside Google Analytics event telemetry when storage is permitted.
We do not collect credit card numbers, banking passwords, social security numbers, or payment account credentials through this website. All project milestone disbursements are handled via direct bank wire transfers under formal commercial restoration contracts.
Purposes of Data Processing
Every collected record serves a defined operational objective within our restoration practice:
First, assessing client vehicle requirements, donor chassis suitability, powertrain fitment, and right-hand drive tooling feasibility. Second, issuing non-binding project estimates based on our verified pricing tiers (FJ40: $85,000â$120,000; Signature: $200,000; G40: $210,000). Third, coordinating vehicle transport and intake scheduling at our Miami facility. Fourth, measuring the effectiveness of our digital advertising investments and preventing spam or automated abuse across our inquiry endpoints.
Legal Bases for Processing
In accordance with applicable statutory standards, including Article 6 of the General Data Protection Regulation (GDPR) for international visitors, we process data under three distinct legal grounds:
1. Consent: Explicit opt-in consent governs marketing communications, support chat continuity, and non-essential analytical and advertising telemetry under Consent Mode v2.
2. Contractual Necessity: Processing contact details, delivery addresses, and donor chassis specifications is necessary to prepare formal restoration quotes and execute client milestone agreements.
3. Legitimate Interests: Operating server log monitoring, diagnosing mechanical consultation routing, preventing bot spam via honeypot fields, and validating commercial ad attribution.
Active Advertising Platforms & Click Identifiers
This website receives live commercial traffic driven by paid digital advertising campaigns. We actively run and measure traffic from google ads, microsoft advertising, and Meta Ads.
When you follow a commercial link to our site, these platforms attach specific click identifiers to the landing URL:
• Google Ads: Passes the gclid click identifier parameter for conversion attribution and landing page performance tracking.
• Microsoft Advertising: Passes the msclkid click identifier to attribute search intent on Bing and partner networks.
• Meta Ads: Passes the fbclid click identifier to connect social discovery with workshop consultation inquiries.
These identifiers are parsed by our analytics scripts strictly in accordance with your consent preferences. No advertising platform has reviewed, approved, or verified our restorations, custom coachwork, or site operations.
Consent Mode v2 Signal Architecture
Our website implements Google consent mode v2 as an automated privacy gate. Before any analytical or conversion script reads or writes browser storage, four core consent flags are initialized to a default denied state:
1. ad_storage: Initialized as denied.
2. ad_user_data: Initialized as denied.
3. ad_personalization: Initialized as denied.
4. analytics_storage: Initialized as denied.
If you click “Accept” on our consent dock, these signals are updated to granted, enabling persistent cookie-based attribution. If you click “Decline” or ignore the banner, all four signals remain denied, and conversion tracking operates in a cookieless, non-persistent state. If you subsequently withdraw consent via our cookie settings control, all four parameters are instantly reverted to denied.
Third-Party Data Processors
We share personal information only with vetted infrastructure partners and technical processors essential to deliver our services:
• Google LLC / Google Ireland Ltd: Provides Google Analytics and Google Ads infrastructure.
• Microsoft Ireland Operations Ltd: Powers Microsoft Advertising campaign telemetry. Microsoft’s global data protection commitments are detailed in the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms Inc: Powers Meta Ads campaign telemetry.
• Hosting & Server Infrastructure: Managed bare-metal web hosting in certified United States facilities maintaining physical access controls and isolated database instances.
• Transactional Mail Provider: Dedicated SMTP relay carrying inquiry notifications directly to our Miami workshop email server over TLS encryption.
International Data Transfers
Our primary servers and physical workshops reside in the United States. When visitors located in the European Economic Area, the United Kingdom, or other overseas jurisdictions access our website or transmit an inquiry, their personal data is transferred directly to the United States.
Such international transfers are conducted pursuant to Standard Contractual Clauses (SCCs) approved by the European Commission or in reliance on the EU-U.S. Data Privacy Framework where certified by the receiving processor. For direct client inquiries, transfers are executed as pre-contractual measures initiated at your explicit request under Article 49(1)(b) of the GDPR.
Data Retention Timelines
We retain personal data strictly for defined operational periods rather than indefinitely:
• Restoration Inquiries & Email Notifications: Stored for exactly 36 months following project consultation to enable multi-year build referencing, donor VIN lookups, and specification changes.
• Support Chat Transcripts: Stored for exactly 18 months to assist ongoing client consultations.
• Server & Access Logs: IP and access logs are purged after exactly 60 days.
• Consent State Records: Your choice recorded in site_consent_v2 persists in your browser for exactly 12 months unless manually cleared.
• Data Subject Requests: Written inquiries regarding privacy rights are answered and resolved within 14 days of receipt.
Technical & Physical Security Safeguards
We implement robust technical and operational measures to protect your information against unauthorized access, loss, or disclosure. All web traffic is encrypted using modern TLS (HTTPS) transport protocols. Our database servers reside behind hardened firewalls with strict IP allowlists.
