Privacy Policy

Eagle Crest Cars ("we," "our," or "us") is committed to protecting the privacy and security of the personal information you share with us when you visit our website, inquire about our services, or engage us for any paid or complimentary service engagement. This Privacy Policy describes what personal information we collect, how we collect it, why we collect it, how we use it, how we protect it, and what rights you have with respect to it.

This Privacy Policy applies to all personal information collected through our website, online inquiry forms, email communications, consultation calls, and any other direct or indirect means of interaction between you and Eagle Crest Cars. By using our website or submitting any personal information to us, you consent to the practices described in this Privacy Policy.

We take privacy seriously and will only collect the information that is genuinely necessary for us to provide our services to you. We do not sell your personal information. We do not share it with advertising networks. We do not use it for any purpose other than delivering the services you have requested and managing our business relationship with you.

This policy is subject to change. When we make material changes, we will update the "Last Updated" date at the top of this document. Your continued use of our website or services after such changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

We collect two types of information: information you provide to us directly, and information collected automatically through your use of our website. We describe each category in detail below.

Information You Provide to Us Directly

When you submit an inquiry form, contact us directly, or engage us for services, you may provide us with the following categories of personal information:

• Identity Information: Your full name, as provided in inquiry or order forms.
• Contact Information: Your email address, phone number, and/or Telegram handle, as provided during service inquiries or order placement.
• Transaction Information: Details about the services you purchase, the vehicle listings you submit for analysis, vehicle identification numbers (VINs), and any other vehicle-specific information you provide to us in connection with a service engagement.
• Payment Information: When you make a purchase, payment is processed through our designated payment processor. We do not store full payment card numbers, card security codes, or bank account details on our own servers. We may retain transaction identifiers and billing amounts for accounting and dispute resolution purposes.
• Communication Content: The content of emails, messages, or other written communications you send to us, including questions, context about your vehicle search, or feedback about our services.
• Preferences and Context: Information you voluntarily share about your vehicle purchasing criteria, budget, intended use of the vehicle, geographic preferences, and similar context provided to enable us to deliver more relevant analyses.

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically by our website infrastructure and third-party analytics providers:

• Log Data: Your browser type and version, operating system, IP address, time and date of your visit, pages viewed, time spent on pages, and referring URLs.
• Device Information: The type of device you use to access our website, screen resolution, and general device characteristics used for compatibility and performance purposes.
• Cookies and Tracking Technologies: We may use session cookies and persistent cookies to maintain website functionality and analyze aggregate traffic patterns. You can control cookie settings through your browser preferences. Disabling cookies may affect some functionality of our website.
• Analytics Data: We may use privacy-conscious analytics services to understand how visitors use our website in aggregate. This data is anonymized or pseudonymized wherever possible and is not used to identify you personally.

We use the personal information we collect for the following specific and legitimate purposes:

• Service Delivery: To receive your service requests, confirm scope, conduct the analysis or consultation you have engaged us for, and deliver the resulting reports, checklists, or advisory recommendations to you.
• Communication: To respond to your inquiries, send you service updates, request additional information needed to complete your engagement, and provide follow-up communications related to your service request.
• Order Processing and Payment: To process payments, issue receipts, and maintain billing records in compliance with our accounting obligations.
• Service Improvement: To analyze aggregate patterns in the types of vehicles our clients research and the findings of our analyses, for the purpose of improving our methodology, expanding our model-specific knowledge base, and training our team.
• Legal Compliance: To comply with applicable laws, regulations, court orders, or lawful requests from government authorities, and to protect our legal rights and the rights of others.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, protect the security of our systems, and verify the legitimacy of service requests.
• Business Administration: For internal record-keeping, dispute resolution, and the administration of our contractual relationship with you.

We do not use your personal information for unsolicited marketing communications. We do not sell your data to third parties. We do not use your information to build advertising profiles or engage in behavioral targeting.

Where we rely on your consent as the legal basis for processing your information, you may withdraw that consent at any time by contacting us. Withdrawal of consent will not affect the lawfulness of any processing carried out before your withdrawal.

We do not sell, rent, or trade your personal information with third parties. We share your information only in the limited circumstances described below:

• Service Providers: We work with a limited number of third-party service providers who help us operate our business, including our website platform (Shopify), payment processing providers, email delivery services, and document management tools. These providers access your information only as necessary to perform their contracted services for us and are contractually prohibited from using it for any other purpose.
• Vehicle Data Providers: When we conduct a Vehicle History Review or similar service, we may submit a vehicle identification number (VIN) to third-party automotive history report providers (such as Carfax, AutoCheck, or equivalent services). These providers operate under their own privacy policies and terms of service. We do not share your personal identity information with vehicle data providers; only the VIN and, where required, a service account identifier are used.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or lawful governmental request. We will, where permitted by law, notify you of any such request unless prohibited from doing so by a court order or other legal restriction.
• Protection of Rights: We may disclose information where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, asset sale, or any other form of business transfer involving Eagle Crest Cars, your personal information may be transferred as part of that transaction. We will provide notice prior to your information becoming subject to a materially different privacy policy as a result of such a transfer.

