Effective Date: January 1, 2020
Last Updated: January 1, 2020
Toyota Motor Sales, U.S.A., Inc. and Toyota Motor North America, Inc. and their wholly-owned subsidiaries that share common branding with them, together with Toyota Motor Corporation (collectively, "Toyota," "us," or "our") are committed to maintaining your confidence and trust as it relates to the privacy of your information. This privacy policy is for our customers, users and website visitors who are California residents (this "California Privacy Policy”) and supplements the information contained in Toyota’s Online Privacy Statement located at https://www.buyatoyota.com/socal/legal/.
Table of Contents:
I. OVERVIEW OF THIS CALIFORNIA PRIVACY POLICY
II. HOW WE COLLECT, USE, AND SHARE PERSONAL INFORMATION
III. CCPA RIGHTS FOR CALIFORNIA CONSUMERS
IV. CONTACT US; EXERCISE YOUR RIGHT
I. OVERVIEW OF THIS CALIFORNIA PRIVACY POLICY
What is this California Privacy Policy? The California Consumer Privacy Act of 2018 ("CCPA") and other privacy laws in California give California consumers certain privacy rights related to their personal information. These rights are in addition to any privacy rights set forth in the Toyota Privacy Statement. This California Privacy Policy describes the rights that California consumers may have under the CCPA.
To which Toyota entities does this California Privacy Policy apply? This California Privacy Policy only applies to those websites operated by Toyota. Note this California Privacy Policy does not apply to any Toyota, Lexus or Scion dealers, local Toyota dealer associations, private distributors, Toyota Financial Services, Lexus Financial Services, or Toyota Insurance Management Solutions. For information about your California privacy rights for any of these entities, please contact these entities directly.
What is “personal information”? For the purposes of this California Privacy Policy, “personal information” is defined as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or California household. Personal information does not include:
What are “California consumers”? A “California consumer” is a natural person who resides in California. For the purposes of this California Privacy Policy, a California consumer does not include persons to the extent they are (i) acting as an employee, owner, director, officer or contractor of a company, partnership, sole proprietorship, nonprofit or government agency that is doing business with Toyota or (ii) acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or contractor of Toyota.
II. HOW WE COLLECT, USE, AND SHARE PERSONAL INFORMATION
Toyota may collect personal information from you in different ways and for different purposes. It is important to note that the types of personal information we collect will depend on your interaction with us, including the types of products or services you use.
This section contains the Categories of Personal Information that we may have collected in the last 12 months prior to the effective date of this California Privacy Policy or may collect and includes the following information for each category:
Description: Describes the category of personal information collected
Examples: Examples of personal information collected per category
Sources: Categories of sources from which personal information is collected
Business Purposes: The business and/or commercial purpose(s) for which personal information is collected or used
Third Parties: The categories of third parties with whom personal information is shared or sold for a business purpose.
Contact Information:
Description:
Includes attributes that identify a natural person
Examples:
Consumer name, address, phone number, email, owner account information, online identifier, user ID, and site visitor details (names, addresses, etc.) and demographic information (such as zip code, age). May also include personal identifiers such as social media IDs, and vehicle ownership
Sources:
Business Purposes:
Third Parties:
Industry research (Toyota shares data with auto-industry vendors)
Consumer Product and Service Data:
Description:
Includes consumer vehicle ownership records associated with the consumers current and/or prior owned vehicles
Examples:
Vehicle ownership transactions, Retail Delivery Report (RDR) records, recall records, warranty records, repair order records, part order records, Toyota Insurance Management Solutions insurance product records, and incentive offers accepted by a consumer
Sources:
Business Purposes:
Dealer service support (Identify and provide services to the consumer, improve timing during dealer visits, and enhance overall dealership experience)
Third Parties:
Marketing vendors (to collect or use data on behalf of Toyota to conduct marketing activities related to products or services).
Dealerships or private distributors (to provide services to vehicle owners)
Consumer Interaction Data:
Description:
Includes a consumer’s interaction with Toyota via telephone, email, chat, text and/or postal mail.
Examples:
Call center records and screen, audio and/or video recordings
Sources:
Business Purposes:
Third Parties:
Augmentation vendors (to enrich Toyota data for better understanding of consumer preferences)
Consumer Online Activity:
Description:
Includes a consumer’s online interactions with Toyota
Examples:
Online accounts, browsing history, cookies, IP addresses, social media information
Sources:
Business Purposes:
Third Parties:
Dealer support vendors (to use data collected by Toyota to provide services to dealers)
Vehicle Originated Data:
Description:
Includes data collected as part of vehicle remote services or driving behavior data
Examples:
Use of connected services and vehicle application suite services. Driving behavior such as acceleration and speed, steering, and braking functionality, and travel direction.
