Cars and Bids, LLC Privacy Policy
Effective Date: August 14, 2026
Welcome. You have arrived at a website provided by Cars and Bids, LLC (“Cars and Bids,” “Company,” “we,” “our” or “us”). Cars and Bids is an online auction site that connects buyers and sellers of enthusiast vehicles.
At Cars and Bids, we take your privacy seriously. We provide this Privacy Policy (“Policy”) to tell you what information we collect about you, how we obtain it, how we share it, and how you may limit the ways in which we use your Personal Information. If you have questions about this Policy after you review it, feel free to contact us at [email protected].
This Policy governs the website located at https://carsandbids.com, as well as any other web domain controlled by us and directing to this link, as well as their subdomains, and all other portals, including our online auction portal, that link to this Policy (collectively, the “Site”); our mobile application (“App”); as well as, Personal Information that we collect from you when you interact with us online, by phone, in person with any of our representatives, or through any other communications with us. For the purpose of this Policy, "Personal Information" (sometimes referred to as “Personal Data”) means any information relating to an identified or identifiable individual that is protected by applicable privacy laws. The definition of Personal Information does not include publicly available information from federal, state, or local government records, such as professional licenses, VIN number or vehicle registrations, and real estate or property records.
We refer to the foregoing collectively as our "Services," which are used by our Site visitors ("Visitors"), and auction portal users ("Users"). This Privacy Policy does not cover the practices of companies that we do not own or control or people we do not manage.
As a rule, we limit the Personal Information we collect to that which is reasonably necessary for us to provide our Services to you.
Data Sources
We collect Personal Information from the following sources:
Information That You Provide to Us
As you interact with our Services, we collect the following Personal Information via interactions, communications, and webforms or inputs/uploads on our Site or App, and through telephone calls, text messages, letters, emails and other communications with you. The types of information we collect from you may differ depending on your relationship with the Cars and Bids and/or the Site.
Visitors
Users
Your decision to provide us with information is voluntary, but if you choose not to provide requested information, you may not be able to take advantage of all of the Site’s features, the App, or our Services.
Information That Is Automatically Collected
Like many businesses, we and our service providers automatically collect and/or store certain information when you visit or interact with the Site, App or Services (“Usage Information”), including via cookies and other tracking technologies (see the Use of Cookies and Other Tracking Technologies section below). This Usage Information may be stored and/or accessed from your personal computer, laptop, tablet, mobile phone or other device (a “Device”) whenever you visit or interact with our Site or App. Usage Information includes:
For location information, some of our Services include features based on users’ actual locations and may report on users’ current locations (“Location-Based Services”). If you have enabled location services on the Device on which you access our Site or App, we and our service providers may collect and store information about your location at the time you use those Location-Based Services (in addition to some automatically collected geolocation data). This information comes from a variety of sources depending on the Device you use to access the Services; for example, a mobile phone may report its GPS location at the time Location-Based Services are used.
You do not need to provide Location-Based information to use our Services. If you do not wish for us or our service providers to collect and use location information, you may disable the location features on your Device. Consult your Device settings for instructions. Please note that if you disable such features, your ability to access certain features, Services, content, promotions or products may be limited or disabled.
Information Collected from Third Parties
The Site and App include functionality that allows certain kinds of interactions between the Site or App and your account on a third-party website or application. The use of this functionality may involve the third-party site providing information to us. For example, we might obtain information about the traffic and usage of Cars and Bids from third parties. We might also provide links to make it easier to send a communication from the Site or App, or we may use third parties to make it easier to send emails or post to social media (like a “Share” or “Forward” button). These third parties also use cookies and other tracking technologies to capture information about your interactions with Cars and Bids.
Cars and Bids does not have control over the information that is collected, used, and shared by these third parties. We encourage you to review the privacy statements of these third parties to understand their privacy practices.
Information We Infer
We derive information or draw inferences about you based on information we collect about you. For example, based on your browsing or purchases, we may infer your gender, your interest in certain makes, brands or activities, or information about your purchasing activities over time.
We use cookies and other tools (“Tracking Technologies”) to recognize your browser or Device, to understand how people use our Site, to make it work correctly, and to improve your experience. These Tracking Technologies store and collect Usage Information. Tracking Technologies may set, change, alter or modify settings or configurations on your Device. In jurisdictions that require prior consent, we only set essential cookies until you grant permission.
What are Cookies?
Cookies are small files that your browser stores on your Device. They help the website remember things like your preferences or whether you’ve logged in. Some cookies are placed by us (“first-party cookies”), and some are placed by our partners (“third-party cookies”) such as companies that provide analytics, video, or advertising. Third-party cookies we use may include Datadog, Google (AdSense, Analytics, DoubleClick, YouTube), Meta, Vimeo, and others.
Do Cookies Contain Personal Information?
