Privacy4Cars® –  Consumer Privacy Notice

This privacy notice is for our individual/consumer users. If you are looking for our privacy notice that applies to business users, customers, & prospective customers, click here.

Last updated: July 07, 2026

Privacy4Cars’ mission is to “Drive Privacy” in the automotive sector. We are a business-to-business (B2B) company that specializes in vehicle privacy solutions for automotive businesses, such as dealerships, fleets, auto finance companies, and more.

As part of our company’s ethos, we have always and will always proudly offer goodwill services free of charge to individual consumers, enabling them to have better privacy throughout the lifetime of a vehicle: from before purchase through final disposal. Our role enabling privacy-forward automotive businesses, while also providing goodwill consumer services, gives us unique and well-rounded insights into the state of vehicle privacy.

At Privacy4Cars, we believe that the consumers who visit our free, consumer-facing websites — such as Vehicle Privacy Report™ (vehicleprivacyreport.com) should be able to browse and use these resources without being tracked. Given our mission to “Drive Privacy” in the automotive sector, it would be contradictory to subject consumers to the very surveillance practices we help them fight against. For this reason, our consumer-facing websites (privacy4cars.com and vehicleprivacyreport.com) do not use cookies or similar tracking technologies to monitor, profile, or advertise to visitors. We want every consumer, regardless of where they are located, to feel confident that when they come to us for help protecting their privacy, we practice what we preach. For our business-facing services and website (i.e. privacy4cars.biz), however, we do use cookies and related technologies to support and improve our marketing efforts, as is standard practice for a for-profit B2B company. We are transparent about this distinction because we believe privacy policies should be clear, honest, and reflective of the different contexts in which data is collected.

We wrote this notice in plain language and kept it short with approximately 1635 words (~ 10 minutes to read). For regulators and legal teams, a detailed table of our privacy notice is available here. 

Overview:

Below is an easy to read overview of our consumer privacy practices. Detailed information is found at the end of this document. 

1. What This Notice Covers

This notice explains how we collect, use, and share your personal information when you use our free consumer tools and websites.

Our consumer services include our websites, mobile apps (limited to existing consumer users who retain legacy access), Vehicle Privacy Reports, resources for survivors of abuse, whitepapers, donation pages, and related communications.

This notice does not cover our business services (including Privacy4Cars.biz). Those have a separate privacy notice for business users, found here.

2. Our Role

We are the ones who decide how and why your data is used when you use our consumer services. That makes us the “controller” of your data.

If you ask us to help with a privacy request (like asking us to help you request a car company to delete your data), we act on your behalf. The company receiving the request is responsible for how they handle it.

3. Information We May Collect

Information You Give Us

Depending on how you use our services, you may share the following with us:

  • Your name, email, phone number, or address
  • Your vehicle identification number (VIN), make, model, and year
  • Details needed to support a privacy request 
  • Sensitive information you choose to share, such as if you are a survivor of abuse (we treat this with extra care)
  • App account information and related usage data (for legacy consumer users, where available) 
  • Donation info like your name and amount (we do not store your full credit card number)
  • Messages you send us and any files you attach
  • Information you voluntarily provide through forms, surveys, questionnaires, or similar interactions. 

Information We Collect Automatically

When you visit our websites, we automatically collect some basic technical information:

  • Your IP address and general location (city or region level)
  • What device, browser, and operating system you use
  • Which pages you visit and when
  • Crash reports to help us fix problems

Information From Others

Sometimes we get limited information from third parties, like car manufacturers or dealerships responding to your privacy request, or payment companies helping process a donation.

4. How We Use Your Information

“Personal data” means information that can identify you or be linked to you.

We use your personal data to:

  • Submit and track privacy requests on your behalf when you ask us to
  • Communicate with you and answer your questions
  • Send you reports, whitepapers, or newsletters you asked for
  • Improve our services using data that can no longer identify you
  • Keep our systems safe and prevent frauds, when they submit 
  • Follow the law 
  • Conduct surveys, collect feedback, and better understand consumer experiences related to vehicle privacy, security, and safety. 

