LEXUS DEALER EVENTS
PRIVACY NOTICE


PRIVACY NOTICE

Updated as of March 2024

Introduction to the Lexus Dealer Events Privacy Notice

Lexus is a division of Toyota Motor Sales, U.S.A., Inc. and is hereafter referred to as "Lexus," "we," "us," or "our". Lexus provides a variety of programs for our authorized dealers, including various meetings (such as the Lexus National Dealer Meetings) and other programs and contests (including the Lexus Dealer Incentive Travel Contests) (collectively, the "Lexus Dealer Events"). This document describes the Lexus Dealer Events program privacy notice ("Privacy Notice") regarding Personal Information received about you during visits to the Lexus Dealer Events website and use of the Lexus Dealer Events applications (collectively, the "Sites"). "Personal Information" is sometimes also referred to as personal data, personally identifiable information, or other like terms that mean any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household. The Sites are intended for use by our authorized Lexus dealers and their employees and are not intended for Lexus customers. The amount and type of information received depends on how you use the Sites. These privacy provisions apply solely to Lexus's information collection activities on the Sites and are not applicable to information collection practices Lexus may be engaged in elsewhere, including other Lexus websites or information that Lexus receives from third party sources.

Please note that this Privacy Notice is intended to provide a just-in-time notice tailored to the Lexus Dealer Events. To learn more about Lexu's broader Personal Information handling practices and your data privacy rights, please visit our main privacy statement at https://www.lexus.com/privacy/online-statement. If you have any questions regarding this Privacy Notice or Lexus's handling of your Personal Information, please contact the Office of Privacy at Office.of.Privacy@toyota.com or 855-226-4048.

To learn more about our metrics for how we process all California residents' data privacy requests, please review the "Metrics for Requests by California Residents" section of our main privacy statement at https://www.lexus.com/privacy/online-statement.

1. INFORMATION WE COLLECT


We may collect currently, and may have collected in the prior 12 months, certain types of Personal Information, such as your name, email, telephone number, home address, and other demographic information. We may collect certain types of Personal Information about you in a variety of ways, depending on your interactions with us, as described further below.

2. HOW WE COLLECT INFORMATION


We may collect Personal Information about you in a variety of ways from the Sites, depending on your interaction with us.

Directly from You: We may collect Personal Information directly from you. This may happen in a variety of ways, including but not limited to when you use the Sites, when you enroll in a Lexus Dealer Events program, and when you complete a Travel Registration Form.

Automatically from Your Devices: We may also collect the following types of Online Activity Data automatically when you use the Sites:

Usage Information. Whenever you visit or interact with the Sites, we, as well as any service providers, may use a variety of technologies that automatically or passively collect information about how the Sites are accessed and used ("Usage Information") and utilized to optimize speed and content. Usage Information may include browser type, device type, operating system, application version, the page served, the time, the preceding page views, and your use of features or applications on the Sites. This information helps us maintain and improve our Sites.

Device Identifier. We automatically collect your IP address or other unique identifier ("Device Identifier") for the computer, mobile phone, tablet or other device ("Device") you use to access the Sites. A Device Identifier is a number that is assigned to your Device when you access a website or its servers, and our computers identify your Device by its Device Identifier. We, and our service providers, may use a Device Identifier to, among other things, administer the Sites; help diagnose problems with our servers; analyze trends; and track users' web page movements over time.

Cookies; Pixel Tags. The technologies used on the Sites to collect Usage Information, including Device Identifiers, include but are not limited to: cookies (data files placed on a Device when it is used to visit the Sites), mobile analytics software and pixel tags (transparent graphic images, sometimes called web beacons or tracking beacons, placed on a web page or in an email, which indicates that a page or email has been viewed). We, or our service providers, may place cookies or similar files on your Device for security purposes, and to facilitate Site navigation. A pixel tag may tell your browser to get content from another server.

To learn how you can control cookies, please refer to your browser's help menu or other instructions related to your browser. If you do disable or opt out of receiving cookies, please be aware that some features on the Sites may not work properly because we may not be able to recognize you and associate you with your Device. If you block or delete cookies, not all tracking that we have described in this Privacy Notice will stop.

We use cookies provided by Google Analytics to collect statistical information about the use of the Sites. You can opt-out of Google analytics, here: http://tools.google.com/dlpage/gaoptout (requires you to install a browser add-on).

Certain web browsers may provide an option by which you may request your browser to inform websites you visit that you do not wish your activities to be tracked by cookies or other persistent identifiers, commonly called "Do Not Track Signals". The Sites currently do not respond to Do Not Track Signals.

3. HOW WE USE THE INFORMATION WE COLLECT


We use the Personal Information we collect from you for a variety of business purposes such as to:

We may use non-Personal Information, such as certain aggregate and de-identified data, for other purposes. If we use non-personal information, we publicly commit to maintain and use the information in an aggregated or de-identified form and not attempt to re-identify the information, unless permitted or required by law.

4. HOW WE DISCLOSE INFORMATION


We may disclose currently, and may have disclosed in the prior 12 months, the categories of Personal Information set forth above in this Privacy Notice to other parties for the business or commercial purposes below:

Other Parties Providing Services On Our Behalf: We may disclose your Personal Information to other parties that perform functions on our behalf, such as service providers, contractors, and processors that assist us in administering a Lexus Dealer Events program and fulfilling your travel request, host or operate our Sites, analyze data, process transactions and payments, and provide customer service.

