Kelley Blue Book Privacy Statement
This statement is effective as of December 31, 2023.
Introduction
Thank you for your interest in Kelley Blue Book Co, Inc. (“KBB”). We respect the privacy of our users when they use our websites, mobile and other online applications and products and services (collectively, the “KBB Sites”). By using KBB Sites, you consent to the use of your information and information about you in accordance with this Privacy Statement.
When we refer to KBB within this Privacy Statement, we are referring to KBB.com, Inc. This Privacy Statement applies to information collected through the KBB Sites and does not describe the collection, use and disclosure practices of any of our corporate affiliates or third parties. For information on the collection, use and disclosure practices of any company with whom you are doing business, whether or not affiliated with KBB, please review their privacy policies.
Services offered by KBB are not directed to individuals under the age of eighteen (18). If you are under eighteen (18), you should not provide any personal information to us.
This Privacy Statement covers:
Information We Collect
Information is gathered from the KBB Sites by us, our service providers, advertisers, sponsors and partners.
Information You Provide. We may collect information that you choose to provide on the KBB Sites in a variety of ways, such as when you:
Automated Information. Information regarding your use of the KBB Sites may be collected and/or aggregated through the use of automated means. This automatically collected information may include information such as:
Data Technologies. Various technologies are used to automatically collect information, such as cookies, local shared objects, and web beacons (generally referred to as "Data Technologies"). "Cookies" are small identifiers sent from a web server that are stored on your device for the purpose of identifying your browser or storing information or settings in your browser. "Local shared objects," sometimes known as Flash cookies, may be used to store your preferences or display content based upon what you have viewed on various websites to personalize your visit. A "web beacon," also known as an Internet tag, pixel tag or clear GIF, links web pages to web servers and their cookies. Anonymous advertising identifiers are increasingly being used on mobile devices and otherwise in a manner similar to cookies. When we refer to Data Technologies, we are including all current and similar future technologies.
One or more Data Technologies may be used on the KBB Sites and other websites and mobile applications (that may not be the KBB Sites) by us, by another party on our behalf, or by third parties in accordance with their privacy policies. Data Technologies may be used by us and others, on our behalf and on their own behalf, to transmit information to you or about you and connect information about you from different sources, websites, devices, and mobile applications.
We may use a uniquely generated trackable toll-free telephone number on dealer sites or in advertisements. If you call one of these uniquely generated toll-free numbers, we (or a service provider acting on our behalf) may collect non-personally identifiable information about the call (e.g. date, time, duration), as well as personally identifiable information (e.g. your name, the number from which your call originated).
Videos We may target and track the videos you view on the Site. You consent to our tracking of your video viewing through the Site or third party social media for up to two years or as permitted by applicable law. You also consent to the sharing of your information in relation to viewing certain video content to third parties, including social media companies.
Location Information. When you download or use the KBB Sites, we may collect physical location information that is sufficiently precise to allow us to locate a specific person or device ("Location Information"). We only collect Location Information with your permission (e.g., such as when you agree to provide it to us after you initially access or download the KBB Sites). We may use Location Information and provide it to third parties to provide you with content and services that are relevant to a particular location, such as advertising, search results, dealers in the area, and directions.
Publicly Posted Information. Information that you make available to us and others via social media networks, forums, blogs, list serves, chat rooms or similar functionality is public information that we or others may share or use in accordance with the law.
Combined Information and Information from Other Sources. We may combine information that you provide to us, directly or indirectly, through our affiliates and other sources, and also with other information that is automatically collected. The combined information may include information about your use of the KBB Sites, your use of other websites, devices and mobile applications and information from our affiliates and other sources.
How We May Use the Information We Collect
We may use information we collect for the following purposes:
Applications, Widgets and Social Media
We may include applications or widgets from social media providers that allow interaction or content sharing by their users. These widgets, such as a Facebook "Share" or "Like" button, are visible to you on the web page you visit. Integration between the KBB Sites and social media networks such as Facebook, Twitter and others may allow social media networks in which you participate to collect information about you, even when you do not explicitly activate the network’s application or widget. Please visit the applicable social media network’s privacy policy to better understand their data collection practices and choices they make available to you. The privacy policy of the social media network controls the collection, use and disclosure of all personal information transmitted to that network.
