CarCo Automotive, Inc. Privacy Policy

Effective Date: January 1, 2026

Introduction

CarCo Automotive, Inc. ("us", "our" or "we") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This Privacy Policy explains what information we collect from or about visitors to carcofire.com , how we use it, and who we share it with, along with the rights and choices you may have with respect to your information.

This Privacy Policy applies to visitors and users of our Website. Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. This Privacy Policy, together with our Terms and Conditions, forms an integral and binding part of our relationship with you. By using our Website, you agree to the terms of this Privacy Policy and the Terms of Use. If you object to our data collection practices or any of the provisions in this Privacy Policy, your choice is to stop using our Website.

Information Collection

When you visit our Website, we collect a variety of information from and about you and your device, including information that identifies you directly. This section describes what information we collect in connection with your use of our Website.

1. Information You Provide

You can generally browse our Website without creating an account or providing personally identifiable information. However, in order to access or utilize some features of our Website, you will be required to provide certain information. For example, you can submit a request form if you are interested in requesting more information regarding a vehicle or equipment advertised on our Website, and the form will ask you for your name, phone number, email address, and mailing address. You may also choose to enter promotions, sweepstakes or other contests, participate in a survey, complete a “Contact Us” form or otherwise communicate with us, all of which will require the submission of some personally identifiable information. If you provide us with your personally identifiable information, you are giving us permission to use that information for the specific purpose for which it is provided and for any other purpose described in this Privacy Policy.

2. Automatic Collection

As you navigate through and interact with our Website, we may also use automatic data collection technologies to collect certain information about you and your device, as described in this section.

a. Activity Information

We collect information about how you use our Website, such as your search history, business opportunities you view, what pages you’ve clicked on and other uses of our features, and the amount of time you spend looking at different parts of our Website.

b. Device Information

We collect data about the browsers and devices you use to access our Website. The data we collect includes browser or device model and settings, operating system, unique identifiers and (including device ID). We also collect data about how your browsers and devices interact with our services, including IP address, crash reports, system activity, and the date, time, and the URL of the site you visited before our website.

You can control our collection of certain mobile data, such as your mobile device model or the language your mobile device uses, by adjusting the privacy and security settings on your mobile device.

c. Location Information

We may collect location information from your device or browser, including to provide localized search results. You can disable browser location services through your browser settings.

d. Cookies and Other Tracking Tech

We may use various tools, including cookies, pixel tags, web beacons and other similar technologies, to gather behavioral analytics, including information about how you view and use our Website, and to enhance your experience with our Website. For example, many of our web pages use cookies to help us understand site usage and browsing patterns, improve the content and offerings on our Website, or personalize your experience. This information helps us to provide you with a better user experience by enabling us to compile statistics and measures of user satisfaction, store information about your preferences, allowing us to customize our Website according to your individual interests, speed up your searches, recognize you when you return to our Website, and to continually improve our Websites. Some of this information is collected and compiled by third-party service providers. However, the use of cookies and other tracking technologies by our partners and third-party service providers is not covered by this Privacy Policy, as we do not have access or control over these tracking technologies.

e. Google Analytics and Google Adwords

In addition to using cookies and related technologies as described above, we may use Google Analytics to help us understand how our customers use our Website. Please see Google’s privacy policy, currently available at https://policies.google.com/technologies/partner-sites, for more information on how Google collects and uses such information. If you would like to opt-out of having your site activity available to Google Analytics, you can download the Google Analytics Opt-Out Browser Add-On.

We may also use third party vendor re-marketing tracking cookies, including the Google Adwords tracking cookie. This means we will continue to show ads to you across the internet. As always, we respect your privacy and are not collecting any identifiable information through the use of Google’s or any other third party remarketing system. If you don’t want to see our ads, you can opt-out of interest-based advertising here http://optout.networkadvertising.org/.

f. Do-Not-Track Signals/Global Privacy Control

Certain websites and other technology can track their users over time to, for instance, provide targeted advertising. Do Not Track mechanisms and Global Opt Out/Global Privacy Control options allow Internet users to control, and where desired, prevent, the tracking of their online activities across such websites and technology. Our Website currently does not support the Do Not Track browser or any Global Opt Out/Global Privacy Control option. Please see the “Privacy Choices” section of this Privacy Policy for more information on how you can manage how your data can be used by us and/or third-party service providers.