Cookies and similar technologies do not always directly identify you, but many laws treat them as “Personal Information” or “Personal Data” when the information collected, alone or combined with other data, can be linked to you or your Device. For example, if you log in to an account, we may associate cookie data with your account
Other Technologies We Use
In addition to cookies, we may use other Tracking Technologies, including:
We may also engage third parties, such as Google Analytics or Meta, to track and analyze non-personally and personally identifiable website data and to serve advertisements. To do so, we may permit third parties to place cookies on devices of users of our Sites, where permitted by law, and subject to your right to opt out through the Sites. We use the data collected to help us administer and improve the quality of the Sites and to analyze the Site’s usage. Such third parties may combine the information that we provide about you with other information that they have collected. These third parties are required to use your information in accordance with this Privacy Policy. We will record all such disclosures and will use reasonable efforts to ensure that such third parties do not use your Personal Information for any purpose that is not expressly provided for herein.
We classify our cookies into the following categories:
Depending on your Device, browser settings, or your location, you may be able to:
If you block some cookies, certain features on our Site may not work as intended.
Advertising Tools We Use
We partner with Google (AdSense, Analytics, DoubleClick, and YouTube), Meta (Facebook), and other advertising and analytics partners to improve our Site and our App and show you more relevant ads. These tools may use cookies or other identifiers to measure how effective our ads are, learn what content is useful to visitors, or show ads based on your activity on our Site or other sites.
We use the information we collect about you in a variety of ways, including the following:
To Provide Our Services
We process certain Personal Information when you access or use our services, including to:
To Communicate with You
We process certain information to communicate with you in relation to your accounts, our services, our marketing, and your requests, including to:
For Improvement of Our Site, App or Services
We want to ensure that our Site, App, and Services are continually improving and expanding so that we meet and exceed your needs and expectations. To do so, we may process certain Personal Information, including to:
For Profiling
We use Personal Information to create profiles that allows us to send communications and/or advertisements that may be more appropriate for or interesting to you.
To Comply with Applicable Laws
We may be required to process certain Personal Information under certain laws and regulations, such as tax laws, as well as to:
To Enforce our Terms, Agreements, or Policies
To maintain a safe, secure, and trusted environment for you when you use our Site, App, and Services, we use your Personal Information to ensure our Terms of Use ("Terms"), policies, and agreements with you and any third parties are enforced.
To Evaluate Your Application for Employment
We use your Personal Information to evaluate your application for employment or administer employment benefits.
With Your Consent
We process certain Personal Information to fulfill any other business or commercial purposes at your direction or with your consent.
To the extent permitted by law, certain Personal Information about you may be disclosed in the following situations:
Finally, we may aggregate, de-identify, and/or anonymize any information collected through the Site, App or Services such that such information is no longer linked to your Personal Information. We may use and share this aggregated and anonymized information (non-Personal Information) for any purpose, including without limitation, for research and marketing purposes, and may also share such data with our affiliates and third parties, including advertisers, promotional partners and others.
[No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.]
Our Site and our App are not intended for use by children under the age of 18. We do not request, or knowingly collect, any personally identifiable information from children under the age of 18. If you are the parent or guardian of a child under 18 who you believe has provided her or his information to us, please contact us using the information in the Contact Us section below to request the deletion of that information.
We may use Automated Decision-Making Technology (“ADMT”) to support certain aspects of our Services. ADMT refers to systems, software or processes (including algorithms and artificial intelligence) that make a decision or facilitate human decision-making based on the automated processing of your Personal Information. We may use ADMT for security reasons, such as to detect fraudulent or illegal actions, or to protect consumer safety. When we do so, you cannot opt out of the use of the decision-making technology. Depending on how you interact with our Services, the use of ADMT may affect the content or recommendations you see, the security or monitoring applied to your activity, whether certain transactions require additional verification (such as initial rejection of vehicle listings), your access to certain features or service tiers, or automated responses or suggestions provided to you. We do not use ADMT to make decisions that produce legal or similarly significant effects about you without offering required rights under applicable state law. If you believe a function is not available to you based on ADMT, please write to us using the information in the Contact Us section below.
We will retain your Personal Information for as long as is necessary for the purposes set out in this Privacy Policy. We retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), enforce agreements, resolve disputes and enforce our legal agreements and policies. Your username and comments may remain on a listing for archival purposes after the transaction has been completed.
All information you provide to us is stored on our secure servers or those of our third-party data storage providers.
Data stored locally on your Device by our App, including cached data and locally stored preferences, is deleted when you uninstall the App.
We utilize the following criteria to determine the length of time for which we retain Personal Information:
For your convenience, the Site or App and this Policy may contain links to other websites. Cars and Bids is not responsible for the privacy practices, advertising, products, services, or the content of such other websites. None of the links on the Site or App should be deemed to imply that Cars and Bids endorses or has any affiliation with the links.
We incorporate commercially reasonable safeguards to help protect and secure your Personal Information. For example, the Services use industry standard Secure Sockets Layer (SSL) technology to help encrypt Personal Data transmitted through the Site, App and Services. However, no data transmission over the Internet, mobile networks, wireless transmission, or electronic storage of information can be guaranteed 100% secure. As a result, we cannot guarantee or warrant the security of any information you transmit to or from the Site, the App, or the Services, and you provide us with your information at your own risk.
Updating Your Personal Information
We prefer to keep your Personal Information accurate and up to date. If you would like to change your contact information, please contact us using the information in Contact Us. We will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable (but we may retain prior information as business records).
