This statement is effective as of December 7, 2022.
Thank you for your interest in Dealertrack, a Cox Automotive, Inc. business. When we refer to Dealertrack within this Privacy Statement, we are referring to Dealertrack, Inc. and its various subsidiaries, affiliates, and others (collectively “Dealertrack,” “we,” “our,” or “us”). We respect the privacy of our users when they use our websites, mobile and other online applications and products and services at Dealertrack.com (collectively, the “Sites”). By using the Sites, you consent to the use of your information and information about you in accordance with this Privacy Statement. If you do not agree, do not access the Service.
This Privacy Statement applies to information collected through the Sites and does not describe the collection, use and disclosure practices of any of our corporate affiliates or third parties. The Sites utilize information from corporate affiliates, third parties, and publicly available vehicle information. For information on the collection, use and disclosure practices of any company with whom you are doing business, whether or not affiliated with Dealertrack, please review their privacy policies.
Dealertrack is a business-to-business integrated suite of industry-leading software solutions that gives dealerships, lenders, and partners the confidence to thrive in an ever-changing automotive market. Our Service is not intended for consumers. Services offered by the Sites are not directed to individuals under the age of eighteen (18). If you are under eighteen (18), you should not provide any personal information to us.
- Information We Collect
- Information You Provide
- Automated Information
- Data Technologies
- Location Information
- Publicly Posted Information
- Combined Information and Information from Other Sources
- How We May Use the Information We Collect
- Applications, Widgets and Social Media
- Advertising Networks
- Information We Share
- Affiliates and Dealers
- Our Service Providers
- Corporate and Asset Transactions
- Your Choices
- Your California Privacy Rights
- Your Virginia Privacy Rights
- Access and Correction
- Data Security
- Updates to this Privacy Statement
- How to Contact Us
The Information We Collect
Information You Provide. We may collect information that you choose to provide on the Site (which may include your name, address, telephone number, email address, dealer or company name, the last four digits of your social security number or other valid government-issued identification number and bank account, payment and other financial information) in a variety of ways, such as when you:
- Register for one of our products or services;
- Purchase a vehicle or engage in any other transaction on or through the Sites or our physical properties;
- Provide payment information or authorize electronic ACH transfers or other payments;
- Make information available to us via social networking logins, such as Facebook or Twitter;
- Participate in chats, web forums or other interactive sessions;
- Subscribe to newsletters or provide feedback; and
- Participate in surveys, sweepstakes or other promotions.
Automated Information. Information regarding your use of the Sites may be collected and/or aggregated through the use of automated means. This automatically collected information may include information such as:
- Your IP address, the type of browser and operating system used;
- Date and time you access the Sites and pages you visit, and if you linked from or to another website, the address of that website;
- Email you open and links you click on within those emails; and
- Your ISP or mobile carrier, and the type of handheld or mobile device that you used.
Data Technologies. Various technologies are used to automatically collect information, such as cookies, local shared objects, and web beacons (generally referred to as “Data Technologies.”) “Cookies” are small identifiers sent from a web server that are stored on your device for the purpose of identifying your browser or storing information or settings in your browser. “Local shared objects,” sometimes known as Flash cookies, may be used to store your preferences or display content based upon what you have viewed on various websites to personalize your visit. A “web beacon,” also known as an Internet tag, pixel tag or clear GIF, links web pages to web servers and their cookies. Anonymous advertising identifiers are increasingly being used on mobile devices and otherwise in a manner similar to cookies. When we refer to Data Technologies, we are including all current and similar future technologies.
One or more Data Technologies may be used on the Sites and other websites and mobile applications (that may not be the Sites) by us, by another party on our behalf, or by third parties in accordance with their privacy policies. Data Technologies may be used by us and others, on our behalf and on their own behalf, to transmit information to you or about you and connect information about you from different sources, websites, devices, and mobile applications.
We may use a uniquely generated trackable toll-free telephone number on the Sites or in advertisements. If you call one of these uniquely generated toll-free numbers, we (or a service provider acting on our behalf) may collect non-personally identifiable information about the call (e.g. date, time, duration), as well as personally identifiable information (e.g. your name, the number from which your call originated).
Videos. We may target and track the videos you view on the Sites. You consent to our tracking of your video viewing through the Site or third-party social media for up to two years or as permitted by applicable law.
Location Information. We may collect physical location information that is sufficiently precise to allow us to locate a specific person or device (“Location Information”). We only collect Location Information with your permission (e.g., such as when you agree to provide it to us after initial access to or downloading our website). We may use Location Information and provide it to third parties to provide you with content and services that are relevant to a particular location, such as advertising, search results, auctions in the area, and directions.
Publicly Posted Information. Information that you make available to us and others via social media networks, forums, blogs, list serves, chat rooms or similar functionality is public information that we or others may share or use in accordance with the law.