5. How We Share Your Information

We may share your information with:

  • Service providers who help us run our business (like payment processors and hosting companies)
  • When acting as your Authorized Agent to assist you with privacy requests: Manufacturers, lenders, and similar companies when needed to complete your privacy request (usually just the VIN, not your name or contact info)
  • Law enforcement or courts if required by law
  • Others as needed to prevent fraud or protect safety

6. Legal Basis and International Transfers

We are a U.S. company with operations in the U.S., India, and the EU. We process your data based on the legal rules that apply where you live. This includes things like providing the service you asked for, protecting our systems, following the law, and getting your permission when needed.

Your data may be transferred to and stored in countries outside of where you live, including the United States, India, and the EU. We use appropriate safeguards when transferring data across borders.

7. How Long We Keep Your Information

We only keep your personal information for as long as we need it. For privacy requests and deletion records, we generally keep information for up to seven years after our last interaction with you, unless the law says we need to keep it longer. Donation records are kept as long as tax laws require. Data that can no longer identify you may be kept longer.

8. How We Protect Your Information

We use strong security measures to protect your data, including encryption, access controls, monitoring, and security training. No system is perfectly secure, but we work hard to keep your information safe.

9. Cookies

On our consumer websites, we only use cookies that are strictly necessary to make the site work and keep it secure. We do not use cookies to track you, build a profile on you, or show you ads. Some features may use third-party tools (like payment) that set their own cookies, but we do not use those for tracking or advertising.

10. Links to Other Websites

Our site may link to other websites. We are not responsible for how those other sites handle your data. Always check their privacy policies.

11. Your Rights

No matter where you live, we will do our best to honor your privacy rights. Depending on the laws in your area, you may be able to:

  • Ask to see what personal information we have about you
  • Ask us to fix incorrect information
  • Ask us to delete your information
  • Ask for a copy of your data in a portable format
  • Object to or limit how we use your data
  • Take back any permission (consent) you gave us
  • Opt out of newsletters and similar marketing emails
  • Appeal our decision if we deny your request

To use any of these rights, email us at privacyrights@privacy4cars.com. We may need to verify your identity before we can process certain requests (such as to send a copy of your data).

12. Children’s Privacy

Our services are not meant for anyone under 18 (or the applicable age threshold in your jurisdiction). We do not knowingly collect data from children. Contact privacyrights@privacy4cars.com if you believe a child’s data was collected.

13. Extra Protections for Survivors of Abuse

We know that connected cars can be misused to stalk or control people. If you reach out to us as a survivor of abuse seeking help, we only collect the minimum information needed to assist you. We treat your situation as highly sensitive, and we will not share it with anyone unless you ask us to or the law requires it. If you are in immediate danger, please contact local emergency services first.

14. Changes to This Notice

We may update this notice from time to time. When we do, we will change the “Last updated” date at the top. If the law requires it, we will give you additional notice.

15. Contact Us

If you have questions or want to use your privacy rights, you can reach us at:

Privacy4Cars

P.O. Box 287433

New York, NY 10128, USA

General questions: info@privacy4cars.com 

Privacy rights requests: privacyrights@privacy4cars.com 

Global Data Protection Officer: Privacy.DPO@privacy4cars.com  

UK Representative: Privacy.UKRep@privacy4cars.com   

16. Detailed Overview

1. WHO WE ARE
Organization name Privacy4Cars, Inc.
Address P.O. Box 287433
New York, NY 10128
USA
Email / Phone +1 (833) 774-4227; info@privacy4cars.com
Privacy Rights Exercise rights privacyrights@privacy4cars.com
Data Protection Officer EU/UK GDPR Privacy.DPO@privacy4cars.com
UK Representative If outside UK Privacy.UKRep@privacy4cars.com
2. WHAT PERSONAL DATA WE COLLECT
List each category of data you collect. Be specific. Examples: identifiers (name, email, IP), commercial info, browsing/usage data, geolocation, professional info, etc.
Categories of personal data
  • Identifiers: name, email address, phone number, postal address or region, account credentials, approximate location based on IP address (city or region level), device identifiers.
  • Historical consumer app account information and related usage data (for legacy consumer users, where available).
  • Communications data: your inquiries, whitepaper requests, support communications, attachments, information you voluntarily provide through forms, surveys, questionnaires, or similar interactions.
  • Verification information: redacted identity or authority documentation submitted in connection with privacy-related requests.
  • Donation and transaction information: name, contact details, donation amount, currency, and limited billing information (full payment card details are processed by third-party processors).
Sensitive / special category dataIf any Generally none, except where voluntarily provided in connection with safety-related requests.

