Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, mailing address
• Business Information: Company name, job title, business address
• Financial Information: Credit card details, bank account information (for financing applications)
• Vehicle Preferences: Make, model, year preferences, custom modifications, financing requirements
• Communication Records: Correspondence with our team, customer service interactions
• Account Information: Username, password, preferences, purchase history

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click-through rates, search queries
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Information stored in cookies, web beacons, and similar technologies
• Referral Information: Website that referred you to our site

1.3 Information from Third Parties

We may receive information about you from:

• Credit reporting agencies (for financing applications)
• Social media platforms (when you interact with our content)
• Marketing partners and advertising networks
• Public records and databases

2. How We Use Your Information

2.1 Primary Uses

• Provide, maintain, and improve our custom and classic car sales and services
• Process vehicle purchases, financing applications, and transactions
• Communicate with you about your inquiries, orders, and account
• Provide customer support and respond to your requests
• Send you important updates about our services and policies

2.2 Business Operations

• Analyze website usage and improve user experience
• Conduct market research and customer surveys
• Develop new products and services
• Ensure compliance with legal and regulatory requirements
• Prevent fraud and enhance security

2.3 Marketing and Advertising

• Send you promotional materials and special offers (with your consent)
• Personalize advertisements based on your interests
• Measure the effectiveness of our marketing campaigns
• Retarget you with relevant advertisements

3. Legal Basis for Processing (GDPR)

We process your personal information based on the following legal grounds:

• Consent: When you have given clear consent for processing
• Contract Performance: To fulfill our contractual obligations to you
• Legitimate Interests: For our legitimate business interests (e.g., fraud prevention, marketing)
• Legal Compliance: To comply with applicable laws and regulations
• Vital Interests: To protect your vital interests or those of another person

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with trusted third parties who assist us in operating our business:

• Financial Institutions: For processing payments and financing applications
• Credit Reporting Agencies: For credit checks and financing decisions
• Shipping and Logistics: For custom and classic car delivery and transportation services
• IT Service Providers: For website hosting, data storage, and technical support
• Marketing Partners: For advertising and promotional activities (with your consent)
• Analytics Providers: For website analytics and performance monitoring

4.2 Legal Requirements

We may disclose your information when required by law or in response to:

• Court orders, subpoenas, or legal process
• Government investigations or regulatory requests
• Enforcement of our terms of service or other agreements
• Protection of our rights, property, or safety
• Protection of the rights, property, or safety of others

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control.

5. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Audits: Periodic security assessments and vulnerability testing
• Employee Training: Regular privacy and security training for our staff
• Secure Storage: Protected databases and secure file systems
• Incident Response: Procedures for handling security breaches

Note: While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

6.1 General Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal information
• Restriction: Limit how we process your information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of processing
• Withdraw Consent: Withdraw consent for processing based on consent

6.2 Marketing Communications

You can control your marketing preferences by:

• Clicking "unsubscribe" in any marketing email
• Contacting us directly to opt out
• Updating your account preferences

6.3 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Account Information: Until you close your account or request deletion
• Transaction Records: As required by law (typically 7 years for financial records)
• Marketing Data: Until you opt out or for 3 years of inactivity
• Website Analytics: Up to 26 months
• Customer Service Records: 3 years from last interaction

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct

9. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending you an email notification (if we have your email address)
• Displaying a prominent notice on our website

Your continued use of our services after any changes indicates your acceptance of the updated policy.

12. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Data Protection Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority.