Privacy Policy

1. Who we are and what this Policy covers

Xpress Smog Check Center is a Nevada smog check (emissions inspection) business located inside Xpress Oil & Lube Center. Our legal name for this Policy is FMI Hudspeth, Inc., doing business as Xpress Smog Check Center. We test vehicles at two Reno locations: Reno Northwest, 6100 Mae Anne Ave, Reno, NV 89523, (775) 787-1000, and Reno South, 4993 Longley Ln, Reno, NV 89502, (775) 828-6996. Our mailing address for this Policy is 4993 Longley Ln, Reno, NV 89502.

This Policy covers the Site, the forms on it, the Ozzie chat assistant and the emails the Site sends. It also describes what happens with the information you give us when you call or visit a location, where the Site is involved. It does not cover other companies' websites or apps, even ones we link to, such as Google Maps, Google reviews or the Nevada DMV.

The Site is built, hosted and operated for us by YelloPost (yellopost.com), a marketing agency in Reno, Nevada. YelloPost acts on our instructions and as a processor of the information described below. Where this Policy says "we" collect or keep information, YelloPost may be doing that work for us on servers it manages.

If you have a question about this Policy, section 19 explains how to reach us.

2. The short version

The details follow, but here is the summary:

• We collect what you type into our forms and the chat, basic technical data such as your IP address and browser, and, if you allow it, analytics about how the Site is used.
• We use it to answer your requests, call you back, keep the Site working and improve it.
• We do not sell personal information, and we do not share it with other companies for their own marketing.
• The people and services that see it are our staff, YelloPost (the website operator), the email services that deliver our mail, Cloudflare (security and the bot check) and, if enabled, Google (analytics and tag management, which you can turn off).
• When your vehicle is smog tested, Nevada law requires us to send the test result and the vehicle's identification to the Nevada DMV electronically (see section 4).
• You can ask for a copy of what we hold about you, ask us to correct it or ask us to delete it.
• The Site is not for children under 13 and we do not knowingly collect information from them.
• Ozzie, the chat assistant, is automated. Do not share sensitive information in the chat.

3. Information you give us through forms

Most pages have a short question form, and on desktop computers a small "before you go" call-back panel can appear when your pointer leaves the page. The contact page has the same form. Each one asks only for what that request needs: usually your name, a phone number or email address, the location you prefer, something about your vehicle and your message. The call-back panel asks for a name and phone number so a location can call you.

When you send a form, the Site emails your submission to the location you chose and to YelloPost so the request is not missed. The email includes what you typed plus the page you sent it from, the date and time, your IP address and your browser type. The location keeps that email as a business record so it can answer you and keep track of what was discussed.

If you send us a message by regular email or call a location, we keep what you tell us in the same way. We may write down your name, number, vehicle and the reason for the call so the right person can follow up.

Please do not put sensitive information in a form, in the chat or in an email: no payment card numbers, Social Security numbers, driver's license numbers, health information or passwords. We will never ask for a card number through the Site.

4. Smog test and registration information

The Site itself does not run smog tests. Tests happen at our locations. We explain here what happens to vehicle information at the station because it affects your privacy.

When your vehicle is tested, Nevada law requires the station to send the test result, together with the vehicle's identification (the VIN and related vehicle data), to the Nevada Department of Motor Vehicles electronically. We do not control that requirement and we cannot opt a vehicle out of it. The DMV's own privacy rules and records laws govern the information once the DMV has it, and its notices are on dmv.nv.gov.

If you choose to renew your registration at the station in the same visit, the renewal information needed for that transaction is sent to the DMV as well.

Our station keeps the test record and related paperwork as required by Nevada emission control rules and for our own business records, and uses them to answer questions about your test, a retest or a duplicate certificate.

5. Information collected automatically

Like most websites, the Site's servers keep logs of each request: the page asked for, the date and time, your IP address, your browser and device type, the page that referred you and the response sent. We use logs to keep the Site running, to find and fix errors and to detect abuse. YelloPost keeps these logs on the servers it manages for a limited time and does not use them to identify you except when investigating a security problem or a request from you.

