Privacy4Cars® – Business Privacy Notice

Business users: user ID, name, job title/role, work email, work phone, authentication metadata.

Audit & Compliance records: workflow history, deletion status, certificates, Vehicle Privacy Report usage.

Communications and support: support tickets, emails, call notes, in-app messages, attachments. Marketing, events, and training: registrations, subscription preferences, resource downloads, engagement metrics.

B2B email engagement: business contact information and metadata from tools such as CRM and marketing automation providers, sales engagement and email outreach providers, and lead generation and contact intelligence providers.

Mobile app data: account details, workflow data, camera (VIN scan, documentation capture), location (when enabled), device/phone ID.

Automatically through your use of our websites, portals, or applications.

Via marketing channels, such as social media, event attendance lists, web forms for content downloads, and prospecting lists.

Manage accounts, authenticate users, and administer access.

Respond to requests, support queries, and privacy/data-access requests.

Process payments and reconcile transactions.

Maintain security, prevent fraud, monitor misuse, and keep audit logs.

Enhance and develop our services using aggregated or de-identified data.

Communicate and market appropriately (service messages, B2B updates, webinars).

Comply with legal, regulatory, and record-keeping obligations.

Legitimate interests (Art. 6(1)(f)): service operation/security/improvement, B2B relationship management, internal analytics (balanced via LIA).

Legal obligation (Art. 6(1)(c)): regulatory, tax, and accounting compliance.

Consent (Art. 6(1)(a)): non-essential cookies and marketing communications where required.

Preventing fraud and misuse. Maintaining accurate records.

Supporting business relationships.

Conducting internal analytics and service development.

We assess these interests against the rights and expectations of individuals.

If you choose not to provide required information, we may be unable to provide the requested services.

Other information, such as allowing camera access on our app, is voluntary but may limit functionality (ie the ability to scan vehicle device identifiers, which can also be inputted manually).

Your employer / our customer (where you hold a Business User account).

Mobile platform providers (Apple App Store, Google Play).

Government authorities, courts, regulators, law enforcement (where required by law).

Corporate transaction recipients (buyers/successors in mergers, acquisitions, or asset sales).

UK International Data Transfer Agreement (IDTA) or UK Addendum.

Transfer impact assessments with supplementary measures.

Comparable contractual safeguards and vendor due diligence for other jurisdictions.

Technical and security logs: retained per centralised IT security log retention policy (aligned with industry standards for incident investigation); compliance records and regulatory documentation retained in archive for up to 7 years.

Deletion/compliance logs and certificates: retained for up to 7 years after last meaningful interaction, unless longer required by law. Support and data subject request files: duration of customer relationship + 7 years.

Marketing lists: retained until consent is withdrawn or you unsubscribe. When no longer required, data is deleted or irreversibly anonymised.

* Note regarding opt-out of sale/sharing and targeted advertising: We do not sell personal information, engage in data brokerage, or share personal information for cross-context behavioural advertising. Where applicable law defines certain disclosures as a “sale” or “sharing,” we will honour valid opt-out requests in accordance with law.

* Note regarding opt-out of sale/sharing and targeted advertising: We do not sell personal information, engage in data brokerage, or share personal information for cross-context behavioural advertising. Where applicable law defines certain disclosures as a “sale” or “sharing,” we will honour valid opt-out requests in accordance with law.

Email: privacyrights@privacy4cars.com

Mail: Privacy4Cars, P.O. Box 287433, New York, NY 10128, USA

U.S. states: Generally within 30–45 days.

Other jurisdictions: Within timeframes required by applicable law. Extensions may apply for complex requests where permitted.

UK: https://ico.org.uk

Australia: https://www.oaic.gov.au/privacy/privacy-complaints

You can block or delete cookies through your browser settings, but this may affect certain features.

Multi-factor authentication for system access.

Encryption of data in transit and at rest where appropriate.

Secure cloud infrastructure with monitoring and logging.

Firewalls and network protections.

Secure software development practices.

Employee confidentiality obligations and security training.

Controlled data retention and secure deletion practices.