Combined Information and Information from Other Sources. We may combine information that you provide to us with information we receive from our affiliates and other sources, as well as with other information that is automatically collected. The combined information may include information about your use of the Sites, your use of other websites, devices and mobile applications and information from our affiliates and other sources.
How We May Use the Information We Collect
We may use information we collect for the following purposes:
- For everyday business purposes, such as establishing and managing your user account, providing products and services you request, and providing customer support;
- To offer our other products or services and/or the products or services of others to you;
- To communicate about, and administer your participation in, special events, programs, surveys, contests, sweepstakes and other offers or promotions;
- To enable you to interact with the Sites and our users, dealers, and others through various means, such as through our message boards, blogs and social media;
- To evaluate and improve our business, including developing new products and services and analyzing the effectiveness of products, services, applications and websites;
- To diagnose and address technical and service problems;
- To perform data analyses, including market and consumer research, trend analysis, demographic analysis and financial analysis;
- To deliver content (including advertising) correlating to your interests and browsing and usage history, both within the Sites and on other websites and applications;
- To comply with applicable legal requirements and our policies
- To provide vehicle sale information, transaction data and other information and material to third parties directly involved in the sale (e.g., Private Store partners); and
- to help sellers understand buyers’ preferences for inventory and services;
Applications, Widgets and Social Media
Advertising that is customized based on predictions generated over time from your visits across different websites, devices and mobile applications is sometimes called “online behavioral” or “interest-based” advertising. We may partner with advertising networks, which are companies that deliver targeted advertisements to consumers and generate statistics and metrics related to the delivery of interest-based advertisements. They may utilize information collected through a variety of Data Technologies to provide customization, auditing, research and reporting for us, our affiliates and other advertisers. This data collection takes place both on the Sites and on third-party’s websites and mobile applications. This process allows the Sites and third parties to deliver targeted advertising, enhance marketing programs and help track the effectiveness of such efforts. Our advertising networks also may use this information for determining or predicting the characteristics and preferences of their respective advertising audiences and measuring the effectiveness of their advertising in accordance with their privacy policies.
We do not provide information that is directly associated with a specific person (such as name and address) to an advertising network when you interact with or view a customized advertisement. However, when you view or interact with an advertisement, the advertiser may make an assumption that you are interested in the subject matter of the advertisement.
Some companies disclose when they are using interest-based advertising programs on the Sites to deliver third-party ads or collecting information about your visit for these purposes and give you the ability to opt-out of this use of your information. You may see an icon in or around third-party advertisements on the Sites that use interest-based advertising programs and on pages where data is collected and used for online interest-based advertising. Clicking on this icon will provide additional information about the companies and data practices that were used to deliver the ad. You can opt out of delivery of targeted advertising to you by multiple companies by visiting www.aboutads.info/choices, www.networkadvertising.org/managing/opt_out.asp and www.ghosteryenterprise.com. Please note that even if you opt out, you will continue to receive advertisements, but they will not be tailored to your specific interests.
Information We Share
We do not sell or otherwise share information about you that we collect or receive, except as described below:
- Affiliates, Dealers, Franchisors and Manufacturers. Information collected, including personal information and Data Technologies, may be shared with affiliates (including independent auctions who use OVE), dealers, franchisors and manufacturers, and their agents and third-party service providers, who will use that information in accordance with their own privacy policies. Please visit www.CoxAutoInc.com for more information about our affiliates.
- Customers. We may share information about you, including personal information, vehicle sale and other transaction data and Data Technologies, with Private Store partners and our other customers and commercial partners who will use that information in accordance with their own privacy policies.
- Our Service Providers. We may engage third parties to provide the services offered through or in connection with the Sites on our behalf. We require such providers to maintain information about you as confidential and to use the information only to perform the services specified by us in a manner consistent with this Privacy Statement.
- Corporate and Asset Transactions. If we sell all or substantially all of our business or sell or transfer all or a material part of our assets, or are otherwise involved in a merger or transfer of all or a substantial part of our business (including any sale or transfer that may take place as part of or in connection with any bankruptcy or insolvency proceeding), we may transfer all information we have collected and stored, including personal information, to the party or parties involved in the transaction as part of that transaction.
- Access to Databases. In addition to all of the disclosures described above, we may also allow others to search some of our databases and to analyze the data they find there or aggregate it with other data, either for their business purposes or ours.
- Other. We may access or disclose information, including personal information, to:
- Protect or defend our interests and the legal rights or property of Dealertrack and our affiliates;
- Protect the rights, interests, safety and security of users of the Sites or members of the public;
- Protect against fraud or for risk management purposes; or
- Comply with prudent legal practice as we may determine, and applicable law or legal process.
