Effective Date: April 7, 2025
Norm Reeves Auto Group and each of our subsidiaries and affiliated entities (collectively, “Dealership” or “we” or “us”) respects your privacy and the information that you have entrusted to us. This Privacy Policy (“Privacy Policy”) applies to both the online and offline collection of personal information by Dealership. This Privacy Policy describes how we collect and manage personal information, which is any information relating to an identified or identifiable natural person. Personal information does not include aggregated or deidentified information. By visiting the Dealership’s physical location(s) or website(s) (hereinafter a “Site” and collectively the “Sites”), or otherwise access any of our other products, services, and content (hereinafter “Services”) of our operations, you acknowledge you have read and understand the terms and conditions of this Privacy Policy. If you do not agree to the terms and conditions of this Privacy Policy, please do not use our Sites or Services.
Your use of our Sites and Services is also governed by our Terms of Service.
PLEASE NOTE THE ARBITRATION PROVISION SET FORTH SET FORTH IN OUR TERMS OF SERVICE, WHICH REQUIRES, EXCEPT WHERE AND TO THE EXTENT PROHIBITED BY LAW, YOU TO ARBITRATE ANY CLAIMS YOU MAY HAVE AGAINST DEALERSHIP ON AN INDIVIDUAL BASIS. ARBITRATION ON AN INDIVIDUAL BASIS MEANS THAT YOU WILL NOT HAVE, AND YOU WAIVE, THE RIGHT FOR A JUDGE OR JURY TO DECIDE YOUR CLAIMS, AND THAT YOU MAY NOT PROCEED IN A CLASS OR CONSOLIDATED CAPACITY.
GENERAL PRIVACY POLICY
Below are the general terms of our Privacy Policy. For additional privacy information applicable to California Residents, please see the section titled “For California Residents.”
CATEGORIES OF PERSONAL DATA COLLECTED, PROCESSED AND SHARED
The table below describes how we use, and share consumers’ personal data. Please note that because the type of personal data collected and shared largely depends on how a consumer has interacted with us, not all of the items listed in the table below will be relevant to you. For example, we may only collect military status when a consumer qualifies for a military rebate.
Categories of personal data processed | Examples Shared with third parties? |
---|---|
Identifiers, such as: name, postal address, email address, IP address, identification numbers (e.g., social security number, driver’s license number, state identification number, military identification number or passport number) | Yes |
Personal information categories contained in customer records, such as: phone number; insurance information; bank account number, credit card number, debit card number, or other financial information, including information relating to consumers’ vehicle financing or lease terms, along with vehicle information; and/or signature(s). | Yes |
Commercial information, such as: vehicle information, vehicle ownership information, vehicle transaction information relating to purchase or lease of vehicles (including finance or lease terms), purchase of parts, service repairs, maintenance or vehicle inspections | Yes |
Biometric information, from consumers who finance/lease vehicles if they are asked to complete a “Thumbprint form.” | Yes |
Internet or other similar network activity information, such as: IP address, browsing history, and search history. | Yes |
Geolocation information, such as: IP address and vehicle location. | Yes |
Sensory data, such as audio information from voicemail messages and/or recorded phone calls (with consumers’ consent), and recorded conversations (audio and video) with consumers in the finance office. | Yes |
Professional or employment-related information, such as: information regarding current occupation; information regarding whether a consumer is or will soon be a college graduate. | Yes |
Inferences drawn from personal information to create a profile, such as: information regarding consumers’ vehicle preferences and needs | Yes |
COOKIES AND WEBSITE TRACKING TECHNOLOGIES
We may use cookies and other similar technologies on our website. Cookies are small text files placed on your device that uniquely identify your device and which a website can transfer to a consumer’s hard drive to keep records of his or her visit to a website. We may use session cookies or persistent cookies. Session cookies only last for the specific duration of your visit and are deleted when you close your browser. Persistent cookies remain on your device’s hard drive until you delete them or they expire. Different cookies are used to perform different functions, which are explained below:
There are several ways to manage cookies. You can control the use of cookies at the browser level, by instructing your browser to accept cookies, disable cookies or notify you when receiving a new cookie. Please note that if you reject cookies, you may still use our website, but your ability to use some features or areas of our website may be limited. The Network Advertising Initiative also offers a means to opt-out of a number of advertising cookies. Please visit www.networkadvertising.org to learn more. Note that opting out does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted-out will no longer deliver ads tailored to your preferences and usage patterns.