Communications Preferences
You can opt out of receiving marketing emails or text messages from us at any time. You will still receive transactional messages from us. To manage your email preferences with us, please click on the Unsubscribe link in any email you receive from us or contact us using the information in Contact Us. Your choice will not affect our ability to share information in the other ways described in this Policy.
To opt out of text messages from us, text “STOP” to any text received from us, at any time. For more information on SMS and text messaging, please see our Terms.
Do Not Track Disclosure
Do Not Track (“DNT”) is a web browser setting that requests that a web application disable its tracking of an individual user. When you choose to turn on the DNT setting in your browser, your browser sends a special signal to websites, analytics companies, ad networks, plug in providers, and other web services you encounter while browsing to stop tracking your activity. Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer’s online activities over time and across third-party websites or online services (e.g., browser do not track signals), but there is no universally agreed upon standard for what a company should do when it detects a DNT signal. Currently, we do not monitor or take any action with respect to these signals or other mechanisms. You can learn more about Do Not Track here.
Opt-Out Preference Signals
Some browsers and browser extensions support opt-out preference signals such as the Global Privacy Control (“GPC”) that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales. GPC is a web browser-level setting, maintained by either a browser or a browser extension, that a user or privacy-focused technology can set. In certain regions, when we detect such a signal, we will make reasonable efforts to respect your choices as required by applicable law.
Controlling Your Cookies
In some jurisdictions, you can opt-out of cookies by enabling an opt-out preference signal (“OOPS”) or Global Privacy Control (“GPC”) on your browser or opting-out of cookies in our Sites’ cookie preference centers. You may also make individual selections on your Device or browser. On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please see the links below to learn how to modify your web browser’s settings on the most popular browsers:
Note that if you turn cookies off, you may be unable to access certain parts or benefit from the full functionality of the Sites or App. To learn more about cookies and similar technologies or to opt-out of targeted advertising cookies, visit resources from the Digital Advertising Alliance (“DAA”). We do not control these opt-out links or whether any organization chooses to participate in these opt-out programs.
Please note that even if you exercise the opt-out choices above, you may continue to receive advertisements, for example, ads based on the website you are viewing (e.g., contextually based ads), or ads that are not targeted at you and may be less relevant. Also, if your browser (like some Safari browsers) is configured to reject opt-out cookies when you opt out on the DAA website, your opt-out may not be effective. We always do our best to honor your choices, but because some choices are set at the browser or device level, you may have to make these choices multiple times if you use different browsers or different Devices.
Your Choices for Google Tools
Our Google Analytics Advertising tools may include remarketing, impression reporting, demographics and interest reporting, and cross-service integrations. Google offers several ways to control how your information is used for advertising.
With respect to these advertising features, Cars and Bids is the sole controller under all applicable data protection legislation. We will not identify users or facilitate the merging of Personal Information with additional information collected through any Google advertising product or feature unless we have your affirmative opt-in consent to that identification or merger.
Your Choices for Meta (Facebook) Tools
If we use the Meta Pixel, Meta may use information about your activity on our Site to personalize ads you see on Facebook, Instagram, and other Meta services. You can control your ad preferences directly with Meta:
Advertising Identifier Controls (iOS and Android)
You control how your advertising identifier (IDFA on iOS devices and Ad-ID on Android devices) is used through your Device settings and our in-app controls. Your choices apply to personalized advertising - they do not affect whether you see ads generally.
iOS: When you first open the App, you will be asked whether to allow the App to track your activity across other companies' apps and websites. You can change this choice at any time:
Android: You can reset your advertising identifier or opt out of personalized ads. The exact path varies by device and Android version:
Opting out means your advertising identifier will not be used for personalized advertising. You may still see ads, but they will not be tailored to your interests. Some app features that depend on advertising measurement may be affected.
Our Site and our App are not intended for visitors outside of the United States and we do not direct our activities at users outside of the United States. If you are visiting the Site or App from a location outside of the U.S., your connection will be through and to servers located in the U.S. All information you receive from the Site or App will be created on servers located in the U.S., and all information you provide will be maintained on web servers and systems located within the U.S. The data protection laws in the United States may differ from those of the country in which you are located, and your information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States. By using the Site or App or providing us with any information, you consent to the transfer to, and processing, usage, sharing and storage of your information in the United States and in other countries, as set forth in this Policy.
This section of the Policy applies solely to California residents. We adopt this Section to comply with the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”). Any terms defined in the CCPA or CPRA have the same meaning when used in this Section.
Notice at Collection of Personal Information We Collect and Purposes For Use
We will collect Personal Information for the business and commercial purposes outlined below. The categories of Personal Information we intend to collect and the purposes for which we use each category are set forth in the table below. We do not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing notice at or before the time the information is collected.
Under the CCPA, “sell” means to disclose, make available, or otherwise communicate Personal Information to a third party for monetary or other valuable consideration. This may include certain disclosures made in connection with advertising or marketing relationships, depending on how the recipient uses the information. “Share” means to disclose Personal Information to a third party for cross-context behavioral advertising. We disclose Personal Information to our service providers and contractors for business purposes (such as analytics, security, support, or website hosting), which is not considered a sale or sharing under the CCPA when the recipient is contractually restricted from using the information for its own purposes. Under the CCPA, a “third party” is an entity that is not a service provider or contractor and that is not controlled by or controlling the business.
