MAZDA CONNECTED SERVICES PRIVACY POLICY

Last updated: February 11, 2024, and effective from that date.

This Privacy Policy describes how Mazda Canada Inc. (“us”, “our”, or “we”) may collect, use, and share your “Personal Information” (Personal Information refers to any information that can be used, either alone or in combination with other information, to identify you. This includes data collected from your Mazda vehicle equipped with an activated, factory-installed telematics system (“Connected Vehicle”), which is remotely transmitted to us for certain business purposes, including to provide you with available connected services (“Connected Services”) and to provide you with services through the MyMazda mobile application (“MyMazda”) (collectively, “Services”).

1.       PRIVACY POLICY SUMMARY

What information we collect

The information we collect depends on the settings for your Connected Vehicle, and the Services you have access to and/or use. 

Vehicle Data: When you purchase or lease a Connected Vehicle and sign up for the Connected Services plan, you will activate the telematics system. The telematics system will then start transmitting vehicle data to us, including driving behaviour data (including the acceleration and speed of your Connected Vehicle, travel direction, and use of steering and braking functions) and vehicle health data (which includes Vehicle Identification Number [VIN]; odometer, fuel level, and oil life readings; Diagnostic Trouble Codes [DTCs]; and data from the Connected Vehicle’s OBD system, including engine coolant temperature, fuel injection volume, engine Rotation Per Minute [RPM], and the status of doors, hood, trunk, and hazard lights). We also collect geolocation coordinates of your Connected Vehicle’s latitude and longitude.

Connected Services and MyMazda:  If you have an active Connected Services plan and/or use MyMazda, we collect information such as your name, address, email, phone number, VIN, and any other information you choose to provide as part of your use of the Connected Services and MyMazda. 

MyMazda Data: If you use the MyMazda app, we collect the location of your device, device type, device operating system, Internet Protocol (IP) address, unique identifier, type of browser, Internet service provider, phone number, and information about your use of MyMazda, including screen time, scrolling, specific actions and taps, reactions to alerts, the progress, completion and/or abandonment of in-application purchases, and crash reports.

How we use the information we collect

We use the information we collect to: analyze safety concerns and product trends, issue product recalls, provide support and service; conduct research and development, analyze quality for product improvement, and improve, troubleshoot, and evaluate the use of our products and services; provide our products and services to you; administer your accounts; communicate with you; allow us and our dealers to customize and conduct advertising, including by email, phone and direct mail; and for legal purposes such as protecting our interests.

We may use Location Data to provide you with a Vehicle Finder feature and other Services. We may use Driving Data and Vehicle Health Data to provide you with the status information of your Connected Vehicle, and to provide you with notifications when your Connected Vehicle is due for maintenance or service or when it reports a malfunction and other Services. We and our retailers may access Vehicle Data to provide you with servicing and respond to requests.

How we share the information we collect

We may share the information we collect with our parent company, affiliates and service providers who assist us with the purposes we describe in this Privacy Policy. We may transfer personal information if we undergo a business transaction such as a sale or merger. We may share your information with your retailer so your retailer can provide you information such as product or service offers. Our retailers may access Connected Vehicle information to provide you with servicing and respond to requests.

If your MyMazda account has both Primary and Secondary Users, the Primary User is able to see the name, app permissions and the complete remote request history initiated by Secondary Users. If you invite someone to be a Secondary user, you must have the Secondary User’s permission. We may send them an invitation that identifies you.

Your Choices

If you receive promotional emails from us, you may unsubscribe from them using the unsubscribe link. You may also opt-out of our use of your personal information for marketing by contacting us.

If you would like to disable the collection of Vehicle Data from your Connected Vehicle, please contact our Customer Assistance Centre (see “Contact Us” section below for details). You may have the ability to choose to limit the collection of Vehicle Data in a manner that allows you to reactivate it if you choose, in which case some limited Vehicle Data is still collected. You may also permanently halt the collection of Vehicle Data, in which case we will not be able to provide you with the Connected Services. 

You can also review the “Your Choices” section of this privacy policy for more information about how you can withdraw your consent.

Application of this Policy

This Privacy Policy only applies to the collection, use and sharing of Personal Information obtained from Connected Vehicles and MyMazda and information you provide related to Connected Services and MyMazda, and does not apply to data collection in other contexts, such as: our other websites, applications, and online services that we provide (“Online Services”); any third-party websites or applications that we do not own, operate, or control; or features available through your Connected Vehicle’s Mazda Connect infotainment system. For information regarding our Online Services, please review our general Privacy Policy at www.mazda.ca/privacy. For details regarding Mazda Connect, please refer to your Owner’s Manual.

2.       INFORMATION WE MAY COLLECT 

Vehicle data 

When you purchase or lease a Connected Vehicle and register for a Connected Services plan, your Connected Vehicle will begin transmitting certain vehicle data to us, including (“Vehicle Data”):

·       “Location Data”: geolocation coordinates of your Connected Vehicle’s latitude and longitude;
·       “Driving Data”: driving behaviour data, which includes the acceleration and speed at which your Connected Vehicle is driven, travel direction, and use of the steering and braking functions in your Connected Vehicle; and
·       “Vehicle Health Data”: includes Vehicle Identification Number (VIN); odometer, fuel level, and oil life readings; Diagnostic Trouble Codes (DTCs); and data from the Connected Vehicle’s OBD system, which includes, but is not limited to, engine coolant temperature, fuel injection volume, engine Rotation Per Minute (RPM), and the status of doors, hood, trunk, and hazard lights.

When you register for the Connected Services, the collection of Vehicle Data vehicle will automatically be activated. By registering for the Connected Services, you are consenting to the collection of geolocation information for the purposes described below.

Additional collection of Personal Information for the Services and MyMazda 

In addition to our collection, use, sharing, and storing of Vehicle Data, if you have an active Connected Services plan and/or use MyMazda you may need to provide us with certain other Personal Information.

For example, if you choose to subscribe to a Connected Services plan or register for a MyMazda account, you may be prompted in your MyMazda account to provide, the following Personal Information:

1.       First and Last Name
2.       Email
3.       Phone Number
4.       Address
5.       VIN

All Personal Information required to enroll in the Services will be identified as a required field in MyMazda, and you will not be able to complete enrollment without providing responses to all required fields. 

As part of your use of certain Connected Services, you may also provide additional Personal Information. For example, if a call is triggered as part of the eCall service, your Connected Vehicle’s Vehicle Identification Number (VIN), location data, the reason why the call was triggered and Vehicle Data may be sent to the agent responding to your call. The agent may ask you for additional information related to the situation in order to assist you, appropriately respond to your call, and facilitate the provision of medical services (e.g., information about your situation, information about who you are, your ethnicity and your health and safety [or that of your passengers], information on other individuals in the Connected Vehicle, individuals involved in the accident, whether police was called,). Similarly, if you make a call for Stolen Car Assistance, the agent responding to your call may ask for details about the incident, which could include Personal Information.

MyMazda data 

When you install or use MyMazda in addition to the Personal Information described above, we may also automatically collect (“MyMazda Data”):

1.       Device information, such as the location of your Device, Device type, Device operating system, Internet Protocol (IP) address, unique identifier, type of browser, Internet service provider, and phone number;
2.       Information about your use of MyMazda, including screen view time, scrolling, specific actions and taps to activate features and/or otherwise navigate the application, reactions to alerts, and the progress, completion and/or abandonment of in-application purchases.

You can restrict our access to and collection of certain types of data using settings on your mobile device and/or settings in MyMazda. For example, you can disable location sharing on your device, if that feature is available on your device, and you can disable the collection of certain data for troubleshooting purposes in the MyMazda app settings.

To improve the stability and reliability of MyMazda, we use crash reports (currently through “Firebase Crashlytics”, a service of Google). In case of an error of MyMazda, app- and Device-related data might be transferred to Google’s servers, including device status information, device IDs, information relating to the physical location of a device, crash trace, log-files, device operational system and language information and information about how the app was used. This Data may be used by Google for its own business purposes (e.g., improve its services; see references below for details). We ask for your consent to enable these crash reports and you can withdraw your consent to them in the MyMazda app settings. You can revoke your consent at any time by deactivating the respective function in the app settings under analytics.

For further information on how data will be processed by Google please see: https://firebase.google.com/products/crashlytics; https://firebase.google.com/terms/crashlytics; and https://firebase.google.com/support/privacy.

3.       HOW WE USE YOUR INFORMATION

We may use your Personal Information as follows:

1.       Analysis of safety concerns, issuance of product recalls and to provide customer and vehicle support and service;
2.       Analysis of product trends;
3.       Product quality analysis;
4.       Product improvements, for safety reasons or otherwise;
5.       To improve, troubleshoot, and evaluate the use of our products and Services (including MyMazda);
6.       Provide our products and Services to you, including:
     a.       Location Data: If your Connected Vehicle has an active Connected Services plan, we may use your Location Data to provide you with Vehicle Finder, which allows you to use the MyMazda App to view the geolocation coordinates of your Connected Vehicle’s position at last Ignition-Off, and other services from time to time. We may also use your Location Data as part of your use of certain Connected Services such as eCall and Stolen Car Assistance, to dispatch emergency services or roadside assistance, or to assist law enforcement in finding your vehicle. 
     b.       Driving Data and Vehicle Health Data: We may use both your Driving Data and Vehicle Health Data to provide you with the status information of your Connected Vehicle, including the status of doors, hood, trunk, and hazard lights. You can remotely view the status of your Connected Vehicle at any time using the MyMazda App.
     c.       Vehicle Health Data: Subject to your communications preferences, we may use your Vehicle Health Data to provide you with notifications via the MyMazda App or email when your Connected Vehicle is due for maintenance or service (“Maintenance Notification”), or when your Connected Vehicle reports a malfunction-related event (“Malfunction Notification”).

7.       To administer your accounts with us and to maintain customer relationships and communicate with you;
8.       To send you in-App notifications to advertise products and services that we think may interest you;
9.       We and our retailers may access Vehicle Data to provide you with servicing and respond to service-related requests;
10.   Customize and improve communication content and your experience;
11.   If we have reason to believe that using such information is reasonably necessary to: (i) conduct investigations of possible breaches of law; (ii) identify, contact, or bring legal action against someone who may be violating an agreement they have with us; or (iii) to protect our rights, safety or property including for fraud prevention; and
12.   We may combine the information collected under this Privacy Policy with information you provide us through other means, such as our contests, lead generation, sales data, service data. We may use this information to advertise our products and services, and those of third parties we think may interest you, including contacting you by email, phone and direct mail.

We may use information about usage of the Connected Services in aggregate, non-identifying form, in order to better understand how our customers use the Connected Services. For example, we may analyze how many times a particular feature was used by all Connected Services in a particular month, without identifying which vehicles used that feature. Within our organization, our employees may have access to your Personal Information to fulfill purposes listed in this Privacy Policy. Their access is role-based, meaning they will have access to the Personal Information they need to perform their duties. For instance:

• Our customer service centre will have access to Personal Information needed to provide assistance to customers who contact it; and

• Our billing department will have access to Personal Information needed to provide you with invoices and assist with payment.

4.       SHARING INFORMATION

We may share your personal information with our service providers, or affiliates providing services for us, who may store the information with their own cloud-solution vendors. We may share your personal data for the following purposes:

We may also disclose your personal information in the following circumstances:

1.       With other users of your MyMazda account. The first person to register for MyMazda with respect to a particular Connected Vehicle will become the Primary User of the Connected Services plan for that Connected Vehicle. There can only be one Primary User per Connected Vehicle. As a Primary User, can you share the Service with another user (“Secondary User”). When doing so, certain Vehicle Data and Personal Information (such as your name and VIN), and the Secondary User’s name and email address will be collected, used and shared by us to process the invitation of the Secondary User. You may only share your Connected Service plan with a Secondary User, and provide their information to us, if they are your friends and family from whom you have received permission to provide their email address to us. Your Secondary Users may only be friends with whom you have had a direct, voluntary, two-way communications, and with whom it is reasonable to conclude you have a personal relationship considering shared interests, experiences, opinions and other relevant factors, or family members to whom you are related by, marriage, common-law partnership, or parent-child relationship, and with whom you have had direct, voluntary, two-way communications. Each Secondary User will be sent an email which may indicate that it has been sent on your behalf and may identify you, and invite them to register as a Secondary User. The Secondary User can use the Services after successful registration. You will be able to see the name, app permissions and the complete remote request history initiated by Secondary User. You can deactivate at any time particular Services for the Secondary User such as Vehicle Status, Vehicle Health Report, Remote Control Access, Vehicle Finder and POI Send to Car;
2.       Where required or permitted by law we may share your information. For example, we may share your information with law enforcement, courts, administrative bodies or government entities if we are required to do so by applicable law; legal process; in response to government investigations; as may be required for national security; or where we have a good faith belief that disclosure of your information is required or permitted by law or legal process. We may also share your information where we have a good faith belief it is necessary to do so to prevent harm, injury, or loss, and we may use your information to pursue or defend legal actions, even if harm, injury, or loss has already occurred; and
3.       We may transfer or assign your Personal Information as a result of, or in connection with an actual or potential merger, consolidation, change in control, transfer of assets, bankruptcy, reorganization, liquidation or other business transaction.

MCI’s service providers and affiliates are obligated to use the personal information only for the foregoing purposes, unless otherwise required by law. They are also obligated to refrain from disclosing your personal information to third parties unless your consent has been obtained or they are legally required to do so.

5.       RETENTION

We retain your Personal Information only for as long as reasonably necessary for us to provide you with the Services, for us to support all other uses we make of the Personal Information, as detailed in this Privacy Policy, and as required by law or legal process, or as may be needed in the event of anticipated or pending litigation.

6.       SECURITY

We take data and information security seriously. We continuously strive to protect your Personal Information against loss and unauthorized access or use by maintaining and continually updating our formal security program, which employs physical, organizational and technical security practices to protect Data and Personal Information.

Even though we have taken steps to help protect the Personal Information in our control, you should know that we cannot fully eliminate security risks associated with Personal Information. No security measures can provide absolute protection.

We make reasonable efforts to ensure your Personal Information is up to date and accurate for the purposes listed in this Privacy Policy. Please ensure you contact us at the contact information below to correct or update the Personal Information we hold about you. You may also correct and update some of your Personal Information directly in MyMazda, as stated in the section “Your Choices Regarding your Personal Information” below.

7.       DATA TRANSFERS ACROSS BORDERS

Personal Information that we collect may be stored and processed in Canada (including outside Quebec) and any other country in which we or our service providers maintain facilities, including in the United States and Japan. Personal Information processed and stored in another jurisdiction may be subject to disclosure or access requests by the governments, courts or law enforcement or regulatory agencies in that country according to its laws of general application, including data protection laws.

If your Personal Information is transferred outside of your jurisdiction, we will take steps to ensure your information is adequately protected.

8.       YOUR CHOICES REGARDING YOUR PERSONAL INFORMATION

At any time, you may make the following choices related to the Personal Information we hold about you. 

1.       Access, correct, update and erase Personal Information:

·       You may log-into MyMazda at any time to access, correct, or update Personal Information you provided to us that is available through the MyMazda App. You may also contact us at the contact information below if you wish to access, correct, update or erase any Personal Information, including information that is not available on MyMazda.

2.       Cancel your subscription:

·       You may use MyMazda to cancel your subscription, in which case we will cease collecting your personal information. However, we will continue to use and disclose the personal information we have already collected for the purposes described in this Privacy Policy unless and until you withdraw your consent for us to do so.

3.       Marketing:

·       If you have consented to receive promotional emails from us, you may withdraw your consent to receive such communications at any time by using the unsubscribe link we include in these emails. You may also opt out of our use of your Personal Information for marketing purposes by contacting us using the contact information provided below. Please note that, even if you unsubscribe to such communications, Mazda may contact you for other purposes such as recalls, the status of your vehicle and your account, or other service-related purpose and update permitted by law.

4.       Enable and disable (“opt out”) Services in the Vehicle:

·       Depending on your vehicle’s capability, you may be able to grant and withdraw your consent to the collection, use and dissemination of personal information by us temporarily by enabling and disabling Services in your vehicle’s settings;
·       You can also contact us at the contact information below and ask us to disable your Connected Vehicle in a manner that enables us to re-connect your Connected Vehicle in the future upon your request. By doing so, we may still collect and use limited amounts of Vehicle Data, including a file indicating that the system is on/off, time/date of the last ignition cycle, and total number of ignition cycles, in order to ensure your vehicle can be re-connected in the future. If you wish to fully deactivate the Telematics Control Unit (“TCU”) in your Connected Vehicle then please see “Disable TCU” below.

5.       Disable (“opt out") TCU:
·       You can also contact us at the contact information below to permanently deactivate your TCU, thereby disabling our collection, use and dissemination of all Vehicle Data. If you choose to deactivate your TCU, you will be unable to subscribe to or continue using any Services, and we may not be able to reactivate your vehicle’s connection if you decide you want the Services in the future.

Please note that in some cases, if you contact us to exercise any of your rights regarding your Personal Information (see Subsection 1 above), we may not be able to fulfill your request, in part or completely, as these rights are subject to specific requirements or limitations under applicable law. For example, we may be unable to provide you access to Personal Information that exempt from disclosure, such as information about another individual, information protected by solicitor-client privilege, or information considered as commercial confidential information. For example, we may not be able to fulfill your request for the erasure of your personal information depending on your province of residence, and whether we have legitimate purposes for retaining your Personal Information despite your request.

If we cannot accommodate a request, we will provide you with a justification. Please note that if you withdraw your consent we may not be able to provide you with a particular product or service.

In order to assist with your request, we may ask you for sufficient information to allow us to confirm your identity, that you have authority to make the request, and to confirm the details of the request.

9.       YOUR OBLIGATIONS

The nature of our Connected Services means that there may be circumstances where you might let someone else use a product or service that we provide to you (for example, you let someone else drive your Vehicle). It is important that if you do let someone else use one of our products or services that you inform them of this Privacy Policy and of the privacy choices that you have made.

If you sell or otherwise transfer your vehicle, it is your responsibility to delete all information (such as contacts, address look-ups, saved map addresses) from the vehicle’s system and contact us at the contact information below to transfer or cancel your account. Before transferring or selling your vehicle, please contact our Customer Assistance to transfer or cancel your subscription, and delete any personal information stored on the vehicle by selecting [System Settings] from [Settings] on your centre display, select [Restore All factory Settings] from [System Settings], and select [Initialize] to start the initialization. You will also need to delete any personal information stored on your MyMazda App by accessing your profile from the Menu, select [Edit Profile] from the Actions tab, select [Delete Account] and select [Confirm]. You can also find instructions in your vehicle’s CV owner’s manual.

This is important to help protect your account and your information, and that of the new owner. If you do not delete this information, it may remain on the vehicle’s system and may be accessible to future users of the vehicle. For example, we may continue to send reports or other information about the vehicle or account to the Primary User’s contact information currently on file with us, and the previous owner may be able to continue to use the services in respect of the Connected Vehicle. SUCH CONTINUED USE OF THE SERVICES BY THE PREVIOUS OWNER IS STRICTLY PROHIBITED.

IF YOU DO NOT INFORM US OF ANY SALE OR TRANSFER OF YOUR VEHICLE, WE ARE NOT RESPONSIBLE FOR ANY PRIVACY-RELATED DAMAGES OR CLAIMS YOU OR ANYONE ELSE MAY SUFFER. If you sell or transfer your Connected Vehicle, you must cease using any Services in respect of such vehicle. If a new owner opens an account in respect of a Connected Vehicle, any prior accounts in respect of such Connected Vehicle may be terminated.

10.   CHILDREN’S PRIVACY

We do not knowingly target or collect any Personal Information about children for the purposes mentioned in this Privacy Policy. If Personal Information about children has been mistakenly provided to us and you would like to request that such Personal Information be removed, please refer to our Contact us section.

11.   CHANGES TO THIS PRIVACY POLICY

We may make changes to this Privacy Policy at any time by posting a new version to our website. If required by law, we will notify you in another manner that is likely to come to your attention. 

The effective date of this Privacy Policy is indicated at the top of this page.

12.   CONTACT US

You may contact our Privacy Office if you have any questions or complaints regarding our privacy practices or this Privacy Policy, or if you would like to exercise any of your choices regarding the Personal Information we hold about you. You may contact our Privacy Office at the contact information below:

TCCI Privacy Policy

Toyota Credit Canada Inc. ("TCCI" or “we”, “us”, “our”) operates throughout Canada under the business name of "Mazda Financial Services”. TCCI is the financial services provider to the Distributor (defined below).

This Privacy Policy

As a provider of financial services, the collection, use, and disclosure of your personal information is very important to our day-to-day business operations. The purpose of this Privacy Policy ("Privacy Policy") is to inform you of the specific types of personal information we collect, why we collect it, how it is used, how it is disclosed and how you may correct errors in your personal information collected by us. 

In this Privacy Policy, the “Distributor” is the Canadian distributor of the vehicle for which you are applying for credit or for which you have entered a finance or lease agreement and the “Dealer” is the Distributor’s authorized dealership through whom you are applying for credit or through whom you have leased or financed your vehicle. 

This Privacy Policy applies to information we collect, use, or disclose about our customers, including information you provide:

• When you submit your credit application (the “Application”).
• When you enter into a finance or lease agreement with us (the “Agreement”).
• On or through https://portal.mazdafinancial.ca (the “Portal”).
• In email, text, and other electronic messages between you and us.

The Portal may include links to third-party websites, plug-ins, services, or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. If you follow a link to a third-party website or engage a third-party plugin, please note that these third parties have their own privacy policies and we do not accept any responsibility or liability for these policies. We do not control these third-party websites, and we encourage you to read the privacy policy of every website you visit.

We understand the importance of your personal information and take pride in our commitment to maintaining its confidentiality. We ensure that your personal information is collected, used and disclosed only in the manner in which you have consented. Our organization ensures that we meet or exceed the requirements of all laws and regulations applicable in Canada. 

Please read this policy carefully to understand our policies and practices for collecting, processing, and storing your information. If you do not agree with our policies and practices, your choice is to not provide information to TCCI or not use the Portal.  

What is "Personal Information"?

"Personal information" is any personally identifiable information about you, which may include, but is not limited to, your name, mailing address, credit history, credit card number, banking information and voice recordings as well as the terms of your financing and lease agreements (as applicable). It does not include aggregated information that does not identify you specifically. 

How Do We Collect Personal Information?

When you finance or lease a vehicle through us, we will collect the personal information you provide to us in your credit application.  

Your personal information is also collected when you enter into a finance or lease agreement with us, and when you provide documents, including banking or insurance documents, necessary for the administration of your finance or lease agreement with us. 

We may also collect information during our interactions with you for our mutual protection including, monitoring or recording your telephone discussions with our representatives for servicing accuracy, quality assurance and/or for training purposes. We may also collect your personal information from third parties including, but not limited to, third parties referenced on your credit application and other credit providers or credit bureaus, however, your consent will have always been obtained prior to any third parties being approached. For example, when you have given us your consent to contact your references or your employer by providing us with their contact information on your credit application. 

When you access and use the Portal, we use different methods to collect your personal information, including through: 

• Direct interactions with you when you provide personal information to us, for example, by filling in forms, uploading documents, or corresponding with us by phone, email, or otherwise. 
• Automated technologies or interactions, as you navigate through the Portal. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies.

The information we collect directly from you on or through the Portal may include: 

• Information that you provide by filling in forms or uploading documents on our Portal. This includes information provided at the time of registering to use our Portal, or when requesting further services. We may also ask you for information when you report a problem with our Portal. 
• Records and copies of your correspondence (including email addresses), if you contact us by correspondence.
• Your responses to surveys that we might ask you to complete for research purposes. 
• Details of the transactions you carry out through our Portal, such as updating your account information, and our fulfillment of your request. You may be required to provide financial information before placing a request through our Portal. 
• Your search queries on the Portal. 