HOW WE RESPOND TO DNT SIGNALS AND UNIVERSAL OPT-OUT MECHANISMS
At this time, our Sites support Do Not Track (“DNT”) and Global Privacy Control (“GPC”) browser signals designed to allow internet users to notify businesses of their privacy preferences. These specifications consist of a setting or extension in the user’s browser or mobile device and act as mechanisms that some of our Sites can use to honor your privacy settings. If your browser or device has enabled DNT or GPC, it will override your preferences selected in the cookie banner or privacy settings on our Sites where DNT and GPC signals are supported.
You can learn more about DNT by clicking here. GPC information is available here: click here to view the options. More information about downloading the GPC can be found here: clicking here.
OPTING OUT OF CERTAIN COMMUNICATIONS
We provide you the opportunity to opt-out of marketing communications by clicking the “unsubscribe” link in email communications or by contacting us using the contact information provided below. We will process your request as soon as possible in accordance with applicable law, but please be aware that in some circumstances you may receive a few additional messages until the unsubscribe is processed.
Additionally, we may send you information regarding our Services, such as information about changes to our policies and other informational notices and disclosures required by law. Generally, users cannot opt-out of these communications, but they will be primarily informational in nature, rather than promotional.
YOUR STATE RIGHTS
Depending on applicable state law, you may have the right to object to our collection and use of your personal data at any time, or to require us to review, transmit, change, or delete the data that we have collected and retained about you. We will fulfill your request to exercise any of these rights within the applicable time period prescribed by such laws. You can exercise these rights, express concerns, or obtain additional information about the use of your personal data by contacting us as outlined below.
Submit a Consumer Privacy Request. To exercise any of the above rights, please submit a verifiable consumer privacy request:
Authentication. We cannot respond to your request or provide you with personal data unless we can verify your identity and your authority to make the request and confirm that the personal data relates to you. A verifiable consumer privacy request must:
Our Response. We will respond as required by state law. We do not charge a fee to process or respond to your authenticated consumer privacy request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Appeals. Residents of Texas have the right to appeal a denial of their request by contacting us as described in our notice of denial.
COLLECTION AND USE OF INFORMATION FROM CHILDREN
Our Services are not intended for children. We do not knowingly collect personal information from children under the age of 16, and none of our Services are designed to attract children. In the event that we learn that a person under the age of 16 has provided personal information to us, we will delete such personal information as soon as possible.
THIRD-PARTY LINKS
Our Sites contain links to other sites. The Dealership is not responsible for the privacy practices or content of such other sites. If you have any questions about how these other sites use your information, you should review their policies and contact them directly.
DISCLAIMER REGARDING VIDEO CONTENT
The Services may contain video content, audiovisual content, or content of a like nature (collectively, “Video Content”). Video Content is provided for the purpose of enhancing the user experience within the Services and is, therefore, provided in connection with Dealership providing its automotive dealership-related Services. Dealership is not in the business of renting, selling, or delivering Video Content in a commercial manner. By using the Services, you agree that Dealership is not a “video tape service provider” as defined in the Video Privacy Protection Act, 18 U.S.C.A. § 2710.
CHAT FEATURES AND SESSION REPLAY TECHNOLOGY
We may collect certain categories of personal information from you when you use our interactive chat module. In addition to information you enter into the chat box or live chat feature, the categories of personal information collected may include: name, phone number, email, mailing address, and other identifiers you may provide. Dealership may also store any transcripts from such conversations and link those transcripts with your personal information. We may also collect information from you to perform data analytics and thereby enhance your experience and help improve the functionality of our tools. Such information includes, but is not limited to, geolocation, IP address, pixel tags, browsing history, viewing behavior, clicks, online activity, and other analytics. By interacting with the chat module, you understand and agree that we may use this data to communicate with you about our products and services. You also consent to our collection and analysis of all personal information provided as part of the chat module and understand that we utilize a vendor to process, analyze, and store the content of the chat on our behalf. By using the chat module, you are consenting to us disclosing and sharing with the chat module vendor any personal information you provide.
We may use technology to monitor how you interact with our Services, called Session Replay Technology. This may include without limitation which links you click on, information that you type into our online forms, and about your device or browser. Further, we may utilize session replay spyware to monitor and record mouse clicks and movements, keystrokes, and pages and content viewed by you. Please discontinue use of the Services if you do not consent to our collection of such information.
SECURITY
We implement reasonable security measures to ensure the security of your personal information. Please understand, however, that no data transmissions over the Internet can be guaranteed to be 100% secure. Consequently, we cannot ensure or warrant the security of any information you transmit to us and you understand that any information that you transfer to us is done at your own risk. If we learn of a security system breach, we may attempt to notify you electronically so that you can take appropriate protective steps. By using the Services or providing personal information to us, you agree that we can communicate with you electronically regarding security, privacy and administrative issues relating to your use of the Services. We may post a notice via our website if a security breach occurs. We may also send an email to you at the email address you have provided to us in these circumstances. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.
