OneRequest Privacy Notice

Last Modified: June 7, 2022

Protecting our users’ privacy is the most important thing we do.

We make these promises to you.

  1. We do not sell your personal information to anyone; and
  2. We do not share your personal information with dealers and sellers unless you ask us to or if such sharing is a part of the Platform feature you are using (i.e., you voluntarily share your phone number using our anonymous chat feature).

In this notice, we want to let you know what happens with information about you or your business that is directly or indirectly collected when you use onerequest.com or the OneRequest App (collectively, the “Platform”). Throughout the policy, we will refer to OneRequest, LLC and its affiliated companies collectively as “we,” “us,” or “our.” This notice applies whether you are a guest or a registered user of the Platform.

Our Platform is not directed toward children under the age of 13 and we do not knowingly collect personal information from children under 13.

What personal information do we collect from you?

Personal information is data that can be used to identify or authenticate you. We collect some personal information from all users of the Platform, including guests. We also collect some personal information from only registered users.

This chart explains the personal information we collect, who we collect it from, and why we collect it.

Personal information we collectWho do we collect it from?Why do we collect this?
Your email addressRegistered users onlyFacilitate communication through our Platform and provide users information about their account with us
Your mobile phone numberRegistered users that choose to provide it (a phone number is not required to create an account)Facilitate communication through our Platform and provide users information about their account with us
Your name and the name of your businessRegistered dealer users onlyTo provide our car shoppers an excellent experience on the Platform and to give our dealer support team a point of contact at the dealership
Location informationGuests and registered users who search for vehicles on the PlatformTo provide a centralized point for vehicle searches radius, and to personalize online content (such as special offers and advertising) based on your location.
Technical information about your use of our Platform including IP address, device identifier, and viewing informationGuests and registered usersTo enhance your experience on the Platform, such as providing offers and advertising based on your interests. To help protect the security of the Platform

We retain messages and email transcripts that take place through the Platform. These items may contain personal information. However, we only use messages and email transcripts for quality control, and so that you can retain access to conversations you have had through our Platform.

What happens when I make a payment to OneRequest on the Platform?

Customers who remit payments for our products or services through the Platform will have their personal information collected by our payment processor, Braintree. Braintree is a subsidiary of PayPal and, in that context, PayPal is acting as a service provider to us. However, we cannot see, and we do not retain, the personal information you submit on our site. We only know if your payment is, or is not, successfully completed.

However, PayPal also offers payment services through your PayPal account enabling you to make payments to many companies other than OneRequest. In that regard, PayPal is an independent controller or business under applicable privacy laws for the purpose of processing your personal information and that information, along with any requests you may have with respect to that information, is controlled by PayPal and subject to the PayPal Privacy Statement. The PayPal Privacy Statement is available here.

Do we collect any other information from you?

Yes, as noted above, we collect other technical information about your use of the Platform, but we only use this information on an aggregated or masked basis so it does not constitute personal information. You may also voluntarily provide us with other non-personal information, such as details of a trade-in vehicle.

Why do we collect personal information and how do we use it?

As noted above, we collect certain pieces of personal information for very specific reasons. More generally, the primary use of personal information is to support our efforts in constantly evaluating, monitoring, and analyzing the use of our Platform and its traffic patterns to help improve our Platform and services. We also use personal information to evaluate our marketing efforts and their ability to bring users to our Platform and to detect, investigate and prevent activities that may violate our policies or be illegal.

How do we collect information from you?

Direct collection. We collect information directly from you when you submit it on our Platform. This includes information you share on the Contact Us page or any other interactive area of our Platform, including written and verbal correspondence.

Indirect collection.

We also indirectly collect information about you when you use the Platform. Here are the technologies we use to do this.

Cookies. A cookie is a small amount of data that is sent to your browser from a Web server and stored on your computer’s hard drive. We use four types of cookies.

