Your Privacy Rights

Your vehicle may be equipped with Connected Services that electronically transmit vehicle-originated data (such as driving behavior data and vehicle health data) to Toyota. These Connected Services may use your vehicle-originated data to respond to vehicle emergencies, find destinations or activate remote services. This vehicle-originated data is subject to the Toyota Connected Services Privacy Notice rather than the Toyota Privacy Notice. Please visit the Toyota Connected Services Privacy Notice at https://www.toyota.com/privacyvts/ for additional information.

This summary of the Toyota Privacy Notice applies to Personal Information (as defined below) collected by or on behalf of Toyota Motor Sales, U.S.A., Inc. ("Toyota," "us," or "our"). Some of our products and services may have additional privacy notices that apply, such as Toyota Connected Services. Where product- or service-specific privacy notices conflict with this Privacy Notice, those privacy notices shall govern. This Privacy Notice was last updated on January 7, 2025.

• We collect Personal Information that you provide, which may include your name, mailing address, email address, phone number, and certain demographic information. We may collect Personal Information about you from other parties, including our affiliates and dealers.
• We collect and store "usage information" about how you use our technology platforms (including, without limitation, our Toyota-owned and branded websites, web pages, interactive features, applications, and mobile applications that link to this Privacy Notice ("Platforms"), such as the name of your Internet service provider, the browser and type of machine you are using, the IP address and the Web site that referred you to us and the pages you visit to help manage and enhance the Platforms.
• We, and the advertising and other data companies we use, utilize cookies and Web beacons to manage the Platforms, tailor our communications with you, and personalize your experience on the Platforms.

• We use Personal Information to provide you with services or information you request, such as new vehicle information alerts, promotions and mailed brochures.
• We also collect and use Personal Information when you request to participate in promotional activities such as sweepstakes, contests, games, special events, blogs and chats.
• We share Personal Information with our service providers and business partners to assist us in fulfilling your requests and providing features and services for the Platforms.
• We also share Personal Information with companies affiliated with Toyota and our authorized dealers and their holding companies, dealer advertising associations and distributors for their own use.
• We, Web publishers, and other Web sites on which we advertise may target advertisements for products and services in which you might be interested based on your visits to both the Platforms and other Web sites.

• Children's Privacy. Toyota does not seek information from children under the age of 13.
• Phishing Scams. Toyota will never ask you to update your Personal Information through email.
• Acceptance. By using the Platforms, you signify having read and accepting this Privacy Notice.

• You have the right to have a copy of the Personal Information you provide to Toyota.
• You have the right to access, delete, correct or update your Personal Information,  opt-out of certain processing activities, and other rights under data privacy laws.
• You may instruct Toyota to remove you from our programs you have subscribed to by using the unsubscribe link provided in our email programs or by contacting us.

To contact us with a question call us at 800-331-4331 or mail your inquiry to:

UPDATED AS OF: January 7, 2025

Toyota Motor Sales, U.S.A., Inc. is committed to maintaining your confidence and trust as it relates to the privacy of your Personal Information. Personal Information is sometimes also referred to as personal data, personally identifiable information or other like terms that mean any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household. Personal Information does not include the following if exempt under privacy laws:

• Publicly available information: information that is lawfully made available to the general public through government records, by you or from widely distributed media, or by a person to whom you have disclosed the information, unless you have restricted the information to a specific audience.
• De-identified (which we commit to keep de-identified) or aggregated information.
• Other regulated information that is excluded from the scope of United States privacy laws, such as:
  • Medical information governed by the California Confidentiality of Medical Information Act (CMIA);
  • Protected health information collected by a covered entity or business associate governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA);
  • Clinical trial data or other biomedical research data subject to the Federal Policy for the Protection of Human Subjects;
  • Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

Please read below and learn how we collect, protect, share, and use your Personal Information including information we collect as part of our technology Platforms (including, without limitation, our Toyota-owned and branded websites, web pages, interactive features, applications, and mobile applications that link to this Privacy Notice ("Platforms"), offline, and from other parties.

United States Only. This Privacy Notice describes our practices with respect to Personal Information collected regarding individuals in the United States. If you are located in another country, please review the applicable Toyota privacy notice for your country.

Toyota Connected Services. This Privacy Notice does not apply to any vehicle-originated data collected in connection with our Toyota Connected Services (such as driving behavior data and vehicle health data). Please visit www.toyota.com/privacyvts to learn more about our vehicle data collection, use and sharing practices.

