RTH AUTOS, LLC ("we," "our," "us," or the "Company") is committed to protecting the privacy of individuals who visit our website, use our services, or interact with us in any manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access our website at rthautos.shop (the "Site") or engage with us through our sales, service, financing, and vehicle acquisition offerings.
By using our Site or providing your information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of our Site and refrain from submitting your personal information to us. We may update this policy from time to time, and your continued use of our services after any amendments constitutes acceptance of the revised terms.
This policy applies to all information collected through our website, telephone communications, in-person interactions at our physical location, email correspondence, and any third-party platforms through which we operate. We strive to maintain the highest standards of data protection and transparency in all our dealings.
We collect personal information that you voluntarily provide to us when you fill out forms on our Site, submit a vehicle inquiry, request a financing quote, schedule a service appointment, apply for credit, or communicate with us via email, phone, or in person. This information may include your full name, email address, telephone number, postal address, driver's license number, date of birth, Social Security number (or comparable tax identification number), employment details, income information, and financial history when applicable to credit applications or vehicle financing.
We also collect information you provide when you participate in surveys, promotions, contests, or customer satisfaction initiatives. This may include your preferences regarding vehicle makes, models, features, and your experience with our sales and service departments. You are under no obligation to provide this information, but failure to do so may limit our ability to serve you effectively.
When you visit our Site, we automatically collect certain information about your device and browsing activity through the use of cookies, web beacons, pixel tags, server logs, and similar tracking technologies. This information includes your IP address, browser type and version, operating system, device type, referring URLs, pages viewed, time spent on each page, click-stream data, and other diagnostic data related to your interaction with our website.
The collection of this data helps us understand how visitors use our Site, identify technical issues, improve user experience, and tailor our marketing efforts. We may also collect geolocation data (at the city or region level) derived from your IP address to provide location-specific content and offers. Most of this information is aggregated and anonymized and does not directly identify you as an individual.
We may obtain information about you from third-party sources, including but not limited to credit reporting agencies (such as Experian, TransUnion, and Equifax), consumer data brokers, vehicle history reporting services (such as Carfax or AutoCheck), insurance verification platforms, and government motor vehicle records. This information is used primarily for credit approval processing, vehicle trade-in evaluations, identity verification, and fraud prevention purposes.
Additionally, we may receive information from our business partners, such as third-party lenders, warranty providers, and insurance companies, to facilitate vehicle purchases and financing arrangements. When you interact with our advertisements on social media platforms, search engines, or other websites, these platforms may share aggregate demographic data or engagement metrics with us, subject to their own privacy policies and your consent settings on those platforms.
We use the information we collect for a variety of legitimate business purposes aimed at providing you with the best possible experience and service. The primary purposes include processing vehicle sales and lease transactions, facilitating financing and credit applications, scheduling and performing vehicle repairs and maintenance services, evaluating trade-in vehicles, responding to your inquiries and customer service requests, and communicating with you about your account or transactions.
We also use your information to send you marketing communications, including newsletters, promotional offers, vehicle inventory updates, service reminders, and event invitations, provided you have consented to receive such communications. You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any promotional email or by contacting us directly.
Other uses include improving our website and services through analytics and research, detecting and preventing fraudulent or unauthorized activities, complying with legal obligations and regulatory requirements, enforcing our terms and conditions, and conducting internal business operations such as auditing, data analysis, and recordkeeping. We may also aggregate or anonymize your information for statistical purposes, in which case the resulting data is no longer considered personal information.
If you are a resident of the European Economic Area (EEA), the United Kingdom, or Switzerland, our processing of your personal data is governed by the General Data Protection Regulation (GDPR). We rely on several legal bases to process your personal data, depending on the nature of the processing activity and the specific data involved.
The legal bases we rely upon include: (a) Consent — where you have given explicit consent for a specific processing purpose, such as receiving marketing communications; (b) Contractual Necessity — where processing is necessary for the performance of a contract with you, such as processing a vehicle purchase or financing agreement; (c) Legal Obligation — where processing is required to comply with applicable laws, regulations, court orders, or governmental requests; and (d) Legitimate Interests — where processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and conducting market research, provided such interests are not overridden by your fundamental rights and freedoms.
Where we rely on consent as the legal basis, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. We have conducted a legitimate interests assessment to ensure that our processing activities are balanced and proportionate. If you have any questions about the legal basis on which we process your data, please contact us using the information provided in Section 14 of this Privacy Policy.
