Last Updated: October 30, 2024
Welcome to the Cox Automotive Privacy Policy. Cox Automotive provides automotive ecommerce, mobility and data processing services to motor vehicle dealerships, manufacturers and other industry business entities including subsidiaries and affiliates; and processes data collected and purchased by Cox Automotive to provide shared services across the Cox Automotive family of businesses. This Policy does not apply to other affiliate or subsidiary companies owned by Cox Automotive. For information concerning the privacy policies of these affiliates or subsidiaries, please visit their websites. When you use or visit our Site, we may collect the following types of information:
To view the Terms of Service for using this Site, please review our Visitor Agreement at www.coxautoinc.com/visitor-agreement/. By visiting the Site and sharing any information with us, you agree to be bound by this Privacy Policy and the Site’s Terms of Service.
This Privacy Policy is primarily intended to provide a description of the ways in which we collect and use information to provide ecommerce, mobility, and data processing services, including Esntial and Cox Automotive Mobility. Neither the Site, nor our online activities or services for our clients, are directed toward or intended for children under the age of 18. If you are under eighteen (18), you should not provide any personal information to us. We do not collect Personally Identifiable Information (“PII”) from any person of whom we have actual knowledge is under the age of 18. By using our website for submitting information to us, you consent to our use and sharing of the information collected or submitted as described in this Privacy Policy.
Please be aware that in addition to our Site, we may also collect information from you for various purposes, including, but not limited to, providing advertisements about goods and services likely to be of greater interest to you. Such information collected by such websites and mobile applications and their affiliated or third-party partners may include any PII you choose to provide in registering and transacting with such websites and mobile applications. Although we choose our business partners and clients carefully, Cox Automotive is not responsible for the privacy practices of websites and mobile applications operated by such third parties. You should check the applicable privacy policies of such websites and mobile applications you visit to determine how they handle any
In addition to the information we have collected directly about you from our Site, we may collect information about you through the use of our first-party technology enabled on our third-party websites. When you visit any website, mobile site, app or other digital media property where our technology is enabled (“Client Sites”), we may collect information about your interaction with, and the content on, that Client Site. The information collected via the technology Cox Automotive utilizes may use PII that it has collected or that it obtains from related third parties or affiliates to create data segments and intent profiles, based upon User interactions with our Clients as well as other User behavior, such as the websites visited and mobile applications used by a User. We also collect or purchase PII through third parties that can be combined with information we get from you directly or collect through our use of technology. Cox Automotive licenses the data collected as described herein to third parties in connection with our business, including to our Customers, our partners and other third parties (collectively our “Business Partners”). This shared information may include PII information. The information we share may also be combined with third-party data to provide an even broader service to our Customers and Business Partners.
We may otherwise disclose information collected from the Site and through the technology we have if we have a good-faith belief that the disclosure is reasonably necessary to comply with the law, legal process or an enforceable government request; to enforce applicable terms of use for our services; to detect, prevent or otherwise address illegal activity, fraud, or security issues; or to protect the property or safety of our users, Cox Automotive, or the public as required or permitted by law. We may also make PII available to subsidiaries and affiliated companies that are under common ownership or control within the Cox Automotive family.
We may transfer information, including PII, to a successor entity in connection with a corporate merger, consolidation, sale of assets, bankruptcy, or other corporate change. If Cox Automotive is involved in any such transaction, you will be notified via prominent notice on our Website of any change in ownership or uses of your information, as well as any choices you may have regarding your information.
We also provide information to third parties who provide services to Cox Automotive in connection with operating and maintaining the Site and the technology. These service providers are prohibited from using the information we provide for purposes other than performing services for Cox Automotive. In addition, we may share aggregated information with Business Partners and the general public, such as usage statistics or demographic trends regarding how you and others may interact with the Site and/or Technology.
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties excluding aggregators and providers of the text message services.
The security of your information is important to us. Cox Automotive has implemented reasonable security measures to protect the information, including without limitation, use of firewalls, encryption, cybersecurity controls, application controls and monitoring. No method of electronic storage or transmission over the Internet is 100% secure. So while Cox Automotive strives to use commercially reasonable means to protect your information, we cannot guarantee complete security. If you have any questions about these security practices, please email us at privacy@coxautoinc.com.
Cox Automotive’s Site and technology is designed for people 18 years of age and older. We do not knowingly collect PII from anyone under the age of 13. If we are made aware that we have received PII from someone under the age of 13, we will use reasonable efforts to remove that information from our records.
You are entitled to make certain choices about how we communicate with you. You may choose not to provide PII, even though that might impact your ability to register or receive a particular product or service.
This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Statement of Cox Automotive, Inc. and its subsidiaries (collectively, “we,” “us,” or “our”), a Cox Automotive, Inc. company, and applies solely to consumers who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act (“CCPA), the California Privacy Rights Act (“CPRA”) and other California privacy laws (hereinafter the “California Privacy Laws”). Any terms defined in the CCPA and CPRA have the same meaning when used in this notice.
