DOCUMENT / PRIVACY
REV 2026.09.29
Information handling / data requests
Privacy choices stay connected to the construction inquiry.
This privacy notice explains how VEC handles construction coordination support inquiries, construction drawing review messages, support chat, technical logs and advertising identifiers. It applies to visitors at vec.us.org and to people who contact VEC from paid traffic.
Read the rule before sending a drawing set
Effective date
This notice took effect on September 29, 2026. It is the working privacy notice for this website, its inquiry route and its support chat.
The operator
VEC, trading at vec.us.org, operates this site. The postal address is P.O. BOX 277 18359 HIGHWAY 58 NORTH, DECATUR, TN 37322, United States. VEC is the controller for information it receives through the site.
Why information is used
VEC uses inquiry details to read a request, respond to the sender, decide whether the described construction coordination support fits the stated need and keep the exchange tied to its source. Drawing references and notes help separate a missing input from a conflicting instruction.
Technical records help deliver, secure and troubleshoot the website. Consent records show the choice made about optional storage. Advertising identifiers help Google Ads, Microsoft Advertising and Meta Ads attribute a visit when the visitor has permitted the relevant storage. They do not turn an inquiry into a booking.
Legal bases
VEC relies on consent for optional analytics and advertising storage, including the signals sent through Consent Mode v2. VEC relies on steps requested before a possible service relationship and on legitimate interest to receive and answer an inquiry, protect the service, prevent abuse and keep necessary business records. The lawful basis used depends on the action and the visitor's location.
Sending an inquiry does not book work. A field change still needs the responsible designer's approval, and this site does not replace that review.
The information has a defined route
What arrives
The inquiry form writes name, phone, email, project address, kind of enquiry, message, requested specification and the consent tick. Phone is optional. With an inquiry, the system automatically records the IP address, browser user-agent string, referring URL, the moment the form was rendered and the moment it was sent.
The support chat keeps the conversation and a token in the visitor's browser so a conversation can be resumed. The browser stores the consent choice under site_consent_v2. Landing URLs may contain gclid, msclkid or fbclid. Technical records include the server and access information needed to operate the site.
Protection in use
VEC limits access to inquiry records and notification mail to the routes needed to handle them. The site uses server-side validation, hidden anti-spam fields, controlled request endpoints and access logging. Information is sent over the website's secure transport where supported by the hosting configuration. No payment, card data, account or password is requested.
Children
This site is for adults seeking construction project coordination or related information. It is not directed to children and VEC does not knowingly take data from children.
Paid traffic is identified, not hidden
Advertising platforms
This site receives traffic today from Google Ads, Microsoft Advertising and Meta Ads. Google Ads may attach gclid to a click, Microsoft Advertising may attach msclkid, and Meta Ads may attach fbclid where a campaign runs there. These identifiers may appear in a landing URL. In this notice, “google ads” means the Google Ads activity described here, and “microsoft advertising” names the Microsoft Advertising activity; the wording does not change either platform name. Nothing on this site claims that a platform has reviewed, approved or verified it.
Consent Mode v2 defaults
Before optional storage is allowed, consent mode holds ad_storage, ad_user_data, ad_personalization and analytics_storage denied. They stay denied until the visitor allows the relevant storage. If the visitor declines or withdraws, all four signals are set back to denied immediately. Platform consent signals can operate without permitted advertising storage; denied does not mean that no network traffic occurs. This consent mode setting controls storage and data-use permission, not whether a platform can receive a consent signal.
Global Privacy Control
VEC honours the global privacy control signal, including the Sec-GPC header, as an opt-out without asking again. Optional storage is not created on a denied choice. Attribution values sent into inquiry handling are stripped when appropriate consent has not permitted that use.
See Cookies and Storage Choices for the storage register, withdrawal controls and the difference between essential handling and optional storage.
Sharing follows the job of each route
Recipients
Google Ireland Ltd / Google LLC receives Google Ads consent signals and may receive permitted attribution. Microsoft Ireland Operations Ltd handles Microsoft Advertising activity; its own privacy statement is at privacy.microsoft.com/privacystatement. Meta Platforms Ireland Ltd handles Meta Ads attribution where a campaign runs there.
The hosting provider serves this site and stores the inquiry database. The mail provider carries an inquiry notification to the operator's inbox. These recipients are named by function because the site does not publish their commercial names here.
Transfers
Some hosting, mail or advertising processing may occur outside the country where a visitor is located. VEC uses the provider's contractual, technical or other lawful transfer mechanism applicable to that service and the visitor's region. Optional advertising sharing is controlled by the consent choice described above.
Retention periods
Enquiries and their email copies are kept for 24 months. Chat transcripts are kept for 12 months. Server and access logs are kept for 30 days. The record of a consent choice is kept for 12 months. These periods are the site's stated operating periods, after which the relevant record is deleted or reduced where the system supports that process.
Ask for the record that concerns you
GDPR rights
For visitors who reach this site from Europe, the GDPR sections apply as relevant. You may ask for access, rectification, erasure, restriction, portability and objection, and you may withdraw consent. Withdrawal does not undo processing that was lawful before the withdrawal.
US state privacy rights
US state privacy law applies according to the visitor's state. California residents may have rights under the CCPA and CPRA, including access, correction, deletion and opting out of the sale or sharing of personal information. Other state laws in force may provide comparable rights. VEC does not ask for identity documents in the initial request.
Make a data request
Email [email protected], call (423) 334-1020, or use the contact form and choose Data request as the kind of enquiry. Include the email or details that help VEC locate the record. A data request is answered within 14 days. VEC may ask for proportionate information to protect another person's data before releasing a record.
Complaints
You may complain to your state Attorney General. A California resident may also complain to the California Privacy Protection Agency. Visitors covered by the GDPR may complain to a data protection authority in their country or place of work.
Changes to this notice
When this notice changes, VEC publishes the revised text here and changes the effective date at the top of the page. A material change is not concealed in a separate document.
Direct contact
Questions about information handling reach VEC at [email protected] or (423) 334-1020. Written contact may be sent to P.O. BOX 277 18359 HIGHWAY 58 NORTH, DECATUR, TN 37322, United States.