Privacy Policy

Below you'll find our Privacy Policy. Please Reach out to us with any questions.

C.A.R.

Effective Date: October 3, 2025

Company: Cross Automotive Royale, LLC (d/b/a C.A.R.) (“C.A.R.,” “we,” “us,” or “our”)

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our websites, shop with us, attend our training workshops, watch or interact with our YouTube content, rent vehicles or equipment, purchase dealership vehicles, buy merchandise, or use any related services we offer (collectively, the “Services”).

By using the Services, you acknowledge this Privacy Policy. Where required by law, we will ask for your consent separately.

Quick summary: We collect contact, account, and transaction information; identifiers for rentals and sales (for example, driver’s license), limited payment details via our processors, usage data through cookies and analytics, and—if applicable—vehicle/telematics data in rentals. We use this to provide the Services, secure our operations, comply with laws, and improve marketing (which you can opt out of). You can exercise privacy rights (access, delete, correct, opt-out of sale/share and targeted ads, etc.) using the contact methods below.

Scope

This Policy applies to information we process as a controller via our websites, online stores, learning portals, workshops, rental desks, and customer support, and to user interactions with our social channels and content. It does not cover third parties we do not control (for example, payment processors, insurers, manufacturers, platforms like YouTube) or data we process solely on behalf of a business customer as a processor. Their privacy policies govern their practices.

Personal Information We Collect

1) Information you provide directly

Identifiers and contact info: name, email, phone, billing and shipping address, government-issued ID (for example, driver’s license), date of birth (for age verification), signature (for rental and sales paperwork).
Account data: username and password, preferences, communications.
Commercial and transaction info: orders, rentals, deposits, vehicle selections, service history, warranties, trade-ins.
Payment info: card or bank details are collected and processed by our payment processors; we receive limited tokens or confirmations and do not store full card numbers.
Financing and applications (dealership): if you apply for credit, you may provide SSN, income, employment, and related financial data to us and/or a financing partner.
Workshop and event data: rosters, certifications, waivers, emergency contacts if provided, photography or video if you consent.
User content and communications: messages to support, reviews, survey responses.
Safety and incident reports: accident forms, claims, security reports.

2) Information collected automatically

Device and usage data: IP address, device identifiers, browser type, pages viewed, links clicked, session timestamps, approximate location, referral/UTM, and similar data.
Cookies, SDKs, and similar tech: to run the site, remember preferences, measure performance, and personalize or advertise. See Cookies and Ads below.
Video/CCTV at our facilities for safety and theft prevention (retention limited—see Retention).

3) Information from third parties

Service providers and partners: payment processors, analytics and advertising networks, shipping and fraud-prevention vendors.
Dealership and rental partners: insurers, credit and financing partners, DMVs, background or driver record verification services where lawful, roadside assistance, telematics vendors for fleet safety and maintenance.
Public and social media sources: if you engage with our channels.

4) Telematics and in-vehicle data (rentals and certain services)

Rental vehicles and some service vehicles may include telematics that collect location, mileage, diagnostics, fuel or charge levels, driving events (for example, harsh braking), and incident data. We use this only for safety, theft prevention, maintenance, lawful compliance, and to administer your rental. Some data may be collected directly by the vehicle manufacturer or a telematics provider under their own policy.

Children: Our Services are not directed to children under 13, and we do not knowingly collect personal information from them.

How We Use Personal Information

We use personal information to:

Provide the Services: process orders, rentals, reservations, repairs, custom builds, deliveries, returns, and customer support.
Verify identity and eligibility: age and valid driver status for rentals or drive events; prevent fraud and abuse.
Arrange financing and insurance: share necessary data with financing and insurance partners you choose.
Operate, secure, and improve: debug, monitor, and enhance our sites, apps, workshops, and channels.
Communicate with you: confirmations, alerts, service updates, policy changes, marketing (with opt-out).
Comply with law and enforce terms: respond to lawful requests, collect debts, protect rights and safety.
Research and analytics: understand engagement with our content (including YouTube) and Services.

Legal bases (EEA/UK/CH): contract performance, legitimate interests (for example, security, fraud prevention, product improvement, basic marketing), consent where required, and legal obligations.

Cookies, Analytics, and Ads

We use cookies, pixels, and similar technologies for site functionality, performance analytics, and to personalize or measure advertising, including cross-context behavioral advertising or targeted ads.

You can manage preferences in our Cookie Settings and your browser.
Where required, we display a consent banner.
If we sell or share personal information as defined under California law through cookies or advertising, you may opt out via our Do Not Sell or Share My Personal Information page and we honor Global Privacy Control signals.