The Site is delivered through Cloudflare, which sits between your browser and our servers to speed up the Site and block attacks. Cloudflare sees your IP address and the pages you request, and may set its own cookies for security. Cloudflare's privacy policy is at cloudflare.com/privacypolicy.

The Site remembers a few things in your browser so it works the way you left it. The location picker stores the location you chose (xs_shop) so that pages show that location's phone, hours and directions. Your privacy choice (xs_cc) is stored so that we do not ask again. The accessibility tools store the settings you choose. Short-lived items that last only for the visit record that a form was sent, that the call-back panel already appeared and the chat lead you may have left, so that we do not show you the same thing twice. None of these is sent to us; they stay in your browser and you can clear them at any time through your browser's settings.

If Google Analytics is turned on for the Site, it sets its own cookies, described in section 6.

6. Analytics, Google Tag Manager and your privacy choices

We may use Google Analytics, loaded through Google Tag Manager, to understand how many people visit, which pages they read, which location they pick and whether they click to call or send a form. We may also use Google Ads conversion measurement so that we know which of our ads brought people who contacted us. Where these tools are in use, they collect your IP address, a random identifier stored in a cookie, pages viewed, approximate location derived from your IP address, and the events described above. We do not send them your name, email address, phone number or anything you type into a form.

Where these tools are in use, the Site does not load them during the first paint of a page. They load after your first interaction or shortly after the page finishes loading, and only if you have not chosen "Essential only." A privacy choices card appears on your first visit. Choose "Essential only" and the Google tags stay off; your choice is remembered in your browser. You can change your mind at any time with the "Privacy choices" link in the footer.

You can also block Google Analytics in every website you visit with Google's browser add-on at tools.google.com/dlpage/gaoptout, or by using your browser's tracking protection. How Google uses data from sites that use its services is described at policies.google.com/technologies/partner-sites.

We do not use analytics data to build profiles of individual visitors.

The Site does not respond to "Do Not Track" browser signals, because there is no agreed standard for them, but the "Essential only" choice above does the same job on this Site. Where your browser sends a Global Privacy Control signal, we treat it as a request not to sell or share your information, which we do not do in any case.

The map on the location pages is drawn with a map library hosted on our own servers and loads map tiles from OpenStreetMap, which receives your IP address when the map loads. Our "Directions" links open Google Maps, which has its own privacy policy. The addresses of our locations are printed as text on every location page, so you do not need the map to find us.

Links to Google Maps, Google reviews and the Nevada DMV take you to those organizations' sites, which have their own privacy policies.

7. Ozzie, our chat assistant

Ozzie is an automated chat assistant built for us by YelloPost AI. It answers common questions about smog checks, hours and our locations, and it can take your name and phone number so a location can call you back. Ozzie is software, not a person, and its answers can be wrong or out of date. For anything about your own vehicle, call the location or drive in; the test result at the station is what counts.

What you type in the chat is sent to the service that generates Ozzie's replies. When you leave the page, a transcript of the conversation may be emailed to the location and to YelloPost so that a person can follow up on what you asked, fix wrong answers and improve the assistant. If you leave your name and number in the chat, that is treated as a form submission under section 3.

Do not share sensitive information in the chat: no card numbers, government ID numbers, health details or passwords. The chat window is also kept in your browser for the length of your visit so that you can see earlier messages. Closing the browser tab clears it.

Ozzie may be unavailable at times, and we may change or remove it. The Site, the forms and the phones work without it.

8. Bot checks, spam and duplicate protection

Our forms are protected by Cloudflare Turnstile, an invisible bot check that usually confirms you are a person without asking you to do anything. Turnstile runs in your browser and sends Cloudflare technical signals about the browser and the visit; it does not read what you type. If it ever asks you to complete a step, that step is Cloudflare's. If a form will not send, call either location and we will take the request by phone.

Forms also include a hidden field that bots fill in and people do not, and the servers limit how many submissions one connection can make in an hour. A duplicate guard holds a form that is identical to one sent moments before, so a double click does not create two requests. These checks use your IP address and the content of the submission and nothing else.

Every message that comes through the Site is reviewed before it is treated as a customer request. Messages that are sales pitches to us rather than requests from customers are set aside and are not answered.

We never ask you to prove you are human by giving us personal information, and we do not use these checks for any purpose other than keeping spam and abuse out.