We will retain each category of Personal Information for the period reasonably necessary to fulfill the purposes described below unless a longer retention period is required or permitted by law. Please see our “Retention of Personal Information” section above.
If we sell or share Personal Information or use or disclose Sensitive Personal Information (“SPI”), we indicate that in the table below.
| Category of Personal Information | Business Purpose for Collection or Use | Sold/Shared? | Retention Period |
|---|---|---|---|
| Identifiers (Contact and Device): such as name, email, phone number, IP addresses | Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, comply with law, account management, processing transactions, security/fraud prevention | No/Yes | Duration of customer relationship with you and/or legal retention periods |
| Identifiers (Government Issued): such as driver’s license photo | Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, comply with law, account management, processing transactions, security/fraud prevention | No/No | Duration of customer relationship with you and/or legal retention periods; we may keep some information indefinitely for archival purposes or to facilitate future listings of the same vehicle. |
| Identifiers (Vehicle): such as vehicle identification number and vehicle metadata | Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, comply with law, account management, processing transactions, security/fraud prevention | No/Yes | Duration of customer relationship with you and/or legal retention periods; we may keep some information indefinitely for archival purposes or to facilitate future listings of the same vehicle. |
| Customer Records: such as billing information, account credentials | Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, profiling, comply with law, account management, processing transactions, security/fraud prevention | No/No | 7 years or life of account |
| Protected Classifications: such as age, race, marital status, gender, veteran’s status | Only collected for employment purposes: comply with law, account management, security/fraud prevention; provide employment benefits | No/No | During period of employment (if needed to administer benefits) |
| Commercial Information: such as purchases, transaction history | Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, profiling, comply with law, account management, processing transactions, security/fraud prevention | No/No | Duration of customer relationship with you and/or legal retention periods |
| Internet or Network Activity: such as browsing history, information regarding interaction with a website | Improve services, personalization, advertising, analytics, security/fraud prevention | No/Yes | Session to 1 Year |
| [Non-precise] Geolocation Data: such as physical location | Improve services, personalization, advertising, analytics, security/fraud prevention | No/Yes | Duration of customer relationship with you and/or legal retention periods |
| Professional/Employment Information: such as current or past job history and evaluations | For employment candidates only; provide benefits, enforce agreements, comply with law, security/fraud prevention | No/No | During period of employment |
| Inferences: information used to create a profile about you, such as preferences or likes | Improve services, communication, personalization, profiling, advertising, analytics | No/No | Duration of customer relationship with you and/or legal retention periods |
| Sensitive Personal Information: like social security number, precise geolocation (within 1850 sq ft), religious beliefs, contents of emails | Only as necessary to process a transaction requested by you or for employment purposes; to provide services, communication, enforce agreements, comply with law, account management, processing transactions, security/fraud prevention | No/No | During period of employment (if needed to administer benefits); during customer relationship for tax or other regulatory purposes |
Notice of California Privacy Rights
In addition to the rights set forth in the Your Choices About the Information We Collect section above, California residents have the following additional privacy rights:
Please note that if we collected information about you for a single one-time transaction and do not keep that information in the ordinary course of business, that information will not be retained for purposes of a request under this section. In addition, if we have de-identified or anonymized data about you, we are not required to re-identify or otherwise link your identity to that data if it is not otherwise maintained that way in our records.
Request to Know, Correct, or Delete
California residents have the right to request, under certain circumstances, that a business that collects Personal Information about them disclose the information listed below for the preceding 12 months:
You can also request that we correct or delete your Personal Information. There may be certain exceptions to our obligation to correct or delete your information such as if you have an existing account or transaction with us or if we have a legitimate business reason to keep your information.
Please note that if we collected information about you for a single one-time transaction and do not keep that information in the ordinary course of business, that information will not be retained for purposes of a request under this section. In addition, if we have de-identified or anonymized data about you, we are not required to re-identify or otherwise link your identity to that data if it is not otherwise maintained that way in our records.