You are entitled to make certain choices about how we communicate with you.
- You may choose not to provide personal information, even though that might impact your ability to register or open an account on the Sites or receive a particular product or service.
- If you do not want to receive marketing email from the Sites, you can follow the unsubscribe link provided in those emails.
- If you do not want to receive interest-based advertisements, you can opt out as discussed in the “Advertising Networks” section above.
- You have a number of choices regarding certain Data Technologies. Most web browsers automatically accept cookies, but you can usually modify your browser’s setting to decline cookies if you prefer. You may also render some web beacons unusable by rejecting their associated cookies and disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on’s settings or opting out at Ghosteryenterprise.com or the website of the technology provider. If you choose to decline cookies or similar technologies, however, please note that certain features on the Sites may not function properly or at all as a result. You may be able to adjust the use of advertising identifiers on mobile devices through the settings on your device. Finally, if you do not want to use a uniquely generated telephone number, you may choose to not call us.
- If you do not want us to use Location Information, you can decline our initial invitation to provide that information or opt out by changing the location services settings on your mobile device. However, please note that certain features may not function properly or at all as a result if you opt out.
We may transfer the personal information we collect about you to countries other than the country in which the information originally was collected. Those countries may not have the same data protection laws as the country in which you initially provided the information.
The security of your information is important to us. Cox Automotive has implemented reasonable security measures to protect the information, both during transmission and once it is received, including without limitation, use of firewalls, application controls and monitoring. No method of electronic storage or transmission over the Internet is 100% secure. So while Cox Automotive strives to use commercially reasonable means to protect your information, we cannot guarantee complete security. If you have any questions about these security practices, please email us at email@example.com.
Updates to this Privacy Statement
We may update this Privacy Statement to provide clarification or notice of changes to our practices. We will provide you with notice of material changes by posting notice of the changes on the Site, or by providing you with notice by email or when you log into your account on the Site. By using our Sites on or after the effective date of any such amendment, you agree that your use, and any dispute over privacy, is governed by this Privacy Statement, as amended.
How to Contact Us
If you have any questions or comments about this Privacy Statement, or if you would like us to update information we have about you or your preferences, please contact us by email at firstname.lastname@example.org.
Your California Privacy Rights
This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Statement of Dealertrack, Inc. and its subsidiaries (collectively, “we,” “us,” or “our”), a Cox Automotive, Inc. company, and applies solely to consumers who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act (“CCPA), the California Privacy Rights Act (“CPRA”) and other California privacy laws (hereinafter the “California Privacy Laws”). Any terms defined in the CCPA and CPRA have the same meaning when used in this notice.
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with an individual consumer, household, or device (“personal information”). We have collected the following categories of personal information from consumers within the last twelve (12) months:
|A. Identifiers.||A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.||YES|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).||A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.||YES|
|C. Protected classification characteristics under California or federal law.||Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).||NO|
|D. Commercial information.||Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.||YES|
|E. Biometric information.||Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.||NO|
|F. Internet or other similar network activity.||Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.||NO|
|G. Geolocation data.||Physical location or movements.||YES|
|H. Sensory data.||Audio, electronic, visual, thermal, olfactory, or similar information.||NO|
|I. Professional or employment-related information.||Current or past job history or performance evaluations.||YES|
|J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).||Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.||YES|
|K. Inferences drawn from other personal information.||Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.||NO|
|L. Sensitive Personal Information||Personal information that reveals a person’s social security, driver’s license, state identification card, passport number; an account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication; a person’s genetic data; and/or biometric data processed for the purpose of uniquely identifying a person. Some personal information included in this category may overlap with other categories.||YES|
We obtain the categories of personal information listed above from the following categories of sources:
- Directly from our customers or their agents. For example, from documents that our clients provide to us related to the services for which they engage us.
- Indirectly from our clients or their agents. For example, through information we collect from our clients in the course of providing services to them.
- Directly and indirectly from activity on our Sites. For example, from submissions through our website portals or website usage details collected automatically.
- From third-parties that interact with us in connection with the services we perform.
Sharing Personal Information
We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
- Category A: Identifiers
- Category B: California Customer Records personal information categories
- Category C: Protected classification characteristics under California or federal law
- Category D: Commercial information
- Category G: Geolocation data
- Category I: Professional or employment-related information
- Category J: Non-public education information
- Category L: Sensitive Personal Information
We disclose your personal information for a business purpose to the following categories of third parties:
- Our affiliates.
- Service providers.
- Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.
In the preceding twelve (12) months, we have sold the following categories of personal information:
- In the preceding twelve (12) months, we have not sold any personal information.
Your Rights and Choices
The California Privacy Laws provide California residents with specific rights regarding their personal information. This section describes your California privacy rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information we collected about you (also called a data portability request).
