1. Scope
This Privacy Policy explains how [Cararri Legal Entity Name] ("Cararri") handles personal information when you use cararri.com and related services. It applies to buyers, private sellers, dealer staff and visitors. Dealers who receive your information through Cararri handle it under their own privacy policies.
2. Information we collect
Information you provide:
- Account details: name, email, phone number, password, ZIP code, account type (buyer, private seller or dealer).
- Enquiries and messages you send to sellers and dealers, test drive and appointment bookings.
- Listing information: vehicle details, VIN, photos, price, location and seller contact preferences.
- Credit request information you choose to submit, which may include your address, date of birth, housing, employment and income details, and (where the form requests it) your Social Security number.
- Dealer business information: legal name, licenses, addresses, staff users, billing details.
- Reviews, survey responses and support communications.
Information collected automatically:
- Device and usage data: IP address, browser type, device identifiers, pages viewed, searches, saved and compared vehicles, referring URLs and timestamps.
- Approximate location derived from IP address or ZIP code, and precise location only if you allow it in your browser or device.
- Cookies, pixels and similar technologies, described in our Cookie Policy.
Information from others:
- Dealers and sellers (for example, follow-up on your enquiry), vehicle data and history providers, identity and fraud-prevention services, advertising and analytics partners, and social networks if you choose to connect them.
3. How we use information
- To operate the marketplace: create accounts, publish listings, route enquiries, test drive requests and credit requests to the seller or dealer you choose, and power search, saved vehicles and comparisons.
- To keep the Service safe: verify users and dealers, detect and prevent fraud, scams, spam and abuse, and enforce our policies.
- To communicate with you: transactional messages, alerts you request, service notices and, with your consent where required, marketing.
- To improve and personalize the Service, including analytics and recommendations.
- To keep records of enquiries and credit requests submitted through the Service, as required for dispute handling, dealer quality control and legal compliance.
- To comply with law, respond to lawful requests and protect our rights.
4. How we share information
- With the seller or dealer you contact: when you send an enquiry, book a test drive or submit a credit request, we share the information you submit with that seller or dealer so they can respond. Dealer contact details are kept private within the messaging tool, but your submitted details are shared with the dealer you select.
- With service providers who process data on our behalf (hosting, email and SMS delivery, analytics, customer support, fraud prevention, payment processing) under contracts that restrict their use of it.
- With advertising and analytics partners, as described in the Cookie Policy, subject to your opt-out choices.
- For legal reasons, to protect safety, or in connection with a merger, acquisition or sale of assets.
- With your consent or at your direction.
We do not sell credit request information, and we do not share it with anyone other than the dealer you select, our service providers and as required by law.
5. "Sale" and "sharing" under state law
Some U.S. state laws treat certain advertising cookies as a "sale" or "sharing" of personal information. You may opt out using the "Your Privacy Choices" link on our site, by enabling a Global Privacy Control (GPC) signal in your browser, which we honor, or by emailing support@cararri.com. We do not knowingly sell or share personal information of anyone under 16.
6. Your privacy rights
Depending on where you live (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with comprehensive privacy laws), you may have the right to:
- Know and access the personal information we hold about you.
- Correct inaccurate information.
- Delete your personal information, subject to legal exceptions.
- Obtain a portable copy of your information.
- Opt out of sale, sharing, targeted advertising and certain profiling.
- Limit use of sensitive personal information.
- Appeal our decision on your request.
To exercise these rights, see our Data Deletion & Privacy Rights Policy or email support@cararri.com. We will not discriminate against you for exercising your rights.
7. Sensitive information
Credit request data such as Social Security numbers, date of birth and financial information is sensitive. We use it only to deliver your request to the dealer you choose, to keep a secure record of the request, to prevent fraud and to meet legal obligations. Access is restricted to personnel who need it.
8. Data retention
We keep personal information for as long as your account is active and as needed for the purposes above. Typical periods: account data for the life of the account plus up to 24 months; enquiry and message records up to 36 months; credit request records up to [Credit Record Retention Period, e.g. 25 months] or longer where law requires; billing records up to 7 years. Retention may be extended for legal holds, disputes or fraud investigations.
9. Security
We use administrative, technical and physical safeguards, including encryption in transit, access controls and monitoring. No system is perfectly secure; please use a strong unique password and contact us if you suspect misuse.
10. Children
The Service is not directed to children under 18 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
11. California notice at collection
Categories collected in the past 12 months: identifiers; customer records (including financial information in credit requests); commercial information (vehicles viewed, enquiries); internet activity; approximate geolocation; professional information (dealer staff); and inferences. Sensitive categories: Social Security number and financial information (credit requests only), precise geolocation (only with permission). Purposes, sources, recipients and retention are described above. California residents may also request information about disclosures for direct marketing under the "Shine the Light" law.
12. Changes and contact
We may update this policy and will post the new effective date. Contact: support@cararri.com, [Business Mailing Address].