Advertising Networks
Advertising that is customized based on predictions generated over time from your visits across different websites, devices and mobile applications is sometimes called “online behavioral” or “interest-based” advertising. We may partner with advertising networks, which are companies that deliver targeted advertisements to consumers and generate statistics and metrics related to the delivery of interest-based advertisements. They may utilize information collected through a variety of Data Technologies to provide customization, auditing, research and reporting for us, our affiliates and other advertisers. This data collection takes place both on the KBB Sites and on third-party’s websites and mobile applications. This process allows KBB and third parties to deliver targeted advertising, enhance marketing programs and help track the effectiveness of such efforts. Our advertising networks also may use this information for determining or predicting the characteristics and preferences of their respective advertising audiences and measuring the effectiveness of their advertising in accordance with their privacy policies.
We do not provide information that is directly associated with a specific person (such as name and address) to an advertising network when you interact with or view a customized advertisement. However, when you view or interact with an advertisement, the advertiser may make an assumption that you are interested in the subject matter of the advertisement.
You may also modify your cookie and tracking technology preferences by using the “Manage Cookies” link below. If you choose to decline cookies or similar technologies, however, please note that certain features may not function properly or at all as a result. Please note that even if you opt out, you will continue to receive advertisements, but they will not be tailored to your specific interests.
Information We Share
We do not sell or otherwise share information about you that we collect or receive, except as described below:
Your Choices
You are entitled to make certain choices about how we communicate with you.
Access and Correction
Access to information that we collect and maintain about you may be available to you. For example, if you created a password-protected account within the KBB Sites, you can access that account to update the information you previously provided. Additionally, if you believe that information we maintain about you is inaccurate, subject to applicable law, you may request that we correct or amend the information by contacting us as indicated in the “How to Contact Us” section below.
Links
The KBB Sites may contain links to websites not operated by us, as well as third party widgets and applications discussed above. Once you leave the KBB Sites, we suggest that you review the applicable privacy policy of the third-party website or application. We are not responsible for the content or use of any websites or applications other than on the KBB Sites or the privacy practices of those websites or applications.
Data Security
We use commercially reasonable administrative, technical, personnel, and physical security measures designed to safeguard information about you in our possession against loss, theft and unauthorized use, disclosure or modification. Of course, despite these measures, we cannot guarantee perfect security of networks, servers and databases we operate or that are operated on our behalf.
California Privacy Rights
This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Statement of Kelley Blue Book Co. Inc. (KBB) and its subsidiaries (collectively, “we,” “us,” or “our”), a Cox Automotive, Inc. company, and applies solely to consumers who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice.
Information We Collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with an individual consumer, household, or device (“personal information”). We have collected the following categories of personal information from consumers within the last twelve (12) months:
* Note: The numbers in this column refer to the list of uses in the section above entitled How We May Use The Information We Collect.
We obtain the categories of personal information listed above from the following categories of sources:
Data Retention
Except as otherwise permitted or required by applicable law or regulation, we retain Personal Information in the categories set forth above only for as long as we have a legitimate business need to provide our services to consumers and dealers in the automotive marketplace. Because an average consumer usually purchases a vehicle infrequently, we keep some categories of information longer than others so that we can provide our services, such as identifiers, vehicle/commercial information, Internet or network activity, and inferences.
To determine the appropriate retention period, we consider various criteria, including whether the Personal Information continues to be necessary to provide our services; the amount, nature, and sensitivity of the Personal Information; the potential risk of harm to consumers from unauthorized use or disclosure; and the purposes for which we collect the Personal Information.
We continually review and enhance our retention practices in order to protect consumers while providing our services.
Sharing Personal Information
We may disclose your personal information to a third party for business purposes. When we disclose personal information for a business purpose, we enter into a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
Category A:
Identifiers
Category B:
California Customer Records personal information categories
Category D:
Commercial Information
Category F:
Internet or other similar network activity
Category G:
Geolocation data
Category K:
Inferences drawn from other personal information
Category L:
Sensitive Personal Information
We disclose your personal information for a business purpose to the following categories of third parties:
In the preceding twelve (12) months, we have sold the following categories of personal information:
We disclose your personal information for the purpose of sales to the following categories of third parties:
The California Privacy Laws provide California residents with specific rights regarding their personal information. This section describes your California privacy rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
California Civil Code Section 1798.83 entitles California users to request information concerning whether a business has disclosed certain information about you to any third parties for the third parties’ direct marketing purposes. California users who wish to request further information in compliance with this law or have questions or concerns about our privacy practices and policies may contact us as specified in the “How to Contact Us” section below.
