PRIVACY NOTICE

November 08 | 2021

Are You Concerned About Your Privacy?

We respect your privacy by implementing tough information security.

It is our responsibility to treat customers, colleagues, the community, and the environment with respect. That includes your personal information. We ensure your privacy by handling your personal information in a safe and accountable manner.

Penske Vehicle Services privacy notice

Penske Vehicle Services, Inc. ("Penske") understand our customers' concern about privacy and the use of their personal information. Use of any information gathered from or about our vehicle services customers through penskevehicleservices.com (the “Site”) or from individuals who contact Penske offline shall be governed by this Privacy Notice. Penske encourages you to read this Privacy Notice in full to learn how Penske treats personal information obtained through the use of Penske services.

By submitting personal information to Penske, you are consenting to our use of your personal information (including any disclosures, processing and transfers by Penske) in accordance with this Privacy Notice. If you do not accept this Privacy Notice, then you should not submit any personal information to Penske.

This Policy describes:

Personal Information We Collect
How We Collect Your Personal Information
How We Use Your Personal Information
How We Disclose Personal Information
Retention of Personal Information
Cookies
Security
Individual Rights
Children’s Privacy
Contact Us
Changes to Notice

Personal information we collect

Website Visitors: When you use the Site, we may collect the following information from your device:

Identification data, such as your IP address.
Internet activity, such as IP address, browser information, and Site usage statistics.

Prospective customers: We may collect the following information from you:

Identification data, such as your name.
Contact details, such your phone number, and email address.

Vehicle services customers: We may collect the following information:

Identification data, such as your name, date of birth, driver’s license number, driver’s license expiration date, employee ID number, and payment information.
Contact details, such as your home phone number, business phone number, email address, business email address, home address, and business address.

We may collect the following categories of sensitive information from you:

Identification data, such as your driver’s license number.

Vendors: We may collect the following information:

Identification data, such as your name, bank account number, and bank account routing number.
Contact details, such as your business email address, business phone number, and business address.
Financial/Insurance information, such as method payment, bank account information, and W9 information.

How we collect your personal information

We may collect personal information from a variety of sources and methods. This includes:

Information You Voluntarily Provided to Us. We may collect personal information that you voluntarily provide to us through your interactions with us.
Information We Collect When You Use our Sites. We collect personal information when you use our Site through the use of cookies and other tracking technologies. For more information on our use of cookies, please see below.
Information We Collect From Third Parties. We may collect personal information from your employer for certain services we provide.

How we use your personal information

Penske uses personal information, for all purposes related to your inquiries, transactions, or business with Penske. These purposes include, but are not limited to, the following:

For analytic purposes in order to improve user experience of our Site.
To better understand how visitors use and navigate our Site.
To provide individuals with relevant offers and marketing.
To respond to project requests and other inquiries.
Customer onboarding.
Account creation.
To provide vehicle registration and management services.
To provide customer service and support business relationships.
To perform driving checks for customer clients.
To set up vendors.
To make, receive, and process payments.
To send communications.
To prevent fraud.
To exercise Penske’s rights under applicable law and to support any claim, defense, or declaration in a case or before a jurisdictional and/or administrative authority, arbitration, or mediation panel.
To meet legal and regulatory requirements including civil discovery in litigation involving Penske or affiliated companies.

How we disclose your personal information

Personal Information We Disclose for a Business Purpose. We may use service providers to perform certain business services on behalf of us and may disclose personal information to such services providers as needed for them to perform these services. Business service providers include, but are not limited to, providers assisting with marketing analytics, payment processors, providers assisting with customer onboarding and account creation, and providers assisting with vehicle registration and management services.

Personal Information Sold. Penske does not sell your personal information. However, some transfers of personal information are considered “sales” under applicable law even if monetary consideration is not involved. This may include the use of cookies. Please see below for more information about how we use cookies.

Business Transactions. We may transfer your personal information in connection with any sale or transfer of our business and assets. In such event, Penske will use reasonable efforts to ensure that your personal information remains protected.

Legal Process. Subject to applicable law, we may disclose information about you (i) if we are required to do so by law, regulation or legal process, such as a subpoena; (ii) in response to requests by government entities, such as law enforcement authorities; (iii) when we believe disclosure is necessary or appropriate to prevent physical, financial or other harm, injury or loss; (iv) in connection with an investigation of suspected or actual unlawful activity; or (v) to protect the safety, rights or property of Penske or users of the Site.

Retention of your personal information

Penske intends to retain each category of personal information identified above only for as long as is necessary to fulfill the purpose for which it was collected, or a related and compatible purpose consistent with the average individual’s expectation, to comply with applicable laws and regulations, and to protect Penske’s legal interests. We may consider the following criteria when determining how long to retain personal information: why we collected the personal information, the nature of the personal information, the sensitivity of the personal information, our legal obligations related to the personal information, and the risks associated with retaining the personal information.

Our Site uses cookies and other tracking methods to enable faster and easier access privileges on the Sites to enable Site functionality, and to track Site usage. A “cookie” is a small string of text that a website can place on your computer or internet-enabled device, which allows us to provide you with tailored information and services when you return to the Site. In addition, we may embed the services of third parties to enhance the functionality of the Site, and those third parties may use cookies or other tracking methods in order to provide those services, track site usage, and for other reasons.

