Carolina Cars.Org's Privacy and Information Collection Policy

Effective Date: 01/01/2006
Last Updated: 09/30/2025

1. INTRODUCTION

Carolina Cars.Org ("Carolina Cars.Org," "we," "us," or "our") operates this website (the "Website"). This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit or interact with our Website.

This Privacy Policy applies to all visitors and users of the Website, regardless of location. By using the Website, you acknowledge that you have read and understood this Privacy Policy.

2. INFORMATION WE COLLECT

2.1 Information You Provide

When you submit forms, request information, or interact with features on the Website, you may provide:

Contact information: Name, email address, phone number, and mailing address.
Vehicle interest information: Vehicle preferences, trade-in vehicle details (make, model, year, mileage, VIN, condition), and desired features or price range.
Credit application information: If you submit a credit application or pre-qualification request, you may provide: Social Security number, date of birth, driver’s license number, employment information, income, housing information, and financial account details.
Communication content: Messages submitted through contact forms, live chat, AI chatbot interactions, and email inquiries.

2.2 Information Collected Automatically

When you visit the Website, we and our third-party service providers automatically collect:

Device and browser information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
Usage data: Pages visited, links clicked, time spent on pages, referring and exit URLs, and interactions with Website features.
Location data: Approximate geographic location derived from your IP address. We do not collect precise GPS location data.
Cookies and tracking technologies: We use cookies, pixels, web beacons, and similar technologies as described in Section 4.

2.3 Information from Third Parties

We may receive information from:

Credit bureaus: When you submit a credit application or pre-qualification request through the Website, we receive credit report data and credit scores from consumer reporting agencies (such as Equifax, Experian, and TransUnion) through our integrated providers in accordance with the Fair Credit Reporting Act (FCRA).
Vehicle data providers: Vehicle valuation data from providers such as Kelley Blue Book, Black Book, and J.D. Power for trade-in estimates.
Advertising platforms: Conversion and audience data from Meta Platforms and TikTok in connection with our advertising campaigns.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

Responding to your inquiries: To respond to your questions, contact form submissions, chat messages, and requests for information about vehicles, financing, or services.

Processing credit applications: To evaluate your creditworthiness, submit your application to lenders, and facilitate financing, in each case with your authorization and in accordance with applicable law.

Providing trade-in estimates: To generate estimated trade-in values based on the vehicle information you provide and third-party valuation data.

Advertising and marketing: To deliver targeted advertisements to you on third-party platforms (such as Facebook, Instagram, and TikTok) based on your interactions with the Website, and to measure the effectiveness of our advertising campaigns. We use Meta Pixel and TikTok Pixel for these purposes as described in Section 4.

Website operations and improvement: To operate, maintain, and improve the Website; to analyze usage patterns and trends; and to develop new features and content.

Security and fraud prevention: To detect, investigate, and prevent unauthorized access, fraud, and other harmful activity.

Legal compliance: To comply with applicable laws, regulations, and legal processes, and to establish, exercise, or defend legal claims.

4. COOKIES AND TRACKING TECHNOLOGIES

4.1 Types of Technologies We Use

Essential cookies: Required for the Website to function properly, including session management and security features. These cannot be disabled.

Analytics cookies (Google Analytics): We use Google Analytics to understand how visitors interact with the Website. Google Analytics collects information such as pages visited, time on site, and traffic sources. You may opt out by installing the Google Analytics Opt-Out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

Advertising cookies (Meta Pixel): We use Meta Pixel, a tracking technology provided by Meta Platforms, Inc. Meta Pixel collects information about your interactions with the Website and transmits this data to Meta for the following purposes:

Conversion tracking: To measure actions visitors take after viewing or clicking our ads on Facebook and Instagram.
Retargeting: To display targeted ads to you on Facebook, Instagram, and Meta Audience Network based on your Website activity.
Lookalike audiences: To create advertising audiences of people with characteristics similar to our Website visitors.

The data collected by Meta Pixel is subject to Meta’s Data Policy. Under the California Consumer Privacy Act (CCPA/CPRA) and other state privacy laws, the transmission of personal information to Meta through Meta Pixel for cross-context behavioral advertising constitutes “sharing” of personal information. You may opt out of this sharing as described in Section 6.

Advertising cookies (TikTok Pixel): We use TikTok Pixel, a tracking technology provided by TikTok Inc. (ByteDance Ltd.). TikTok Pixel collects information about your interactions with the Website and transmits this data to TikTok for conversion tracking and targeted advertising purposes. The data collected by TikTok Pixel is subject to TikTok’s Privacy Policy. The transmission of personal information to TikTok through TikTok Pixel for targeted advertising constitutes “sharing” of personal information under applicable state privacy laws. You may opt out of this sharing as described in Section 6.