In all cases where we share information with third parties, we take reasonable steps to ensure that appropriate contractual or legal safeguards are in place to protect your information consistent with this Privacy Policy.

We retain your personal information for as long as is necessary to fulfill the purposes for which it was collected, to provide ongoing services, to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed for these purposes, we take steps to securely delete or anonymize it.

Specifically, we retain service records and communication history related to completed service engagements for a period of five (5) years from the date of service completion, primarily to support any warranty, dispute resolution, or legal compliance needs that may arise within a reasonable period following the engagement.

Payment records are retained for as long as required by applicable tax and financial record-keeping laws, which is typically seven (7) years in the United States.

Website analytics data collected automatically is retained only in aggregated or anonymized form beyond the period necessary for operational purposes and is not associated with identifiable individuals after de-identification.

You may request deletion of your personal information at any time by contacting us as described in the "Your Rights and Choices" section below. We will honor deletion requests to the extent permitted by applicable law and our legitimate business interests.

We take the security of your personal information seriously and implement a combination of technical, administrative, and physical measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

Our security practices include:

• Use of industry-standard Transport Layer Security (TLS) encryption for all data transmitted between your browser and our website.
• Limiting access to personal information to authorized personnel who require it to perform their job functions, and who are bound by confidentiality obligations.
• Using reputable, security-certified third-party platforms (including Shopify) that maintain their own rigorous security standards and compliance certifications.
• Not storing payment card data directly on our servers; all payment processing is delegated to Payment Card Industry Data Security Standard (PCI DSS) compliant payment processors.
• Regular review of our data handling practices and service provider agreements to ensure continued compliance with this Privacy Policy.

Despite these efforts, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that is reasonably likely to result in a risk to your rights and freedoms, we will notify you and any applicable regulatory authorities in accordance with applicable law.

Depending on your location and applicable law, you may have certain rights with respect to your personal information. We are committed to facilitating the exercise of these rights. The rights described below apply where applicable law grants them to you:

• Right of Access: You may request confirmation of whether we hold personal information about you and, if so, access to that information and details about how it is being processed.
• Right to Correction: You may request that we correct any personal information we hold about you that is inaccurate, incomplete, or outdated.
• Right to Deletion: You may request deletion of your personal information where we no longer have a legitimate legal or business reason to retain it. We will honor deletion requests to the extent permitted by applicable law.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your personal information, for example while you contest the accuracy of the information or while your objection to processing is being considered.
• Right to Data Portability: Where processing is based on your consent or our contract with you and is carried out by automated means, you may request that we provide your personal information to you in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing of your personal information where we process it based on our legitimate interests, and we will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the contact information provided at the end of this policy. We will respond to your request within thirty (30) days. In some cases, we may need to verify your identity before fulfilling your request. We will not charge a fee for responding to a reasonable request, but may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). If you are located in the European Economic Area or United Kingdom, you may have rights under the General Data Protection Regulation (GDPR) or UK GDPR. We are committed to complying with applicable data protection law in all jurisdictions in which we operate.

Our website uses cookies and similar tracking technologies to support the operation of our site and to understand how visitors interact with it. A cookie is a small text file that a website places on your device when you visit. Cookies do not collect personal information from your device; they recognize your browser or device and capture certain information about your visit.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for our website to function properly. They enable core functionality such as page navigation, form submission, and access to secure areas of our site. The website cannot function properly without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies allow our website to remember choices you make (such as form data or interface preferences) and provide enhanced, personalized features. They are not used to track your browsing activity on other websites.
• Analytics Cookies: We may use analytics cookies to collect aggregated information about how visitors use our website, such as which pages are visited most often. This helps us improve our website's structure and content. Analytics data is processed in aggregated or anonymized form and does not identify you individually.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling certain cookies may affect the functionality of our website. You can also opt out of analytics tracking where specific opt-out mechanisms are provided by the analytics service we use.

Our website may also contain links to third-party websites or embedded third-party content. These third parties may set their own cookies or collect information about you subject to their own privacy policies. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before interacting with them.

Our services are intended exclusively for adults who are legally permitted to enter into binding contracts and purchase motor vehicles in their jurisdiction. Our website and services are not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal information from individuals under the age of 18.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete that information from our records. If you believe we may have collected information from or about a child under 18, please contact us immediately using the contact information below.

Eagle Crest Cars is based in the United States and our services are primarily directed at US-based vehicle buyers. Your personal information will be stored and processed in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, which may have data protection laws that differ from those in your country of residence.

Where we transfer personal information from individuals located in the European Economic Area, United Kingdom, or other jurisdictions with data transfer restrictions, we will take appropriate legal steps to ensure that such transfers are conducted in compliance with applicable law, including through the use of standard contractual clauses or other legally approved mechanisms where required.

By submitting personal information to us, you acknowledge that your information may be transferred to and processed in the United States and other countries in connection with our service operations.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this document. We may also provide additional notice of significant changes through our website or by email where we hold your contact information and where such notification is warranted.

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue your use of our services and may request deletion of your personal information as described in Section 07 above.

We encourage you to review this Privacy Policy periodically to stay informed of how we collect, use, and protect your personal information. If you have questions about any changes, please contact us.