Right to Limit Use and Disclosure of Sensitive Personal Information
You have the right, at any time, to direct us to limit your sensitive personal information to that use which is necessary to perform the services reasonably expected by an average consumer who requests those services. We may decline to limit the use and disclosure of sensitive personal information for the following reasons:
Correction Request Rights
You have the right to request that we correct inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information. Once we receive and confirm your verifiable consumer request, we shall use commercially reasonable efforts to correct the inaccurate personal information, pursuant to California Civil Code Section 1798.130 and regulations adopted pursuant to paragraph (8) of subdivision (a) of Section 1798.185.
Deletion Request Rights
You have the right to request that we delete any of your personal information that we collected about you and retained, subject to certain exceptions in the CCPA. Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records, unless an exception applies, and we will direct our service providers to similarly delete your personal information from their records.
Right to Opt-Out of Sales or Sharing of Personal Information
You have the right to opt-out of our sale or sharing of your personal information. To the extent that we sell your personal information, as the term “sell” is defined under the California Privacy Laws, you have the right to opt-out of the sale of your personal information by us to third parties at any time. You may submit a request to opt-out by clicking Do Not Sell My Data.
Exercising Access, Data Portability, Limiting Use of Sensitive Personal Information, Correction and Deletion Rights
To exercise the access, data portability, limiting use of sensitive personal information, correction and deletion rights described above, please submit a “verifiable consumer request” (defined below) to us by either:
Only you or someone you authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
A verifiable consumer request must:
You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Notice to Cox Automotive Employees
If you are a California consumer seeking Cox employment information about yourself, please view the Cox Enterprises California Privacy Notice.
Non-Discrimination
We will not discriminate against you for exercising any of your rights under the California Privacy Laws. Unless permitted by the California Privacy Laws, we will not deny you goods or services, charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, provide you a different level or quality of goods or services, suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services; or retaliate against an employee, job applicant, or independent contractor.
Contact Information
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Website: www.kbb.com/company/contact
Email: privacy@coxautoinc.com
California Privacy Rights Report
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
The metrics compiled are based on requests about Kelley Blue Book and other Kelley Blue Book products. Note that metrics for Autotrader and other Cox Automotive, Inc. businesses are contained in their own individual reports.
Time Frame – Kelley Blue Book
January 1, 2021 – December 31, 2021
Other State Privacy Rights
This section applies to residents of states with privacy laws that use our Services for individual or household purposes. Capitalized terms used in this section shall have the same meaning as under applicable law.
Some of the ways that we disclose Personal Data may constitute a Sale. You have the right to opt-out of the Sale of your Personal Data, as described below. We may also process your Personal Data for Targeted Advertising, as described in the “How We May Use the Information We Collect” section above. You have the right to opt-out of the processing of your Personal Data for Targeted Advertising, as described below.
If your state has enacted a consumer privacy law, subject to certain conditions and restrictions, you have the following rights with regard to your Personal Data:
This section describes our collection, use, and disclosure of information that is linked or reasonably linkable to an identified or identifiable national person, excluding de-identified or publicly available information (“Personal Data”). You can learn more about the Personal Data we process and the purpose for processing such information in the “The Information We Collect” section above. You can also learn more about our disclosure of Personal Data and the categories of third parties we disclose Personal Data to in the “How We May Use the Information We Collect” section above.
You may submit requests related to these rights by visiting this link: https://www.kbb.com/california-privacy-rights/. Please note that, depending on the nature of your request, you may be asked to provide information to verify your identity before your request can be processed. We will confirm receipt of your request and respond to your request as soon as we reasonably can and no later than legally required. You may exercise your privacy rights under the VCDPA free of charge up to no more than twice annually. If you make a privacy rights request, we will retain the Personal Data provided to us to fulfill your privacy rights request for our recordkeeping purposes.
Updates to this Privacy Statement
We may update this Privacy Statement to provide clarification or notice of changes to our practices. If we make changes, we will revise the date at the top of this Privacy Statement. We will provide you with additional notice of material changes by posting notice of the changes for thirty (30) days before we implement those changes.
How to Contact Us
If you have any questions or comments about this Privacy Statement, or if you would like us to update information we have about you or your preferences, please contact us by email at privacy@coxautoinc.com.
Introduction
Thank you for your interest in Kelley Blue Book Co, Inc. (“KBB”). We respect the privacy of our users when they use our websites, mobile and other online applications and products and services (collectively, the “KBB Sites”). By using KBB Sites, you consent to the use of your information and information about you in accordance with this Privacy Statement.
When we refer to KBB within this Privacy Statement, we are referring to KBB.com, Inc. This Privacy Statement applies to information collected through the KBB Sites and does not describe the collection, use and disclosure practices of any of our corporate affiliates or third parties. For information on the collection, use and disclosure practices of any company with whom you are doing business, whether or not affiliated with KBB, please review their privacy policies.