Sources:
Business Purposes:
Third Parties:
Marketing:
Description:
Includes pre and post-sale marketing interactions with a consumer
Examples:
Information collected at events, vehicle purchase negotiation information, vehicle service marketing information, direct marketing information, and retention marketing information
Sources:
Business Purposes:
Third Parties:
Media agencies (to execute media programs, advertisements, attributions; determine effectiveness of programs; and track consumer activities via internal and third-party tagging/cookies)
Research Data:
Description:
Includes personal information collected by Toyota related to consumer and product research
Examples:
Survey information, syndicated product and/or service studies, predictive behavioral studies, focus group information
Sources:
Business Purposes:
Third Parties:
Service vendors (to support Toyota in providing services such as survey, service reminders, emission testing, safety/recall programs, logistics, shipping)
Legal Activity:
Description:
Includes personal information collected related to legal claims
Examples:
Dispute, claim, reimbursement, litigation, and recalls
Sources:
Business Purposes:
Third Parties:
None applicable
In addition to the purposes and categories of third parties identified above, we may also share your personal information with the following third parties and for the following purposes:
SALE OF PERSONAL INFORMATION TO THIRD PARTIES
We may have sold the following categories of personal information about you to third parties in the prior twelve (12) months:
However, we do not sell the personal information of minors under the age of 16 without affirmative authorization. For more information about opting out of this sale, please see Section III.C (Right to Opt-Out of Sale of Your Personal Information) below.
III. CCPA RIGHTS FOR CALIFORNIA CONSUMERS
The CCPA provides California consumers with certain rights regarding their personal information. This Section III explains those rights. If you are a California consumer and would like to exercise any of those rights, please see Section III.E (How to Submit a Request) below for more information on how to submit a request.
A. RIGHT TO KNOW ABOUT AND ACCESS YOUR PERSONAL INFORMATION
If you are a California consumer, you may have the right to request that Toyota provide you with information regarding what personal information about you we have collected, used, disclosed or sold in the preceding twelve (12) months. Once we receive your request and verify your identity, we will disclose to you the following:
B. RIGHT TO DELETE YOUR PERSONAL INFORMATION
If you are a California consumer, you may have the right to request that Toyota delete certain of your personal information that we have collected from you. However, this right to deletion does not apply to any of your personal information that is subject to an exception under the CCPA (as described below). Once we receive your request and verify your identity, we will delete (and direct our service providers to delete) your personal information in our records that is not subject to any of the CCPA exceptions. Specifically, we may deny your deletion request if your personal information is required for any of the following reasons, which we will identify in our response to you if we deny your request:
C. RIGHT TO OPT-OUT OF THE SALE OF YOUR PERSONAL INFORMATION
If you are a California consumer, you may have the right to request that Toyota stop selling certain or all of your personal information. Once we receive your request and verify your identity, we will process your request as soon as feasibly possible and will also provide notification of your request to any third parties to whom we sold your personal information in the ninety (90) days prior to your request. You may also use an authorized agent to submit a request to opt-out on your behalf, as long as you provide the authorized agent with written permission to do so and the agent provides such proof to us when they submit your request. If you opt-out and subsequently enter into any transactions where a sale of your personal information is required as a condition of completing the transaction, we will provide you with instructions on how you may opt back in. In addition, your opt-out will not affect any situations where you direct us to transfer your personal information to a third party.
D. RIGHT TO NON-DISCRIMINATION
Toyota will not discriminate against any California consumer who exercises any of the rights described above. Specifically, we will not deny you goods or services; charge you different prices or rates, including through granting discounts or other benefits, or imposing penalties; provide you with a different level of service or quality of goods or services; or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
E. HOW TO SUBMIT A REQUEST
If you are a California consumer and would like to exercise any of the CCPA rights identified above, please contact us using one of the methods provided below:
F. SUBMITTING A REQUEST THROUGH YOUR AUTHORIZED AGENT
If you are a California consumer, you may have the option to designate an authorized agent to submit a request on your behalf, so long the authorized agent has your written permission to do so and you have taken steps to verify your identity directly with us. If you would like to designate an agent, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your consumer request to us. We may need to contact you directly to verify the request.
G. HOW WE VERIFY YOUR REQUEST
We cannot fulfill your request or provide you with your personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us.
To verify your identity, we will ask that you provide the following personal information when you submit your request:
You may need to provide additional information as part of your responses to our identity verification questions. We will only use this information to confirm your identity which may include the use of a third-party identity verification service. In the event we use a third-party identity verification service, our third-party identification verification tool will ask you certain identity verification questions and match those answers with what it has in its database. Depending on your type of request or the information requested by you, we may require additional information in order to verify your identity and fulfill your request.
If we cannot successfully verify your identity, we will inform you of that fact.
We will respond to your request within forty-five (45) days. However, in certain circumstances, we may require additional time to process your request, as permitted by the CCPA or other applicable law. We will advise you within forty-five (45) days after receiving your request if such an extension is necessary and why it is needed. Any disclosures we provide will only cover the 12-month period preceding our receipt of your verifiable consumer request.
If we cannot fulfill your request, our response to you will also explain the reason why we cannot fulfill your request.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
You may only make a verifiable consumer request to know about or access your personal information twice within a 12-month period.
IV. CONTACT US; EXERCISE YOUR RIGHTS
If you have any questions or concerns regarding this California Privacy Policy or our privacy practices, please contact us using one of the methods provided below: