Privacy Notice for Residents of Certain States

Updated 8/1/2024

This Privacy Notice for Residents of Certain States ("State Privacy Notice") supplements and incorporates by reference the information contained in Tire Rack's Privacy Policy and applies solely to visitors, users, and others who reside in the following states and who are covered under the following laws (collectively, "applicable law"):

Any terms used in this State Privacy Notice shall have the same meaning as those terms are defined by applicable law. "Personal information" shall mean any information we process that is defined as personal information, personal data, or a similar term under applicable law. Please refer to our Privacy Policy for additional information and for definitions of terms used in this State Privacy Notice.

Collection, Use, and Disclosure of Personal Information

Unless otherwise described below, our practices regarding the personal information that we collect, our use of personal information, and the disclosure of personal information to service providers and third parties are described in our Privacy Policy.

Sale or Sharing of Personal Information

In the preceding twelve months, we have not sold or shared any consumer's Personal Information for monetary consideration. However, our use of cookies and other online tracking technologies for analytics and targeted advertising purposes may be considered a sale or sharing of Personal Information under applicable law. Categories of Personal Information that we have sold or shared under applicable law in the preceding twelve months and that we have disclosed to third parties for analytics and targeted advertising purposes include:

• Identifiers (e.g., name, email address, IP addresses)
• Commercial information (e.g., purchase history)
• Internet or other similar network activity
• Geolocation data

Categories of third parties to whom Personal Information is provided include:

• Data analytics providers
• Advertising and marketing providers

You can opt out of our tracking technologies for analytics and advertising service providers by clicking the Do Not Sell My Personal Information link at the bottom of our tirerack.com home page or by broadcasting the Global Privacy Control ("GPC") signal during your browsing session. Please note that your use of our Website will still be tracked by Tire Rack and our service providers.

In the preceding twelve months, Tire Rack has not knowingly sold or shared personal information of consumers under the age of sixteen years of age.

Your Rights and Choices

Applicable laws provide consumers with specific rights regarding their personal information. This section describes your rights and explains how to exercise those rights. Please note that applicable laws may contain certain limitations and exceptions may apply.

Right to Know Categorical and Specific Information

You have the right to request that we disclose certain information to you about our collection and use of your personal information. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The categories of your personal information we disclosed to a recipient for a business purpose and the categories of recipients to whom it was disclosed.
• The specific pieces of personal information we collected about you.

Right to Know Third Parties (Oregon Residents Only)

Oregon residents have the right to receive a list of specific third parties, other than natural persons, to which Tire Rack discloses personal information.

Right to Correct Inaccurate Personal Information

If we maintain inaccurate personal information about you, you have the right to request that we correct these inaccuracies. After receiving notice of these inaccuracies, we will make reasonable efforts to correct your Personal Information throughout our systems and networks.

Deletion Request Right

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. Deletion of your personal information means you are no longer a Tire Rack customer and no longer able to receive any Services.

Right to Opt-Out of the Sale of Personal Information, Targeted Advertising, and Profiling

California consumers have the right to opt-out of the sale and sharing of your personal information as those terms are defined under the CCPA. Virginia, Colorado, Connecticut, Utah, Oregon, and Texas consumers have the right to opt out of the processing of personal data for purposes of targeting advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer as those terms are defined under applicable law.

We do not sell your personal information for monetary consideration. However, our use of tracking technologies may be considered a "sale" or "sharing" of personal information under applicable law and are used for purposes of targeting advertising to you. You can opt out of being tracked by these third parties and targeted advertising by clicking the "Do Not Sell My Personal Information" link, by submitting an Opt Out privacy request, or by broadcasting the GPC signal.