Chat and communication tools (ChatChasers): We use ChatChasers, a third-party service, to provide live chat functionality on the Website. When you use the chat feature, ChatChasers collects the content of your messages, your name and contact information (if provided), IP address, browser information, and timestamps. Chat conversations may be recorded, logged, and stored by both Carolina Cars.Org and ChatChasers. ChatChasers’ use of your data is governed by ChatChasers’ own privacy policy.

AI chatbot: The Website may include an AI-powered chatbot. When you interact with the AI chatbot, your messages and the chatbot’s responses may be logged, recorded, and stored for quality assurance, compliance monitoring, and service improvement purposes.

Dealer-managed tracking technologies: Carolina Cars.Org may install additional cookies, pixels, tags, or tracking technologies on this Website through third-party tag management tools. These technologies may collect information about your browsing behavior and may transmit data to third-party advertising, analytics, or marketing platforms not listed in this Privacy Policy. Carolina Cars.Org is solely responsible for ensuring that any additional tracking technologies comply with applicable privacy laws, including providing required disclosures and obtaining any necessary consents. For questions about specific tracking technologies on this Website, contact Carolina Cars.Org using the information in Section 11.

4.2 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals. If your browser or device transmits a GPC signal, we will treat it as a valid request to opt out of the sale or sharing of your personal information associated with that browser or device, as required by applicable state law. When we detect a GPC signal, we will disable Meta Pixel, TikTok Pixel, and other advertising-related tracking for your session.

4.3 Managing Your Preferences

You may manage tracking technologies through the following methods:

Browser settings: Most browsers allow you to block or delete cookies through their settings. Disabling cookies may affect Website functionality.
Google Analytics opt-out: Install the opt-out add-on at https://tools.google.com/dlpage/gaoptout.
Meta ad preferences: Adjust your ad settings in your Facebook or Instagram account, or opt out through the Digital Advertising Alliance at https://optout.aboutads.info.
TikTok ad preferences: Adjust your ad settings in your TikTok account.
GPC signal: Enable Global Privacy Control in your browser. Visit https://globalprivacycontrol.org for more information.

We do not sell your personal information for monetary consideration. However, as described in Section 4, our use of Meta Pixel and TikTok Pixel constitutes “sharing” of personal information for targeted advertising under certain state privacy laws. You may opt out of this sharing as described in Section 6.

We may disclose your information to the following categories of recipients:

Service providers: Third parties that help us operate the Website and our business, including our website technology provider (AutoFunds/Integex Solutions Inc.), analytics providers (Google), advertising platforms (Meta, TikTok), chat service providers (ChatChasers), email service providers, and hosting providers. Service providers are contractually required to use your information only to provide services to us.

Credit bureaus and lenders: If you submit a credit application or pre-qualification request, we share your information with consumer reporting agencies and lenders to process your application, in accordance with the FCRA and with your authorization.

Vehicle data providers: Vehicle information you provide for trade-in estimates may be shared with valuation data providers.

Legal and compliance: We may disclose your information when we believe in good faith that disclosure is necessary to comply with applicable law, respond to legal process, protect our rights or safety, detect fraud, or respond to government requests.

Business transfers: If Carolina Cars.Org is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. YOUR PRIVACY RIGHTS

6.1 Rights Available to All Visitors

Regardless of your state of residence, you may:

Opt out of targeted advertising: Opt out of Meta Pixel and TikTok Pixel tracking by enabling Global Privacy Control (GPC) in your browser, adjusting your ad preferences on Meta and TikTok, or contacting us using the information in Section 11.
Opt out of marketing: Opt out of marketing emails by clicking the “unsubscribe” link in any marketing email or by contacting us. You may opt out of text messages by replying STOP or by any other reasonable method.
Request information: Contact us to ask what personal information we hold about you.

6.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the business purposes for collection, and the categories of third parties with whom we share it.

Right to delete: You may request that we delete personal information we have collected from you, subject to legal exceptions.

Right to correct: You may request that we correct inaccurate personal information.

Right to opt out of sale/sharing: We do not sell personal information for monetary consideration. Our use of Meta Pixel and TikTok Pixel constitutes “sharing” for cross-context behavioral advertising. You may opt out by enabling GPC, clicking the “Do Not Sell or Share My Personal Information” link on the Website, or contacting us.

Right to limit use of sensitive personal information: If you submit a credit application containing sensitive personal information (such as SSN or financial data), we use this information only to process your application as you have requested. We do not use sensitive personal information for purposes beyond what is necessary.