Information We Collect Through Cookies

We use cookies to analyze traffic on the Portal and to make improvements to the Portal in order to create the best possible experience for users.  We also share information about your use of the Portal on an anonymous basis with our analytics partners (including advertisers, ad networks and servers, content providers, and application providers) who may combine it with other information that you’ve provided to them or that they have collected from your use of their services.  By continuing to use the Portal, you consent to our use of cookies. 

How is Your Personal Information Used and Disclosed?

We may use and share your Application and Agreement personal information with the Distributor, your Dealer and the third parties described below, for the following purposes: 

• To help us evaluate your credit application to finance or lease a vehicle through us. 
• To credit bureaus, consumer reporting agencies and other credit providers for the purpose of evaluating your credit application and confirming, verifying and updating any information (including but not limited to, your account balance and payment record) provided to us regarding your credit application or your finance or lease agreement.
• To the Dealer for the purpose of assessing your credit application and/or informing them of our decision on your credit application. 
• Account administration, including collection of overdue accounts, audit and archival purposes. 
• To third party service providers for the purpose of collecting on an overdue account, for registering our security interest on your vehicle and to confirm that valid insurance has been purchased for your vehicle. 
• Third party service providers for the administration of optional products and services that you have purchased.
• To a third party in connection with a transfer or assignment by us of our interest in your lease or finance agreement, including securitization transactions.
• To include you in any advertising or marketing campaigns in which we alone or, together with the Distributor and its dealers, offer you our or their products and/or services. To respond to your requests for products, services or information, and improve our services, information and products, including asking you to reply to customer surveys. To better understand your automotive needs and to increase your awareness of the Distributor’s brand of products and services and the goodwill associated with our businesses.  

We use personal information that we collect about you or that you provide to us on or through the Portal, for the following purposes: 

• To present our Portal and its contents to you. 
• To provide you with information, products, or services that you request from us. 
• To fulfill the purposes for which you provided the information or that were described when it was collected, or any other purpose for which you provide it. 
• To provide you with notices about your account.
• To carry out our obligations and enforce our rights arising from any contracts with you, including for billing and collection or to comply with legal requirements. 
• To notify you about changes to our Portal or any products or services we offer or provide to you.
• To improve our Portal, products or services, marketing, or customer relationships and experiences.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

We may also use your information to contact you about our own and third-parties' goods and services that may be of interest to you, as permitted by law. If you do not want us to use your information in this way, please use the unsubscribe mechanism at the bottom of our marketing e-mails or contact us by telephone at 1-800-665-8844.

We may share personal information that we collect, or you provide through the Portal as described below: 

• To your Dealer for the purposes of updating your contact information in the Dealer’s records.
• To the Distributor for the purpose of including you in any advertising or marketing campaigns in which we alone or, together with the Distributor and its dealers, offer you our or their products and/or services.
• To third party service providers for the purpose of: (1) collecting on an overdue account, for registering our security interest on your vehicle and to confirm that valid insurance has been purchased for your vehicle; (2) account administration, including collection of overdue accounts, audit and archival purposes; (3) the administration of optional products and services that you have purchased; (4) responding to your requests for products, services or information, and improving our services, information and products, including asking you to reply to customer surveys; and (5) better understanding your automotive needs and to increase your awareness of the Distributor’s brand of products and services and the goodwill associated with our businesses.
• To a third party in connection with a transfer or assignment by us of our interest in your lease or finance agreement, including securitization transactions.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also share your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law.
• To enforce or apply the Portal's Legal Terms and Conditions (available at https://portal.mazdafinancial.ca and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of TCCI, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Your Consent

We will only collect, use, and disclose your personal information with your consent.

Your consent may be given expressly or implied, depending on the circumstances.  In connection with your Application(s) and Agreement(s) you will be asked to consent expressly to our collection of personal information for the purposes identified herein. In other cases, your consent is understood, such as when you respond to a customer satisfaction survey, register for updates on this Portal or speak with our representatives after having been notified that the call may be recorded. 