Personal Information Collected Within Last Twelve (12) Months
We have collected, used and disclosed the following categories of Personal Information from consumers within the last twelve (12) months:
| Category of Personal Information | Sources of Information | Business Purpose for Collection, Use or Disclosure | Categories of Service Providers or other Third Parties To Whom Information is Provided for a Business Purpose | Categories of Third Parties To Whom Information is Sold or Shared |
|---|---|---|---|---|
| Identifiers (Contact and Device): such as name, email, phone number, IP addresses | You, Automatically, Third Parties | Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, comply with law, account management, processing transactions, security/fraud prevention | Data processing and analytics vendors, payment processors, service providers such as website hosting, security vendors, or customer service vendors | Service Providers, Analytics and advertising vendors, Affiliates, Selected Recipients authorized by you (listing transactions) |
| Identifiers (Government Issued and Vehicle): such as driver’s license photo, vehicle identification number, and vehicle metadata | You, Third Parties | Provide services, communication, enforce agreements, comply with law, account management, processing transactions, security/fraud prevention | Service providers such as security vendors or customer service vendors | Service Providers, Affiliates, Selected Recipients Authorized by You |
| Customer Records: such as billing information, account credentials, unique user ID | You, Automatically, Third Parties | Provide services, communication, enforce agreements, personalization, advertising, analytics, improve services, profiling, comply with law, account management, processing transactions, security/fraud prevention | Data processing vendors, payment processors, service providers such as website hosting, security vendors, or customer service vendors | Service Providers, Affiliates, Selected Recipients Authorized By You |
| Protected Classifications: such as age, race, marital status, gender, veteran’s status | You | Comply with law, security/fraud prevention; provide employee benefits | Service Providers such as employee benefits vendors or other service providers for employment services | Service Providers, Selected Recipients Authorized By You |
| Commercial Information: such as purchases, transaction history | You, Automatically | Provide services, communication, enforce agreements, personalization, analytics, improve services, profiling, comply with law, account management, processing transactions, security/fraud prevention | Data processing vendors, payment processors, service providers such as website hosting, security vendors, or customer service vendors | Service Providers, Affiliates |
| Internet or Network Activity: such as browsing history, information regarding interaction with a website | Automatically, Third Parties | Improve services, personalization, advertising, analytics, security/fraud prevention | Data processing vendors, service providers such as website hosting, security vendors, or customer service vendors | Service Providers, Affiliates, Analytics and advertising vendors |
| [Non-precise] Geolocation Data: such as physical location | Automatically, if provided via Device | Improve services, personalization, advertising, analytics, security/fraud prevention | Data processing vendors, payment processors, service providers such as website hosting, security vendors, or customer service vendors | Service Providers, Affiliates, Analytics and advertising vendors |
| Professional/Employment Information: such as current or past job history and evaluations | You | Evaluate employment candidates; provide benefits, enforce agreements, comply with law, security/fraud prevention | Employee benefits providers | None |
| Inferences: information used to create a profile about you, such as preferences or likes | You, Automatically, Third Parties | Improve services, communication, personalization, profiling, advertising, analytics | Data processing vendors | None |
| Sensitive Personal Information: like social security number, precise geolocation (within 1850 sq ft), religious beliefs, contents of emails | You | Comply with law, provide employee benefits, security/fraud prevention | Employee benefits | None |
Information related to how long we retain each category of Personal Information is included in the Retention of Personal Information section above.
Do Not Sell My Personal Information
As a California resident, you also have the right, at any time, to tell us not to sell Personal Information – this is called the “right to opt-out” of the sale of Personal Information. We do not sell Personal Information, but we recognize that some privacy laws define “Personal Information” in such a way that making available identifiers linked to you for a benefit may be considered a “sale.” To opt-out of this, please click on the “Do Not Sell or Share My Personal Information” link in footer, or by contacting us as provided in Contact Us.
Right to Limit Use of Sensitive Personal Information
California residents have the right to limit the use of each type of Sensitive Personal Information for each purpose with each type of third-party partner. Please note that we only keep your Sensitive Personal Information for a limited time, and only for the transaction for which it is required. Currently, we do not use Sensitive Personal Information for purposes that give rise to the right to limit its use under California law. Specifically, we do not provide your Sensitive Personal Information to any third parties other than those service providers that are necessary for us to provide our Services to you.
Right Not to Be Discriminated Against
We will not discriminate against you for exercising any of your rights under the CCPA. Unless permitted by California law, we will not:
Notice of Financial Incentives
As permitted by the CCPA, we may offer you certain financial incentives and benefits by joining our Cars and Bids Referral program (the "Referral Program"). The information that we collect for enrollment in the Referral Program allows us to tailor our communications and products and services suggestions for you. This, in turn, helps us establish a stronger relationship with you – something we value.
If you participate in the Referral Program, there are two types of financial incentives:
In determining the value of this data to Cars and Bids, we consider the profit generated from products that include Personal Information, which is reasonably correlated to the value provided to the consumer through personalized coupons, promotions, and other discounts or offers.
Participation in the Cars and Bids Referral Program is voluntary and requires your prior opt-in consent, which you may revoke at any time. If you wish to leave the Cars and Bids Referral program, please reach out to us using the information in Contact Us.
Third Party Marketing (“Shine The Light” law)
If you are a California resident with an established business relationship with us, you have the right under California Civil Code Section 1798.83 to request information regarding the disclosure of your Personal Information to third parties for their own direct marketing purposes in the preceding calendar year. You have the right to prevent disclosure of Personal Information, and we provide a cost-free option to exercise that right as set forth below in “Exercising Your California Privacy Rights” Section. Please include “Shine the Light Opt Out” in your request. We do not disclose Personal Information to third parties for their own direct marketing purposes if you have exercised your opt out right.
Exercising Your California Privacy Rights
You or your authorized agent may make a request to access, correct, delete, opt-out of the sale of your Personal Information, or limit the use of your Sensitive Personal Information by contacting us as follows:
If you use an authorized agent to submit your request, we may require proof of the written authorization you have given. We also may require you to confirm your identity and your residency to obtain the information, and you are only entitled to make this request twice in a 12-month period. For emails, please include “California Privacy Rights” as the subject line. You must include your full name, email address, and attest to the fact that you are a California resident. We will acknowledge your request within 10 days and respond to your request within 45 days or let you know if we need additional time. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.