We do not intentionally collect special category or sensitive personal data except where you voluntarily provide contextual information necessary to support a privacy-related request (for example, information relating to personal safety concerns).

Where such information is provided, we apply heightened access controls and data minimization practices and use it only as necessary to respond to your request or comply with legal obligations.
Sources of DataDirect, third-party, public
  • Directly from you when you submit a request, use our tools, make a donation, or communicate with us.
  • Automatically through your interaction with our websites or applications (technical and usage information).
  • From third parties such as vehicle manufacturers, lenders, rental companies, payment processors, advocacy partners, or service providers when necessary to verify ownership, respond to a request, or confirm deletion/disconnection outcomes.
3. WHY WE COLLECT AND USE YOUR DATA
For EU/UK: you must state the lawful basis (consent, contract, legitimate interest, legal obligation, vital interests, public task) for EACH purpose.
Purposes of processing Linked to data categories We process personal data for the following purposes:

  • To provide Vehicle Privacy Reports™, support privacy-related requests, provide consumer resources, and facilitate vehicle data deletion and disconnection workflows where requested. 
  • To maintain historical account information for legacy app users, where applicable. 
  • To verify vehicle ownership, authority, or identity in connection with privacy-related actions.
  • To communicate with you, including responding to inquiries and sending service-related notices.
  • To process donations and reconcile payments.
  • To maintain security, prevent fraud, monitor misuse, and protect our systems.
  • To improve and develop our services using aggregated or de-identified data.
  • To comply with legal, regulatory, and record-keeping obligations.
  • To collect consumer feedback, conduct surveys and research, and better understand consumer experiences relating to vehicle privacy, security, and safety.
Lawful basis for each purpose EU/UK GDPR required Where EU/UK data protection laws apply, we rely on the following lawful bases:

  • Contract: to provide services you request, manage accounts, process donations, and fulfill our contractual obligations.
  • Legitimate interests: to operate and improve our services, ensure platform security, prevent fraud, verify outcomes, provided such interests are not overridden by your rights.
  • Legal obligation: to comply with applicable laws, regulatory requirements, and record-keeping obligations.
  • Consent: where required by law, such as where you voluntarily provide certain contextual information or opt in to marketing communications.
  • Vital interests: in limited circumstances where processing is necessary to protect an individual’s safety.
Legitimate interests pursued If relied on Where we rely on legitimate interests, those interests include:

  • Operating, securing, and improving our services
  • Preventing fraud and misuse
  • Supporting verification required to process privacy requests. 
  • Maintaining accurate records
  • Responding to privacy and safety-related requests

We assess these interests against the rights and expectations of individuals.
Is providing data required? EU/UK: statutory or contractual? Providing certain personal data is:

  • Contractually required to access services, or complete requested privacy actions.
  • Necessary to verify ownership, authority, or identity in connection with privacy-related services.
  • Required to process donations (limited billing and contact information).

If you choose not to provide required information, we may be unable to provide the requested services or complete your transaction.

Other information is voluntary but may limit functionality if not provided.
4. WHO WE SHARE YOUR DATA WITH
Categories of Third-Party Recipients Service providers / support vendors

  • Cloud hosting and infrastructure providers
  • Application hosting and management vendors
  • Payment processors
  • Security monitoring, error logging, and crash reporting providers

Vehicle-lifecycle partners and related businesses

  • Vehicle manufacturers
  • Dealerships
  • Auction companies
  • Financing companies
  • Rental car companies
  • Fleets
  • Other service providers involved in vehicle data deletion/disconnection workflows or in responding to or processing privacy-related requests. 

Payment processors

  • For donation and transaction processing

Advocacy partners or support organizations

  • Where you have agreed to a referral

Government authorities and legal recipients

  • Courts
  • Regulators
  • Law enforcement
  • Other parties where required by law or legal process

Corporate transaction recipients

  • Buyers or successors in connection with a merger, acquisition, or sale of assets
Do we sell personal information?US states No, for our consumer experiences:

We do not sell personal information for monetary consideration.
We do not engage in data brokerage.
Do we share data for targeted advertising?US states, EU/UK No.

