California Privacy Rights

1. Notice at Collection

When we collect personal information from California residents, we do so directly through forms on our Site, through documents you upload, and through your communications with us. The categories of personal information we collect, the purposes for which we collect them, and how long we retain them are described below.

2. Categories of Personal Information We Collect

Within the past 12 months, we may have collected the following categories of personal information, as defined by the CCPA:

• Identifiers— name, email address, phone number, IP address.
• Customer records information(Cal. Civ. Code 1798.80(e)) — the information above plus vehicle and contract details you provide.
• Commercial information— F&I products purchased, original purchase details, refund estimates.
• Internet or other electronic network activity— user agent, basic site analytics, submission timestamps.
• Geolocation data— approximate location inferred from IP address.
• Professional or employment-related information— not collected.
• Sensitive personal information— we do not knowingly collect sensitive personal information as defined by the CPRA.

3. Sources of Personal Information

• Directly from you, through forms on our Site, uploaded documents, and your communications with us.
• Automatically from your browser when you visit the Site (e.g., IP address, user agent).

4. Business Purposes for Which We Use Personal Information

• Reviewing your eligibility for F&I product refunds.
• Preparing and filing cancellation requests with product administrators.
• Communicating with you about your claim.
• Communicating with administrators, dealerships, lenders, and lienholders on your behalf.
• Operating and maintaining the Site and Service.
• Detecting and preventing fraud or abuse.
• Meeting our legal and regulatory obligations.

5. Categories of Third Parties with Whom We Share Personal Information

• Product administrators, dealerships, lenders, and lienholders — for the limited purpose of pursuing your refund.
• Service providers (database, email, hosting, file storage) — contractually limited to providing services to us.
• Legal and safety recipients — where required by law or to protect rights and safety.

6. Sale and Sharing of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not done either in the preceding 12 months.

7. Retention

We retain personal information for as long as needed to administer your claim and to satisfy our legal, accounting, and reporting obligations — generally seven years after a claim is closed for documents and submission records; shorter periods for technical logs.

8. Your California Rights

As a California resident, you have the right to:

• Know what personal information we have collected about you, including the categories, sources, business purposes, and recipients.
• Access the specific pieces of personal information we hold about you.
• Correct inaccurate personal information we maintain about you.
• Delete personal information we have collected from you, subject to certain exceptions (e.g., information we need to complete a transaction, comply with law, or detect fraud).
• Opt out of sale or sharingof your personal information — though we do not engage in either.
• Limit the use of sensitive personal information— though we do not knowingly collect sensitive personal information.
• Non-discrimination for exercising your rights.

9. How to Submit a Request

Email us at claims@nationalautorefund.comwith the subject line “California Privacy Request”. Tell us which right you are exercising, your name, and the email address associated with your claim. You may also call us at (916) 306-8325.

We will respond to verifiable requests within the timeframes required by law (generally 45 days, with a possible 45-day extension).

10. Verification of Requests

To protect your information from unauthorized disclosure, we must verify your identity before responding to access or deletion requests. Verification typically involves confirming information you previously provided to us — for example, the email address and claim reference number associated with your submission.

11. Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We will require written proof of the agent’s authorization (such as a signed permission letter) and verification of your identity directly with you.

12. Do Not Sell or Share My Personal Information

Because we do not sell or share personal information for cross-context behavioral advertising, no opt-out mechanism is required. If you nevertheless wish to direct us not to sell or share your information, you may email us at claims@nationalautorefund.comwith the subject line “Do Not Sell or Share.”

13. Updates to this Notice

We may update this notice from time to time. The current version is posted on this page with an “Effective” date.

14. Contact

Questions about your California privacy rights or this notice? Reach us at claims@nationalautorefund.com or (916) 306-8325. See also our Privacy Policy for general information about our privacy practices.