This Privacy Notice also does not apply to the data practices of any Toyota, Lexus, or Scion dealers; local Toyota dealer associations; private distributors; Toyota Financial Services; Lexus Financial Services; or Toyota Insurance Management Solutions. If you wish to learn about the privacy practices of these entities, please visit their respective privacy notices. To review the privacy notice for Toyota Financial Services, please click here. To review the privacy notice for Lexus Financial Services, please click here. To review the privacy notice for Toyota Insurance Management Solutions, please click here. To review Toyota dealer sites, please click here. To review the privacy notice for Gulf States Toyota, Inc. (private distributor in Arkansas, Louisiana, Mississippi, Oklahoma, and Texas), please click here. To review the privacy notice for Southeast Toyota (private distributor in Alabama, Florida, Georgia, North Carolina, and South Carolina), please click here.

1. INFORMATION WE COLLECT.
2. HOW WE COLLECT INFORMATION.
3. HOW WE USE THE INFORMATION WE COLLECT.
4. HOW WE DISCLOSE INFORMATION.
5. CHOICE, ACCESS, AND RETENTION OF PERSONAL INFORMATION.
6. ADVERTISING/BEHAVIORAL TARGETING; HOW TO OPT OUT.
7. CHILDREN.
8. SECURITY OF YOUR INFORMATION AND PHISHING SCAMS.
9. OTHER SITES.
10. CONSENT TO PROCESSING AND TRANSFER OF INFORMATION.
11. CHANGES.
12. DISCLOSURES FOR INDIVIDUALS IN THE UNITED STATES.
13. CONTACT US.

We may collect certain types of Personal Information about you in a variety of ways, depending on your interactions with us, as described further below. We may also collect information from other parties, such as our dealers, as described further below.

• Contact and Demographic Information: Contact Information includes information that may be used to contact you or identify you. Examples include your name, address, phone number, email address, owner account information, online identifier, user ID, demographic information (such as Zip Code and age), and social media IDs.
• Product and Service Data: Product and Service Data includes vehicle ownership records associated with your current and/or prior owned vehicles. Examples include vehicle ownership transactions, Retail Delivery Report records, recall records, warranty records, repair order records, part order records, Toyota Insurance Management Solutions insurance product records, and incentive offers that you accept.
• Interaction and Feedback Data: Interaction and Feedback Data includes information regarding your interactions with Toyota (such as Toyota’s Brand Engagement Center) via telephone, email, chat, text and/or postal mail. Examples include comments and feedback that you provide to us (including customer testimonials); information collected in connection with your participation in sweepstakes, contests, games, special events, promotions, blogs and chats, and surveys (“Programs”); and call center records and screen, audio and/or video recordings of such interactions.
• Online Activity Data: Online Activity Data includes information regarding your online interactions with Toyota’s Platforms and other websites, where applicable. Examples include your browsing history on Toyota’s Platforms, real-time behavioral data derived from session replay tools about your use of Toyota’s Platforms, information collected from Toyota’s cookies, IP addresses, and publicly available social media information (such as publicly available information that you post on social media sites).
• Marketing Interaction Data: Marketing Interaction Data includes information regarding your pre- and post-sale marketing interactions with Toyota. Examples include information collected at events, vehicle purchase negotiation information, vehicle service marketing information, direct marketing information, and retention marketing information.
• Payment Information: Payment Information includes payment-related information in connection with your purchase of products and/or services from Toyota. Examples include your credit card number or payment platform number.
• Research Data: Research data includes data collected by Toyota related to Toyota’s consumer and product research. Examples include your responses to surveys, and information you provide as part of a focus group.
• Legal Activity Data: Legal Activity Data includes information collected in connection with legal claims. Examples include information relating to disputes, claims, reimbursements and recalls.
• Business-to-Business (“B2B”) Data: B2B Data includes information related to our business-to-business and vendor relationships. Examples include business contact information provided to us online or offline to consummate the relationship and carry out business functions. Examples include your name, title, company you work for, address, email address, and phone number.

We may collect Personal Information about you in a variety of ways, depending on your interaction with us or certain other parties. We may also supplement the information we collect about you directly and through our Platforms with information that we receive from other parties.