This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Statement of Cox Automotive, Inc. and its subsidiaries (collectively, “we,” “us,” or “our”), a Cox Automotive, Inc. company, and applies solely to consumers who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act (“CCPA), the California Privacy Rights Act (“CPRA”) and other California privacy laws (hereinafter the “California Privacy Laws”). Any terms defined in the CCPA and CPRA have the same meaning when used in this notice.
| Category | Examples | Collected |
| A. Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. | YES |
| B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. | YES |
| C. Protected classification characteristics under California or federal law. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | YES |
| D. Commercial information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | YES |
| E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO |
| F. Internet or other similar network activity. | Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | YES |
| G. Geolocation data. | Physical location or movements. | YES |
| H. Sensory data. | Audio, electronic, visual, thermal, olfactory, or similar information. | NO |
| I. Professional or employment-related information. | Current or past job history or performance evaluations. | YES |
| J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | NO |
| K. Inferences drawn from other personal information. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | YES |
| L. Sensitive Personal Information | Personal information that reveals a person’s social security, driver’s license, state identification card, passport number; an account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication; a person’s genetic data; and/or biometric data processed for the purpose of uniquely identifying a person. Some personal information included in this category may overlap with other categories. | YES |
We obtain the categories of personal information listed above from the following categories of sources:
Except as otherwise permitted or required by applicable law or regulation, we retain Personal Information in the categories set forth above only for as long as we have a legitimate business need to provide our services to consumers and dealers in the automotive marketplace. Because an average consumer usually purchases a vehicle infrequently, we keep some categories of information longer than others so that we can provide our services, such as identifiers, vehicle/commercial information, Internet or network activity, and inferences.
To determine the appropriate retention period, we consider various criteria, including whether the Personal Information continues to be necessary to provide our services; the amount, nature, and sensitivity of the Personal Information; the potential risk of harm to consumers from unauthorized use or disclosure; and the purposes for which we collect the Personal Information.
We continually review and enhance our retention practices in order to protect consumers while providing our services.
We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
We disclose your personal information for a business purpose to the following categories of third parties:
In the preceding twelve (12) months, we have sold the following categories of personal information:
The California Privacy Laws provide California residents with specific rights regarding their personal information. This section describes your California privacy rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
California Civil Code Section 1798.83 entitles California users to request information concerning whether a business has disclosed certain information about you to any third parties for the third parties’ direct marketing purposes. California users who wish to request further information in compliance with this law or have questions or concerns about our privacy practices and policies may contact us as specified in the “How to Contact Us” section below.
Right to Limit Use and Disclosure of Sensitive Personal Information
You have the right, at any time, to direct us to limit your sensitive personal information to that use which is necessary to perform the services reasonably expected by an average consumer who requests those services. We may decline to limit the use and disclosure of sensitive personal information for the following reasons:
(8) For purposes that do not infer characteristics about the consumer.
Correction Request Rights
You have the right to request that we correct inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information. Once we receive and confirm your verifiable consumer request, we shall use commercially reasonable efforts to correct the inaccurate personal information, pursuant to California Civil Code Section 1798.130 and regulations adopted pursuant to paragraph (8) of subdivision (a) of Section 1798.185.
Deletion Request Rights
You have the right to request that we delete any of your personal information that we collected about you and retained, subject to certain exceptions in the California Privacy Laws. Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records, unless an exception applies, and we will direct our service providers to similarly delete your personal information from their records.
Right to Opt-Out of Sales or Sharing of Personal Information
You have the right to opt-out of our sale or sharing of your personal information. To the extent that we sell your personal information, as the term “sell” is defined under the California Privacy Laws, you have the right to opt-out of the sale of your personal information by us to third parties at any time. You may submit a request to opt-out by clicking Do Not Sell My Data.
Exercising Access, Data Portability, Limiting Use of Sensitive Personal Information, Correction and Deletion Rights
To exercise the access, data portability, limiting use of sensitive personal information, correction and deletion rights described above, please submit a “verifiable consumer request” (defined below) to us by either:
Only you or someone you authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
A verifiable consumer request must:
You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
If you are a California consumer seeking Cox employment information about yourself, please view the Cox Enterprises California Privacy Notice.
We will not discriminate against you for exercising any of your rights under the California Privacy Laws. Unless permitted by the California Privacy Laws, we will not deny you goods or services, charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, provide you a different level or quality of goods or services, suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services; or retaliate against an employee, job applicant, or independent contractor.
This section applies to Virginia residents that use our Services for individual or household purposes. Capitalized terms used in this section shall have the same meaning as under applicable Virginia law.
This section describes our collection, use, and disclosure of information that is linked or reasonably linkable to an identified or identifiable national person, excluding de-identified or publicly available information (“Personal Data”). You can learn more about the Personal Data we process and the purpose for processing such information in the “The Information We Collect” section above. You can also learn more about our disclosure of Personal Data and the categories of third parties we disclose Personal Data to in the “How We May Use the Information We Collect” section above.
Some of the ways that we disclose Personal Data may constitute a Sale. You have the right to opt-out of the Sale of your Personal Data, as described below. We may also process your Personal Data for Targeted Advertising, as described in the “Information Collection and Use” section above. You have the right to opt-out of the processing of your Personal Data for Targeted Advertising, as described below.
If you are a Virginia Consumer, subject to certain conditions and restrictions, you have the following rights with regard to your Personal Data:
You may submit requests related to these rights by visiting this link: Virginia Consumer Privacy Request Form. Please note that, depending on the nature of your request, you may be asked to provide information to verify your identity before your request can be processed. We will confirm receipt of your request and respond to your request as soon as we reasonably can and no later than legally required. You may exercise your privacy rights under the VCDPA free of charge up to no more than twice annually. If you make a privacy rights request, we will retain the Personal Data provided to us to fulfill your privacy rights request for our recordkeeping purposes.
We may modify this Privacy Policy from time to time. If we decide to change this Privacy Policy, we will post the modified Privacy Policy to the Website with an updated “Last Updated” date at the top of the Privacy Policy, and other places we deem appropriate. We reserve the right to modify this Privacy Policy at any time.
If you have any questions or comments about this Privacy Policy, or if you would like us to update information we have about you or your preferences, please contact us by the following:
Website: coxautoinc.com
Email: privacy@coxautoinc.com
Postal Address: Cox Automotive, Inc.
Attn: Chief Compliance & Privacy Officer
6205 Peachtree Dunwoody Rd. NE
Atlanta, GA 30328