INTERNATIONAL DATA TRANSFERS
Dealership is based in the U.S. If you choose to provide us with information, please understand that your personal information may be transferred to the U.S. and that we may transfer that information to our affiliates and subsidiaries or to other third parties, across borders, and from your country or jurisdiction to other countries or jurisdictions around the world. If you are visiting from the EU or other regions with laws governing data collection and use that may differ from U.S. law, please note that you are transferring your personal information to the U.S. and other jurisdictions which may not have the same data protection laws as the EU. We put in place appropriate operational, procedural and technical measures in order to ensure the protection of your personal information. You acknowledge you understand that by providing your personal information: (i) your personal information will be used for the uses identified above in accordance with this Policy; and (ii) your personal information may be transferred to the U.S. and other jurisdictions as indicated above, in accordance with applicable law.
ASSIGNMENT, BUSINESS TRANSFERS, AND RELATED ACTIVITIES
In the event that all or part of our assets are sold or acquired by another party, or in the event of a merger, you grant us the right to assign the personal information collected via the Services.
CHANGES TO THIS PRIVACY POLICY
We reserve the right to change this Policy from time to time. When we do, we will also revise the “Effective Date” at the top of this Policy. If we make material changes to the Policy, we will notify you by placing a prominent notice on our website and/or by sending you an email at the email address we have on file for you. We encourage you to periodically review this Policy to keep up to date on how we are handling your personal information.
Norm Reeves Auto Group
Attention: Compliance Manager
Address: 8235 Douglas Avenue, Suite 1200, Dallas, Texas 75225
Toll-free phone number: 833-529-4800
Email address: [email protected]
NOTICE AT COLLECTION FOR CALIFORNIA RESIDENTS
The purpose of this Notice at Collection is to provide California residents with the categories of personal information that our Dealerships collect about them and the purposes for which the personal information is used. We retain the below information for as long as required to provide you with the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. If you are an employee of a Dealership, please refer to your specific Employee Privacy Notice for an explanation of how we collect, use, and retain employee personal information. More detailed disclosures for California residents are located in the section “PRIVACY NOTICE FOR CALIFORNIA RESIDENTS.” We may collect the following categories of personal information from you: Identifiers, Personal information categories contained in customer records, Protected classification characteristics, Commercial information, Biometric information, Internet or other similar network activity information, Geolocation information, Sensory data, Professional or employment-related information, Inferences drawn from personal information to create a profile, and Sensitive Personal Information. We use the categories of personal information listed above for one or more of the following “business purposes”: to provide our sites and services, advertising and marketing, contextual and behavioral targeting, to understand website interactions, to provide customer service, to defend against claims and litigation, fraud prevention, processing transactions, and providing financing.
PRIVACY NOTICE FOR CALIFORNIA RESIDENTS
Below is a table regarding the personal information we have collected about California consumers (excluding job applicants and employees) during the past 12 months. We retain the below information for as long as required to provide you with the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. If you are an employee of Dealership, please refer to the specific Employee Privacy Notice for an explanation of how we collect, use, and retain employee personal information.
