Privacy

This statement is effective as of 1/1/2020.

Introduction

Thank you for your interest in Kelley Blue Book Co, Inc. ("KBB"). We respect the privacy of our users when they use our websites, mobile and other online applications and products and services (collectively, the "KBB Sites"). By using KBB Sites, you consent to the use of your information and information about you in accordance with this Privacy Statement.

When we refer to KBB within this Privacy Statement, we are referring to KBB.com, Inc. This Privacy Statement applies to information collected through the KBB Sites and does not describe the collection, use and disclosure practices of any of our corporate affiliates or third parties. For information on the collection, use and disclosure practices of any company with whom you are doing business, whether or not affiliated with KBB, please review their privacy policies.

Services offered by KBB are not directed to individuals under the age of eighteen (18). If you are under eighteen (18), you should not provide any personal information to us.

This Privacy Statement covers:

Information We Collect

Information is gathered from the KBB Sites by us, our service providers, advertisers, sponsors and partners.

Information You Provide. We may collect information that you choose to provide on the KBB Sites in a variety of ways, such as when you:

Automated Information. Information regarding your use of the KBB Sites may be collected and/or aggregated through the use of automated means. This automatically collected information may include information such as:

Data Technologies. Various technologies are used to automatically collect information, such as cookies, local shared objects, and web beacons (generally referred to as "Data Technologies"). "Cookies" are small identifiers sent from a web server that are stored on your device for the purpose of identifying your browser or storing information or settings in your browser. "Local shared objects," sometimes known as Flash cookies, may be used to store your preferences or display content based upon what you have viewed on various websites to personalize your visit. A "web beacon," also known as an Internet tag, pixel tag or clear GIF, links web pages to web servers and their cookies. Anonymous advertising identifiers are increasingly being used on mobile devices and otherwise in a manner similar to cookies. When we refer to Data Technologies, we are including all current and similar future technologies.

One or more Data Technologies may be used on the KBB Sites and other websites and mobile applications (that may not be the KBB Sites) by us, by another party on our behalf, or by third parties in accordance with their privacy policies. Data Technologies may be used by us and others, on our behalf and on their own behalf, to transmit information to you or about you and connect information about you from different sources, websites, devices, and mobile applications.

We may use a uniquely generated trackable toll-free telephone number on dealer sites or in advertisements. If you call one of these uniquely generated toll-free numbers, we (or a service provider acting on our behalf) may collect non-personally identifiable information about the call (e.g. date, time, duration), as well as personally identifiable information (e.g. your name, the number from which your call originated).

Videos We may target and track the videos you view on the Site. You consent to our tracking of your video viewing through the Site or third party social media for up to two years or as permitted by applicable law.

Location Information. When you download or use the KBB Sites, we may collect physical location information that is sufficiently precise to allow us to locate a specific person or device ("Location Information"). We only collect Location Information with your permission (e.g., such as when you agree to provide it to us after you initially access or download the KBB Sites). We may use Location Information and provide it to third parties to provide you with content and services that are relevant to a particular location, such as advertising, search results, dealers in the area, and directions.

Publicly Posted Information. Information that you make available to us and others via social media networks, forums, blogs, list serves, chat rooms or similar functionality is public information that we or others may share or use in accordance with the law.

Combined Information and Information from Other Sources. We may combine information that you provide to us, directly or indirectly, through our affiliates and other sources, and also with other information that is automatically collected. The combined information may include information about your use of the KBB Sites, your use of other websites, devices and mobile applications and information from our affiliates and other sources.

How We May Use the Information We Collect

We may use information we collect for the following purposes:

Applications, Widgets and Social Media

We may include applications or widgets from social media providers that allow interaction or content sharing by their users. These widgets, such as a Facebook "Share" or "Like" button, are visible to you on the web page you visit. Integration between the KBB Sites and social media networks such as Facebook, Twitter and others may allow social media networks in which you participate to collect information about you, even when you do not explicitly activate the network’s application or widget. Please visit the applicable social media network’s privacy policy to better understand their data collection practices and choices they make available to you. The privacy policy of the social media network controls the collection, use and disclosure of all personal information transmitted to that network.

Advertising Networks

Advertising that is customized based on predictions generated over time from your visits across different websites, devices and mobile applications is sometimes called "online behavioral" or "interest-based" advertising. We may partner with advertising networks, which are companies that deliver targeted advertisements to consumers and generate statistics and metrics related to the delivery of interest-based advertisements. They may utilize information collected through a variety of Data Technologies to provide customization, auditing, research and reporting for us, our affiliates and other advertisers. This data collection takes place both on the KBB Sites and on third-party’s websites and mobile applications. This process allows KBB and third parties to deliver targeted advertising, enhance marketing programs and help track the effectiveness of such efforts. Our advertising networks also may use this information for determining or predicting the characteristics and preferences of their respective advertising audiences and measuring the effectiveness of their advertising in accordance with their privacy policies.

We do not provide information that is directly associated with a specific person (such as name and address) to an advertising network when you interact with or view a customized advertisement. However, when you view or interact with an advertisement, the advertiser may make an assumption that you are interested in the subject matter of the advertisement.

Some companies disclose when they are using interest-based advertising programs on the KBB Sites to deliver third-party ads or collecting information about your visit for these purposes and give you the ability to opt-out of this use of your information. You may see an icon about ads in or around third-party advertisements on the KBB Sites that use interest-based advertising programs and on pages where data is collected and used for online interest-based advertising. Clicking on this icon will provide additional information about the companies and data practices that were used to deliver the ad. You can opt out of delivery of targeted advertising to you by multiple companies by visiting www.aboutads.info/choices, www.networkadvertising.org/managing/opt_out.asp and www.evidon.com. Please note that even if you opt out, you will continue to receive advertisements, but they will not be tailored to your specific interests.