We may share your personal information with affiliated companies, subsidiaries, and business partners who assist us in operating our business, processing transactions, and providing services to you. These third parties include financial institutions and lenders for credit and financing applications, vehicle manufacturers and warranty providers, insurance companies, vehicle history reporting services, and payment processors.
We may also share your information with service providers and vendors who perform functions on our behalf, such as website hosting, data analytics, email delivery, customer relationship management (CRM) services, advertising and marketing platforms, and information technology support. These providers are contractually bound to protect your information and use it solely for the purposes we specify.
We may disclose your information when required by law, regulation, legal process, or governmental request, including to comply with a subpoena, court order, or similar legal mandate. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others, including to investigate fraud, respond to a security threat, or prevent imminent harm. In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction, and we will notify you of any such change in ownership or control.
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The specific retention periods vary depending on the nature of the information and the applicable legal requirements.
For customer transaction records, including vehicle purchase, lease, and financing documents, we typically retain your information for the duration of the contractual relationship plus a period of seven (7) years after the last transaction to comply with tax, accounting, and recordkeeping requirements under applicable state and federal laws. Credit application information is retained for the period required by the Fair Credit Reporting Act (FCRA) and related regulations, generally five (5) years from the date of application.
Service and repair records are retained for the duration of your ownership of the vehicle plus a reasonable period thereafter to facilitate warranty claims, recall notifications, and vehicle history reporting. Marketing and communication data is retained until you opt out of marketing communications or for two (2) years after your last interaction with us, whichever occurs first. When information is no longer needed, we securely delete or anonymize it using industry-standard techniques.
We implement comprehensive administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, disclosure, or destruction. These measures include encryption of data in transit using Transport Layer Security (TLS) protocol, encryption of sensitive data at rest using industry-standard algorithms, and secure server infrastructure hosted in controlled environments with restricted physical access.
Our security practices also include firewall protection, intrusion detection and prevention systems, regular vulnerability assessments and penetration testing, access controls based on the principle of least privilege, employee training on data protection and privacy best practices, and incident response procedures to address any potential data breaches promptly and effectively. We require all third-party service providers who handle your information to maintain comparable security standards.
Despite our best efforts, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information, but we take every reasonable precaution to minimize risk. In the event of a data breach that affects your personal information, we will notify you and the appropriate regulatory authorities as required by applicable law. We encourage you to take steps to protect your own information, such as using strong passwords and keeping your contact information with us current.
Depending on your jurisdiction, you may have certain rights regarding your personal information. Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the right to: (a) Know what personal information we collect, use, disclose, and sell about you; (b) Access a copy of the specific pieces of personal information we have collected about you in a portable format; (c) Delete personal information we have collected from you, subject to certain exceptions; (d) Correct inaccurate personal information that we maintain about you; (e) Opt out of the sale or sharing of your personal information for cross-context behavioral advertising; and (f) Non-discrimination — we will not deny goods or services, charge different prices, or provide a different level of quality based on your exercise of these rights.
Under the GDPR, residents of the EEA, UK, and Switzerland have additional rights, including: (a) the Right to Rectification of inaccurate data; (b) the Right to Restrict Processing under certain circumstances; (c) the Right to Data Portability in a structured, commonly used, machine-readable format; (d) the Right to Object to processing based on legitimate interests or for direct marketing purposes; and (e) the Right to Lodge a Complaint with a supervisory authority if you believe our processing of your data violates applicable law.
To exercise any of these rights, please contact us using the information provided in Section 14. We will respond to your verifiable request within the time frame required by applicable law (generally 30 to 45 days). We may need to verify your identity before processing your request, which may require you to provide additional information. We do not sell your personal information in exchange for monetary consideration; however, we may share certain information with advertising partners that could be considered a "sale" under the CCPA. You may opt out of such sharing by contacting us or by using the "Do Not Sell or Share My Personal Information" link if available on our Site.
Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, personalize content and advertisements, and provide social media features. Cookies are small text files that are stored on your device when you visit a website. They allow us to recognize your browser, remember your preferences, and understand how you interact with our Site.
