Privacy Policy

    Last Updated: January 2025

    Compliant with CCPA, US state privacy laws, PIPEDA, Quebec Law 25, and other North American regulations

    Your Privacy Rights

    As a North American resident, you have specific privacy rights under applicable federal, state, and provincial laws:

    • Right to Access: Request a copy of your personal information we hold
    • Right to Correction: Request corrections to inaccurate information
    • Right to Erasure: Request deletion of your personal data (where applicable)
    • Right to Portability: Receive your data in a machine-readable format (Quebec Law 25)
    • Right to De-indexation: Request removal from search results (Quebec Law 25)
    • Right to Transparency: Understand how automated decisions are made

    Information We Collect

    Personal Information:

    • Name, email address, phone number
    • Business information (dealership name, location)
    • Payment and billing information
    • Account credentials and preferences

    Technical Information:

    • IP address, browser type, device information
    • Usage data and analytics
    • Cookies and similar technologies

    How We Use Your Information

    We collect and use your personal information only for specified, explicit, and legitimate purposes:

    • Service Delivery: To provide and maintain our dealership management platform
    • Account Management: To create and manage your account
    • Billing & Payment: To process payments and manage subscriptions
    • Customer Support: To respond to inquiries and provide assistance
    • Security: To protect against fraud and unauthorized access
    • Legal Compliance: To meet regulatory and legal obligations

    Legal Basis for Processing (PIPEDA Principles)

    • Consent: We obtain meaningful consent for collection, use, and disclosure
    • Contractual Necessity: Processing required to fulfill our service agreement
    • Legitimate Interests: For business operations where balanced with your rights
    • Legal Obligations: To comply with applicable US and Canadian laws and regulations

    Cross-Border Data Transfers

    Your personal information is stored and processed within North America (USA and Canada). If we transfer data internationally, we ensure appropriate safeguards are in place:

    • Contractual protections with service providers
    • Enhanced security measures for cross-border transfers
    • Transparency about data locations
    • Compliance with CCPA, state laws, and Canadian provincial requirements

    Data Retention

    We retain your personal information only as long as necessary for the purposes outlined in this policy:

    • Active Accounts: Duration of your subscription plus 7 years for business records
    • Financial Records: 7 years as required by US and Canadian tax law
    • Marketing Data: Until consent is withdrawn or account closure
    • Security Logs: 90 days unless required for investigation

    Cookies and Tracking

    We use cookies and similar technologies to improve your experience. You can manage cookie preferences through our cookie consent banner. Essential cookies required for the platform to function are always active.

    Your Rights and How to Exercise Them

    To exercise any of your privacy rights, you can:

    • Submit a privacy request through our Privacy Request Form
    • Email us at: privacy@dealeroneview.com
    • Contact our Privacy Officer by mail (address available on request)

    We will respond to your request within 30 days (PIPEDA) or as required by applicable provincial law. Identity verification may be required before processing your request.

    Privacy Breach Notification

    In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as required by PIPEDA. For Quebec residents, we also comply with Law 25 notification requirements.

    Contact & Complaints

    Contact Our Privacy Officer:

    Email: privacy@dealeroneview.com

    File a Complaint with Regulators:

    • USA (FTC): Federal Trade Commission - ftc.gov
    • California: California Privacy Protection Agency (CPPA)
    • Canada (Federal): Office of the Privacy Commissioner of Canada (OPC) - priv.gc.ca
    • Quebec: Commission d'accès à l'information (CAI)
    • Alberta: Office of the Information and Privacy Commissioner (OIPC)
    • BC: Office of the Information and Privacy Commissioner for BC

    This Privacy Policy is compliant with applicable US and Canadian privacy legislation.

    Questions? Contact us at privacy@dealeroneview.com