• Directly from You: We may collect Personal Information directly from you. This may happen in a variety of ways, including, but not limited to, when you use the Platforms, when you use or subscribe to services that we offer (such as Connected Services), when you use applications that we offer (such as the Toyota App), when you purchase a vehicle, and when you interact with Toyota’s Brand Engagement Center. We may also collect Personal Information from you when you submit comments to us or participate in programs. You may also provide us with written, audio or video feedback or testimonials that contain Personal Information.
• Publicly Available Sources: We may collect Personal Information from publicly available sources. For example, Toyota utilizes third-party social media management services to collect and analyze publicly available information on various social media sites.
• From Other Individuals: We may also collect Personal Information from other individuals. For example, some features on the Platforms may permit users to submit information about other people. If you wish to invite your friends to participate in a program offered through the Platforms or forward particular content from the Platforms to your friends, you will be asked to submit your friends' email addresses. Our use, sharing and protection of the other person's information will also be subject to the terms of the applicable program and this Privacy Notice.
• From Other Parties: We may also collect Personal Information from other parties, including our affiliates (such as Toyota Financial Services and Toyota Motor Corporation), our business partners, our service providers, and certain other-party companies (such as our authorized dealers, distributors, local dealer associations, data brokers and other data providers). Information from such other parties may have been collected online, offline, or through publicly or commercially available sources. In addition, we may collect information from other parties in the ways described below:
• Requests to Other Parties. Other parties may provide your information to us at your request. For example, if you are on another website and you opt in to receive information from Toyota, that website will submit to us your email address and other information about you so that we may contact you as requested.
• Applications and Websites; Social Media. You may also choose to participate in another party’s application or feature (such as one of our Facebook or X applications or a similar application or feature on another party’s website) or use another party’s website where you allow us to collect (or the other party to collect and share) information about you, including online activity data and other Personal Information, such as lists of your friends, "likes," comments you have shared, groups, location, and your activity on the other party's website. Services like Facebook Connect give you the option to post information about your activities on our Platforms to your profile page to share with others within your network. In addition, we may receive information about you if other users of another party’s website give us access to their profiles and you are one of their "connections" or information about you is otherwise accessible through your "connections" web page, profile page, or similar page on a social networking or other third-party website or interactive service.
• Automatically From Your Devices:  We may also collect the following types of Online Activity Data automatically when you use the Platforms:
• Usage Information. Whenever you visit or interact with the Platforms, we, as well as any other-party advertisers and/or service providers, may use a variety of technologies that automatically or passively collect information about how the Platforms are accessed and used ("Usage Information"). Usage Information may include browser type, device type, operating system, application version, the page served, the time, the preceding page views, and your use of features or applications on the Platforms, such as interactions with friends and group activities. This information helps us keep our Platforms fresh and interesting to our visitors and allows us to tailor content to a visitor's interests.
• Device Identifier. We automatically collect your IP address or other unique identifier ("Device Identifier") for the "Device" (computer, mobile phone, tablet or other device) you use to access the Platforms. A Device Identifier is a number that is assigned to your Device when you access a website or its servers, and our computers identify your device by its Device Identifier. We, and our affiliates, service providers, business partners, and other parties, including authorized dealers, may use a Device Identifier to, among other things, administer the Platforms; help diagnose problems with our servers; analyze trends; track users' web page movements over time and across different websites, Platforms, or other mobile, online, or offline services; to help identify you and your shopping cart, and gather broad demographic information for aggregate use.
• Cookies; Pixel Tags. The technologies used on the Platforms to collect Usage Information, including Device Identifiers, include but are not limited to: cookies (data files placed on a Device when it is used to visit the Platforms), mobile analytics software and pixel tags (transparent graphic images, sometimes called web beacons or tracking beacons, placed on a web page or in an email, which indicates that a page or email has been viewed). Cookies may also be used to associate you with social networking sites like Facebook and X and, by using one of their applications either on or otherwise connected to our Platforms (e.g., social media login credentials or vehicle configuration shared to social media), you may enable interaction between your activities on the Platforms and your activities on such social networking sites. We, or our vendors, may place cookies or similar files on your Device for security purposes, to facilitate site navigation and to personalize your experience while visiting our Platforms (such as allowing us to select which ads or offers are most likely to appeal to you, based on your interests, preferences, location or demographic information). To customize your cookie settings for Toyota.com, visit Toyota.com and click on "Cookie Consent Options".
  
  Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser. However, please be aware that some features of the website may not function properly or may be slower if you refuse cookies. In addition, the offers we provide when you visit us may not be as relevant to you or tailored to your interests. If you block or delete cookies, not all tracking that we have described in this Privacy Notice will stop.
  
  We use cookies provided by Google Analytics and LiveRamp to collect statistical information about the use of the website. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout (requires you to install a browser add-on). You can completely opt out of LiveRamp third-party data collection here: https://liveramp.com/opt_out/.

We use the information we collect about and from you for a variety of business purposes such as to:

• Respond to your questions and requests such as requests for product information, new vehicle information alerts, and brochures, or to provide other customer support to you;
• Advise you of important safety-related information;
• Provide services to you, such as the Connected Services (please note that the Toyota Connected Services Privacy Notice will apply at the juncture when data is collected from your vehicle) to which you have subscribed (e.g., roadside assistance, navigation and telematics services) or the Toyota App;
• Provide and enhance vehicle services to you, such as service reminders and dealer support services;
• Enable you to participate in promotional activities, or other programs;
• Provide you with access to certain areas and features of the Platforms such as your interactions with other users;
• Verify your identity;
• Communicate with you about your account and activities on the Platforms and, in our discretion, changes to any Toyota policy or notice;
• Provide advertisements to you, including via electronic and physical means, and tailor any content, opportunities or other offers we serve you, including by providing more relevant content, advertisements, and offers over time and across multiple devices;
• Offer other products and services to you that you may be interested in;
• Internal research, design, marketing analysis, and analytics purposes, including to improve customer satisfaction and the Platforms, our vehicles and other products, and our services;
• Quality control purposes;
• Comply with laws or other legal obligations, including for dispute resolution purposes;
• Comply with license obligations;
• Carry out B2B functions;
• For purposes disclosed at the time you provide your Personal Information or otherwise with your consent.
• You may share your location with us and we may use it for the purpose of providing you with offers and other information relevant to your location.

Except as described here, we will not provide any of your Personal Information to any other parties without your specific consent. We may share non-Personal Information, such as aggregate data, and Usage Information with other parties. We may also share your information as disclosed at the time you provide your information, as set forth in this Privacy Notice and in the following circumstances:

Other Parties Providing Services On Our Behalf. We may disclose your Personal Information to other parties that perform functions on our behalf (or on behalf of our partners) such as service providers that host or operate our Platforms, analyze data, process transactions and payments, fulfill orders or provide customer service; advertisers; sponsors or other parties that participate in or administer our Programs or provide marketing or promotional assistance and "powered by" partners or partners in co-branded sites. Your Personal Information may also be used by us or shared with our subsidiaries, affiliates, sponsors, partners, advertisers or other parties to provide you with product information and promotional and other offers.

Program Partners. If you choose to participate in a Program, your Personal Information may also be disclosed to our Program partners and may be used by our Program partners in accordance with their own privacy notices. This Privacy Notice will not apply to that company's use of your information. Sometimes the rules, terms and conditions or disclaimers that apply to a particular Program (“Program Rules”) include additional information on how we may use the Personal Information that you provide to us through your participation in the Program. If there is a conflict between the Program Rules for a particular Program and this Privacy Notice, those applying to the particular Program will govern. Please review all of the information about a Program before you provide us with any Personal Information.

Our Affiliates and Parent Company: We may disclose your Personal Information with our affiliates, including but not limited to Toyota Financial Services, and our parent company, Toyota Motor Corporation. This information is primarily shared for business and operational purposes. Our affiliates may also use that information in accordance with their own privacy notices, including to market to you if you indicate your interest in related products or services.

Our Dealers and Distributors: We may disclose your Personal Information to our authorized dealers and their holding companies, dealer advertising associations and distributors (including local Toyota dealer associations), who may use that information in accordance with their own privacy notices, including to provide you with services or to market to you. For example, we may share information such as your name and vehicle interests with our authorized dealers to save you time during your visits and to enhance your overall dealership experience. We may also combine information about your Platform visits and disclose this information to our authorized dealers and other entities to provide you with enhanced experiences across Toyota-affiliated, branded or similar Toyota-related offerings and Platforms.

