Car Max Auto – Data Privacy Statement

This Data Privacy Statement applies to all Car Max Auto digital platforms, including but not limited to: the Car Max Auto Website, Mobile Website, and Mobile Applications (collectively referred to as the “Digital Platform”).

The Digital Platform is solely owned and operated by Car Max Auto, USA. By accessing our Digital Platform, you agree to the terms of this Privacy Statement. We are committed to protecting your privacy and handling your personal data responsibly, in line with applicable U.S. data protection laws.

1. Information We Collect

a. Log Data

When you visit our Digital Platform, our servers may automatically collect standard data provided by your browser, including:

• IP address
• Browser type and version
• Pages visited
• Date and time of visit
• Other technical details

b. Device Data

We may collect information about the device you use, such as:

• Device type and operating system
• Unique device identifiers
• Device settings
• Geo-location data (depending on your settings)

c. Personal Data

Personal information that may identify you includes, but is not limited to:

• Full name
• Email address
• Phone number
• Home or mailing address
• Payment details (where applicable)

We collect personal data in the following ways:

• Directly: when you register, subscribe, or contact us
• Indirectly: through our technology or trusted partners
• Social Media: when you engage with our official accounts (e.g., Facebook, Instagram, Twitter)

2. Legal Basis for Processing Data

We process your personal data lawfully, fairly, and transparently, based on:

• Contractual necessity: to provide the services you request
• Legitimate interests: including research, marketing, security, and fraud prevention
• Consent: when you explicitly agree to specific processing
• Legal obligations: to comply with applicable laws and regulations

3. Use of Information

We may use your data to:

• Personalize your experience on our Digital Platform
• Provide access to our services and applications
• Communicate with you regarding inquiries, updates, or support
• Maintain internal business records
• Conduct analytics, research, and business improvements
• Deliver marketing and promotional content related to used cars in the USA
• Comply with legal and regulatory requirements

We may disclose your data to:

• Trusted third-party service providers
• Contractual partners assisting in service delivery
• Courts, regulators, or law enforcement (where legally required)

4. Data Retention and Security

• We retain personal data only as long as necessary for the purposes outlined above.
• We implement industry-standard measures to protect data from unauthorized access, loss, or misuse.
• While we strive for the highest level of protection, no electronic transmission or storage is 100% secure.

5. Cookies

Our Digital Platform uses cookies to enhance your browsing experience. For more details, please refer to our Cookie Policy.

6. Data Protection for Minors

The Digital Platform is intended for users 18 years and older. We do not knowingly collect personal information from individuals under 18.

7. Your Rights

You have the right to:

• Access and obtain a copy of your personal data
• Correct inaccurate or incomplete information
• Request deletion of your data
• Withdraw consent at any time (where processing is based on consent)
• Request transfer of your data to another provider
• Opt-out of marketing communications

All requests can be submitted by contacting us at info@carmaxauto.com.

8. Third-Party Links

Our Digital Platform may contain links to third-party websites. Please note:

• Their privacy policies apply once you leave our platform.
• We do not endorse or take responsibility for the practices of external websites.

9. Amendments

We may update this Privacy Statement from time to time. Any changes will be posted here, with the “Last Updated” date modified accordingly.

Effective Date: February 2021