  • Strictly Necessary Cookies. These are necessary for our Platform to function and cannot be switched off. These are typically set by you, such as choosing privacy preferences, logging in, or completing online forms. These cookies do not store any personal information.
  • Analytics Cookies. These allow us to count visits and traffic sources, which helps us measure and improve the performance of the Platform. They help us know which pages are the most and least popular and how visitors interact with our Platform. Analytics cookies we use include Google Analytics and Hotjar.
  • Functional Cookies. These enable the Platform to provide enhanced functionality and personalization including our chatbot service. These cookies may store personal information.
  • Targeting Cookies. These cookies are used by third parties to build a profile of your interests based on the browsing information they collect from you. If you do not allow these cookies, you will not see advertising that is based on your interests. These cookies may store personal information. We use targeting cookies, including those by Facebook, AppNexus, Google Double Click, TapAd, AdRoll, and eXelate.

In addition to the foregoing, cookies can also be used by a third party to transfer information to us in accordance with their privacy statement.

Can I disable cookies? Yes. You can disable specific cookies in your browser or set your browser to warn you when a cookie is being sent. Disabling cookies is browser specific. For example, if you log on using Google Chrome, you must also disable cookies in Safari if you use that browser at a different time. You can also disable cookies on your mobile device. Disabling cookies may limit the functionality of the Platform.

Log Files. Like most standard website servers, we use log files. Log files track Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. We utilize this information to analyze trends, administer the Platform, prevent fraud, track website navigation in the aggregate, and gather broad demographic information for aggregate use.

Social Networking. The Platform permits you to use a third party social networking platform such as Facebook, Instagram, YouTube, Twitter, LinkedIn and Pinterest. These plug-ins allow you to follow us on those services. When you use social networking platforms and plugins, you share your information with them and their privacy notice applies to their disclosure of such information. In addition, they may be able to collect information about you, including your activity or may notify your connections on the social networking platform about your use of our Platform. Such services may allow your activity to be monitored across multiple websites for purposes of delivering more targeted advertising. Please note that their own privacy polices apply and we encourage you to read them. We may add new social networking plugins and buttons to our Platform from time to time.

Web Beacons. We also employ a software technology called a clear GIF (Graphics Interchange Format), also known as a pixel tag or Web beacon. A clear GIF is a line of code that we place on our Web pages which allows us to analyze our advertising and the general usage patterns of visitors to the Platform. We use Web beacons in connection with the Google Tag manager service. These help us better manage content on our site by informing us what content or promotions are effective. Unless you consent, we do not collect personally identifiable information from you with web beacons.

OneRequest App. When you download, access, and use the OneRequest App, it may use technology to automatically collect:

  • Usage Details and Device Information. When you access and use the OneRequest App, we automatically collect certain details of your access to and use of the OneRequest App, including relative location data (zip code, IP Address, city, state, country), anonymized aggregate demographic data (gender, age, city, country, language), device information (model, OS, browser, Device ID), content viewed and data entered (on 1R only), time of use and time spent in the OneRequest App and your return frequency. Your mobile device carrier, operating system, or app store may also collect usage and device information, which would be subject to their privacy policy for your device.
  • Stored Information and Files. The OneRequest App also may access metadata and other information associated with other files stored on your device. This currently only includes photographs or other files you submit to us through the OneRequest App.

If you do not want us to collect this information, do not download the OneRequest App or delete it from your device.

Information from Other Sources

We may obtain information about you from affiliates, partners, automobile dealers and other third parties. This information may include information about your use of the Platform or our services, your use of other websites, your interactions with or purchases from automobile dealers, your interests and preferences and other information about you or your household. We may combine the information we obtain from third parties with information that we or our affiliates have collected about you.

What choices do you have about the collection of information about you?