Services offered by KBB are not directed to individuals under the age of eighteen (18). If you are under eighteen (18), you should not provide any personal information to us.
This Privacy Statement covers:
- Information We Collect
- How We May Use the Information We Collect
- Applications, Widgets and Social Media
- Advertising Networks
- Information We Share
- Your Choices
- Access and Correction
- Links
- Data Security
- Your California Privacy Rights
- Other State Privacy Rights
- Updates to this Privacy Statement
- How to Contact Us
Information We Collect
Information is gathered from the KBB Sites by us, our service providers, advertisers, sponsors and partners.
Information You Provide. We may collect information that you choose to provide on the KBB Sites in a variety of ways, such as when you:
- Register for one of our products or services. This information may include your name, address, telephone number, email address, Social Security Number, and credit information;
- Make information available to us via social networking logins, such as Facebook or Twitter;
- Express an interest in buying, selling or trading in a car (such as by using our “email the seller” function);
- Participate in chats, web forums or other interactive sessions;
- Provide payment card information for one of our products or services;
- Subscribe to newsletters or provide feedback; and
- Participate in surveys, sweepstakes or other promotions.
Automated Information. Information regarding your use of the KBB Sites may be collected and/or aggregated through the use of automated means. This automatically collected information may include information such as:
- your IP address, the type of browser and operating system used;
- date and time you access the KBB Site and pages you visit, and if you linked from or to another website, the address of that website;
- email you open and links you click on within those email; and
- your ISP or mobile carrier, and the type of handheld or mobile device that you used.
- Your behavior while using our site, including the time you spend on portions of the site and how you interact with various aspects of the site
Data Technologies. Various technologies are used to automatically collect information, such as cookies, local shared objects, and web beacons (generally referred to as "Data Technologies"). "Cookies" are small identifiers sent from a web server that are stored on your device for the purpose of identifying your browser or storing information or settings in your browser. "Local shared objects," sometimes known as Flash cookies, may be used to store your preferences or display content based upon what you have viewed on various websites to personalize your visit. A "web beacon," also known as an Internet tag, pixel tag or clear GIF, links web pages to web servers and their cookies. Anonymous advertising identifiers are increasingly being used on mobile devices and otherwise in a manner similar to cookies. When we refer to Data Technologies, we are including all current and similar future technologies.
One or more Data Technologies may be used on the KBB Sites and other websites and mobile applications (that may not be the KBB Sites) by us, by another party on our behalf, or by third parties in accordance with their privacy policies. Data Technologies may be used by us and others, on our behalf and on their own behalf, to transmit information to you or about you and connect information about you from different sources, websites, devices, and mobile applications.
We may use a uniquely generated trackable toll-free telephone number on dealer sites or in advertisements. If you call one of these uniquely generated toll-free numbers, we (or a service provider acting on our behalf) may collect non-personally identifiable information about the call (e.g. date, time, duration), as well as personally identifiable information (e.g. your name, the number from which your call originated).
Videos We may target and track the videos you view on the Site. You consent to our tracking of your video viewing through the Site or third party social media for up to two years or as permitted by applicable law. You also consent to the sharing of your information in relation to viewing certain video content to third parties, including social media companies.
Location Information. When you download or use the KBB Sites, we may collect physical location information that is sufficiently precise to allow us to locate a specific person or device ("Location Information"). We only collect Location Information with your permission (e.g., such as when you agree to provide it to us after you initially access or download the KBB Sites). We may use Location Information and provide it to third parties to provide you with content and services that are relevant to a particular location, such as advertising, search results, dealers in the area, and directions.
Publicly Posted Information. Information that you make available to us and others via social media networks, forums, blogs, list serves, chat rooms or similar functionality is public information that we or others may share or use in accordance with the law.
Combined Information and Information from Other Sources. We may combine information that you provide to us, directly or indirectly, through our affiliates and other sources, and also with other information that is automatically collected. The combined information may include information about your use of the KBB Sites, your use of other websites, devices and mobile applications and information from our affiliates and other sources.