Tire Rack honors and responds to the GPC signal. Please note that when your browser broadcasts the GPC signal, we will limit the functionality of our website and prevent the website from transmitting your personal information to third parties. We will also treat this signal as a verified request to stop selling your personal information and stop processing your information for purposes of targeted advertising. However, the GPC signal does not fully identify you by name or email address. Therefore, we may not be able to honor this request for other interactions you may have or have had with Tire Rack. You may also submit a Opt Out privacy request with your email, phone number and other personal information for us to complete the opt-out process.

If you visit our website from a different computer or device, or clear cookies on your browser that store your preferences, you will need to return to this website to opt-out or rebroadcast the GPC signal.

Exercising Rights

To exercise the data access, correction, deletion, and opt-out rights described above, please submit a verifiable consumer request to us by:

• Completing the webform at our Website page here
• Calling us at 888-981-3953

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

Applicable law may limit the number of times you may make a verifiable consumer request in a certain time period.

The verifiable consumer request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

In order to verify your identify, we will ask you for information related to a recent transaction you made at Tire Rack or other personal information that only you would reasonably know. If you use an Authorized Agent to make your request, we will ask the Authorized Agent to have you fill out a form that certifies your use of an Authorized Agent and provides information related to a recent transaction you made at Tire Rack or other personal information that only you would reasonably know. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavor to respond to a verifiable consumer request within forty-five days of its receipt. If we require more time (up to forty-five days), we will inform you of the reason and extension period in writing. All communications regarding your request will be by email.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data access requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically, in PDF format.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Right to Limit Use and Disclosure of Sensitive Personal Information

Tire Rack processes a limited amount of sensitive personal information, as that term is defined under applicable law, with your consent. For example, Tire Rack collects your username and password when you affirmatively create an account on our website. Creating an account on our website is not mandatory and you consent to our collection of this information in order to maintain your account.

Tire Rack does not use or disclose your sensitive personal information for any purpose other than those specified in California Code of Regulations § 7027(m).

Exercising Appeal Rights (Virginia, Colorado, Connecticut, Oregon, and Texas Residents Only)

If Tire Rack refuses to take action on a request, you may appeal our decision by submitting an Appeal Request. Please refer to the communication you received from Tire Rack refusing your request for additional information you may need to provide in making your appeal request. Within forty-five (45) days of receipt of an appeal, Tire Rack will inform you in writing of any action taken or not taken in response to your appeal. If the appeal is denied, you may contact your Attorney General to submit a complaint at the applicable website listed below.

Non-Discrimination

We will not discriminate against you for exercising any of your rights. Unless permitted by applicable law, we will not:

• Deny you goods or services
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties
• Provide you a different level or quality of goods or services
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services

Other Privacy Rights (California Residents Only)

Shine the Light Law (California Civil Code § 1798.83, available here). Under this law, California residents are entitled to ask us annually for a notice identifying the categories of Personal Information (if any) which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties with whom we have shared such information during the immediately preceding calendar year. You also have the right to request that we revise your Personal Information on record. To make such a request, please contact us with "Request for California Privacy Information" in the subject line and in the body of your message. We will comply with your request within thirty (30) days or as otherwise required by the statute. Please be aware that not all information sharing is covered by the law's requirements and only information on covered sharing will be included in our response.

Online Privacy Protection Act ("CalOPPA"; Calif. Bus. & Prof. Code § 22575-22578, available here). Visitors can visit our Website anonymously by adjusting the settings in your browser. California law (CalOPPA) requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn't an industry or legal standard recognizing or honoring DNT signals, we don't respond to them at this time. We await the result of work by the privacy community and industry to determine when such a response is appropriate and what form it should take. We do not allow personalized third-party behavioral tracking, though we may use De-Identified Personal Information to track users' click or browsing patterns.

Contact Information

If you have any questions or comments about this notice, the ways in which we collect and use your information described in this Privacy Notice and in our Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under state laws, please do not hesitate to contact us at:

Email: contact@tirerack.com
Phone: 888-981-3953
Address: Tire Rack, Inc.
7101 Vorden Parkway
South Bend, Indiana 46628
Attn: Director of Customer Care