Category of Personal Information | Sharing/Sale of Information | Disclosures to Third Parties for a Business Purpose |
---|---|---|
Identifiers, such as:
Name, postal address, email address, IP address, identification numbers (e.g., social security number, driver’s license number, state identification number, military identification number or passport number) |
Advertising Networks & Marketing Agencies, Data Brokers & Analytics Providers, Software Vendors, Vehicle Manufacturers, F&I Product Providers & Administrators, Financial Institutions, Social Media Networks, Professional Service Companies, state or federal agencies, when required by law. | Auctions & Wholesalers, Auditors & Consultants, Credit Reporting Agencies (CRAs), Government Entities, Insurance Brokers (non-health related), Records Management Companies, Digital Retailers & eCommerce Platforms, Repair & Sublet Facilities, Attorneys & Law Firms, Uniform & Apparel Companies, Website and Hosting Providers, Claims & Benefits Administrators, Chat Modules |
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as:
Phone number; insurance information; bank account number, credit card number, debit card number, or other financial information, including information relating to consumers’ vehicle financing or lease terms, along with vehicle information; and/or signature(s). |
Advertising Networks & Marketing Agencies, Data Brokers & Analytics Providers, Software Vendors, Vehicle Manufacturers, F&I Product Providers & Administrators, Financial Institutions, Social Media Networks, Professional Service Companies, state or federal agencies, when required by law. | Auctions & Wholesalers, Auditors & Consultants, Credit Reporting Agencies (CRAs), Government Entities, Insurance Brokers (non-health related), Records Management Companies, Digital Retailers & eCommerce Platforms, Repair & Sublet Facilities, Attorneys & Law Firms, Uniform & Apparel Companies, Website and Hosting Providers, Claims & Benefits Administrators, Chat Modules |
Protected classification characteristics, such as:
A photocopy/scan of government issued identification reveals personal information. For example:
Completion of a Translated Contract Acknowledgement or signing of translated documents reveals a consumer’s primary language |
Data Brokers & Analytics Providers, Software Vendors, Vehicle Manufacturers, F&I Product Providers & Administrators, Financial Institutions, Advertising Networks & Marketing Agencies, Social Media Networks, Professional Service Companies, state or federal agencies, when required by law | Credit Reporting Agencies (CRAs), Government Entities, Insurance Brokers (non-health related), Records Management Companies, Attorneys & Law Firms, Digital Retailers & eCommerce Platforms, Website and Hosting Providers, Auditors & Consultants, Claims & Benefits Administrators |
Commercial information, such as:
Vehicle information, vehicle ownership information, vehicle transaction information relating to purchase or lease of vehicles (including finance or lease terms), purchase of parts, service repairs, maintenance or vehicle inspections |
Data Brokers & Analytics Providers, Software Vendors, Vehicle Manufacturers, F&I Product Providers & Administrators, Financial Institutions, Advertising Networks & Marketing Agencies, Social Media Networks, Professional Service Companies, State or federal agencies, when required by law | Auctions & Wholesalers, Government Entities, Records Management Companies, Digital Retailers & eCommerce Platforms, Repair & Sublet Facilities, Attorneys & Law Firms, Website and Hosting Providers, Auditors & Consultants, Chat Modules, Insurance Brokers (non-health related) |
Customer Records, such as digital and electronic signatures, telephone numbers, insurance policy numbers, credit and debit card numbers, financial and credit-related information, physical characteristics and descriptions (e.g., government identification), and bank account numbers. | Data Brokers & Analytics Providers, Software Vendors, Vehicle Manufacturers, F&I Product Providers & Administrators, Financial Institutions, Advertising Networks & Marketing Agencies, Social Media Networks, Professional Service Companies, state or federal agencies, when required by law | Auctions & Wholesalers, Auditors & Consultants, Credit Reporting Agencies (CRAs), Government Entities, Insurance Brokers (non-health related), Records Management Companies, Digital Retailers & eCommerce Platforms, Repair & Sublet Facilities, Attorneys & Law Firms, Website and Hosting Providers, Claims & Benefits Administrators, Chat Modules |
Biometric information Consumers who finance/lease vehicles may be asked to complete a “Thumbprint form” |
N/A | N/A |
Internet or other similar network activity information, such as:
IP address, browsing history, and search history |
Advertising Networks & Marketing Agencies, Data Brokers & Analytics Providers, Software Vendors, Vehicle Manufacturers, F&I Product Providers & Administrators, Financial Institutions, Social Media Networks, Professional Service Companies | Insurance Brokers (non-health related), Digital Retailers & eCommerce Platforms, Website and Hosting Providers, Chat Modules |
Geolocation information, such as:
IP address and vehicle location |
Vehicle Manufacturers, F&I Product Providers & Administrators, Financial Institutions, Advertising Networks & Marketing Agencies, Data Brokers & Analytics Providers, Social Media Networks | Software Vendors, Digital Retailers & eCommerce Platforms, Chat Modules |
Sensory, Electronic, and Visual data, such as:
Photographs, audio information from voicemail messages and/or recorded phone calls (with consumers’ consent), voicemails, and online & electronic communications, such as those made via a live or automated online chat module; and recorded conversations (audio and video) with consumers in the finance office. |
Software Vendors, Insurance Brokers (non-health related), Attorneys & Law Firms, Digital Retailers & eCommerce Platforms, Website and Hosting Providers | Software Vendors, Insurance Brokers (non-health related), Attorneys & Law Firms, Digital Retailers & eCommerce Platforms, Website and Hosting Providers |
Professional or employment-related information, such as:
Information regarding current occupation, job title, company or business name, and employment history information. |