Physical access to our Miami workshop terminal systems is restricted to authorized technicians led by master Juan. Form endpoints incorporate anti-bot honeypot fields to filter automated credential harvesting and spam payloads.
European Data Protection Rights (GDPR)
For individuals accessing our website from the European Union, European Economic Area, or United Kingdom, the gdpr guarantees specific enforceable rights regarding your personal information:
• Right of Access: Request a complete copy of all personal records we hold concerning you.
• Right to Rectification: Request correction of inaccurate contact or vehicle specification details.
• Right to Erasure: Request permanent deletion of your inquiry and chat history.
• Right to Restriction: Request limitation of processing while a verification dispute is resolved.
• Right to Data Portability: Obtain your submitted data in a structured, machine-readable format.
• Right to Object: Object to data processing based on legitimate business interests.
• Right to Withdraw Consent: Revoke granted marketing or analytics consent at any time without penalty.
United States State Privacy Rights (CCPA & State Laws)
Residents of California and other states with active consumer data privacy legislation enjoy specific statutory rights under the ccpa and the California Privacy Rights Act (CPRA):
• Right to Know & Access: You may request the categories and specific pieces of personal information collected, the sources of collection, and the commercial purposes for processing.
• Right to Delete: Request deletion of personal information collected directly from you, subject to legal recordkeeping exemptions.
• Right to Correct: Request correction of inaccurate personal data.
• Right to Opt-Out of Sale or Sharing: The FJ Company does not sell personal information for monetary compensation. To the extent third-party conversion tracking might be categorized as “sharing” under statutory definitions, our consent manager and Global Privacy Control signals allow immediate opt-out.
• Right to Non-Discrimination: We will never discriminate against you in pricing, project turnaround, or build quality for exercising any statutory privacy right.
Global Privacy Control (GPC) Compliance
Our server and script architecture natively recognizes and honors the global privacy control signal transmitted by compatible browser agents (via the Sec-GPC header).
When a GPC signal is detected, our website treats it as a binding affirmative request to opt out of non-essential analytics and advertising cookies. In response, Consent Mode v2 signals remain strictly denied without requiring additional interaction with our cookie banner.
Children’s Privacy Protection
The FJ Company website and our classic vehicle restoration programs are directed exclusively to adult vehicle owners, collectors, and enthusiasts aged 18 and older.
We do not knowingly solicit, collect, or process personal information from children under the age of 16. If we discover that an inquiry contains data submitted by a minor without verified parental consent, we immediately purge the record from our active databases and mail relays.
Regulatory Complaints & Supervisory Authorities
If you believe our data handling practices violate applicable privacy statutes, you possess the legal right to lodge a formal complaint with an authorized supervisory body:
In the United States, you may file a complaint with your respective state Attorney General (such as the Office of the Florida Attorney General) or, for California residents, with the California Privacy Protection Agency (CPPA). In the European Union, you may contact the national data protection authority located within your member state of habitual residence or employment.
Data Subject Access Request (DSAR) Procedure
To exercise any statutory right under GDPR, CCPA, or related frameworks, submit a written Data Subject Access Request directly to our team.
Please submit your request by email to [email protected] or by postal mail addressed to:
Data Privacy Officer
Thefjcomp
6897 NE 4th Ave, Miami, Florida 33138, United States
To protect client confidentiality, we will verify your identity by confirming email ownership or telephone contact corresponding to existing inquiry records before disclosing or purging technical files. All verified requests will receive a substantive response within 14 days of receipt, free of charge.
Digital Accessibility Statement
The FJ Company is committed to providing a digital presence that is accessible to the widest possible audience, regardless of ability or technology. We design and test our web interfaces against the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA specifications.
Our static architecture prioritizes semantic HTML5 markup, full keyboard navigation support, high optical text contrast exceeding 6.9:1, explicit form labels, and respect for operating system preferences including prefers-reduced-motion. If you encounter any accessibility barrier, please reach our team at 305-257-8045 or [email protected] so we can provide immediate technical assistance or document alternatives.
Policy Amendments & Notifications
We review and update this privacy policy periodically to reflect evolving mechanical operations, statutory developments, and ad platform compliance guidelines. Any updates will be posted directly to this URL with a revised effective date stated prominently at the beginning of the text.
For clients with active restoration commissions in progress, material changes to data retention or operational processing will be communicated directly via email prior to implementation.
Direct Privacy & Operational Inquiries
If you have questions regarding this policy, our Consent Mode v2 implementation, or your restoration vehicle records, contact our Miami facility directly:
The FJ Company
6897 NE 4th Ave, Miami, Florida 33138, Miami, Florida, United States
Direct Telephone: 305-257-8045
Direct Email: [email protected]
Governing Law: The laws of the State of Florida, United States, with venue situated in Miami.