  • Direct Collection. If you do not want to share your information, you can choose not to participate in a particular service or activity.
  • Cookies. You may disable browser cookies in your browser or set your browser to warn you when a cookie is being sent. You may lose some features or functionality when you disable cookies. Disabling cookies is browser specific. If you log on using Google Chrome, you must also disable cookies in Safari if you use that browser at a different time. If you would like to learn more about cookies for targeted ads that may be based on your online activities, and the choices that you may exercise for certain sites and advertisers including opt-out tools, you may wish to visit the Network Advertising Initiative or the Digital Advertising Alliance.
  • Web Beacons. It is not possible to disable Web beacons.
  • Log Files. It is not possible to disable log files.
  • Social Networking. If you do not want to share your information, you can choose not to use social networking plug-ins.
  • Marketing Emails. To ensure that you will not receive recurring marketing or other information from us unless you choose to, we will provide you with simple instructions on each marketing email from us for you to let us know that you have chosen to stop receiving such emails from us.
  • Google Analytics. You may opt-out of Google Analytics collection by downloading the browser plugin “Google Analytics Opt-out Browser Add-on” here.

Who is collecting your information?

We collect your personal information and use third party service providers to assist with that collection.

When you are on our Platform and are asked for personal information, you are sharing that information with us and our service providers. Although we generally operate the Platform and collect the information, we may engage third party service providers to assist us in that collection.

Other websites to which we link, such as car dealer websites, may collect personally identifiable information about you when you visit those sites. The information practices of other websites linked to our Platform are not covered by this privacy notice.

When you use the social networking links described above, information is collected by the applicable social network and is subject to their privacy policy.

With whom do we share your information?

We will not disclose any of your personally identifiable information except when we have your permission or under special circumstances, such as when we believe in good faith that the law requires it or under the circumstances described below. Remember: we do not sell your personal information to third parties.

Dealers/Sellers

When you submit your contact information to a particular seller through the Platform, you agree and expressly consent to being contacted by the seller by various means, including by phone at any number provided, text message, email, automatic telephone dialing system, mobile notification, and/or an artificial or prerecorded voice.

Service Providers

We occasionally hire other companies to provide limited services on our behalf, including mailing, website development and operation, answering customer questions about products or services, sending email, analyzing website use, processing payments, providing investor information and processing data. We will only provide those companies the information they need to deliver the service, and they are contractually prohibited from using that information for any other reason.

Data in the Aggregate

We may disclose “blinded” aggregated data and user statistics to prospective partners and other third parties. Blinded data is data that does not identify an individual person.

Business Transactions

As we continue to develop our business, we may buy or sell businesses or assets. In such transactions, confidential customer information generally is one of the transferred business assets. In the event of a transaction involving the sale of some or all of our businesses, customer and Platform visitor information may be one of the transferred assets and may be disclosed in connection with negotiations relating to a proposed transaction. In such case, the transferred information may become subject to a different privacy notice.

Other

We also may disclose your information in special cases. For example, when we believe that we must disclose information to identify, contact or bring legal action against someone who may be violating our Terms of Use, or may be causing injury to or interference with our rights or property, other website users or customers and their information, or anyone else who may be harmed by such activities. We may disclose, access, or monitor your personal information when we believe in good faith that the law requires it and for administrative and other purposes that we deem necessary to maintain, service and improve our products and services and our information security.

How do we protect your information?

Because information sent through the Internet travels from computer to computer throughout the world, when you give us information, that information may be sent electronically to servers outside of the country where you originally entered the information. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. This site uses TLS security encryption measures. You will know a webpage is using TLS when you see the padlock icon or “https” in the URL line of your browser. Information that you disclose by use of this Platform (as with any site that is non-secure), by posting a message or using e-mail, potentially could be collected and used by others. This may result in unsolicited messages from third parties or use of such information by third parties for their own purposes, legal or illegal. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us or from our services, and you do so at your own risk. Once we receive your transmission, we use commercially reasonable efforts to ensure its security on our systems. Keeping your personal financial information private is very important to us. We use reputable payment processors, and all financial and payment information is collected by our third party payment processor.

Your California Privacy Rights.

California residents are entitled to additional protections under California Law including the right to request information about third parties to whom we disclose information for marketing purposes.

