Privacy Policy

Last updated September 25, 2026. This policy covers thetrucklettering.com, run by The Truck Lettering Co., a DBA of IRO Innovations, a California corporation (2680 Pomona Blvd, Pomona, CA 91768). Questions: hello@thetrucklettering.com.

The short version. We collect what it takes to make and ship your order and to run your account. We don't sell your information, the only advertising cookie is Google's conversion cookie (and only if you accept it), and we don't share your phone number or text-message consent with anyone for their marketing. California residents can ask us to show, correct or delete what we have.

What we collect How we use it Who we share it with Cookies Text messages How's My Driving California rights Retention and security

What we collect

What you type into a designer: company name, USDOT, MC, CA or license numbers, phone, unit numbers, boat name, and any logo you upload. This is the content of your order.
Contact and account details: email, name, mobile number if you give one, a password if you create an account.
Order details: shipping address, what you bought, order status and tracking numbers.
Payment: handled by Stripe. We receive the payment status, the last four digits and card brand for your receipt, and the billing name and address. We never see or store your full card number.
Site usage: our own first-party analytics record pages viewed, the designs started and saved, and events like "checkout started", tied to a random visitor id in a cookie. No advertising networks, no cross-site tracking.
How's My Driving reports: if someone files a report about one of your vehicles, we record the report, an optional callback number they give, and a hashed version of their IP address to limit abuse. Phone reports are recorded and transcribed.
Emails you send us, and the address you send them from.

How we use it

To make, print, ship and support your order, and to send the order confirmation, correction window, tracking and delivery emails.
To run your account: sign in, saved designs, order history, your trucks, reorders.
To check your USDOT number against the public FMCSA register so we can warn you if the name on file doesn't match your lettering. We send only the number to the FMCSA lookup.
To send a small number of service emails after an order (a saved-design reminder, an install check-in, a reorder note). Every one has an unsubscribe link and we stop when you ask.
To improve the site using our own aggregate analytics.
To prevent fraud and abuse, and to meet legal obligations such as sales tax records.

Only companies that do work for us, and only what they need for that work:

Production vendors that cut and print your order and ship it to you under our name (currently Lettering.com for vinyl and 4over for magnets). They get your design file and your ship-to name and address.
Stripe for payments, sales tax calculation and financing options (Klarna, Affirm and similar are offered through Stripe and have their own privacy policies when you use them).
Brevo to deliver our emails.
Telnyx to deliver text messages and to run the How's My Driving phone line.
Cloudflare for site security and the "verify you're human" check on forms.
Our web host, which stores the site and its database.

We do not sell personal information and we do not share it for cross-context behavioral advertising. We will disclose information if the law requires it or to protect the rights and safety of people or the business. If the business is ever sold, customer records would transfer with it under this policy.

Cookies

We use a session cookie to keep you signed in and keep your cart, a visitor-id cookie for our own analytics, and a cookie that remembers you dismissed the cookie notice. Stripe sets cookies on the checkout page for fraud prevention. If we are running Google Ads, Google sets a conversion cookie so we can tell that an ad led to an order. It is used only to measure our ads, not to follow you around the web with ads; that stays off unless you choose OK on the cookie notice. Choose Opt out on the notice, or turn on Global Privacy Control in your browser, and the conversion cookie is never set and Google receives only an anonymous, cookieless ping. We also keep a first-party note of the ad you clicked (for up to 90 days) so our own order records show where a sale came from. We don't use any other advertising cookies and we don't build profiles. You can clear or block cookies in your browser; the cart and sign-in need the session cookie to work.

Text messages (SMS)

If you check the box at checkout, we send order and shipping updates by SMS to the number you give us. Message frequency varies by order. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. We do not sell or share your phone number or your SMS consent with third parties or affiliates for their marketing.

How's My Driving reports

Reports filed about your vehicle are shown to you (the decal owner) and stored in your account. If you use our report line, the caller's number, the recording and the transcript are shared with you. People who file a report are told it goes to the vehicle's owner. We keep reports for as long as your account is active.

Your California privacy rights

Under the California Consumer Privacy Act you can ask us to tell you what personal information we have about you and how we use and share it, to correct it, or to delete it. You can also ask us not to sell or share your information, though we don't do either. We won't treat you differently for using these rights.

To make a request, email hello@thetrucklettering.com from the address on your account, or include your order number. We may ask for enough to confirm it's you. You can have someone make the request for you with written permission. We answer within 45 days. Under California's "Shine the Light" law you can also ask which third parties we've shared personal information with for their direct marketing; the answer is none.

Some information we can't delete while we still need it, for example order and tax records we're required to keep, or an open order in production.

Retention and security

We keep order records for as long as tax and accounting rules require. Saved designs and account details stay until you delete them or ask us to. Logos you upload are kept so you can reorder. Data travels over HTTPS, passwords are stored hashed, and card details never touch our servers.

Children

The site is for businesses and adults. We don't knowingly collect information from anyone under 16.

Changes

If this policy changes in a way that matters, we'll update the date at the top and, for anything significant, email account holders.