- If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
- sales, identifying the personal information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
Right to Limit Use and Disclosure of Sensitive Personal Information
We do not own sensitive personal information, and only use this information as provided to us to perform services on behalf of another business. You have the right, at any time, to direct us to limit your sensitive personal information to that use which is necessary to perform the services reasonably expected by an average consumer who requests those services. We may decline to limit the use and disclosure of sensitive personal information for the following reasons:
- To perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services.
- To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, and or confidentiality of stored or transmitted personal information, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- To ensure the physical safety of natural persons, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- For short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of a consumer’s current interaction with the business, provided that the personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business.
- To perform services on behalf of the business, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- To verify or maintain the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by the business, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- For purposes that do not infer characteristics about the consumer.
Correction Request Rights
You have the right to request that we correct inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information. Once we receive and confirm your verifiable consumer request, we shall use commercially reasonable efforts to correct the inaccurate personal information, pursuant to California Civil Code Section 1798.130 and regulations adopted pursuant to paragraph (8) of subdivision (a) of Section 1798.185.
Deletion Request Rights
You have the right to request that we delete any of your personal information that we collected about you and retained, subject to certain exceptions in the California Privacy Laws. Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records, unless an exception applies, and we will direct our service providers to similarly delete your personal information from their records.
Exercising Access, Data Portability, Limiting Use of Sensitive Personal Information, Correction and Deletion Rights
To exercise the access, data portability, limiting use of sensitive personal information, correction and deletion rights described above, please submit a “verifiable consumer request” (defined below) to us by either:
- Calling us at 1-800-964-8735
- Visiting: https://us.dealertrack.com/content/dealertrack/en/data-privacy-form.html
Only you or someone you authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
A verifiable consumer request must:
- Provide enough information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
- Describe your request with enough detail that allows us to properly understand, evaluate, and respond to it.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Notice to Cox Automotive Employees
If you are a California consumer seeking Cox employment information about yourself, please view the Cox Enterprises California Privacy Notice.
We will not discriminate against you for exercising any of your rights under the California Privacy Laws. Unless permitted by the California Privacy Laws, we will not deny you goods or services, charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, provide you a different level or quality of goods or services, suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services; or retaliate against an employee, job applicant, or independent contractor.
Your Virginia Privacy Rights
This section applies to Virginia residents that use our Services for individual or household purposes. Capitalized terms used in this section shall have the same meaning as under applicable Virginia law.
This section describes our collection, use, and disclosure of information that is linked or reasonably linkable to an identified or identifiable national person, excluding de-identified or publicly available information (“Personal Data”). You can learn more about the Personal Data we process and the purpose for processing such information in the “The Information We Collect” section above. You can also learn more about our disclosure of Personal Data and the categories of third parties we disclose Personal Data to in the “How We May Use the Information We Collect” section above.
In the preceding twelve (12) months, we have not sold any Personal Data.
If you are a Virginia Consumer, subject to certain conditions and restrictions, you have the following rights with regard to your Personal Data:
- Right to Access. You have the right know the Personal Data that we may hold about you and access such Personal Data.
- Right to Correct. You have the right to request that we correct inaccuracies in your Personal Data.
- Right to Delete. You have the right to request that we delete all Personal Data that we have collected from or obtained about you.
- Right to Opt-Out of Targeted Advertising. You may request that we stop disclosures of your Personal Data for Targeted Advertising by managing your cookie preferences as described in the “How We May Use the Information We Collect” section above.
- Right to Opt-Out of Profiling. You have the right to opt-out of our processing of Personal Data for the purposes of profiling. Our profiling does not result in decisions that produce legal or similarly significant effects however we still provide you the right to opt-out.
- Right to Appeal. If you are unsatisfied with our actions related to the exercise of one of your privacy rights above, you may appeal our decision.
- Sensitive Data. Our processing of your Sensitive Data will be based on your consent. For example, in the course of using our Services, you may allow us to use your precise geolocation. You may be able to limit or disallow this use of location data by adjusting the settings for our applications on your device’s privacy settings.
You may submit requests related to these rights by visiting this link:
https://us.dealertrack.com/content/dealertrack/en/data-privacy-form.html. Please note that, depending on the nature of your request, you may be asked to provide information to verify your identity before your request can be processed. We will confirm receipt of your request and respond to your request as soon as we reasonably can and no later than legally required. You may exercise your privacy rights under the VCDPA free of charge up to no more than twice annually. If you make a privacy rights request, we will retain the Personal Data provided to us to fulfill your privacy rights request for our recordkeeping purposes.
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Postal Address: Cox Automotive, Inc.
Attn: Scott Hilsen, Chief Compliance & Privacy Officer
6205 Peachtree Dunwoody Rd. NE
Atlanta, Ga 30328