We use the services of Google Analytics (“Google”). This tool uses cookies and other similar technologies to help analyze how visitors use the Site. To learn more about how Google collects and manages information, or to opt out of Google’s collection of information, please go to http://www.google.com/policies/privacy/.

You can view a list of those cookies and opt out of use of cookies through Cookie Settings.

You can also opt-out of the use of cookies through your browser's options, however some services on our Sites may not function properly or may be considerably slower if you choose to do so.

Some web browsers incorporate “do not track” or similar features that signals to sites with which the browser communicates that a visitor does not want to have their online activity tracked. Penske does recognize do not track signals and global privacy controls.

Security

The security of customer information is very important to us, and we take a number of steps to safeguard it. We maintain physical, technical, and administrative safeguards to protect your personal information. We also use encryption to secure certain personal information where deemed necessary.

Furthermore, once the information has been received by us, we use security procedures and policies commensurate with industry standards to safeguard against loss, theft, unauthorized access, destruction, use, modification and/or disclosure.

Individual rights

While we are only obligated to offer the below consumer rights to residents of California under the California Consumer Privacy Act of 2018 (“CCPA”) and its amendments, we take privacy issues seriously and may, at our discretion, offer residents of other states similar rights regarding their Personal Information. Please note however that if you do not reside in California, any rights we offer in connection with your personal information are not offered pursuant to above-referenced law, and may be rescinded by us at any time. Please follow the instructions below to make these requests.

Right to know and right to access. You have the right to request certain information we have collected about you. Under certain local laws, you may have the right to request: (1) specific pieces and categories of personal information we collected about you; (2) the categories of sources from which personal information was collected; (3) the business or commercial purpose for which personal information was collected; (4) the categories of personal information we disclosed; and (5) the categories of third parties with which we shared personal information. Please note that there are circumstances in which we may not be able to comply with your request, including when we cannot verify your request and/or when there is a conflict with our own obligations to comply with other legal or regulatory requirements. We will notify you following submission of your request if that is the case.
Right to delete. You have the right to request that we delete certain personal information that we have collected. Please note that there are circumstances in which we may not be able to comply with your deletion request. We will notify you following submission of your request if that is the case.
Right to correct. You have a right to request that we correct any inaccurate personal information we may retain about you.
Right to opt-out. You have the right to request Penske not to sell your personal information. Penske does not sell your personal information. However, some transfers of personal information are considered “sales” under applicable law even if monetary consideration is not involved. This may include the use of cookies. You may also have the right to opt out of the sharing of your personal information. Sharing is defined under these local laws to mean the disclosure of your personal information to third parties for cross-context behavioral advertising. Cross-context behavioral advertising is done through the use of third-party cookies. We use cookies as described above in this Privacy Notice. You can view a list of those cookies and opt out of use of cookies through Cookie Settings.
Right to limit. You have the right to instruct us to limit the use and disclosure of your sensitive personal information if we collect or process sensitive personal information for the purposes of inferring characteristics about you. Penske does not collect sensitive personal information for the purposes of inferring characteristics about such associate.
Non-discrimination. You have the right to exercise the above rights and we will not discriminate against you for exercising these rights. Please note that a legitimate denial of a request to access, delete, or opt-out is not discriminatory, nor is charging a fee for excessive or repetitive requests.
Instructions to exercise your rights. If you would like to make any of the data requests listed above, please visit our Individual Rights Management Portal or call (877) 210-5290 or email privacy@penskevehicleservices.com. The link will take you to an interactive webform that you can complete and submit to make a request that we will then verify. If you call the toll-free number, you will be asked to leave a voicemail, and someone will return your call and log your request after speaking with you.
Verification Process. Identity verification may be required prior to responding to an individual rights request. In order to verify your identity in Penske’s systems you will need to provide your first and last name, email address, phone number, and state of residence. As long as we can match this information provided with that in our systems, your identity will be considered verified. If we require additional information, we will let you know.
Authorized Agents. If you designate an authorized agent to make an individual rights request on your behalf, please contact us using the information in the “Contact us” section below. We may require you or your authorized agent to do the following: (i) provide proof of your signed written permission for the authorized agent to submit a request on your behalf; or (ii) verify your identity with Penske directly.

Children's privacy

Penske does not knowingly collect or use personal information from children under the age of sixteen (16) or allow such children to participate in any services offered on the Site that requires the submission of user information. Should Penske learn that someone under the age of sixteen (16) has provided any personal information to or on the Site, Penske will take steps to remove that information as soon as possible.

If you have any questions about this notice or how Penske uses your personal information, please contact a Penske representative at 1-877-210-5290, email us at privacy@penskevehicleservices.com, or write to us at:

Privacy
Penske Vehicle Services, Inc.
1225 E Maple Road
Troy, Michigan 48083

Changes to notice

We will make periodic updates to this notice, and such changes will take effect when they are posted here. We encourage you to review this notice and check for updates regularly.

This Privacy Notice was last updated December 15, 2022.