PRIVACY POLICY
Last updated: March 14, 2026
1. Introduction
D.A. Legacy Group LLC ("we," "us," or "our") operates the website bikeslop.com (the "Site"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that information. This policy applies to all visitors and users of the Site, including residents of California (under the CCPA/CPRA), residents of Canada (under PIPEDA and CASL), and all other jurisdictions in the United States and Canada.
2. Information We Collect
2.1 Information You Provide Directly
We collect information you voluntarily provide when you interact with the Site, including:
- Park and Shop Submissions: When you submit a new listing or correction through our Submit form, we collect your name, email address, and the details of your submission.
- Account Information: If you create an account through our authentication provider (Manus OAuth), we receive your display name, email address, and a unique user identifier. We do not receive or store your password.
- Payment Information: If you purchase a premium listing or other paid service, payment is processed by Stripe, Inc. We receive your name, email, and a transaction reference identifier from Stripe. We do not receive, process, or store your credit card number, CVV, or full payment card details.
- Messages and Correspondence: If you contact us through the Site or by email, we retain the content of your message and your contact information to respond to your inquiry.
2.2 Information Collected Automatically
When you visit the Site, certain information is collected automatically:
- Analytics Data: We use privacy-respecting analytics to understand how visitors use the Site. This includes anonymized page views, referral sources, browser type, device type, and general geographic region. We do not use invasive tracking or cross-site profiling.
- Session Data: When you log in, a session cookie is set to maintain your authenticated state. This cookie is essential for the Site to function and does not track you across other websites.
- Cookie Consent Preference: We store your cookie consent choice in your browser's local storage so we do not ask you again on subsequent visits.
2.3 Information from Third-Party Services
The Site integrates with third-party services that may collect or process data:
- Google Maps: We use the Google Maps API to display park and shop locations on interactive maps. When you view a map, Google may collect usage data in accordance with the Google Privacy Policy.
- YouTube: We embed YouTube videos on the Site. When you play a video, YouTube (Google LLC) may collect data about your viewing activity in accordance with the Google Privacy Policy and YouTube Terms of Service.
- Stripe: Payment processing is handled by Stripe, Inc. When you make a payment, Stripe collects and processes your payment information in accordance with the Stripe Privacy Policy. We do not have access to your full payment card details.
- Manus OAuth: Account authentication is provided by Manus. When you create an account or log in, Manus processes your authentication credentials and shares only your display name, email, and user identifier with us.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Process and verify park and shop submissions, corrections, and listing claims
- Authenticate your identity and maintain your account session
- Process payments for premium listings and other paid services
- Contact you regarding your submission, account, or transaction if clarification is needed
- Display interactive maps showing park and shop locations
- Improve the Site's content, functionality, and user experience
- Monitor and analyze usage trends through anonymized analytics
- Detect, prevent, and address technical issues or fraudulent activity
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share information only in the following limited circumstances:
- Service Providers: We share data with trusted service providers who assist in operating the Site, including Stripe (payment processing), Manus (authentication), Google (maps and video hosting), and our database and hosting infrastructure providers. These providers are contractually obligated to protect your data and use it only for the services they provide to us.
- Legal Requirements: We may disclose information if required by law, regulation, subpoena, court order, or other legal process.
- Protection of Rights: We may disclose information to protect the rights, safety, or property of D.A. Legacy Group LLC, our users, or the public.
5. Cookies and Tracking Technologies
The Site uses a limited number of cookies and local storage mechanisms. We provide a cookie consent banner on your first visit, allowing you to accept or decline non-essential cookies.
| Type | Purpose | Duration |
|---|---|---|
| Session Cookie | Maintains your login state after authentication. Essential for account functionality. | Session / 7 days |
| Cookie Consent | Stores your cookie consent preference so the banner is not shown again. | Persistent (local storage) |
| Analytics | Privacy-respecting analytics to understand aggregate usage patterns. No cross-site tracking. | Session |
| Third-Party (Google/YouTube) | Set by Google when you interact with embedded maps or YouTube videos. Governed by Google's privacy policy. | Varies |
We do not use third-party advertising cookies or cross-site tracking pixels. Our analytics solution is configured to respect Do Not Track (DNT) browser signals. You can manage cookies through your browser settings at any time.
6. Data Storage and Security
Your data is stored in secure, encrypted databases hosted on cloud infrastructure. We implement the following security measures:
- All data transmitted to and from the Site is encrypted using TLS (HTTPS)
- Database connections use SSL encryption
- Authentication tokens are signed with secure cryptographic keys
- Payment processing is handled entirely by Stripe's PCI-DSS compliant infrastructure
- Administrative access is restricted to authorized personnel with role-based access controls
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected. Specifically:
- Account data is retained for as long as your account remains active. You may request deletion at any time.
- Submission data (park/shop submissions and corrections) is retained until the submission is processed and any follow-up is complete.
- Transaction records (Stripe payment references) are retained as required for accounting, tax, and legal compliance purposes.
- Anonymized analytics data may be retained indefinitely as it cannot be linked to any individual.
8. Your Rights Under the California Consumer Privacy Act (CCPA/CPRA)
If you are a California resident, you have the following rights:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You may request that we delete any personal information we have collected from you, subject to certain legal exceptions.
- Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link.
- Right to Limit Use of Sensitive Information: We do not collect sensitive personal information as defined by the CPRA.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
To exercise these rights, email [email protected] with the subject line "California Privacy Request". We will respond to verifiable requests within 45 days. You may designate an authorized agent to make a request on your behalf.
9. Canadian Privacy Rights (PIPEDA and CASL)
We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
- Consent: We collect and use your personal information only with your knowledge and consent. You may withdraw your consent at any time by contacting us.
- Access and Correction: You have the right to access your personal information held by us and to request corrections to any inaccurate data.
- Electronic Messages: We will not send you commercial electronic messages without your express or implied consent. If you provide your email address through the Submit form, we will use it only for the stated purpose of processing your submission. We do not add submission emails to marketing lists.
10. Children's Privacy
The Site is not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have inadvertently collected information from your child, please email [email protected] with the subject line "Children's Privacy" and we will promptly address it.
11. International Data Transfers
The Site is operated from the United States. If you access the Site from Canada or another jurisdiction, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Site, you consent to the transfer of your information to the United States. Our service providers (including Stripe and Google) may also process data in various jurisdictions in accordance with their respective privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide prominent notice on the Site. We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a concern, please contact us or email us at [email protected] for privacy-related requests, or [email protected] for general inquiries. You may also reach us by mail at:
D.A. Legacy Group LLC
784 S. Clearwater Loop, Ste B
Post Falls, ID 83854
United States
If you are a California resident and are not satisfied with our response, you may contact the California Attorney General's office. If you are a Canadian resident, you may file a complaint with the Office of the Privacy Commissioner of Canada.