If you live in certain other U.S. states that have an applicable comprehensive privacy law, such as Colorado, Connecticut, Delaware, Illinois, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or Washington you may have rights under applicable privacy laws. These rights are in addition to those rights set forth in the Your Choices About the Information We Collect section above. Additional states, including Alabama and Oklahoma, will offer similar rights in the future and when those laws become effective, we will offer applicable rights to you.
If you are a Minnesota or Oregon resident, you have the right to request a list of the specific third parties to whom we have disclosed your personal data. A description of the categories of third parties with whom we share personal information is set forth in Section 6 above.
For Nevada residents, you have the right to request certain information from us regarding the collection and sale of your personal information during your visit to our websites or when you otherwise interact with us online. If you have sought or acquired, by purchase or lease, any goods or services for personal, family, or household purposes from us, you may ask us to disclose whether we have sold for monetary consideration certain information about you. You may also request to opt out of us sharing such information about you.
If you are a Texas resident, we advise you that we do not collect or sell biometric or other sensitive personal data.
Based on the applicable law in the state where you live, you may have the following rights with respect to your Personal Information:
To exercise any of these rights, please contact us as follows:
Please include your state of residence if you contact us to exercise any right under this Section.
We may require you to confirm your identity and your residency in order to obtain the information, and you are only entitled to make this request up to twice annually. For emails, please include “Privacy Rights” as the subject line. You must include your full name, email address, and attest to the state in which you are a resident.
We will process your request within 45 days or let you know if we need additional time or cannot process your request. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.
Appeals of Our Decisions
In some jurisdictions, if we decline to take action on your request, you may appeal our decision by contacting us with the subject line “Appeal of Refusal to Take Action on Privacy Request” and provide the relevant information in the email.
If we decline to take action on any request you make, we will provide you with the information required by the applicable law. This may include an explanation of why we declined your request, information on how to appeal our decision, and/or how to make a complaint to your state Attorney General.
This section of the Policy applies if you are a data subject who resides or is located in the European Economic Area (“EEA”). We adopt this section to comply with European privacy laws, including the General Data Protection Regulation (“GDPR”). Any terms defined in the GDPR have the same meaning when used in this section.
Under applicable law, we are considered the “data controller” of the Personal Information we handle under this Policy. In other words, we are responsible for deciding how to collect, use and disclose this information, subject to applicable law.
We have listed below the rights that you may be able to exercise in respect of the processing of your Personal Information, subject to applicable law. We take reasonable steps to ensure that the Personal Information that we process is limited to the Personal Information that are required in connection with the purposes set out in this Policy.
If you are a resident of or located within the EEA, you have certain data protection rights. These rights include:
Legal Basis for Processing Personal Information
We rely on the following legal bases for processing your Personal Information:
You have the right to withdraw your consent at any time without affecting the lawfulness of any processing that occurred before withdrawal.
International Transfers
Your Personal Information may be transferred to and processed in countries outside the EEA (like the United States) that may not have the same data protection laws. Where required, we use Standard Contractual Clauses (SCCs) approved by the European Commission; and additional safeguards, where necessary.
How to Exercise Your Rights Under the GDPR
If applicable, you may exercise any of your rights under the GDPR by submitting a verifiable data subject request to us by using the information in Contact Us below. You may make a request related to your Personal Information or on behalf of someone for which you have authorization. You must include your full name, email address, and attest to the fact that you are a citizen or resident of the EEA by including your country of citizenship or residence in your request. We may require you to confirm your identity and/or legal standing for the request as well as your residency in the EEA to obtain the information. We will respond to your request within 30 days or let you know if we need additional time.
Please note that we will ask you to verify your identity before responding to such requests, and we may deny your request if we are unable to verify your identity or authority to make the request.
Should you wish to raise a concern about our use of your data (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority- a list of authorities is available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en; however, we hope that we can assist with any queries or concerns you may have about our use of your Personal Information first by contacting us.
This section applies only to individuals located in the United Kingdom at the time their Personal Information is collected or processed. It supplements, and should be read together with, the rest of this Policy.
We process Personal Information as a “controller” under the UK GDPR, and the UK Data Protection Act 2018 based on the same legal bases described in the GDPR section above:
Where UK law requires consent (particularly for marketing or non-essential cookies), we will request it separately and clearly.
Individuals in the UK have the following rights:
If we share your Personal Data within Cars and Bids or with third parties located outside the United Kingdom, we take steps to ensure that appropriate safeguards are in place to guarantee the continued protection of your Personal Data, such as by entering into the UK International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission’s SCCs, adopted by the UK Government under section 119A of the Data Protection Act 2018, or another lawful transfer mechanism permitted under UK law.
You have the same data subject rights as those for the EU listed above, except that references to the "GDPR" should be read as references to the "UK GDPR" and complaints should be filed with the UK supervisory authority, the Information Commissioner’s Office at https://ico.org.uk/.