We use the following categories of cookies: (a) Essential Cookies — necessary for the basic functionality of our Site, such as enabling secure logins and maintaining session state; (b) Functional Cookies — that remember your preferences and choices to provide enhanced, personalized features; (c) Analytics Cookies — that collect information about how visitors use our Site, which pages are visited most often, and whether users encounter errors, helping us improve our website; and (d) Advertising Cookies — used to deliver relevant advertisements to you and measure the effectiveness of our marketing campaigns.
You can control and manage cookies through your browser settings at any time. Most browsers allow you to block or delete cookies, but please note that disabling certain cookies may affect the functionality of our Site and limit your ability to use certain features. For more detailed information about the specific cookies we use and your choices regarding them, please refer to our Cookie Policy or contact us. We also use Google Analytics and similar analytics services to analyze usage patterns; these services may set their own cookies subject to their respective privacy policies.
Our Site and communications may contain links to third-party websites, applications, and services that are not owned or controlled by RTH AUTOS, LLC. These third parties may include financial institutions, vehicle history reporting services, insurance providers, payment processors, social media platforms, and other business partners. We provide these links for your convenience and information purposes only.
We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. The inclusion of a link does not imply endorsement, approval, or affiliation with the linked website. We encourage you to review the privacy policies and terms of service of any third-party sites you visit, as their data handling practices may differ significantly from ours. This Privacy Policy applies solely to information collected by RTH AUTOS, LLC and not to information collected by any third party.
Our Site may also integrate third-party features such as social media sharing buttons, embedded video players, and interactive map services. When you interact with these features, the third-party provider may collect certain information about your interaction, subject to their own privacy policies. We recommend that you review the privacy settings on your social media accounts and other third-party services to control the information shared with those platforms.
Our services and website are not directed to individuals under the age of 16 years old. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately using the information in Section 14, and we will take prompt steps to delete such information from our systems.
In compliance with the Children's Online Privacy Protection Act (COPPA) and equivalent regulations in other jurisdictions, we do not knowingly solicit or collect information from children. If we become aware that a child under the applicable age of consent has provided us with personal information, we will delete it as soon as reasonably practicable. We encourage parents and guardians to monitor their children's online activities and to instruct them never to provide personal information on any website without parental permission.
Your personal information may be transferred to, stored, and processed in the United States and other countries where our servers, data centers, or service providers are located. These countries may have data protection laws that differ from those in your country of residence. If you are located in the EEA, UK, Switzerland, or other regions with comprehensive data protection laws, please be aware that the United States may not provide the same level of data protection as your home jurisdiction.
When we transfer personal data from the EEA or UK to the United States, we rely on appropriate safeguards such as the Standard Contractual Clauses (SCCs) adopted by the European Commission or the UK Information Commissioner's Office, as applicable. We have implemented SCCs with our service providers who process personal data outside the EEA or UK to ensure that your data receives adequate protection. We also conduct Transfer Impact Assessments (TIAs) to evaluate the legal and practical protections applicable to the data being transferred.
We additionally rely on other transfer mechanisms as they become available under applicable law, including Binding Corporate Rules (BCRs) where appropriate and the EU-US Data Privacy Framework and the UK Extension to that Framework where certified. By submitting your personal information to us, you acknowledge and consent to these transfers, subject to the safeguards described herein. If you have any concerns about international data transfers, please contact us.
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal obligations, or the regulatory environment. When we make material changes, we will update the "Last Updated" date at the top of this policy and may notify you by email (if we have your email address), through a prominent notice on our Site, or by other means as required by applicable law.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Site or services after any modifications to this policy constitutes your acceptance of the revised terms. If we make changes that materially affect your rights under applicable privacy laws, we will obtain your consent where required. Previous versions of this Privacy Policy are available upon request.
If you have any questions, concerns, complaints, or requests regarding this Privacy Policy, our data practices, or your rights, please do not hesitate to contact us using the following information:
We are committed to addressing your concerns promptly and thoroughly. If you believe that we have not adequately addressed your privacy concern, you have the right to lodge a complaint with your local data protection authority or supervisory authority, as applicable under law. We will respond to all verifiable inquiries within thirty (30) days of receipt, or as otherwise required by applicable law.
For California residents exercising their rights under the CCPA/CPRA, please include "CCPA Request" in the subject line of your email or correspondence to help us process your request efficiently. We may require verification of your identity before processing your request, and we will not discriminate against you for exercising any of your privacy rights.