9. Telephone calls

When you call a location, our phone system and provider record the number you called from, the number you called, the date and the length of the call, as any phone system does. If a call is recorded for quality or training, you will hear a notice at the start; you can tell us you do not want to be recorded and we will take your call without recording or take your number and call you back.

Some of the phone numbers shown on the Site may be tracking numbers that forward to the location, so that we can tell which page or ad led to the call. The call goes to the same people at the same location; only the routing is different.

If you leave a voicemail, it is kept until the location has answered it and for a short time afterward.

We do not use phone numbers collected through the Site for marketing calls or marketing texts.

10. How we use personal information

We use the information described above to:

• Answer your requests, call you back and get you to the right location.
• Test your vehicle, report the result to the Nevada DMV as the law requires and keep the station's records.
• Send transactional email: replies to your requests and the confirmation that a request was received.
• Keep the Site working, secure and fast, and find and fix errors.
• Understand how the Site is used, in aggregate, so we can improve it.
• Meet our legal obligations, keep business records and resolve disputes.

We do not use your information to make automated decisions that have a legal or similarly significant effect on you.

11. Who sees your information

We share personal information only as described here. We never sell it, rent it or give it to other companies for their own marketing.

The companies and agencies that help us run the Site, our communications and the station, each limited to the job it does for us or the duty the law gives it:

• YelloPost (yellopost.com), Reno, Nevada: builds, hosts and operates the Site, receives copies of form submissions and chat transcripts so that requests are not missed, and reviews them on our behalf. YelloPost keeps the data on servers it manages and may use its own hosting providers for that.
• Zoho Mail and the email delivery services YelloPost uses to send our mail: they carry the replies and confirmations the Site sends.
• Cloudflare: delivers the Site, blocks attacks and runs the Turnstile bot check.
• Google: Google Analytics and Google Tag Manager if enabled and subject to your privacy choice, and Google Maps when you follow a Directions link. Google Ads conversion measurement may also apply.
• OpenStreetMap: serves the map tiles drawn on the location pages.
• The Nevada DMV: receives smog test results with vehicle identification, and registration renewal information if you renew at the station, as Nevada law and your request require.
• The location you visit and its point-of-sale and test equipment, when it records your visit.
• Any professional advisers, such as accountants or attorneys, when they need the information to advise us.

We may also disclose information when the law requires it, in response to a subpoena, court order or lawful request from a public authority, to protect our rights, property or safety or those of our customers or others, or to investigate fraud or abuse of the Site.

If the company is sold, merges with another business or transfers a location to a new owner, customer records may be transferred as part of that transaction. The new owner would have to honor this Policy for information collected under it, or tell you otherwise and give you a choice.

Within the company, your information is seen only by the people who need it to help you: the staff at the locations and the owner.

We do not share your information with data brokers, and we do not take part in advertising networks that build profiles of you across websites.

YelloPost may use information about the Site in aggregate, without identifying anyone, to report to us on how the Site performs.

12. No sale of personal information

We do not sell covered information as that term is defined in NRS 603A.330, and we have no plans to. Nevada law still gives you the right to send us a verified request directing us not to sell your covered information. You can send that request to the contact in section 19 and we will confirm it within 60 days, as the law provides.

Analytics and conversion measurement described in section 6 are not a sale: no money changes hands, and the data is used to measure our own website and advertising. You can turn those tags off with the "Essential only" choice.

13. Emails the Site sends

The Site sends transactional email only: replies to a form and the confirmation that a request was received. We do not run a marketing email list through the Site, and we do not add you to one because you sent a form.

Our mail is sent from an address at xpressoilandlube.com with the authentication records (SPF, DKIM and DMARC) that keep our mail from being faked.

14. How long we keep personal information

We keep personal information only as long as we need it for the purposes above, then delete it or make it anonymous. In particular:

• Form submissions and chat transcripts: the location keeps the email it received as a business record for as long as it keeps other customer correspondence. YelloPost keeps its copy for a limited time to support us and then deletes it.
• Smog test records: for the period Nevada emission control rules and our business records require.
• Server logs: for a limited time set by YelloPost for security and troubleshooting, typically no more than a few months.
• Google Analytics data, if enabled: for the retention period set in our analytics account, after which Google deletes the user-level data. Aggregate reports may be kept longer because they identify no one.