Requests for Information Under Current Law

California Civil Code Section 1798.83 permits our visitors who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email or written request at the address below. Make sure to state that you are a California Resident. 

Scope of Notice

This notice applies to personal information we collect about California residents both online and offline. It applies to California residents who are users of the Platform; our customers; individuals inquiring about our products; and all other California residents from whom we collect personal information.

As defined in the CCPA, personal information includes any information that identifies, relates to, or could reasonably be linked to a California resident or household. It includes, but is not limited to: identifiers, characteristics of protected classes, commercial information, biometrics, internet or electronic information, geolocation data, audio/visual or similar information, employment and educational information, and inferences drawn from any identifiable information. Personal information does not include publicly available information from a public government record. 

This notice does not apply to information that is exempt from CCPA disclosure requirements. This includes personal information of individuals acting in their capacity as representatives of our clients, prospect clients, vendors, and other businesses that we conduct business with to the extent the information is collective with respect to a business-to-business transaction or business relationship. This disclosure also does not apply to individuals who are not California residents, any personal information exempted under Cal. Civ. Code Section 1798.145, or any other personal information not contemplated in the CCPA.

Do Not Track (DNT)

Do Not Track (DNT) is a privacy preference that users can set in their web browsers. While the United States Federal Trade Commission has endorsed DNT, our Platform does not support DNT codes.

California Consumer Privacy Act

The California Consumer Privacy Act (“CCPA”) grants State of California residents the following rights, to:

  • Know what personal information is being collected about them;
  • Know whether their personal information is sold or disclosed and to whom;
  • Say no to the sale of their personal information;
  • Access their personal information;
  • Have their personal information deleted (subject to certain exceptions); and
  • Have the right to equal service and price, even if they exercise their privacy rights under this law.

The CCPA also provides that if a company has a privacy notice that allows you to opt-out or opt-in to the use of your personal information by third parties (such as advertisers or affiliated companies) for marketing purposes, the company may instead provide you with information on how to exercise your disclosure choice options.

We do not currently meet the thresholds to be subject to the CCPA. However, if you are a California resident and wish to request information about how to exercise your third party disclosure choices, please send a request by email or postal mail to the address below. We will also be modifying this policy to comply with the new California Privacy Rights Act (“CPRA”) so check back for updates. Address for California Privacy Requests

OneRequest, LLC
Attn: Your California Privacy Rights
6363 College Blvd., Suite 400
Overland Park, KS 66211
privacymatters@onerequest.com

Please include your name, street address, city, state, and zip code (your street address is optional if you wish to receive a response to your request via email). We will not accept requests via the telephone or by fax. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.

Your Nevada Privacy Rights

Nevada privacy law allows you to opt-out of the sharing of personal information with third parties. 

Opt-Out Requests

Nevada law (SB 220), permits customers in Nevada to opt-out of the sale of certain kinds of personal information. A sale under Nevada law is the transfer of this personal information to third parties for monetary consideration so these third parties can then re-sell or license the sold information. OneRequest, LLC does not sell your personal information to third parties as defined in Nevada law. If you are a Nevada resident and wish to opt-out of the sale of your personal information should we change our practices in the future, you must send a request by e-mail at privacymatters@onerequest.com. Make sure to state that you are a Nevada resident.

Who do you contact with questions or concerns about our Privacy Notice?

We want to clearly disclose our privacy practices in language that is easy to understand. If something doesn’t make sense, or if you need further assistance, please e-mail your questions or comments to privacymatters@onerequest.com or write us at:

OneRequest, LLC
Attn: Privacy
6363 College Blvd., Suite 400
Overland Park, KS 66211

This privacy notice only applies to products or services provided, or information obtained, through the Platform.

We may change this notice from time to time so please check back often. If we significantly change our collection, use, or disclosure practices, we will send you a notice via email if you have provided us with an email address. Please keep in mind that some of the services mentioned specifically in this notice may not be available on the Platform at this time. 

Last Modified: June 7, 2022.