How We May Use the Information We Collect
We may use information we collect for the following purposes:
- For everyday business purposes, such as establishing and managing your user account, providing products and services you request, processing and collecting payments and providing customer support;
- To create listings and advertisements for any cars and other vehicles that you list for sale with us. These lists and advertisements may appear on the KBB Sites and other websites, mobile applications or services of third parties;
- To provide values and/or offers for cars that you would like to sell or trade in;
- To offer our other products or services and/or the products or services of others to you;
- To communicate about, and administer your participation in, special events, programs, surveys, contests, sweepstakes and other offers or promotions;
- To enable you to interact with KBB and our users, dealers, manufacturers and others through various means, such as through our message boards, blogs and social media;
- To evaluate and improve our business, including developing new products and services and analyzing the effectiveness of products, services, applications and websites;
- To provide or sell to third parties to allow them to market or advertise their products or services to you;
- To diagnose and address technical and service problems;
- To perform data analyses, including market and consumer research, trend analysis, demographic analysis and financial analysis;
- To deliver content (including advertising) correlating to your interests and browsing and usage history, both within the KBB Sites and on other websites and applications;
- To comply with applicable legal requirements and our policies; and
- To contact you via telephone, text or chat. We will obtain your consent to contact you when and in the manner required by law.
Applications, Widgets and Social Media
We may include applications or widgets from social media providers that allow interaction or content sharing by their users. These widgets, such as a Facebook "Share" or "Like" button, are visible to you on the web page you visit. Integration between the KBB Sites and social media networks such as Facebook, Twitter and others may allow social media networks in which you participate to collect information about you, even when you do not explicitly activate the network’s application or widget. Please visit the applicable social media network’s privacy policy to better understand their data collection practices and choices they make available to you. The privacy policy of the social media network controls the collection, use and disclosure of all personal information transmitted to that network.
Advertising Networks
Advertising that is customized based on predictions generated over time from your visits across different websites, devices and mobile applications is sometimes called “online behavioral” or “interest-based” advertising. We may partner with advertising networks, which are companies that deliver targeted advertisements to consumers and generate statistics and metrics related to the delivery of interest-based advertisements. They may utilize information collected through a variety of Data Technologies to provide customization, auditing, research and reporting for us, our affiliates and other advertisers. This data collection takes place both on the KBB Sites and on third-party’s websites and mobile applications. This process allows KBB and third parties to deliver targeted advertising, enhance marketing programs and help track the effectiveness of such efforts. Our advertising networks also may use this information for determining or predicting the characteristics and preferences of their respective advertising audiences and measuring the effectiveness of their advertising in accordance with their privacy policies.
We do not provide information that is directly associated with a specific person (such as name and address) to an advertising network when you interact with or view a customized advertisement. However, when you view or interact with an advertisement, the advertiser may make an assumption that you are interested in the subject matter of the advertisement.
You may also modify your cookie and tracking technology preferences by using the “Manage Cookies” link below. If you choose to decline cookies or similar technologies, however, please note that certain features may not function properly or at all as a result. Please note that even if you opt out, you will continue to receive advertisements, but they will not be tailored to your specific interests.
Information We Share
We do not sell or otherwise share information about you that we collect or receive, except as described below:
- Affiliates. We may share information about you, including personal information, with our corporate affiliates, who will use it in accordance with their privacy policies. Please visit https://www.coxenterprises.com/ for more information about our affiliates in the Cox Enterprises family of businesses.
- Our Service Providers. We may engage third parties to provide the services offered through or in connection with the KBB Sites on our behalf. We require such providers to maintain information about you as confidential and to use the information only to perform the services specified by us in a manner consistent with this Privacy Statement.
- Co-Sponsored Promotions. In the event that you participate in a survey, sweepstakes, contest or other promotion that is co-sponsored by KBB and a third party, we may share information collected in conjunction with the survey, sweepstakes, contest or promotion, including personal information, with that third party. After the information is provided to those third parties, the subsequent use or disclosure of such information is subject to their privacy policies and practices. Surveys, sweepstakes and other promotions conducted on behalf of KBB and a third party will include branding from both KBB and the third party.
- Promotions on behalf of Third Parties. Periodically, third parties may conduct surveys, contests, sweepstakes and other promotions for their own purpose on the KBB Sites. Information you provide in response to those activities is governed by their privacy policies. Surveys, sweepstakes and other promotions conducted solely for the purpose of a third party will include only the third party’s branding.
- Sellers, Dealers and Manufacturers.Information about you, including personal information and Data Technologies, may be shared with sellers, dealers and manufacturers, and their agents and third party service providers, who will use that information in accordance with their own privacy policies. For example:
- If you are interested in a particular listing of a car for sale, information about you may be shared with the seller of that particular car or similar cars or dealers in your area;
- If you are considering trading in a car, we may provide information about you to dealers who participate in our trade-in program and other dealers in your area;
- We may provide manufacturers, their agents or third party service providers, with information about you that we provided to their franchised dealers;
- We may provide manufacturers, their agents or third party service providers, with information about you if you are interested in certified pre-owned vehicles; or
- We may provide manufacturers, their agents or third party service providers, and dealers with information about you when you access the KBB Sites via KBB branded advertising and/or functionality found on their websites or other third party websites.
