Tire & Wheel Guys Privacy Policy

Effective Date: January 1, 2020

This Privacy Notice for California Residents ("Privacy Notice") supplements the information contained in Tire & Wheel Guys's Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 ("CCPA") and any terms defined in the CCPA have the same meaning when used in this notice.

PLEASE NOTE: WE DO NOT SELL (AS THAT TERM IS DEFINED IN THE CCPA) YOUR PERSONAL INFORMATION, PERIOD.

Sources

We obtain the categories of personal information listed below from the following categories of sources:

• Directly or indirectly from you: For example, collected online, such as through account signup, or purchase webforms (via our tireandwheelguys.com website ("Website"), our mobile app ("Mobile App"), our email exchanges with you, surveys we send to you, your search queries on our Website, or from offline sources, such as information that we collect when you call us.

Categories

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information"). We have collected the following categories of personal information from its consumers within the last twelve (12) months, and may collect in the future:

Personal information does not include:

• Publicly available information from government records;
• De-identified or aggregated consumer information; or,
• Information excluded from the scope of the CCPA, such as:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and,
  • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

• We may use, or disclose the personal information we collect for one or more of the following purposes:
• To present our Website and its contents to you.
• To provide you with information on products or services that you request from us.
• To provide you with services that you have requested.
• To process transaction payments (including, but not limited to, rental or other service fees, membership dues and subscriptions, registration fees, voluntary contributions, examination fees, credential and designation fees, and payments, refunds and reimbursements for any products or services that you choose to purchase from us).
• To provide you with notices about your account, including expiration and renewal notices.
• To send you emails and newsletters with product, service, company, and other information.
• To communicate with you regarding information, features or offers that we believe will be of interest to you.
• To respond to your questions or other requests.
• To contact you with regard to the Website.
• To process any applications, changes to your account information.
• To process other information or Personal Information that you submit through this Website.
• To notify you about changes to our Website, our policies, terms or any products or Services we offer or provide though it.
• To allow you to participate in interactive features on our Website.
• To ask for ratings and reviews of our Website, Services, and/or products.
• To contact you regarding a sweepstakes, contest or promotion in which you have participated.
• To provide access to restricted parts of our Website.
• To request your participation in surveys, focus groups, or other initiatives which help us to gather information used to develop and enhance our products and Services.
• To serve relevant information to you when you visit our Website or other third-party sites (including social media platforms).
• To enhance and improve our products and Services, for example, by performing internal research, analyzing user trends and measuring demographics and interests.
• For internal purposes, such as Website and system administration or internal audits and reviews.
• To comply with applicable law(s) (for example, to comply with a search warrant, subpoena or court order) or to carry out professional ethics/conduct investigations.
• For analyzing how the Services are used, diagnosing Service or technical problems, maintaining security, and personalizing content.
• To operate, maintain, and provide to you the features and functionality of the Services.
• To provide statistics about the usage levels of the Website and other related information to reputable third parties, but these statistics will not include information which will allow you to be identified.
• To fulfill any other purpose for which you provide it.
• In any other way we may describe and for which we obtain your consent when you provide the information.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

We may share your personal information with the following categories of third parties:

• Service providers for the purpose of introducing, providing, or improving our Services to you, who perform services on our behalf.
• We do not sell your Personal Information, period.
• We disclose Personal Information to the following categories of third party service providers, and for one or more the following purposes:
• Identity management providers for authentication purposes
• Legal and compliance consultants, such as external counsel, external auditors, or tax consultants
• Payment solution providers for the secure processing of payments you provide to us
• Fulfillment and shipping vendors for the fulfillment of our products and Services
• Survey and research providers who perform studies on our behalf
• Advertising partners, including social media providers, for the delivery of targeted advertisements
• Regulatory agencies

Disclosures of Personal Information for a Business Purpose

In the preceding twelve (12) months, Company has not disclosed personal information for a business purpose.

Sales of Personal Information

In the preceding twelve (12) months, we have not sold (as that term is defined under CCPA) any consumer's personal information.

The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Right of Access to Specific Information

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Data Access and Deletion Rights), we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you.

Deletion Request Right

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Data Access and Deletion Rights), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. Deletion of your personal information means you are no longer a Tire & Wheel Guys customer and no longer able to receive any Services.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We may opt to delete that portion of your information which comprises personal information (as defined under CCPA), and retain the remainder of your information that does not comprise personal information.

Exercising Data Access and Deletion Rights

To exercise the data access and deletion rights described above, please submit a verifiable consumer request to us by:

• Calling us at (619) 514-3162
• Emailing us at info@tireandwheelguys.com

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for data access twice within a 12-month period.

Verification Process

EMAIL VERIFICATION METHOD: Upon receiving a data access or deletion request from you we will send an email to you at the email address we have for you on file. The email will ask you to respond to verify you as the Consumer making the request. Upon receipt of your verification we will match your information to that which is in our file. Upon verification of your identity we will proceed to process your request (subject to the exceptions stated above).

WEBFORM VERIFICATION METHOD: When you submit a request using our webform (available here) we will match the information you submitted with the information we have for you on file. Upon verification of your identity we will proceed to process your request (subject to the exceptions stated above).

The verifiable consumer request must: (1) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and (2) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we email our response to the email address for that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data access requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically, in PDF format.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Shine the Light Law (California Civil Code § 1798.83 (available here). Under this law, California residents are entitled to ask us annually for a notice identifying the categories of Personal Information (if any) which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties with whom we have shared such information during the immediately preceding calendar year. You also have the right to request that we revise your Personal Information on record. To make such a request, please contact us with "Request for California Privacy Information" in the subject line and in the body of your message. We will comply with your request within thirty (30) days or as otherwise required by the statute. Please be aware that not all information sharing is covered by the law's requirements and only information on covered sharing will be included in our response.

Online Privacy Protection Act ("CalOPPA"; Calif. Bus. & Prof. Code § 22575-22578, available here). Visitors can visit our Website anonymously by adjusting the settings in your browser. California law (CalOPPA) requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn't an industry or legal standard recognizing or honoring DNT signals, we don't respond to them at this time. We await the result of work by the privacy community and industry to determine when such a response is appropriate and what form it should take. We do not allow personalized third-party behavioral tracking, though we may use De-Identified Personal Information to track users' click or browsing patterns.

We reserve the right to amend this Privacy Notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Website and update the notice's effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

If you have any questions or comments about this notice, the ways in which we collect and use your information described in this Privacy Notice and in our Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Email: info@tireandwheelguys.com
Phone: (619) 514-3162
Address: Tire & Wheel Guys, Inc.
7603 St. Andrews Ave Ste F
San Diego, California 92154
Attn: Director of Customer Service