PRIVACY POLICY

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

In Short: We process your information for a variety of reasons depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account.
• To deliver and facilitate delivery of services to the user. We may process your information to deliver the services you have requested.
• To respond to user inquiries and offer support to users. We may process your information to respond to your inquiries and resolve any potential issues.
• To send administrative information to you. We may process your information to send you details about our policies, terms, and changes.
• To fulfill and manage orders, payments, and other transactions. We may process your information to facilitate and complete transactions.
• To enable user-to-user communications. We may process your information to facilitate the sharing of information between users.
• To save or protect an individual's vital interest. We may process your information when necessary to protect someone's life or safety.
• To protect against fraudulent activity. We may process your information to detect and prevent fraud, abuse, and other harmful activity.

We process your personal information under the following legal bases, depending on the circumstances and the applicable law:

Consent

We process your information when you have given us specific, informed, and unambiguous consent to do so for a specific purpose. You can withdraw your consent at any time by contacting us at support@samedaydealer.com.

Performance of a Contract

We process your information when it is necessary to fulfill our contractual obligations to you, such as providing the Services you have requested or processing payments.

Legal Obligations

We process your information where we are legally required to do so, including to comply with applicable laws, court orders, or government regulations.

Legitimate Interests

We process your information when it is reasonably necessary to achieve our legitimate business interests, such as improving our Services, ensuring security, and preventing fraud, provided that your rights and interests do not override our legitimate interests.

Vital Interests

We process your information when necessary to protect the vital interests of you or another person, such as in emergency situations involving life or safety.

We may share your personal information with specific third parties in the situations described below. We only share information when we have a valid legal reason to do so.

Service Providers

We may share your information with third-party vendors, service providers, contractors, or agents who perform services on our behalf, such as payment processing, customer support, data hosting, analytics, and marketing. These providers are contractually obligated to use your information only as necessary to provide their services to us and to protect its confidentiality.

Affiliates and Subsidiaries

We may share your information with our affiliates and subsidiaries, who are bound by the same standards of confidentiality and data protection as we are.

Other Users

When you share personal information or interact in public areas with other users, such information may be viewed by all users and may be publicly distributed outside our Services in perpetuity.

Professional Advisors

We may share your information with our attorneys, accountants, auditors, and other professional advisors where necessary to obtain legal, accounting, or other professional advice.

Law Enforcement and Legal Authorities

We may disclose your information if we believe in good faith that such disclosure is required by law, court order, or government regulation, or to protect the rights, property, or safety of our company, our users, or others.

Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

Yes, we use cookies and similar tracking technologies to track the activity on our Services and to store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. Tracking technologies may include web beacons, tags, pixels, and other similar technologies.

Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary to provide you with services available through our Services and to enable you to use certain features. Without these cookies, certain portions of the Services may not function properly.
• Performance and Analytics Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Services. They help us know which pages are the most and least popular and see how visitors move around the site.
• Functionality Cookies: These cookies enable the website to provide enhanced functionality and personalization, such as remembering your preferences and settings.
• Targeting and Advertising Cookies: These cookies may be set through our site by our advertising partners to build a profile of your interests and show you relevant advertisements on other sites.

How to Manage Cookies

You can set or amend your web browser controls to accept or refuse cookies. If you choose to refuse cookies, you may still use our Services, though your access to some functionality and areas may be limited. The specific web browser you use will determine how you manage your cookies — consult the browser's help or settings menu for instructions.

We may offer you the ability to register or log in to our Services using your existing social media account, such as Facebook, X (formerly Twitter), Google, or other platforms. If you choose to register or log in this way, we will receive certain profile information about you from the social media provider.

Information We Receive

The information we receive depends on the social media provider and your privacy settings, but typically includes your name, email address, profile picture, and any other information you have made publicly available on your social media profile.

How We Use This Information

We use the information received from the social media provider to create and manage your account, authenticate your identity, and personalize your experience on our Services. We do not post to your social media account without your explicit permission.

Disconnecting Your Social Account

You can disconnect your social media account from our Services at any time by updating your account settings or by revoking our access through the social media provider's settings. Disconnecting will not delete your account with us, but you will need to use an alternative login method.

We keep your personal information only for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required by law or for the establishment, exercise, or defense of legal claims.

Criteria for Determining Retention

When determining the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal information.
• The potential risk of harm from unauthorized use or disclosure of your information.
• The purposes for which we process your information and whether we can achieve those purposes through other means.
• The applicable legal, regulatory, or contractual requirements.

Account Information

We retain your account information for the duration of your relationship with us. If you request account deletion, we will delete or anonymize your personal information, except where we are required to retain it for legal, accounting, or reporting purposes.

Transaction Records

We retain transaction and payment records for the period required by applicable tax, accounting, and financial regulations, which is typically seven (7) years from the date of the transaction.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. These measures include encryption of sensitive data, access controls, regular security assessments, and staff training on data protection.

Access Controls

We limit access to personal information to those employees, agents, and contractors who have a legitimate business need to access such information. All personnel with access are subject to confidentiality obligations.