- Corporate and Asset Transactions. If we sell all or substantially all of our business or sell or transfer all or a material part of our assets, or are otherwise involved in a merger or transfer of all or a substantial part of our business, we may transfer all information we have collected and stored, including personal information, to the party or parties involved in the transaction as part of that transaction.
-
Other. We may access or disclose information, including personal information, to:
- protect or defend our interests and the legal rights or property of KBB and our affiliates;
- protect the rights, interests, safety and security of users of the KBB Sites or members of the public;
- protect against fraud or for risk management purposes; or
- comply with prudent legal practice as we may determine, and applicable law or legal process.
Your Choices
You are entitled to make certain choices about how we communicate with you.
- You may choose not to provide personal information, even though that might impact your ability to register or receive a particular product or service.
- If you do not want to receive marketing email from us, you can follow the unsubscribe link provided in those emails.
- If you do not want to receive interest-based advertisements, you can opt out as discussed in the "Advertising Networks" section above.
- You have a number of choices regarding certain Data Technologies. Most web browsers automatically accept cookies, but you can usually modify your browser’s setting to decline cookies if you prefer. You may also render some web beacons unusable by rejecting their associated cookies and disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on’s settings or opting out at the website of the technology provider. You may also modify your cookie and tracking technology preferences by using the “Manage Cookies” link below. If you choose to decline cookies or similar technologies, however, please note that certain features may not function properly or at all as a result. You may be able to adjust the use of advertising identifiers on mobile devices through the settings on your device. Finally, if you do not want to use a uniquely generated telephone number, you may choose to not call us.
- If you do not want us to use Location Information, you can decline our initial invitation to provide that information, or opt out by changing the location services settings on your mobile device. However, please note that certain features may not function properly or at all as a result if you opt out.
Access and Correction
Access to information that we collect and maintain about you may be available to you. For example, if you created a password-protected account within the KBB Sites, you can access that account to update the information you previously provided. Additionally, if you believe that information we maintain about you is inaccurate, subject to applicable law, you may request that we correct or amend the information by contacting us as indicated in the “How to Contact Us” section below.
Links
The KBB Sites may contain links to websites not operated by us, as well as third party widgets and applications discussed above. Once you leave the KBB Sites, we suggest that you review the applicable privacy policy of the third-party website or application. We are not responsible for the content or use of any websites or applications other than on the KBB Sites or the privacy practices of those websites or applications.
Data Security
We use commercially reasonable administrative, technical, personnel, and physical security measures designed to safeguard information about you in our possession against loss, theft and unauthorized use, disclosure or modification. Of course, despite these measures, we cannot guarantee perfect security of networks, servers and databases we operate or that are operated on our behalf.
California Privacy Rights
This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Statement of Kelley Blue Book Co. Inc. (KBB) and its subsidiaries (collectively, “we,” “us,” or “our”), a Cox Automotive, Inc. company, and applies solely to consumers who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice.
Information We Collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with an individual consumer, household, or device (“personal information”). We have collected the following categories of personal information from consumers within the last twelve (12) months:
|
Category |
Examples (KBB collects at least one of the examples from each category) |
Collected |
Business Purpose for Collection (*see note below) |
| A. Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. | YES | 1, 3, 4, 5, 6, 8, 9, 10, 11, 12 |
| B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. | YES | 1, 3, 4, 5, 6, 8, 9, 10, 11, 12 |
| C. Protected classification characteristics under California or federal law. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | YES | 9, 10, 11 |
| D. Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | YES | 2, 3, 4, 6, 9, 10, 11 |
| E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO | N/A |
| F. Internet or other similar network activity. | Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | YES | 3, 4, 9, 10 |
| G. Geolocation data. | Physical location or movements. | YES | 2, 3, 4, 5, 8, 9, 10 |
| H. Sensory data. | Audio, electronic, visual, thermal, olfactory, or similar information. | NO | N/A |
| I. Professional or employment-related information. | Current or past job history or performance evaluations. | NO | N/A |
| J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). | Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. | NO | N/A |
| K. Inferences drawn from other personal information. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | YES | 1, 3, 4, 7, 9, 10 |
| L. Sensitive Personal Information | Personal information that reveals a person’s social security, driver’s license, state identification card, passport number; an account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication; a person’s genetic data; and/or biometric data processed for the purpose of uniquely identifying a person. Some personal information included in this category may overlap with other categories. | YES | 1, 3, 4, 5, 6, 8, 9, 10, 11, 12 |
* Note: The numbers in this column refer to the list of uses in the section above entitled How We May Use The Information We Collect.