Canadian laws provide specific privacy rights to our Canadian customers. If you are a resident of Canada, this section applies in addition to all other applicable rights and information contained in this Policy.
Where applicable, We follow applicable Canadian federal and provincial privacy laws (“Canadian Privacy Law”), including:
Consent
In most cases, we rely on implied consent to collect, use, or disclose your Personal Information. In some circumstances, including those involving sensitive Personal Information, we obtain express consent. Where you have provided your consent to the collection, use, and transfer of your Personal Information (whether orally, in writing, or electronically), you may have the legal right to withdraw your consent under certain circumstances. In addition to the methods described above with respect to your privacy choices, you may withdraw your consent by submitting a request using the information in the “Contacting Us” section below. Please note that if you withdraw your consent, We may not be able to provide you with a particular product or service. We will explain the impact to you at the time of your request to help you with your decision.
Use of Your Personal Information
We will not collect, use, or disclose Personal Information except for the identified purposes identified above (See When We Disclose Information section above), unless we have received additional consent or the processing is authorized without consent. Where we engage service providers who utilize the Personal Information we provide to them, those relationships are governed by a written agreement regarding the confidentiality of your information.
Marketing Communications
By opting into receiving (“CEMs”) (as defined by Canada’s Anti-Spam Legislation (“CASL”)), you confirm that you consent to receiving CEMs from us and our third-party partners. You may withdraw your consent at any time by clicking the unsubscribe link in the CEM or emailing us as follows, depending on the applicable brand:
Canadian Access and Challenge Rights
Canadian Privacy Law provides the right to receive information about the existence, use, and disclosure of your Personal Information and be provided access to that information. You may also challenge the accuracy and completeness of your Personal Information and have it amended as appropriate. Depending on the nature of the challenged information, amendment may involve correction, deletion, or addition of information.
Exercising Your Canadian Privacy Rights
If you have an account with Us, you may view and update your account information (as noted above) directly by logging into your account. To submit a request for access to information not contained within your account, or to challenge the accuracy or completeness of your Personal Information, you may also submit a written request using the information in the “Contacting Us” section below. When submitting a request, we also may require you to confirm your identity and your residency to obtain the information. For emails, please include “Canadian Privacy Rights” as the subject line. You must include your full name, email address, and attest to the fact that you are a Canadian resident and provide your province of residence. We will begin processing your request once you have completed the verification process and will respond within the timeframe required by law.
If We cannot substantively respond to your request in a timely manner, We will notify you and state the reason for the delay. Under certain circumstances, We may not be able to fulfill your request, such as when doing so would interfere with Our regulatory or legal obligations, where We cannot verify your identity, or if your request involves disproportionate cost or effort. However, We will respond to your request within a reasonable time, as required by law, and provide an explanation.
Additional information about how to exercise your rights under Canadian Privacy Law can be found here:
Office of the Privacy Commissioner of Canada
Website
Phone: 1-800-282-1376
Office of the Information and Privacy Commissioner of Alberta
Website
Phone: 1-888-878-4044
Edmonton office: (780) 422-6860
Calgary office: (403) 297-2728
Office of the Information and Privacy Commissioner of British Columbia
Website
Vancouver: (604) 660-2421
Elsewhere in BC: (800) 663-7867
Commission d'acces a' l' information du Quebec
Website
Phone: 1-888-528-7741
If you are located in the national territory of Brazil, you have certain additional data protection rights under the Lei Geral de Proteção de Dados (“LGPD”). These rights include:
Legal Basis for Processing Data Under the LGPD
Cars and Bids’ legal bases for collecting or processing your Personal Information are as follows:
Duration of Processing
Cars and Bids will process and retain your Personal Information only for as long as is necessary for the purposes set out in this Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Information to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.
Cars and Bids will also retain Personal Information and usage data for internal analysis purposes. Usage Data is data collected automatically either generated using the Site or from the Site infrastructure itself (for example, the duration of a page visit). Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Site or we are legally obligated to retain this data for longer periods.
Exercising Your Rights Under the LGPD
If applicable, you may exercise any of your rights under the LGPD by submitting a verifiable data subject request to us by using the details in Contact Us. You may make a request related to your Personal Information or on behalf of someone for which you have authorization. You must include your full name, email address, and attest to the fact that you are a citizen or resident of Brazil in your request. We may require you to confirm your identity and/or legal standing for the request as well as your residency to obtain the information. We will respond to your request within 15 days or let you know if we need additional time.
As applicable, this Policy is subject to and does not limit the rights and/or exceptions available to us under the Australian Privacy Principles of the Privacy Act 1988 (Cth) (the “Privacy Act”).
We disclose Personal Information, for some of the purposes described above, to organizations located in Australia and in other countries, including New Zealand, Brazil, European Union member states, the United States, United Kingdom, Israel and South Africa. We or our service providers may also make Personal Information held in Australia or the other countries listed above remotely available for processing by service provider personnel located in other countries, such as New Zealand, Brazil, European Union member states, United States, United Kingdom, Israel and South Africa. We take reasonable steps to ensure that overseas recipients of your Personal Information do not breach the privacy obligations relating to your Personal Information and only use it for the purpose for which it was disclosed.