Data Brokers & Analytics Providers, Software Vendors, Financial Institutions, Vehicle Manufacturers, Advertising Networks & Marketing Agencies, Social Media Networks, Professional Service Companies, state or federal agencies, when required by law | Credit Reporting Agencies (CRAs), Government Entities, Insurance Brokers (non-health related), Records Management Companies, Attorneys & Law Firms, Uniform & Apparel Companies, Digital Retailers & eCommerce Platforms, Website and Hosting Providers, Auditors & Consultants, Claims & Benefits Administrators |
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)), such as:
Information regarding whether a consumer is or will soon be a college graduate |
Vehicle Manufacturers, F&I Product Providers & Administrators, Financial Institutions | Social Media Networks, Software Vendors, Records Management Companies, Attorneys & Law Firms, Digital Retailers & eCommerce Platforms, Website and Hosting Providers |
Inferences drawn from personal information to create a profile, such as:
Information regarding consumers’ vehicle preferences, tendencies, and behaviors |
Advertising Networks & Marketing Agencies, Data Brokers & Analytics Providers, Software Vendors, Vehicle Manufacturers, F&I Product Providers & Administrators, Financial Institutions, Social Media Networks, Professional Service Companies | Digital Retailers & eCommerce Platforms, Website and Hosting Providers |
Sensitive Personal information, such as:
Social Security number, driver’s license number, state identification number, passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation information; contents of mail, email, and text messages unless the business is the intended recipient of the communication; genetic data; biometric data for the purposes of uniquely identifying a consumer. |
To state or federal agencies, when required by law; Some of the listed personal information to banks to confirm availability of funds | To service providers for administrative and operational assistance |
JOB APPLICANT INFORMATION
In some instances, you may be provided with a separate privacy notice when you apply for a job with us. In all other instances, the below disclosure describes how we handle your personal information when you apply for a job with us.
When you apply for a job with us, we may collect identifiers, professional or employment-related information, and education information from you via our website forms and otherwise, including:
We only use your personal Information to assess your skills in relation to the applicable job requirements. We may also use your personal information to contact you during the hiring process.
In certain circumstances, you may submit your application for employment through a third-party service that displays our job posting. We do not control the privacy practices of these third-party services. Please review their privacy policies carefully prior to submitting your application materials.
Your California Privacy Rights
Residents of California have the right to object to our collection and use of their personal information at any time, or to require us to review, transmit, change, or delete your information that we have collected and retained about them. We will fulfill your request to exercise any of these rights within the applicable time period subscribed by such laws. You can exercise these rights, express concerns, or obtain additional information about the use of your personal information by contacting us as outlined below.
Specifically, residents of California have certain rights with respect to their personal information, described below. Below this list of rights, we describe how California residents can exercise their rights including appealing a denial of a rights request.
Submit a Consumer Privacy Request. To exercise any of the above rights, please submit a verifiable consumer privacy request to Dealership:
Verification. We cannot respond to your request or provide you with personal information unless we can verify your identity and your authority to make the request and confirm that the personal information relates to you. A verifiable consumer privacy request must:
We may ask for you to confirm data points we already have about you. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Authorized Agent. As a resident of California, you may, under certain circumstances, authorize another individual or a business, called an Authorized Agent, to make requests on your behalf. Such Authorized Agent must be registered with the California Secretary of State. If you wish to have an Authorized Agent make a verifiable consumer request on your behalf, they will need to provide us with sufficient written proof that you have designated them as your Authorized Agent, and we will still require you to provide sufficient information to allow us to reasonably verify that you are the person about whom we collected personal information.
Dealership’s Response. We endeavor to respond to a verifiable consumer request within 45 days of receipt. If we require more time, we will notify you in writing of the reason and extension period. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding receipt of the verifiable consumer request. If we cannot comply with part or all of your request, we will explain the reasons in our response.
We do not charge a fee to process or respond to your verifiable consumer privacy request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Appeals. California residents have the right to appeal a denial of their rights request by contacting us as described in our notice of denial.
California “Shine the Light” Law
California Civil Code Section 1798.83 permits visitors to the Services who are California residents to request certain information, once a year, regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send us an email using the contact information provided above and put “Shine the Light Request” in the subject line of your email.
TEXT MESSAGING TERMS AND CONDITIONS
By subscribing to the Norm Reeves text messaging service (the “Service”), you understand and agree that:
ADDITIONAL FORMATS, ACCESSIBILITY, AND LANGUAGES
Click here to print a PDF version of this Privacy Policy.
Our website includes accessibility tools. For information about these tools, click on the accessibility symbol located on our website.
In addition to English, this Privacy Policy is available in the following languages: Spanish