Information We Share

We do not sell or otherwise share information about you that we collect or receive, except as described below:

Your Choices

You are entitled to make certain choices about how we communicate with you.

California Privacy Rights

This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Statement of Kelley Blue Book Co. Inc. (KBB) and its subsidiaries (collectively, "we," "us," or "our"), a Cox Automotive, Inc. company, and applies solely to consumers who reside in the State of California ("consumers" or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 ("CCPA") and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice.

Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with an individual consumer, household, or device ("personal information"). We have collected the following categories of personal information from consumers within the last twelve (12) months:

The following examples are taken directly from California Consumer Privacy Act, Kelley Blue Book Co. Inc. (KBB) collects at least one of the example items from each category.

Category Examples Collected
A. Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. YES
C. Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). NO
D. Commercial information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. YES
E. Biometric information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. NO
F. Internet or other similar network activity. Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. YES
G. Geolocation data. Physical location or movements. YES
H. Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. NO
I. Professional or employment-related information. Current or past job history or performance evaluations. NO
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. NO
K. Inferences drawn from other personal information. Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. YES

We obtain the categories of personal information listed above from the following categories of sources:

  • Directly from our customers or their agents. For example, from documents that our clients provide to us related to the services for which they engage us.
  • Indirectly from our clients or their agents. For example, through information we collect from our clients in the course of providing services to them.
  • Directly and indirectly from activity on our website (www.kbb.com). For example, from submissions through our website portal or website usage details collected automatically.
  • From third-parties that interact with us in connection with the services we perform.
Sharing Personal Information

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:

Category A:

Identifiers

Category B:

California Customer Records personal information categories

Category D:

Commercial Information

Category F:

Internet or other similar network activity

Category G:

Geolocation data

Category K:

Inferences drawn from other personal information

We disclose your personal information for a business purpose to the following categories of third parties:

  • Our affiliates.
  • Service providers.
  • Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.

In the preceding twelve (12) months, we have sold the following categories of personal information:

Category A:

Identifiers

Category B:

California Customer Records personal information categories

Category D:

Commercial Information

Category F:

Internet or other similar network activity

Category G:

Geolocation data

Category K:

Inferences drawn from other personal information

We disclose your personal information for the purpose of sales to the following categories of third parties:

  • Our affiliates.
  • Third parties involved in the automotive and advertising industries.
Your Rights and Choices

The CCPA provides California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

  • The categories of personal information we collected about you.
  • The categories of sources for the personal information we collected about you.
  • Our business or commercial purpose for collecting or selling that personal information.
  • The categories of third parties with whom we share that personal information.
  • The specific pieces of personal information we collected about you (also called a data portability request).
  • If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:

    • sales, identifying the personal information categories that each category of recipient purchased; and
    • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

California Civil Code Section 1798.83 entitles California users to request information concerning whether a business has disclosed certain information about you to any third parties for the third parties’ direct marketing purposes. California users who wish to request further information in compliance with this law or have questions or concerns about our privacy practices and policies may contact us as specified in the “How to Contact Us” section below.

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected about you and retained, subject to certain exceptions in the CCPA. Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records, unless an exception applies, and we will direct our service providers to similarly delete your personal information from their records.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a “verifiable consumer request” (defined below) to us by either:

Only you or someone you authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

A verifiable consumer request must:

  • Provide enough information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
  • Describe your request with enough detail that allows us to properly understand, evaluate, and respond to it.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not deny you goods or services, charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, provide you a different level or quality of goods or services, or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Do Not Track

Online Tracking Policy for California Residents. As of the effective date of this Privacy Statement, there is no commonly accepted response for Do Not Track signals initiated by browsers, therefore we do not respond to them.

Contact Information

If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Website: www.kbb.com/company/contact
Email: privacy@coxautoinc.com
Postal Address: Cox Automotive, Inc.
Attn: Scott Hilsen, Chief Compliance & Privacy Officer
6205 Peachtree Dunwoody Rd. NE
Atlanta, Ga 30328

Access and Correction

Access to information that we collect and maintain about you may be available to you. For example, if you created a password-protected account within the KBB Sites, you can access that account to update the information you previously provided. Additionally, if you believe that information we maintain about you is inaccurate, subject to applicable law, you may request that we correct or amend the information by contacting us as indicated in the "How to Contact Us" section below.

Links

The KBB Sites may contain links to websites not operated by us, as well as third party widgets and applications discussed above. Once you leave the KBB Sites, we suggest that you review the applicable privacy policy of the third-party website or application. We are not responsible for the content or use of any websites or applications other than on the KBB Sites or the privacy practices of those websites or applications.

Data Security

We use commercially reasonable administrative, technical, personnel, and physical security measures designed to safeguard information about you in our possession against loss, theft and unauthorized use, disclosure or modification. Of course, despite these measures, we cannot guarantee perfect security of networks, servers and databases we operate or that are operated on our behalf.

Disputes

If you choose to visit the KBB Sites, your visit and any dispute regarding privacy is subject to this Privacy Statement and our Visitor Agreement, including limitations on damages, resolution of disputes, and application of the law of the state of California.

Updates to this Privacy Statement

We may update this Privacy Statement to provide clarification or notice of changes to our practices. If we make changes, we will revise the date at the top of this Privacy Statement. We will provide you with additional notice of material changes by posting notice of the changes for thirty (30) days before we implement those changes.

How to Contact Us

If you have any questions or comments about this Privacy Statement, or if you would like us to update information we have about you or your preferences, please contact us by email at privacy@kbb.com.