Third Party Features

Please note that our Website may include features operated and powered by third parties, such as applications, estimators, and other user tools. Any information you submit to a third party is subject to their privacy policy. We have no control over and assume no responsibility for the privacy policies or practices of such third parties, and we strongly encourage you to review each party’s privacy policy before submitting personally identifiable information.

Use of Information

To the extent permitted by applicable law, we may use information that we collect about you or that you provide to us as follows:

• To fulfill the reason you provided the information (e.g., to provide more information on a vehicle or contact you regarding any service appointments);

• To provide you with the products and services you request;

• To operate, support, personalize, and develop our Website;

• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses;

• To personalize your Website experience and to deliver content and product and service offerings relevant to your interests, including targeted ads through our Website and via email or text message (with your consent, where required by law);

• To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets;

• For testing, research, analysis, and product development, including to develop and improve our Website, products, and services;

• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;

• To enforce our legal rights and to protect the rights, property, or safety of our company, our clients, or others; and

• For any other purposes with your consent.

Please note that we may aggregate data and information provided by or collected from multiple users (which may include you) in a manner that is not personally identifiable to any individual user. All non-personally identifiable information we collect and all aggregated/compilations of data we create are our exclusive property. Nothing in this Privacy Policy limits our right to use any such non-personally identifiable or aggregated information in any way (including, but not limited to, monitoring user traffic patterns, analyzing and quantifying user preferences, improving the design and content of our Website, and enabling us to personalize your user experience) or prohibits us from sharing non-personally identifiable or aggregated information with third parties.

Disclosure of Your Information

We disclose your information to third parties when you request or instruct us to do so. We also may disclose information that we collect about you or that you provide us as follows:

• To contractors, service providers, and other third parties we use to support our business (e.g., companies that analyze data and provide search results and links);

• In connection with a reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business for the purpose of evaluating and/or performing the proposed transaction (including in connection with any bankruptcy or similar proceedings). These purposes may include, as examples, fulfilling any reporting or audit requirements to such parties and/or disclosing personal information as part of concluding a sale or transfer of assets. Our successors and assigns may collect, use and disclose your personal information for substantially the same purposes as those set out in this Privacy Policy;

• To unaffiliated third parties when we believe its release is appropriate to comply with the law, enforce or apply our Terms and Conditions, and other agreements, or protect the rights, property or safety of our company, our users or others. This includes exchanging information with other unaffiliated third parties in connection with fraud protection; and

• To comply with a legal process, such as a court order, subpoena, search warrant, or law enforcement request.

Privacy Choices

1. Cookies and Other Tracking Tech

If you are using our Website, you can limit certain automatic data collection processes, including by setting your browser to refuse all or some browser cookies, or alert you when cookies are being sent. If you disable or refuse cookies, please note that some of the parts of this website may be inaccessible or not function properly.

As noted above, our websites may use Google Analytics. If you would like to opt-out of having your site activity available to Google Analytics, you can download the Google Analytics Opt-Out Browser Add-On .

2. Advertising

If you would like to opt out of interest-based advertising, you can use the DAA's consumer choice tool. You can also visit the Network Advertising Initiative's Opt Out page for more information about your privacy options for interest-based ads.

3. Communications

If you no longer wish to receive communications from us, you have a number of options. If we contact you by email, you can use the unsubscribe mechanism provided in the email. If we call you, you can let us know that you do not want us to contact you in the future. If we send you a text message, you can text us back and indicate that you do not want to receive additional text messages. You can also email us at  to indicate that you do not want to receive any further communications from us.

Third Party Sites

Our Website may contain links to other websites whose information practices may be different than ours. Our Terms of Use, Privacy Policy and procedures may or may not be consistent with the policies and procedures of such third party websites, and when you visit such websites our Terms of Use and Privacy Policy do not apply to personally identifiable information and other data collected by such third party. You should consult, read and understand the privacy notices of such third parties before choosing to provide personally identifiable information on any such linked websites.

Updates and Effective Date

From time to time, we may update this Privacy Policy to reflect changes in the function of our Website or changes in our technology and use of data, as well as changes in applicable law. If you object to any of the changes we make, your choice is to stop using our Website. By continuing to use our Website or services following the effective date of such changes, you agree to our Privacy Policy as modified. The date this Privacy Policy was last modified is identified at the top of this page.