Non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

CCPA Disclosure Table

Category of Personal Information	Collected	Disclosed for Business Purpose	Shared for Advertising	Sources	Purpose
Identifiers (name, email, phone, IP address)	Yes	Yes — service providers, lenders	Yes — Meta, TikTok (via Pixels)	You, automatic collection	Respond to inquiries, advertising
Financial information (credit app data, income)	Yes — if you submit a credit application	Yes — credit bureaus, lenders	No	You	Credit application processing
Commercial information (vehicle interests, inquiries)	Yes	Yes — service providers	Yes — Meta, TikTok (via Pixels)	You, automatic collection	Respond to inquiries, advertising
Internet/electronic activity (browsing, clicks)	Yes	Yes — analytics providers	Yes — Meta, TikTok (via Pixels)	Automatic collection	Analytics, advertising
Geolocation (approximate, from IP)	Yes	Yes — analytics providers	Yes — Meta, TikTok (via Pixels)	Automatic collection	Analytics, advertising
Sensitive personal information (SSN, driver’s license)	Yes — if you submit a credit application	Yes — credit bureaus, lenders	No	You	Credit application processing

6.3 Virginia Residents (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. To appeal a denial of your request, contact us with the subject line “Privacy Appeal — Virginia.” If your appeal is denied, you may contact the Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform.

6.4 Colorado Residents (CPA)

Colorado residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. We honor Global Privacy Control (GPC) signals. To appeal a denial, contact us with the subject line “Privacy Appeal — Colorado.” If your appeal is denied, you may contact the Colorado Attorney General at https://coag.gov/file-complaint.

6.5 Connecticut Residents (CTDPA)

Connecticut residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. We honor Global Privacy Control (GPC) signals. To appeal a denial, contact us with the subject line “Privacy Appeal — Connecticut.” If your appeal is denied, you may contact the Connecticut Attorney General at https://www.dir.ct.gov/ag/complaint.

6.6 Texas Residents (TDPSA)

Texas residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. We honor Global Privacy Control (GPC) signals. To appeal a denial, contact us with the subject line “Privacy Appeal — Texas.” If your appeal is denied, you may contact the Texas Attorney General at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.

6.7 Oregon Residents (OCPA)

Oregon residents have the right to access, correct, delete, obtain a portable copy of their personal data, and to know the specific third parties to whom their data has been disclosed. Oregon residents may opt out of targeted advertising, the sale of personal data, and profiling. To appeal a denial, contact us with the subject line “Privacy Appeal — Oregon.” If your appeal is denied, you may contact the Oregon Attorney General at https://www.doj.state.or.us/consumer-protection/phone-internet-tv/file-a-complaint.

6.8 Montana Residents (MTCDPA)

Montana residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. We honor Global Privacy Control (GPC) signals. To appeal a denial, contact us with the subject line “Privacy Appeal — Montana.” If your appeal is denied, you may contact the Montana Attorney General at https://dojmt.gov/consumer-protection.

6.9 Additional State Rights

Residents of the following states have rights to access, correct, and/or delete their personal data, and to opt out of targeted advertising and the sale of personal data, under their respective state privacy laws: Utah, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Florida, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island.

To exercise rights under any of these state laws, contact us using the information in Section 11. We will respond within the timeframe required by applicable law. If we deny your request, you may appeal by contacting us with the subject line “Privacy Appeal — [Your State].”

6.10 Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights.

7. DATA RETENTION

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specifically:

Contact form submissions and inquiries: Retained for the duration of the business relationship and a reasonable period thereafter.
Credit application data: Retained in accordance with FCRA, ECOA, and applicable state record retention requirements.
Website usage data and cookies: Retained for the periods set by the respective analytics and advertising providers.
Chat transcripts: Retained for quality assurance and compliance purposes.

When information is no longer needed, we securely delete or de-identify it.

8. DATA SECURITY

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, or disclosure.

No method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of your information.

9. CHILDREN’S PRIVACY

This Website is not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under thirteen (13). If we become aware that we have collected information from a child under thirteen (13), we will delete it promptly. If you believe a child has provided us with personal information, please contact us using the information in Section 11.

10. THIRD-PARTY LINKS

This Website may contain links to third-party websites not operated by Carolina Cars.Org. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party website you visit.

11. CONTACT INFORMATION

To exercise your privacy rights, ask questions about this Privacy Policy, or submit a complaint, contact us at:

Carolina Cars.Org 345 Union Cemetery Rd SW Concord, NC 28027

Phone: (980) 248-1693 Email: [email protected]

We will respond to privacy requests within the timeframe required by applicable law.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we make changes, we will revise the “Last Updated” date at the top of this Policy. Your continued use of the Website after any update constitutes your acceptance of the revised Privacy Policy.

This Website is powered by AutoFunds, a product of Integex Solutions Inc. AutoFunds processes data on behalf of Carolina Cars.Org as a service provider. AutoFunds’ own Privacy Policy is available at www.autofunds.com/privacy-policy.

Privacy policy