Your Rights
You have the following rights:
• Access, including confirming whether we are processing Personal Information concerning you.
• Correction, taking into account the nature of the Personal Information and the purposes of the processing of your Personal Information.
• Complaints, including if you believe that we have breached the Australian Privacy Principles in the course of handling your Personal Information.
At your request, we will provide a copy of any Personal Information we hold about you, unless an exception under the Privacy Act applies. We may charge reasonable fees for retrieving this information, in which case we will obtain your prior consent.
When your Personal Information is no longer required, we take reasonable steps to destroy or permanently de-identify the information.
We will promptly acknowledge and investigate any complaint about the way we manage Personal Information.
We will take reasonable steps to remedy any issues resulting from our failure to comply with privacy obligations. If our response to you does not satisfactorily address your concerns, you may have the right to make a complaint to a competent regulator (e.g., Office of the Australian Information Commissioner at www.oaic.gov.au).
This PRIVACY POLICY ADDENDUM FOR NEW ZEALAND supplements the information contained in our Policy and applies where we collect or hold Personal Information about you in the course of carrying on business in New Zealand.
Your rights
Subject to certain grounds for refusal set out in the New Zealand Privacy Act 2020, you have the right to access your readily retrievable Personal Information that we hold and to request a correction to your Personal Information. Before you exercise this right, we will need evidence to confirm that you are the individual to whom the Personal Information relates.
With respect to a request for correction, if we think the correction is reasonable and we are reasonably able to change the Personal Information, we will make the correction. If we do not make the correction, we will take reasonable steps to note on the Personal Information that you requested the correction.
If you want to exercise either of the above rights, email us at the email address provided under "Contact Us". Your email should provide evidence of who you are and set out the details of your request (e.g., the Personal Information, or the correction, that you are requesting).
Personal Data Retention Period
Notwithstanding the main Retention of Personal Information section of the Privacy Policy, Cars and Bids may use and retain Korean residents’ personal data until the end of the relevant retention period in the below cases:
| Cases | Retention Period |
|---|---|
| Investigation is necessary to find out the reason for termination in case Cars and Bids terminates the relevant service agreement due to a reason attributable to user | Three (3) years from the date of termination |
| Investigation in progress due to violation of any applicable laws and regulations | Until the completion of the investigation |
| Existence of claims and/or obligations | Until the settlement of the claims and/or obligations |
| Records related to resolution of user’s complaints or settlement of disputes | Three (3) years |
| Records related to payment for and provision of services | Five (5) years |
Consignment of Personal Data Processing
The following with regard to the consignment of processing Personal Data of Korean residents:
Consignment of Personal Data processed overseas:
| Consignee | Destination Country | Time and Method of Transfer | Personal Data | Purpose of Use | Period of Retention and Processing |
|---|---|---|---|---|---|
| Amazon Web Service Inc. ([email protected] ) | U.S. | Transferred through server | Any personal data processed | Data management | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Stripe, Inc.([email protected]) | U.S. | Transferred through server | Name, email, billing address, credit card information, purchase amount, date of purchase | Electronic payment processing | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Google LLC ([email protected]) | U.S. | Transferred through server when Service usage history occurs | Service usage history | Analysis of usage patterns | Until member’s membership withdrawal; or until the consignment agreement is terminated |
| Mailchimp ([email protected]) | U.S. | Transferred through server when sending emails | Email address | Sending email | Until member’s membership withdrawal; or until the consignment agreement is terminated |
Destruction of Personal Data
In the event the Personal Data needs to be retained by Korean Data Protection laws, such Personal Data will be segregated, moved to a separate database and safely stored in a different location.
The process and method of Korean residents’ Personal Data destruction are as follows:
Staff Responsible for Privacy Inquiries
The legal department responsible for handling privacy inquiries is designated as below to oversee all matters related to customer privacy and handle complaints, as well as to address any damage from privacy-related issues. You may reach the legal department at [email protected] or by using the information in the Contact Us section below. Cars and Bids will endeavor to respond and process any inquiry promptly.
Complaint to the Data Protection Authority
A Korean resident may submit a complaint to the below institutions:
Personal Data Breach Reporting Center: 118 (www.privacy.kisa.or.kr);
Personal Data Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr);
Cybercrime Investigation Division at the Supreme Prosecutors’ Office: 02-3480-3573 (www.spo.go.kr);
Cybercrime Investigation Bureau at the National Police Agency: 182 (http://cyberbureau.police.go.kr).
We may change this Privacy Policy at any time. We will post all changes to this Policy on this page and will indicate at the top of the page the modified policy’s effective date. We therefore encourage you to refer to this page on an ongoing basis so that you are aware of our current privacy policy. If required by the applicable law, we will notify you of the changes.
By continuing to use the Site, App or Services or providing us with information following such a replacement Policy being uploaded, you agree that you will be bound by the Privacy Policy as changed.
If you have any questions or suggestions regarding this Privacy Policy, please contact us as follows:
Cars and Bids, LLC
4075 Park Blvd
Basement Garage
San Diego, CA 92103
Privacy Email: [email protected]
Contact number: (619) 568-2277