We obtain the categories of personal information listed above from the following categories of sources:
- Directly from our customers or their agents. For example, from documents that our clients provide to us related to the services for which they engage us.
- Indirectly from our clients or their agents. For example, through information we collect from our clients in the course of providing services to them.
- Directly and indirectly from activity on our website (www.quickvalues.com). For example, from submissions through our website portal or website usage details collected automatically.
- From third-parties that interact with us in connection with the services we perform.
Data Retention
Except as otherwise permitted or required by applicable law or regulation, we retain Personal Information in the categories set forth above only for as long as we have a legitimate business need to provide our services to consumers and dealers in the automotive marketplace. Because an average consumer usually purchases a vehicle infrequently, we keep some categories of information longer than others so that we can provide our services, such as identifiers, vehicle/commercial information, Internet or network activity, and inferences.
To determine the appropriate retention period, we consider various criteria, including whether the Personal Information continues to be necessary to provide our services; the amount, nature, and sensitivity of the Personal Information; the potential risk of harm to consumers from unauthorized use or disclosure; and the purposes for which we collect the Personal Information.
We continually review and enhance our retention practices in order to protect consumers while providing our services.
Sharing Personal Information
We may disclose your personal information to a third party for business purposes. When we disclose personal information for a business purpose, we enter into a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
Category A:
Identifiers
Category B:
California Customer Records personal information categories
Category D:
Commercial Information
Category F:
Internet or other similar network activity
Category G:
Geolocation data
Category K:
Inferences drawn from other personal information
Category L:
Sensitive Personal Information
We disclose your personal information for a business purpose to the following categories of third parties:
- Our affiliates.
- Service providers.
- Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.
In the preceding twelve (12) months, we have sold the following categories of personal information:
- Category A: Identifiers
- Category B: California Customer Records personal information categories
- Category D: Commercial Information
- Category F: Internet or other similar network activity
- Category G: Geolocation data
- Category K: Inferences drawn from other personal information
We disclose your personal information for the purpose of sales to the following categories of third parties:
- Our affiliates.
- Third parties involved in the automotive and advertising industries.
The California Privacy Laws provide California residents with specific rights regarding their personal information. This section describes your California privacy rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information we collected about you (also called a data portability request).
-
If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
- sales, identifying the personal information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
California Civil Code Section 1798.83 entitles California users to request information concerning whether a business has disclosed certain information about you to any third parties for the third parties’ direct marketing purposes. California users who wish to request further information in compliance with this law or have questions or concerns about our privacy practices and policies may contact us as specified in the “How to Contact Us” section below.
Right to Limit Use and Disclosure of Sensitive Personal Information
You have the right, at any time, to direct us to limit your sensitive personal information to that use which is necessary to perform the services reasonably expected by an average consumer who requests those services. We may decline to limit the use and disclosure of sensitive personal information for the following reasons:
- To perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services.
- To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, and or confidentiality of stored or transmitted personal information, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- To ensure the physical safety of natural persons, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- For short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of a consumer’s current interaction with the business, provided that the personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business.
- To perform services on behalf of the business, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- To verify or maintain the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by the business, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
- For purposes that do not infer characteristics about the consumer.
Correction Request Rights
You have the right to request that we correct inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information. Once we receive and confirm your verifiable consumer request, we shall use commercially reasonable efforts to correct the inaccurate personal information, pursuant to California Civil Code Section 1798.130 and regulations adopted pursuant to paragraph (8) of subdivision (a) of Section 1798.185.
Deletion Request Rights
You have the right to request that we delete any of your personal information that we collected about you and retained, subject to certain exceptions in the CCPA. Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records, unless an exception applies, and we will direct our service providers to similarly delete your personal information from their records.
Right to Opt-Out of Sales or Sharing of Personal Information
You have the right to opt-out of our sale or sharing of your personal information. To the extent that we sell your personal information, as the term “sell” is defined under the California Privacy Laws, you have the right to opt-out of the sale of your personal information by us to third parties at any time. You may submit a request to opt-out by clicking Do Not Sell My Data.
Exercising Access, Data Portability, Limiting Use of Sensitive Personal Information, Correction and Deletion Rights
To exercise the access, data portability, limiting use of sensitive personal information, correction and deletion rights described above, please submit a “verifiable consumer request” (defined below) to us by either:
- Calling us at 1-866-288-6872
- Visiting https://www.kbb.com/company/contact/california-privacy-rights
Only you or someone you authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
A verifiable consumer request must:
- Provide enough information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
- Describe your request with enough detail that allows us to properly understand, evaluate, and respond to it.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Notice to Cox Automotive Employees
If you are a California consumer seeking Cox employment information about yourself, please view the Cox Enterprises California Privacy Notice.
