Privacy Notice

The short version

We collect only what you type into a form, we use it only to answer you or arrange your visit, and we do not sell it or share it for advertising. There is no analytics, no advertising pixel and no tracking of you across other websites.

The rest of this page is the detail behind that, including your rights under California law and how to use them.

1. Who we are and what this notice covers

NATION AUTO ACCEPTANCE
3215 Fulton Ave, Sacramento, CA 95821, United States
(916) 779-9386 · [email protected]

This notice covers this website — what happens to the information you give us through it, and what the site collects by itself.

It is not the whole picture of a vehicle purchase. If you buy from us, or apply for financing, we collect more information in person and you receive separate notices about that at the time. Section 7 explains which ones.

2. What we collect on this website

When you contact us or book a visit:

• Your name, email address and — if you choose to give one — a phone number.
• Whatever you write in the message or notes field.
• For a booking: the vehicle, date and time you selected.
• Whether you asked us to call rather than email.

Automatically, when you use the site:

• The IP address your submission came from. We use it to investigate abuse of the forms — spam and automated submissions — and for nothing else.
• Ordinary web server logs: the page requested, the time, and the browser's user-agent string. These are kept short-term for fault diagnosis.

What we deliberately do not collect here. We do not ask for and do not want your Social Security number, driver's license number, date of birth, or any financial or payment details through this website. Please do not put them in a message — email is not a secure medium. If we need something of that kind for a sale or a credit application, we collect it in person.

3. Categories of information, in the law's own terms

California law asks us to describe what we collect using its categories, so that you can compare one business's notice with another's. Of the categories the law lists, this website collects only these two:

• Identifiers — your name, email address, phone number and IP address.
• Internet or network activity — the pages you requested and your browser's user-agent string, from our server logs.

We collect it directly from you, or automatically from your browser as described above. We do not buy it from data brokers or obtain it from third-party sources.

We do not collect, through this website, any of the other categories the law lists — no commercial or purchase history, no biometric information, no geolocation beyond what an IP address implies, no employment or education records, no inferences or profiles drawn about you, and none of the categories the law treats as sensitive.

4. Why we have it

To answer your question, arrange your appointment, and keep a record of what was agreed. That is the whole purpose.

We also use the IP address and server logs to keep the site working and to keep spam and automated abuse off the forms. We will not use what you gave us for one of these purposes for some unrelated purpose without telling you first.

5. We do not sell or share your information

We do not sell your personal information, and we have not sold it in the preceding twelve months.

We do not share it for cross-context behavioral advertising — the arrangement where one business hands your details to another so that advertising can follow you around other websites. We do not pass your information to data brokers, and we will not add you to a marketing list you did not ask to join.

Because we do none of this, there is no “Do Not Sell or Share My Personal Information” link on this site. There would be nothing for it to switch off.

6. Who else sees it

Your details are stored on our own server. The people who can read them are the staff of NATION AUTO ACCEPTANCE.

We send email notifications and your acknowledgement through smtp-mail.outlook.com, so the contents of your message pass through that mail provider in the ordinary course of being delivered. That is the same thing that happens whenever anybody emails anybody.

Our contact and booking forms use Cloudflare Turnstile to check that a submission came from a person rather than an automated script. When you open one of those forms your browser contacts Cloudflare, which means Cloudflare receives your IP address and some technical information about your browser. Cloudflare states that it does not use this to build an advertising profile of you. We use it only to keep spam off the forms, and we see only its yes-or-no answer.

We may also disclose information if the law requires it — a subpoena, a court order, or a lawful request from a government agency — or where we need to in order to protect our rights or someone's safety. We are not going to volunteer it.

7. If you apply for financing

This part does not concern anything you do on this website. It is here because a privacy notice that stopped at the website would leave out the information that matters most.

If we arrange or apply for vehicle financing on your behalf, federal law treats that activity as a financial service. In that case you receive a separate privacy notice covering the financial information involved — the one required by the Gramm-Leach-Bliley Act — which explains what we collect for a credit application, who we send it to, and where you have a right to opt out of our passing it on. You get that notice as part of your financing paperwork, not from this page.

A credit application is sent to the lenders we submit it to. Those lenders have their own privacy practices, and a credit application necessarily results in an inquiry on your credit file. If you want to know which lenders we would submit to before you apply, ask us and we will tell you.

If you pay cash and do not apply for financing, none of this applies to you.

8. Cookies

We set only the cookies the site needs in order to work, and none of them follow you anywhere:

• A security token that stops a form being submitted from another site.
• A sign-in cookie, for staff using the back office. Not set for visitors.

There is no advertising cookie and no cross-site tracking cookie, which is why this site has no cookie consent banner — there is nothing to consent to.

9. Do Not Track and Global Privacy Control

Some browsers and extensions send a signal — Global Privacy Control, or the older Do Not Track header — asking a website not to sell or share your information or track you across other sites.

We honour that request, and the honest reason it is easy for us to honour is that this site does none of those things to begin with. There is no behaviour on our side for the signal to change.