Customers who prefer not to have their calls recorded can conduct their business with us in writing or you can immediately advise the Customer Service representative that you do not wish to be recorded and we will ensure that procedures are activated to comply with your request. 

You may notify us that you do not wish us to use your personal information for any purposes that are not required to supply you with a product or service at any time by contacting us in any of the ways described below under the heading "How You Can Review and Update Your Personal Information". We will seek your further consent to any additional uses of personal information for which we have not obtained your consent previously. 

Subject to legal and contractual restrictions, you may at any time withdraw or change your consent to our use or disclosure of your personal information or request us to delete it from our files. However, if you do not provide personal information required to supply a product or service or withdraw or change your consent, we may not be able to provide that product or service. Notwithstanding any withdrawal of consent, we may retain and use your information for account administration purposes, including collection of any amounts you owe us. 

With Whom is Your Personal Information Shared?

For the purposes outlined above we may share your personal information with the Distributor, the Dealer and with third parties. We will not disclose any of your personal information to any other persons except with your prior express consent, or in connection with a sale of all or substantially all of the assets of one of our businesses, or as may be required or permitted by law. 

Your personal information may be transferred to third party service providers that we use to assist in managing and processing your personal information. Our third party service providers are required to use, maintain and disclose your personal information only in accordance with our instructions to them and only on our behalf. 

We will also share your information with our joint-marketing partners who may provide you with information about their products and services. You will be provided with an opportunity to opt-out of communications with our joint-marketing partners. 

Does TCCI Transfer Information Outside of Canada?

The personal information that you provide to TCCI may be transferred outside of Canada for storage and processing. TCCI uses service providers that store and process your personal information on servers located in Canada and the United States. When TCCI uses service providers to store and process your personal information, TCCI's policy is to have appropriate contractual provisions in place with those service providers limiting the purposes for which your personal information is being transferred to them and stipulating security requirements for that information. Please note that the privacy laws in other jurisdictions may differ from Canadian privacy laws and in some jurisdictions your personal information may be accessed by law enforcement authorities or the courts. If you have any questions regarding our policies and practices relating to storage and processing of personal information outside of Canada, please contact us in any of the ways described below under "How You Can Review and Update Your Personal Information". 

How Long Do We Retain Your Personal information?

We retain your personal information as long as is required for the purposes identified when you provided the personal information and for any new purposes identified by us and consented to by you, and for an appropriate time thereafter. 

Under some circumstances we may anonymize, pseudonymise, or de-identify your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous, pseudonymous, or de-identified data for any legitimate business purpose without further notice to you or your consent. 

How Do We Protect Your Personal Information?

We protect your personal information using security systems appropriate to the sensitivity of the information. In our ongoing effort to safeguard your personal information from unauthorized collection, use or disclosure, we have put in place a number of safeguards including; contractual, organizational, structural and technological security standards.  

How You Can Review and Update Your Personal Information

You may review, update or correct any of your personal information held in our files and your consent regarding its use and disclosure at any time by contacting us in any of the ways indicated below. Please note, we rely primarily on you to provide us with your most complete, accurate and up-to-date personal information and to inform us of any changes to your personal information. 

If you wish to change your consent to our use and disclosure of your information, or if you wish to review, update, correct or have us delete your information from our files, please contact us as follows: 

Customer Service Manager
Toyota Credit Canada Inc.
80 Micro Court, Suite 200
Markham, Ontario
L3R 9Z5
or by telephone: Dial and Call 1-800-665-8844.

If you have any questions or concerns regarding our privacy policy and procedures, please contact:

Privacy Officer
Toyota Credit Canada Inc.
80 Micro Court, Suite 200
Markham, Ontario
L3R 9Z5

Will this Privacy Policy Change?

We reserve the right, at any time, to modify this Privacy Policy at our sole discretion, and you agree to be bound by any such modifications, which shall be effective immediately upon our posting the revised Privacy Policy on our web site or the Portal.  

POSTED: October 2024