No, for our consumer experiences we do not engage in targeted advertising sharing under U.S. state privacy laws.

No, for our consumer experiences we do not engage in  profiling or marketing-driven cross-context ad disclosures under EU/UK frameworks.
Categories sold/shared in past 12 months CCPA required None.
Do third parties collect data through our site?CalOPPA No.
5. INTERNATIONAL DATA TRANSFERS
Do we transfer data outside the EEA?EU GDPR Yes, we will, currently we are transferring data to and from our business locations in the US, India, the EU, and UK.
Do we transfer data outside the UK?UK GDPR Yes.
Do we disclose data to overseas recipients?Australia Yes, we will, currently we are transferring data to and from our business locations in the US, India, the EU, and UK.
Countries where recipients are locatedEU, UK, AU USA, EU, UK, and India.
Safeguards usedEU/UK GDPR Where personal data is transferred outside the EU/EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (2021), the UK International Data Transfer Agreement (IDTA) or UK Addendum, and conduct transfer impact assessments where required. You may request further information about these safeguards by contacting us.
How to obtain a copy of safeguardsEU/UK GDPR Contact us at privacyrights@privacy4cars.com
6. HOW LONG WE KEEP YOUR DATA
Specify retention periods per data category, or the criteria used to determine them.
Retention periods or criteriaPer data category For consumer-facing services, privacy rights and deletion records are generally retained for up to seven years after the last meaningful interaction, unless a longer period is required by law.
7. YOUR RIGHTS
All jurisdictions grant rights. List all that apply to your users and explain how to exercise them.
Right to access / know To exercise this right, email: privacyrights@privacy4cars.com
Right to correct / rectify To exercise this right, email: privacyrights@privacy4cars.com
Right to delete / erase To exercise this right, email: privacyrights@privacy4cars.com
Right to data portability To exercise this right, email: privacyrights@privacy4cars.com
Right to restrict processing To exercise this right, email: privacyrights@privacy4cars.com
Right to object to processing To exercise this right, email: privacyrights@privacy4cars.com
Right to opt out of sale/sharing* To exercise this right, email: privacyrights@privacy4cars.com

* Note:  For our consumer experiences, we do not sell personal information (including for monetary consideration), we do not engage in data brokerage, and we do not share personal information for cross-context behavioural advertising. Accordingly, opt-out rights specifically related to the “sale” or “sharing” of personal information for targeted advertising may not apply to our services. However, where applicable law defines certain disclosures as a “sale” or “sharing,” we will honor valid opt-out requests in accordance with law, and you may still exercise other applicable rights described above, including the right to object to certain processing activities where provided by law.
Right to opt out of targeted advertising* To exercise this right, email: privacyrights@privacy4cars.com

* Note:  For our consumer experiences, we do not sell personal information (including for monetary consideration), we do not engage in data brokerage, and we do not share personal information for cross-context behavioural advertising. Accordingly, opt-out rights specifically related to the “sale” or “sharing” of personal information for targeted advertising may not apply to our services. However, where applicable law defines certain disclosures as a “sale” or “sharing,” we will honor valid opt-out requests in accordance with law, and you may still exercise other applicable rights described above, including the right to object to certain processing activities where provided by law.
Right to limit use of sensitive data To exercise this right, email: privacyrights@privacy4cars.com

 

 

We do not intentionally collect special category or sensitive personal data except where you voluntarily provide contextual information necessary to support a privacy-related request (for example, information relating to personal safety concerns).
Right to opt out of profiling To exercise this right, email: privacyrights@privacy4cars.com
Right to withdraw consent To exercise this right, email: privacyrights@privacy4cars.com
Right to non-discrimination To exercise this right, email: privacyrights@privacy4cars.com
Right to anonymity / pseudonymity To exercise this right, email: privacyrights@privacy4cars.com
Right to opt out of direct marketing To exercise this right, email: privacyrights@privacy4cars.com
How to submit a request Emailing: privacyrights@privacy4cars.com

 

Mailing to:
Privacy4Cars
P.O. Box 287433
New York, NY 10128
USA
Response timeline We respond to requests within:

 

  • EU/UK: Generally within 30 days
  • U.S. states: Generally within 30–45 days (depending on applicable law)
  • Other jurisdictions: Within timeframes required by applicable law

Where permitted, extensions may apply for complex requests.
Appeal process For requests subject to applicable US state privacy laws, if we decline to take action on your request, you may appeal our decision by replying to our decision email or contacting privacyrights@privacy4cars.com. If we deny your appeal, we will provide information on how you may contact the relevant regulator where required by law.