10. Inquiries that reach us from other websites

We may list our vehicles on third-party marketplaces and social networks as well as here. If you contact us through one of those, your message reaches us through that company's system, under that company's privacy policy, not this one. They decide what they collect about you and what they do with it; we only receive the lead.

Once your inquiry reaches us, we handle it exactly as described in this notice. If you would rather not involve a third party at all, contact us directly through this website, by phone, or in person.

11. How long we keep it

Inquiries and booking records are kept while they are commercially relevant — typically while we may still do business with you, and afterwards for as long as we need them for our own records and tax obligations. Server logs are kept for a short period for fault diagnosis. Anything we no longer need is deleted.

Where the law sets a period for which a dealer must keep a record, we keep it for that period. We do not keep your information indefinitely just because storage is cheap.

If you want your details removed sooner, ask us and we will do it.

12. Your privacy rights in California

If you are a California resident, the California Consumer Privacy Act gives you the right to:

• Know what personal information we hold about you, where it came from, why we have it, and who we have disclosed it to.
• Get a copy of it, in a portable form.
• Correct it if it is wrong.
• Delete it.
• Opt out of its sale or sharing — though as set out in section 5, we do neither, so there is nothing here to opt out of.
• Limit our use of sensitive personal information — and as set out in section 15, we do not collect any through this website.
• Not be treated differently for exercising any of these rights. We will not refuse to serve you, delay you, offer you a worse price, or give you a lesser vehicle because you asked. Asking is not an inconvenience to us.

13. How to make a request, and what happens next

Email [email protected], call (916) 779-9386, or come in and ask. Say what you want — a copy, a correction, a deletion — and we will take it from there. There is no form to fill in.

We have to check it is you. We may ask you something only you would know, such as the email address or phone number you used, or details of your inquiry. This is not obstruction: handing your information to somebody who merely claims to be you would be the real failure. If we cannot verify you, we will tell you why rather than ignoring the request.

Timing. We will confirm we received your request within ten days, and answer it within forty-five days. If it is genuinely complicated we may take up to another forty-five days, and if so we will tell you before the first period runs out and say why.

Someone can act for you. You may authorise another person or a business to make a request on your behalf. We will ask for proof that you authorised them, and we may still verify you directly.

If we say no. There are narrow cases where the law lets us keep information despite a deletion request — a completed transaction, a legal obligation, a record we need to defend a claim. If we refuse any part of a request we will say which part and on what basis, and we will still delete everything else. If you think we got it wrong, tell us and we will look again; you can also complain to the California Privacy Protection Agency or the California Attorney General.

14. California's “Shine the Light” law

California Civil Code section 1798.83 lets a California resident ask a business, once a year and free of charge, what personal information it disclosed to other companies for those companies' own direct marketing, and who they were.

Our answer is that we disclose nothing for that purpose. You are welcome to ask anyway, using the contact details below, and we will confirm it to you in writing.

15. Sensitive personal information

California law gives a special status to certain information: government identifiers such as a Social Security or driver's license number, financial account details, precise geolocation, racial or ethnic origin, religious beliefs, union membership, the contents of your private messages, genetic or biometric data, health information, and information about your sex life or sexual orientation.

This website collects none of it, and the forms do not ask for any of it. That is why there is no “limit the use of my sensitive personal information” link here — there is nothing to limit. If you volunteer something of this kind in a message to us, we use it only to answer you, and you are welcome to ask us to delete it.

16. Children

This site is meant for adults buying a car. We do not knowingly collect information from anyone under 16, and we do not sell or share the personal information of minors — we do not do either of those things for anybody. If you believe a child has sent us something, tell us and we will delete it.

17. How we protect it

The site is served over an encrypted connection. Staff accounts require a password and a second step from an authenticator app, and sessions expire on their own. Access to your details is limited to the staff who need it, and the database is not reachable from the internet.

No system is perfect, and we would rather say that than claim otherwise. What we can promise is that we collect little enough that there is not much here to lose, which is a deliberate choice and the most effective protection there is.

18. If something goes wrong

If your personal information were exposed in a security breach, California law requires us to notify you, and we would — promptly, in plain language, saying what happened, what was involved and what we were doing about it. Depending on what was affected we may also have to notify regulators.

We would not quietly hope you did not notice.

19. Changes to this notice

If we change how we handle your information, we will change this page and update the date at the top. If the change is significant, we will say so here rather than quietly editing it.

We review this page when we change the website, so that it describes the site that is actually running rather than one we used to have.

20. This notice in another format

If you use a screen reader, need larger print, or would like this notice read to you or posted on paper, call (916) 779-9386 or email [email protected] and we will get it to you in a form you can use, at no cost.

21. How to contact us

For anything about your information — a copy, a correction, or a deletion — or for any question about this notice:

NATION AUTO ACCEPTANCE
3215 Fulton Ave, Sacramento, CA 95821, United States
(916) 779-9386
[email protected]

See also our Terms of Use.