Non-Discrimination
We will not discriminate against you for exercising any of your rights under the California Privacy Laws. Unless permitted by the California Privacy Laws, we will not deny you goods or services, charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, provide you a different level or quality of goods or services, suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services; or retaliate against an employee, job applicant, or independent contractor.
Contact Information
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Website: www.kbb.com/company/contact
Email: privacy@coxautoinc.com
California Privacy Rights Report
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
The metrics compiled are based on requests about Kelley Blue Book and other Kelley Blue Book products. Note that metrics for Autotrader and other Cox Automotive, Inc. businesses are contained in their own individual reports.
Time Frame – Kelley Blue Book
January 1, 2021 – December 31, 2021
| Kelley Blue Book | Total Received | Complied With (in whole of in part) | Denied (invalid, incomplete, or exception applied) | Average Days to Respond |
| Requests to Know | 770 | 62 | 708 | 3.25 |
| Requests to Delete | 264 | 41 | 223 | 4.16 |
| Requests to Opt-Out | 2,577 | 951 | 1,626 | 12.41 |
Other State Privacy Rights
This section applies to residents of states with privacy laws that use our Services for individual or household purposes. Capitalized terms used in this section shall have the same meaning as under applicable law.
Some of the ways that we disclose Personal Data may constitute a Sale. You have the right to opt-out of the Sale of your Personal Data, as described below. We may also process your Personal Data for Targeted Advertising, as described in the “How We May Use the Information We Collect” section above. You have the right to opt-out of the processing of your Personal Data for Targeted Advertising, as described below.
If your state has enacted a consumer privacy law, subject to certain conditions and restrictions, you have the following rights with regard to your Personal Data:
This section describes our collection, use, and disclosure of information that is linked or reasonably linkable to an identified or identifiable national person, excluding de-identified or publicly available information (“Personal Data”). You can learn more about the Personal Data we process and the purpose for processing such information in the “The Information We Collect” section above. You can also learn more about our disclosure of Personal Data and the categories of third parties we disclose Personal Data to in the “How We May Use the Information We Collect” section above.
- Right to Access. You have the right know the Personal Data that we may hold about you and access such Personal Data.
- Right to Correct. You have the right to request that we correct inaccuracies in your Personal Data.
- Right to Delete. You have the right to request that we delete all Personal Data that we have collected from or obtained about you.
- Right to Opt-Out of Sales. You have the right to opt-out of the Sale of Personal Data. You can learn more about your right to opt-out of the Sale of Personal Data in the “How We May Use the Information We Collect” section above.
- Right to Opt-Out of Targeted Advertising. You may request that we stop disclosures of your Personal Data for Targeted Advertising by managing your cookie preferences as described in the “How We May Use the Information We Collect” section above.
- Right to Opt-Out of Profiling. You have the right to opt-out of our processing of Personal Data for the purposes of profiling. Our profiling does not result in decisions that produce legal or similarly significant effects however we still provide you the right to opt-out.
- Right to Appeal. If you are unsatisfied with our actions related to the exercise of one of your privacy rights above, you may appeal our decision.
- Sensitive Data. Our processing of your Sensitive Data will be based on your consent. For example, in the course of using our Services, you may allow us to use your precise geolocation. You may be able to limit or disallow this use of location data by adjusting the settings for our applications on your device’s privacy settings.
You may submit requests related to these rights by visiting this link: https://www.kbb.com/california-privacy-rights/. Please note that, depending on the nature of your request, you may be asked to provide information to verify your identity before your request can be processed. We will confirm receipt of your request and respond to your request as soon as we reasonably can and no later than legally required. You may exercise your privacy rights under the VCDPA free of charge up to no more than twice annually. If you make a privacy rights request, we will retain the Personal Data provided to us to fulfill your privacy rights request for our recordkeeping purposes.
Updates to this Privacy Statement
We may update this Privacy Statement to provide clarification or notice of changes to our practices. If we make changes, we will revise the date at the top of this Privacy Statement. We will provide you with additional notice of material changes by posting notice of the changes for thirty (30) days before we implement those changes.
How to Contact Us
If you have any questions or comments about this Privacy Statement, or if you would like us to update information we have about you or your preferences, please contact us by email at privacy@coxautoinc.com.