Our Dealers: If you are enrolled in a Lexus Dealer Events program, your accumulation of points referenced by dealership will be disclosed on the Contest Standings page of the Sites. If you win a Lexus Dealer Events program, your dealership name shall be posted on the List of Winners page of the Sites.

Our Affiliates: We may disclose your Personal Information to other entities and our affiliates primarily for business and operational purposes.

Business Transfers: In the event that Lexus is involved in a bankruptcy, merger, acquisition, reorganization or sale of assets, your Personal Information may be sold or transferred as part of that transaction.

Legal Disclosure: We may transfer and disclose your Personal Information to other parties to comply with a legal obligation; when we believe in good faith that the law or a governmental authority requires it; to verify or enforce our Terms of Use or other applicable policies; to address fraud, security or technical issues; to respond to an emergency; or otherwise to protect our rights or property or security of other parties, visitors to our Sites or a Lexus Dealer Event program or the public.

5. SELLING OR SHARING OF PERSONAL INFORMATION


We do not sell your Personal Information or share your Personal Information for targeted advertising with third parties and have not done so in the prior 12 months. We also do not knowingly share, sell or disclose the Personal Information of children under the age of 16, and have not done so in the prior 12 months. In addition, we do not disclose your Personal Information to non-affiliated third parties for their own direct marketing purposes. If you wish to learn more, please contact us using the information provided in the "Contact Us" section below.

6. OPTING-OUT


At any time, if you do not wish to receive communications via email, you can choose to opt out of receiving such information via an unsubscribe link on each email you receive or by using the information provided in the "Contact Us" section below. Please note that even if you opt out of receiving the foregoing emails, we may still send you a response to inquiries where you have contacted us.

7. YOUR PRIVACY RIGHTS


Depending on the jurisdiction in which you are located, you may have certain rights with respect to your Personal Information. For more information about how to exercise these rights, please visit our main privacy statement at https://www.lexus.com/privacy/online-statement. If you have any questions, please contact the Office of Privacy at Office.of.Privacy@toyota.com or 855-226-4048.

8. CHILDREN


The Sites are not directed to children under the age of 13. Lexus does not knowingly collect, use or disclose Personal Information from anyone under 13 years of age. If we learn that we have collected Personal Information from a child under 13 years, we will use commercially reasonable efforts to delete that information.

9. RETENTION AND SECURITY OF YOUR INFORMATION


We retain your Personal Information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

We use certain reasonable security measures to help protect your Personal Information. However, no electronic data transmission or storage of information can be guaranteed to be 100% secure. Please note that we cannot ensure or warrant the security of any information you transmit to us, and you use the Sites and provide us with your information at your own risk. When we collect sensitive information on our Sites (such as credit card number), we encrypt information in transit.

Beware of Phishing Scams: There have been noticeable increases in the number of suspicious e-mails claiming that the e-mail recipient has won a Lexus lottery or other promotion. Sometimes the e-mail claims that the recipient has won a new Lexus vehicle. In order to claim the prize, the e-mail asks that Personal Information be sent to a Hotmail or Yahoo e-mail address.

This type of e-mail solicitation is known commonly as a "phishing" scam, with the primary objective being to obtain one's Personal Information. This information can then be utilized to steal a person's identity. For example, a "Lexus Lottery" phishing scam is often sent from Chinese (.cn), German (.de) or British (.co.uk) addresses but can originate from anywhere and look very official even to the savviest of Internet users. Lexus will never ask you to send passwords, login names, Social Security numbers, or other Personal Information through e-mail or U.S. mail or fax or text message. If you receive an email or letter by U.S. mail or fax or text message from Lexus asking you to update your credit card information, do not respond: this is a phishing scam. Recipients of suspicious e-mail like this should delete the message from their inbox and, if possible, update their e-mail filter settings to block e-mails from the e-mail address being used. The Federal Trade Commission and the Antiphishing Workgroup are also good sources of information about these types of security threats and how they may be reported to the authorities.

10. OTHER SITES


The Sites may include links to other websites that we do not own or operate. We do not control, recommend or endorse and are not responsible for these websites or their content, products, services or privacy policies or practices, even though they may use the Lexus name or logo on their website through an agreement with us. These other websites may send their own cookies to your Device, they may independently collect data or solicit Personal Information and may or may not have their own published privacy notices. You should also independently assess the authenticity of any website which appears or claims that it is one of our Sites.

11. NOTICE TO INDIVIDUALS OUTSIDE THE UNITED STATES


The Sites are intended for use by individuals in the United States. Information collected from you may be transferred, processed, and stored outside the jurisdiction where you reside, and therefore may be available to government authorities under lawful orders and laws applicable in such foreign jurisdictions. These foreign jurisdictions may have data protection and privacy laws that are different than the laws of the jurisdiction where you reside. By using the Sites, or providing us with any Personal Information, you (a) acknowledge that the Sites are subject to the laws of the United States, (b) consent to the collection, processing, maintenance and transfer of such information in and to the United States and other applicable territories in which the privacy laws may not be as comprehensive as or equivalent to those in the country where you reside and/or are a citizen, and (c) waive any claims that may arise under those laws.

12. CHANGES


We may update this Privacy Notice to reflect changes to our information practices. If we make any material changes, we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on our Sites prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

13. CONTACT US


To contact Lexus Program Headquarters with a question, call us on Monday-Friday, 8:00 a.m.-4:30 p.m. Central Time at 800-262-1970, or email at LexusIncentivePrograms@programhq.com.