State Privacy Notice

Purpose

This State Privacy Notice (the “ State Privacy Notice”) supplements the information contained in the Privacy Notice (“Notice”) located here: Privacy Notice and is incorporated into the Policy for US residents. This State Privacy Notice applies to United States residents and describes how we collect, use, share, and/or disclose your Personal Information, and further describes how you can exercise your rights under applicable U.S. state privacy laws.

When we use the term “Personal Information” in this State Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Not included in the definition of Personal Information is (i) information from federal, state, or government records that is lawfully made available to the general public; (ii) information that the Company reasonably believes has been lawfully made available to the general public by the widely distributed media; and (iii) information that has been de-identified. Where we de-identify information, we will take reasonable steps to ensure the information cannot be re-associated.

Please also note that information which may be Personal Information but which is governed under United States federal laws due to its contents or the circumstances of its disclosure (e.g., HIPAA, Fair Credit Reporting Act, Gramm-Leach-Bliley Act) is not governed by this State Privacy Notice but under the laws of the applicable statute and regulation. This paragraph does not imply we collect or process information covered under such laws, unless otherwise described herein or in the Policy.

Categories of Personal Information We Process

We process the categories of Personal Information listed below, and have processed Personal Information in these categories in the last 12 months. We will not process additional categories of Personal Information or process the Personal Information for materially different, unrelated, or incompatible purposes without providing you additional notice or obtaining your consent.

Purposes for Processing Personal Information; Categories of Personal Information Disclosed; Categories of Third Parties with whom Personal Information is Shared

We collect, use, and disclose Personal Information in the manners described, and to the third parties described, in the sections of the Policy entitled “Information Collection”, “Our Use of Your Information”, and “Disclosure of Your Information.” We only use Sensitive Personal Information for processing warranties and pursuant to your specific requests. Further, we may be able to view your Sensitive Personal Information if you submit a financing application to our third-party financing partner; please review the section of the Policy entitled “Links and Third Parties” for more information.

We will not process your Personal Information for purposes beyond those described in the Policy and herein without obtaining your consent.

We use Personal Information for targeted advertising. If you desire to opt out of targeted advertising, please review your options described in the “Right to Opt-Out” section of this State Privacy Notice.

Selling Personal Information; Certain Types of “Sharing” Personal Information

We do not sell your Personal Information. Under certain state laws “sharing” of Personal Information includes disclosing, disseminating, or transferring Personal Information to a third party for targeted advertising. Under this definition, we share your data for cross-contextual behavioral advertising. If you desire to opt out of this type of sharing, please review your options described in the “Right to Opt-Out” section of this State Privacy Notice.

Retention Policy

Unless we are permitted or required to retain the data for a longer period under applicable law, we retain Personal Information: (i) as long as necessary to achieve the purpose for which the Personal Information was collected, or (ii) if the Personal Information is used for marketing or targeted advertising purposes described in the Policy or in this State Privacy Notice (including Identifiers described in the chart above), until you opt-out of such communications.

Your Privacy Rights and Choices

You may have certain rights regarding your Personal Information (subject to certain limitations at applicable state law). The following section describes rights that may be available to you and explains how to exercise those rights.

Right to Know and Access:
You have the right to request that we disclose certain information about our collection and use of Personal Information over the last twelve (12) months. Once we receive and confirm your verifiable consumer request (in which we may have to gather further identifiable information in order to confirm your identity) we will disclose to you any or all of the following at your request:

• Whether we have collected your Personal Information;
• The categories of Personal Information we collected about you;
• The categories of sources for the Personal Information we collected about you;
• Our business or commercial purpose for collecting, selling, or sharing (as applicable) that Personal Information;
• The categories of third parties to whom we disclose that Personal Information;
• The categories of Personal Information we sold or shared, and for each category, the categories of third parties to whom that category of Personal Information was sold or shared;
• The categories of Personal Information we disclosed for a business purpose, and for each category, the categories of service providers or contractors to whom that category of Personal Information was disclosed;
• Inferences about you, if any, derived from the Personal Information we collected about you; and
• The specific pieces of Personal Information we collected about you.

Right to Portability:
You have the right to portability of your Personal Information. The right to portability means that upon receiving a verifiable request, we will deliver the accompanying information to you in a portable, easily readable, and to the extent technically feasible, readily usable electronic format that allows you to transmit data to a third party.

Right to Deletion:
You have the right to request that we delete any Personal Information about you that we collect and retain, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, in which we may have to gather further identifiable information in order to confirm your identity, we will delete (and in turn direct our service providers and contractors to delete, if applicable) your Personal Information from our records, unless an exception applies.