Data Security

We have in place what we believe to be reasonable physical, electronic and managerial procedures to safeguard and help prevent unauthorized access of, maintain data security for and correctly use the personally identifiable information you have provided or that we otherwise collect on our Website. HOWEVER, WHILE SUCH EFFORTS ARE DESIGNED TO ENSURE THE CONFIDENTIALITY OF YOUR PERSONALLY IDENTIFIABLE INFORMATION AVAILABLE TO US AS A RESULT OF YOUR USE OF OUR WEBSITE, WE CANNOT AND DO NOT WARRANT OR GUARANTEE THE ABSOLUTE SAFETY AND SECURITY OF YOUR PERSONALLY IDENTIFIABLE INFORMATION.

It is important for you to protect against unauthorized access to your password, your computer and your mobile device(s). Be sure to sign off when finished using a shared computer. Additionally, change your passwords often using a combination of letters and numbers, and make sure you use a secure Web browser.

Accessing Our Website from Outside the United States

This Website is designed for, and intended to be used only by, individuals who reside within the United States. If you are visiting our Website from a location outside the United States, such as the European Union, the information you provide to us will be stored on servers located in the United States and will be subject to the laws of the United States, and the laws of the United States may differ from the laws of the country in which you reside. We do not endeavor to comply with the privacy and security laws that may be applicable to the country in which you reside, such as the General Data Protection Regulation if you reside in a country located in the European Union. If you are a resident of a country in the European Union and choose to provide us with your personally identifiable information, such as by submitting an inquiry, you understand that the information submitted will be governed only by the privacy and security laws of the United States.

If you visit this Website from a location outside of the United States, by using this Website and/or providing us with your personally identifiable information you (a) consent to the transfer and/or processing of your information in the United States, (b) acknowledge that United States law may provide a lower standard of protection for your personal data than the laws of your location, and (c) understand that we collect, transfer, store, process and/or deal with your information in accordance with this Privacy Policy and United States law. Any claims relating to the processing of your personally identifiable information in accordance with this Privacy Policy will be governed only by the laws of the United States.

Children Under Thirteen

We believe that it is especially important to protect children’s privacy online. We do not knowingly collect personal information from children under the age of thirteen, regardless of the source. If you are under the age of thirteen, you must ask your parent or guardian for permission to use this website.

Contact

If you have any questions or concerns, please contact us at .

PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

This section applies solely to all visitors, users, and others who reside in the State of California and is provided in compliance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). Any terms defined in the CCPA have the same meaning when used in this section.

Under the CCPA, we are required to disclose whether we sell Personal Information (as defined in the CCPA). We do not sell Personal Information, but we may share Personal Information with third parties or allow them to collect Personal Information from our website or services if those third parties are authorized service providers or business partners who have agreed to our contractual limitations as to their retention, use, and disclosure of such Personal Information, or if you direct us to disclose your Personal Information to third parties.

California law grants you the right to know:

• The categories of Personal Information we have collected about you;

• The categories of sources from which the Personal Information is collected;

• Our business or commercial purpose for collecting Personal Information;

• The categories of third parties with whom we share Personal Information, if any; and

• The specific pieces of Personal Information we have collected about you.

Please note that we are not required to:

• Retain any Personal Information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;

• Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered Personal Information; or

• Provide the Personal Information to you more than twice in a 12-month period.

In connection with any Personal Information we may share, or disclose to a third party for a business purpose, you have the right to know the categories of Personal information that we:

• sold or shared and the categories of the third parties we may have sold or shared Personal Information to; and/or

• disclosed about you for a business purpose and the categories of third parties with whom your persona information may have been shared.

Under CCPA and certain other privacy and data protection laws, as applicable, you have the right to opt-out of the sale or sharing of your Personal Information and the right to opt-out of the use or disclosure of your sensitive Personal Information. If you exercise your right to opt-out, we will refrain from selling or sharing your Personal Information or disclosing your sensitive Personal Information, unless you subsequently provide express authorization for the sale, sharing, or disclosure of your Personal Information. To opt-out of the disclosure of your Personal Information, please contact us at .

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• Delete your Personal Information from our records; and

• Direct any service providers to delete your Personal Information from their records.

• Please note that we may not delete your Personal Information if it is necessary to:

• Complete the transaction for which the Personal Information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;

• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;

• Debug to identify and repair errors that impair existing intended functionality;

• Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;

• Comply with the California Electronic Communications Privacy Act;

• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;

• Comply with an existing legal obligation; or

• Otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.

You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. As a result, we will not deny you goods or services for exercising these rights, charge a different price for goods or services for exercising these rights, provide a different level or quality of goods or services for exercising these rights, or even suggest you'll receive a different price or a different level or quality of goods or services for exercising these rights.