Data Security Limitations

However, while we strive to protect your personal information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

We do not knowingly collect, use, or disclose information from anyone under the age of 18. Our Services are intended solely for individuals who are at least 18 years of age. A valid photo ID and Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN) are required to participate in our program.

If We Learn We Have Collected Information From a Minor

If we learn that we have collected personal information from a user under the age of 18, we will delete that information as quickly as possible. If you believe we might have collected information from or about a minor, please contact us at support@samedaydealer.com so we can take appropriate action.

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. These rights may include the right to access, correct, or delete your personal information, and the right to restrict or object to certain processing of your information.

Your Rights

• The right to access — You have the right to request copies of your personal information.
• The right to rectification — You have the right to request that we correct any information you believe is inaccurate or incomplete.
• The right to erasure — You have the right to request that we delete your personal information, under certain conditions.
• The right to restrict processing — You have the right to request that we restrict the processing of your personal information, under certain conditions.
• The right to data portability — You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
• The right to object to processing — You have the right to object to our processing of your personal information, under certain conditions.
• The right to withdraw consent — If we are relying on your consent to process your personal information, you have the right to withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@samedaydealer.com. We will consider and act upon any request in accordance with applicable data protection laws. We may need to verify your identity before we can process your request.

Some browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. DNT is not yet a standardized or universally recognized technology, and there is no industry consensus on how websites should respond to such signals.

Our Response to DNT Signals

Because there is currently no industry standard for recognizing or honoring DNT signals, we do not currently respond to DNT signals. However, we do offer you the ability to manage cookies through your browser settings, as described in Section 5 of this Privacy Notice. We will continue to monitor developments in DNT technology and standards and update our practices accordingly.

If you are a resident of the United States, you may have specific rights under state privacy laws, such as the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state laws.

Categories of Personal Information We Collect

Under the CCPA, we may collect the following categories of personal information:

• Identifiers, such as name, postal address, email address, and phone number.
• Personal information categories listed in the CCPA, such as job title.
• Characteristics of protected classifications under California or federal law.
• Commercial information, including records of products or services purchased.
• Internet or network activity information, including browsing history and interactions with our website.
• Inferences drawn from other personal information to create a profile about you.
• Sensitive personal information, such as Social Security numbers or government identifiers.

Your Rights Under the CCPA

As a California resident, you have the following rights:

• The right to know — You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• The right to delete — You may request that we delete your personal information, subject to certain exceptions.
• The right to correct — You may request that we correct inaccurate personal information.
• The right to opt out — You may direct us not to sell or share your personal information. We do not sell your personal information.
• The right to non-discrimination — We will not discriminate against you for exercising any of your privacy rights.

How to Exercise Your CCPA Rights

To exercise your rights under the CCPA, contact us at support@samedaydealer.com or call us at (646)-844-9600. We will verify your identity before processing your request and will respond within the timeframes required by law.

Shine the Light Law

Under California's Shine the Light law, California residents may request that we disclose what personal information we share with third parties for their direct marketing purposes. To make such a request, please contact us at support@samedaydealer.com.

Yes, we will update this Privacy Notice as necessary to stay current with applicable laws, changes to our business practices, and the Services we offer. The updated version will be indicated by an updated "Last updated" date at the top of this notice.

Notification of Material Changes

When we make material changes to this Privacy Notice, we will notify you by posting the updated notice on our website and, where appropriate, by sending you a notification through our Services or via email. We encourage you to review this Privacy Notice periodically to stay informed about how we collect, use, and protect your information.

Continued Use of Our Services

Your continued use of our Services after any changes to this Privacy Notice constitutes your acknowledgment and acceptance of the updated practices described in the revised notice, to the extent permitted by applicable law.

If you have questions, comments, or concerns about this Privacy Notice or our data practices, we welcome your feedback. You may contact us using any of the methods below.

Contact Information

• Same Day Dealer LLC
• 40 Wall Street, Suite 2901
• Manhattan, NY 10005
• Phone: (646)-844-9600
• Email: support@samedaydealer.com

Privacy Inquiries

For all privacy-related inquiries, including requests to exercise your rights, please email us at support@samedaydealer.com with the subject line "Privacy Inquiry." We will make every effort to respond to your inquiry within thirty (30) days of receipt.

You have the right to review, update, or delete the personal information we have collected from you. You can exercise these rights at any time by contacting us using the information provided in Section 14.

How to Submit a Request

To submit a request to review, update, or delete your personal information, please send an email to support@samedaydealer.com with the following information:

1. 1Your full name and contact information (email address and/or phone number).
2. 2A clear description of the personal information you wish to review, update, or delete.
3. 3The specific right you wish to exercise (access, correction, deletion, etc.).
4. 4Any additional information that will help us locate and verify your records.

Identity Verification

To protect your privacy and security, we will take reasonable steps to verify your identity before processing your request. This may include requesting additional information or documentation to confirm that you are the individual whose personal information is the subject of the request.

Response Timeline

We will respond to your request within the timeframe required by applicable law, which is generally within forty-five (45) days of receiving your request. If we need more time, we will inform you of the reason and extension period in writing.