Right to Correction:
You have the right to request that we correct any Personal Information about you that we collect and retain, subject to feasibility of honoring the request. Once we receive and confirm your verifiable consumer request, in which we may have to gather further identifiable information in order to confirm your identity, we will make a reasonable effort to correct (and in turn direct our service providers and contractors to correct, if applicable) your Personal Information in our records.

Right to Opt-Out:
You have the right to opt out of the processing of your Personal Information for purposes of targeted advertising (also referred to as cross-context behavioral advertising). You also have the right to opt-out of the collection or use of Sensitive Personal Information that is not related to maintaining a warranty for you.

Right to Withdraw Consent:
To the extent that your prior consent is required to use any Personal Information, you have the right to withdraw your consent at any time.

Submit a Request

Submission

To exercise your rights as described above, please submit a verifiable consumer request by completing the online CCPA Request Form or by emailing us at [email protected].

You do not need to create an account with us to submit a request. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account. We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make it. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you, so please:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Depending on your state of residence, you may be able to designate an authorized agent to submit certain rights requests on your behalf. You may still be required to verify your identity with us even if an authorized agent is submitting a request on your behalf.

• If you are a resident of California, an authorized agent can submit a request regarding your rights to know and access, delete, correct, opt-out, and limit the use of Sensitive Personal Information (if it is used for any purpose other than providing goods and services). You must provide written authorization to designate an agent on your behalf unless you have granted the agent with authority as power of attorney.
• If you are a resident of Florida, an authorized agent can submit a request regarding your rights to know and access, delete, correct, and opt-out. You must provide written authorization to designate an agent on your behalf unless you have granted the agent with authority as power of attorney.
• If you are a resident of Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, or Texas, an authorized agent can submit a request regarding your right to opt-out only. You should provide written authorization to designate an agent on your behalf, except in the case of certain technology indicating your intent to opt-out.

Confirmation; Response Time

We will confirm receipt of your request within ten (10) business days. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt.

The period of response may be extended by thirty (30) days if more time is required. In that event, we will inform you of the reason and extension period in writing.

Appealing a Denied Request

If we decline to take action regarding your request, you may appeal our decision by completing the online form at the bottom of this State Privacy Notice or by emailing us at [email protected].

We endeavor to substantively respond to an appeal within forty-five (45) days of its receipt. If we decline to take further action regarding your appeal, you will receive notice with instructions on how to submit a complaint to the appropriate state authority (e.g., the state Attorney General), if applicable.

Fees for Requests

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. In any case, you may submit a request under your right to know and access and your right to portability at least twice within a 12 month period for free, or that number of free responses required by your state of residence.

No Discrimination

We will not discriminate against you for exercising your rights described in this notice in any way, including by:

• Denying goods or services to you;
• Charging different prices or rates for goods or services, including through the use of discounts, benefits, or other penalties;
• Providing a different level or quality of goods or services; or
• Suggesting a different price or quality of goods or services will apply if rights are exercised.

Further, we do not offer any financial incentives or price or service differences in an attempt to influence a resident’s decision whether or not to exercise a right afforded to the consumer under the applicable state law.

Not Directed to Children; Parental and Guardian Rights

Our Website is not directed at children. We do not knowingly collect Personal Information from anyone under the age of 18. If you are a parent or guardian and believe your child (or a consumer of whom you are the guardian) has provided us with Personal Information without your consent, please contact us by using the information in the “Contacting Us” section, below, and we will take steps to remove such Personal Information from our systems.

Do Not Track

Some browsers include a “Do Not Track” (“DNT”) setting that can send a signal to the online services you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our Websites do not respond to DNT signals. Instead, you control data collection and use with cookie controls and the opt-out mechanisms described in this State Privacy Notice.

Opt-Out Preference Signals

You have the right to opt-out of the processing of your Personal Information for purposes of targeted advertising through opt-out preference signals. When you visit our website with an opt-out preference signal enabled, we will treat our initial receipt of the signal as a valid request to opt-out of targeted advertising.

For information on how to opt-out of targeted advertising by using an opt-out-preference signal, visit the Global Privacy Control’s website along with the Global Privacy Control’s information for website users.

Security of Your Personal information

Please review the section of the Policy entitled “Security of Your Personal Information.”

Updates to this State Privacy Notice

We may update or change this State Privacy Notice. The effective date at the top of this page states when this State Privacy Notice was last revised. Any change to this State Privacy Notice will become effective when we post the revised State Privacy Notice on our Website as reflected by the “last modified and effective” date. Your use of our Website means you accept our State Privacy Notice.

If any change may materially and negatively affect the privacy of your Personal Information, we will use reasonable efforts to notify you in advance and give you a reasonable time to object to any changes.