If you ask us to delete your information, we remove it from the systems we control and ask our service providers to do the same, except for records we must keep by law, such as smog test records, and records of your request itself. We cannot delete information that the Nevada DMV already holds; ask the DMV about its records.

15. How we protect personal information

No website or email is perfectly secure, and we cannot promise that, but we use reasonable measures that fit a small company and the kind of information we hold:

• The Site is served only over HTTPS, and the forms post only over HTTPS.
• Access to form submissions is limited to the people at the locations and at YelloPost who need them to answer you.
• Email sending uses authenticated accounts; no mail password is stored in the website's code.
• Rate limits, the Turnstile bot check and the duplicate guard on every form.

If we learn of a breach of security that affects your unencrypted personal information, we will notify you as Nevada law (NRS 603A.220) requires, in the most expedient time possible and without unreasonable delay.

16. Your choices and rights

You are in control of what we hold. Whatever state you live in, you can:

• Ask us for a copy of the personal information we hold about you. We will send it to the email address on the record, in a readable form, within 45 days.
• Ask us to correct something we have wrong, or to delete your information. We will do so unless we have to keep it by law, and we will tell you if that is the case.
• Turn off Google Analytics and Tag Manager for this Site, if they are in use, with "Essential only" in the privacy choices card, reachable from the footer at any time.
• Clear the location choice, accessibility settings and other items the Site keeps in your browser through your browser's settings.

To make a request, email us or write to us at the address in section 19, or call either location. Tell us the email address or phone number on your record and what you would like. We verify requests by contacting you at the email address or phone number on the record, so that no one else can get your information by asking for it. We do not charge for requests and we do not treat you differently for making one.

If you believe we have not handled a request properly, you can contact the Nevada Attorney General's Bureau of Consumer Protection at ag.nv.gov.

17. Nevada online privacy notice (NRS 603A.300 to 603A.360)

Nevada requires operators of websites that collect covered information from Nevada residents to post a notice. For that purpose:

• The categories of covered information we collect are described in sections 3 to 9: name, email address, telephone number, vehicle details, and identifiers such as your IP address and cookies that let us contact you or recognize your browser.
• The categories of third parties with whom we may share covered information are listed in section 11.
• You can review and request changes to your covered information through a request to the contact in section 19.
• We will notify you of material changes to this notice as described in section 18.
• Google, through Google Analytics if it is enabled, may collect covered information about your online activities on this Site over time, if you allow the tags to load. We do not permit any third party to collect information about your activities across different websites for its own purposes.
• We do not sell covered information. Section 12 explains how to send a verified request anyway.
• The effective date of this notice is October 19, 2026.

Visitors from other states. Our locations serve Reno and the Site is meant for people who can drive to one of them. If you visit from another state whose law gives you additional rights, we will honor the rights in section 16 for you in the same way. The Site is not directed at people outside the United States. If you use the Site from outside the United States, you understand that your information is processed in the United States.

Children. The Site is for adults who own or drive a vehicle. We do not knowingly collect personal information from children under 13, and no part of the Site is directed at them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

Links, reviews and social media. The Site links to Google Maps and to each location's Google listing, where you can read and write reviews. Those sites are run by Google under its own privacy policy and terms. Anything you post there, including a review, is public and controlled by that platform, not by us.

18. Changes to this Policy

We may update this Policy when the Site, the law or our practices change. The effective date at the top always shows the current version. Continuing to use the Site after a change means you accept the updated Policy; if you do not, stop using the Site.

19. Contact

Questions, requests about your information or concerns about this Policy can go to any of the following:

• Email: ian@xpressoilandlube.com (please put "Privacy" in the subject).
• Mail: FMI Hudspeth, Inc. dba Xpress Smog Check Center, Attn: Privacy, 4993 Longley Ln, Reno, NV 89502.
• Reno Northwest, 6100 Mae Anne Ave, Reno, NV 89523: (775) 787-1000.
• Reno South, 4993 Longley Ln, Reno, NV 89502: (775) 828-6996.