How We Disclose Personal Information

We may disclose personal information to:

Service providers and contractors: hosting, payment, fulfillment, identity verification, telematics, analytics, ad tech, IT and security, customer support—bound by contract.
Business partners you engage: financing and credit, insurers, co-sponsors of events.
Affiliates and corporate transactions: current or future affiliates; in a merger, acquisition, or asset sale.
Legal and safety: to comply with law, respond to lawful requests, protect rights and safety, prevent fraud, or enforce agreements.
With consent or at your direction.

We do not disclose sensitive personal information for the purpose of inferring characteristics about you.

Retention

We retain personal information for as long as needed to provide the Services, meet legal, tax, and audit obligations, resolve disputes, and secure our operations. Typical periods include:

Account and transaction records: 7 years after last interaction.
Rental and telematics records: up to 3 years, longer if required by law or claims.
CCTV footage: 30–90 days unless needed for investigation.
Web analytics: up to 25 months, or per your cookie choices.
We may anonymize data for longer-term analytics.

Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, receive a portable copy, opt out of sale or sharing and targeted advertising, restrict or object to certain processing, and limit use of sensitive information. EEA, UK, and Swiss residents also may withdraw consent and lodge a complaint with a supervisory authority.

How to exercise:

Email abigail.king@cross-automotive.com.
For California, you may use an authorized agent; we will verify your request, for example via email or account.
Appeals where required by law: If we deny a request, you may appeal by replying to our decision or emailing privacy@cross-automotive.com with subject Privacy Appeal.
Opt-out of sale or sharing and targeted ads: Use our Do Not Sell or Share My Personal Information page or enable Global Privacy Control in your browser.

Non-discrimination: We will not discriminate against you for exercising your privacy rights.

California Notice at Collection

We collect the following categories of personal information for the purposes below. We may share for cross-context behavioral advertising as defined by the CPRA via cookies or ads; we do not knowingly sell children’s data.

Category (CPRA)ExamplesBusiness PurposesRetention (typical)Sold/Shared?

Identifiersname, email, phone, IP, driver’s licenseaccounts, orders, rentals, support, securitylife of account plus 7 yearsShared for ads, opt-out available

Customer Recordsbilling and shipping, signaturesfulfill orders and services, rentals, compliance7 yearsNo sale; may share with service providers

Protected Class Data (optional)age for rentalseligibility checks required by law or policyas needed or by lawNo

Commercial Infopurchases, rentals, preferencesfulfillment, support, analytics7 yearsNo sale; may share for ads in aggregate

Internet/Network Activitypages viewed, device IDssite operation, analytics, adsup to 25 monthsShared for ads, opt-out available

Geolocation (approximate)city and state from IPcontent localization, fraud preventionup to 25 monthsShared for ads, opt-out available

Audio/VisualCCTV, workshop photos with consentsafety, marketing if consented30–90 days for CCTV; marketing per consentNo

Inferencespreferences from activitypersonalize contentup to 25 monthsShared for ads, opt-out available

Sensitive Personal Infodriver’s license, SSN for financing, precise location from telematicseligibility, fraud prevention, safety, complianceper legal requirementsNot used to infer; you may limit where required

Sold or Shared reflects CPRA definitions.

Financial Privacy (GLBA, if you apply for credit)

If you seek or obtain financing or credit, certain information may be governed by the Gramm-Leach-Bliley Act. Where GLBA applies, we or our financing partners will provide a separate GLBA privacy notice at the time of collection. In the event of a conflict, the GLBA notice controls for that activity.

Text Messages and Calls (TCPA)

If you provide a phone number, you agree we or our service providers may contact you by call or text about your orders, rentals, appointments, or accounts. Marketing texts are sent only with your consent where required. Message and data rates may apply. You can opt out at any time by replying STOP, or HELP for help.

Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information. No method is 100 percent secure; please use unique, strong passwords and notify us immediately of any unauthorized use of your account.

International Data Transfers

If you are in the EEA, UK, or Switzerland, we may transfer your personal information to countries that do not offer the same level of data protection. Where required, we use approved safeguards such as Standard Contractual Clauses and supplementary measures.

Controller or Representative details: Cross Automotive Royale, LLC (C.A.R.).
Data Protection Officer, if appointed: available upon request.
Complaints: You may lodge a complaint with your local supervisory authority.

Third-Party Services and Links

Our Services may reference or embed third-party content and platforms such as YouTube. Those parties independently collect and process data under their own policies. Please review their privacy notices.

Changes to This Policy

We may update this Policy from time to time. We will post the updated version and change the Effective Date above. Material changes will be communicated as required by law.

Contact Us

Email: abigail.king@cross-automotive.com
Mail: Cross Automotive Royale, LLC (C.A.R.), 700 Commercial Ave., Mounds, OK 74047