This privacy notice discloses the privacy practices for Real Car Sales, LLC (“Real Car Sales”) and applies solely to information collected by this website and our online services.

1. What personal information we collect, how we use it, and with whom it may be shared.
2. What choices you have regarding the use of your data.
3. The security procedures in place to protect your information.
4. How you can access, correct, or delete your information.

Information We Collect

We collect information you voluntarily provide and information collected automatically:

• Identifiers & Contact Data: name, email, phone, postal address.
• Commercial Data: vehicles of interest, quotes, purchase/finance preferences.
• Financial Data (as applicable): limited data necessary to evaluate financing (processed via third-party providers).
• Device/Usage Data: IP address, approximate geolocation, pages viewed, referral URLs, browser/OS, cookies and similar technologies.
• Communications: messages you send via forms, email, chat or phone.

How We Use Your Information (Purposes & Legal Bases)

We use your information to:

• Provide services and fulfill requests (e.g., quotes, test-drives, vehicle purchases, title/registration, service appointments).
• Process financing/insurance with lenders and insurance partners you authorize.
• Operate and improve our website (analytics, diagnostics, security, fraud prevention).
• Marketing communications (with your consent where required; you can opt out anytime).
• Legal compliance (tax, title, registration, recordkeeping) and to protect our rights.

Legal bases (where applicable): consent, performance of a contract, compliance with legal obligations, and legitimate interests (e.g., security, service quality, limited direct marketing).

Information Sharing

We do not sell your personal information for money. We may share information as needed with:

• Service providers (hosting, IT, analytics, marketing, customer support).
• Financial institutions/credit providers and insurance partners at your request or with your authorization.
• Compliance & legal recipients (government agencies for title/registration, tax authorities, law enforcement when required).
• Business transfers (in connection with a merger, acquisition, or asset sale).

Cookies, Analytics & Advertising

We use cookies and similar technologies to operate our site, remember preferences, analyze traffic, and measure marketing effectiveness. We may use third-party tools such as Google Analytics and Meta Pixel. You can control cookies via your browser settings. Some features may not function properly without cookies.

Security

We take precautions to protect your information online and offline. Sensitive data transmitted online (e.g., payment information) is encrypted in transit. Only personnel who need the information to perform specific jobs (e.g., billing, customer service, title work) are granted access. Systems storing personal information are maintained in a secure environment.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy (e.g., legal/recordkeeping requirements for sales, title and registration), resolve disputes, and enforce our agreements, unless a longer retention period is required or permitted by law.

Children’s Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16 without appropriate consent. If you believe a child has provided personal information to us, please contact us to request deletion.

Your Choices & Rights

You may opt out of marketing emails at any time by using the “unsubscribe” link in our emails or contacting us at the address below. You may also request to access, correct, or delete your information, subject to applicable law.

U.S. State Privacy Rights (CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA)

This section applies to residents of California, Virginia, Colorado, Connecticut, and Utah acting in an individual or household context. Depending on your state, you may have the right to:

• Know/Access: request categories and specific pieces of personal information collected, sources, purposes, and categories of third parties with whom we share information.
• Delete: request deletion of personal information we collected from you (subject to exceptions).
• Correct: request correction of inaccurate personal information.
• Opt-Out: opt out of certain processing such as targeted advertising, “sharing” for cross-context behavioral advertising, or sale of personal data (as defined by applicable law).
• Limit (CA): request to limit the use/disclosure of sensitive personal information (where applicable).
• Appeal (VA/CO/CT): appeal our decision regarding your request within the timelines allowed by law.

How to submit requests:

1. Submit an online request at https://www.realcarsales.com/CCPA_DSAR
2. Call our privacy line at (689) 698-3876
3. Consumers who are not job applicants or independent contractors may also request a paper form at our front desk upon request.

Verification: To protect your privacy, we will verify your identity before acting on requests, using information reasonably sufficient to confirm you are the consumer about whom we collected personal information. Authorized agents must present signed authorization; we may contact you directly to verify.

Appeals (VA/CO/CT): You may appeal our response within the timeframe provided by law. We will respond within the applicable period with our determination and information on how to contact your state Attorney General if you remain concerned.

Brazil – LGPD Rights

If you are in Brazil, you may have rights under the Lei Geral de Proteção de Dados (LGPD), including confirmation of processing, access, correction, anonymization/blocking/deletion of unnecessary or excessive data, portability, information about sharing, and revocation of consent where applicable. To exercise these rights, use the same contact channels listed below.

Gramm-Leach-Bliley Act (GLBA) Exemption

When we extend credit or provide financial services subject to the GLBA, certain personal information processed for those purposes is exempt from CCPA/CPRA, VCDPA, CPA, CTDPA, and UCPA to the extent permitted by law.

International Transfers

Your information may be processed in the United States and other jurisdictions where our service providers are located. By using our services, you understand your information may be transferred to countries that may have data protection laws different from those in your country.

Links to Other Sites

Our website may contain links to third-party sites. We are not responsible for the content or privacy practices of such sites. We encourage you to read the privacy statements of any other site that collects personal information.

Contact (Data Protection)

Questions, requests, or concerns about this policy can be directed to our Data Protection contact at [email protected] or by calling (689) 698-3876.

Consent & Updates to This Policy

By using this website, you consent to this Privacy Policy. We may update this policy from time to time. If we make material changes, we will post the updated policy and effective date here.

Effective/Last Updated: August 29, 2025