 

You also have the right to lodge a complaint with your local supervisory authority.

We will review the appeal in accordance with applicable law and inform you of the outcome.
Right to complain to a regulatorEU, UK, AU European Union:  https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

United Kingdom:https://ico.org.ukAustralia:

 

https://www.oaic.gov.au/privacy/privacy-complaints
8. AUTOMATED DECISION-MAKING & AI
Do we use automated decision-making or profiling? No.
Do we use AI to make decisions that significantly affect individuals? No.
Do we use personal data to train AI/LLMs? No.
9. COOKIES, TRACKING & ELECTRONIC COMMUNICATIONS
Cookies and tracking technologies used Only strictly necessary cookies (session and persistent)
Do we honour Global Privacy Control? Yes we receive Global Privacy Control signals, but we do not sell or share data or use it for cross-contextual advertisement, so GPC signals are detected and are automatically honoured without including the backend
How to manage cookie preferences We only use cookies that are needed to make our website work properly and keep it secure. We don’t use cookies to track your activity or show you targeted ads.

Because these cookies are essential for the site to function, there’s no cookie preference tool to manage — there are no optional cookies to turn on or off.

You can block or delete cookies through your browser settings, but this may prevent parts of the site from working correctly.
Electronic marketing practices Marketing emails are sent to consumers who are subscribed to our newsletters (works on opt-in rather opt-out mechanism)
10. CHILDREN’S DATA
Do we knowingly collect data from children? No.
Age thresholds applied Our services are not meant for anyone under 18 (or the applicable age threshold in your jurisdiction). We do not knowingly collect children’s personal data.
Parental Consent Mechanism N/A
11. DATA SECURITY
Security measures Role-based access controls and least-privilege access

Multi-factor authentication for system access

Encryption of data in transit

Secure cloud infrastructure with monitoring and logging

Firewalls and network protections

Secure software development practices

Employee confidentiality obligations and security training
Controlled data retention and secure deletion practices
12. OPT-OUT LINKS & MECHANISMS
These are specific links/buttons required on your website, not just disclosures in the policy text.
“Do Not Sell or Share My Personal Information” link Not applicable.

Note:  For our consumer experiences, we do not sell personal information (including for monetary consideration), we do not engage in data brokerage, and we do not share personal information for cross-context behavioural advertising. Accordingly, opt-out rights specifically related to the “sale” or “sharing” of personal information for targeted advertising may not apply to our services. However, where applicable law defines certain disclosures as a “sale” or “sharing,” we will honor valid opt-out requests in accordance with law, and you may still exercise other applicable rights described above, including the right to object to certain processing activities where provided by law.
“Limit the Use of My Sensitive Personal Information” link To exercise this right, email: privacyrights@privacy4cars.com

We do not intentionally collect special category or sensitive personal data except where you voluntarily provide contextual information necessary to support a privacy-related request (for example, information relating to personal safety concerns).

Where such information is provided, we apply heightened access controls and data minimization practices and use it only as necessary to respond to your request or comply with legal obligations.
Universal opt-out mechanism (ie Global Privacy Control (GPC)) Yes, but for our consumer experiences, we do not sell or share data or use it for cross-contextual advertisement, so Global Privacy Control (GPC) signals are detected and are automatically honoured without including the backend

Note:  We do not sell personal information (including for monetary consideration), we do not engage in data brokerage, and we do not share personal information for cross-context behavioural advertising. Accordingly, opt-out rights specifically related to the “sale” or “sharing” of personal information for targeted advertising may not apply to our services. However, where applicable law defines certain disclosures as a “sale” or “sharing,” we will honor valid opt-out requests in accordance with law, and you may still exercise other applicable rights described above, including the right to object to certain processing activities where provided by law.
13. ABOUT THIS POLICY
Effective dateAll July 07, 2026
How we notify you of changesAll By posting the updated policy on our website and updating the date above; material changes via email
Languages available English