Your Agreement To Have Your Personal Information Disclosed. You may have the opportunity to opt in to receive information and/or marketing offers from another company or to otherwise consent to the disclosure of your information to another party, including social networking sites such as Facebook or X. If you agree to have your Personal Information disclosed, your Personal Information will be disclosed to the other party and the Personal Information you disclose will be subject to the privacy notices and business practices of that other party.

Business Transfers. In the event that Toyota is involved in a bankruptcy, merger, acquisition, reorganization or sale of assets, your information may be sold or transferred as part of that transaction.

Legal Disclosure. We may transfer and disclose your information to other parties to comply with a legal obligation; when we believe in good faith that the law or a governmental authority requires it; in connection with a legal dispute; to verify or enforce our Terms of Use or other applicable policies; to address fraud, security or technical issues; to respond to an emergency; or otherwise to protect our rights or property or security of other parties, our customers and visitors or the public.

We provide you with choices with respect to your Personal Information. If you choose to receive e-mails from us about products and other information, we strive to keep your Personal Information updated and accurate and provide you choices regarding the e-mail communications you receive from us.

If you provided Toyota with Personal Information through the Owners section of toyota.com, you may review and update that information by clicking on the Owners link on the homepage of toyota.com, registering or logging in and then clicking on "Update Profile." If you have signed up for the Toyota marketing e-mail list, you can access the Preferences page and change your user profile or unsubscribe from the Toyota e-mail list here or by clicking the “unsubscribe” link on any Toyota Motor Sales, U.S.A., email you have received.

For users who are not currently registered on our owner site, please call the Toyota Brand Engagement Center at 800-331-4331 to opt out from receiving e-mail communications from Toyota. If you receive an e-mail, you may opt out at any time by following the opt out instructions provided in the e-mail you receive. Your opt out request will be processed within 10 days of the date on which we receive it.

If you are participating in a Program, you may be able to access and update the information you provided as part of your participation in the Program. Please see the section of the Platforms concerning the specific Program to determine if you are able to access your information and how to do so.

In accordance with our routine record keeping, we may delete certain records that contain Personal Information you have submitted through the Platforms. We are under no obligation to store such Personal Information indefinitely and disclaim any liability arising out of, or related to, the destruction of such Personal Information. It may not always be possible to completely remove or delete all of your information from our databases without some residual data because of backups and other reasons. We will retain your information (including geo-location data) for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We do not control certain privacy settings and preferences maintained by our social media partners like Facebook and X. If you wish to make changes to those settings and preferences, you may do so by visiting the settings page of the appropriate social media site.

We may use third-party ad network providers to help present ads on the Platforms, as well as other service providers to evaluate and provide us with information about the use of the Platforms and viewing of our content. Such providers may place and access cookies, pixel tags, or similar technologies on your Device to serve you ads or other content personalized to your interests which they infer from your location and/or your browsing on the Platforms and other sites you have visited. In doing so, the provider collects or has access to your Usage Information. The use of cookies, pixel tags, or similar technologies by these providers is also subject to their own privacy notices.

Certain web browsers may provide an option by which you may request your browser to inform websites you visit that you do not wish your activities to be tracked by cookies or other persistent identifiers, commonly called “Do Not Track Signals.” Although the websites we own and operate, including but not limited to Toyota.com, currently do not respond to Do Not Track Signals, you may choose to opt out of our use of targeting and advertising cookies on Toyota.com by visiting Toyota.com and clicking on “Cookie Consent Options.” You may also choose to block cookies with your browser. Please note that opting out of the use of such cookies on Toyota.com will not impact the use of third-party cookies by other websites, which we do not control. In addition, even if you choose to opt out of targeted advertising, you will still see advertisements while you're browsing online. However, the advertisements you see may be less relevant to you and your interests.

The Platforms are not directed to children under 13. We do not knowingly collect, use or disclose personally identifiable information from anyone under 13 years of age. If we determine upon collection that a user is under this age, we will not use or maintain his/her Personal Information without the parent/guardian's consent. If we become aware that we have unknowingly collected personally identifiable information from a child under the age of 13, we will make reasonable efforts to delete such information from our records.

We take information security seriously and use certain reasonable security measures to help protect your Personal Information. However, no electronic data transmission or storage of information can be guaranteed to be 100% secure. Please note that we cannot ensure or warrant the security of any information you transmit to us, and you use the Platforms and provide us with your information at your own risk. When we collect sensitive information on our sites or within our mobile application (such as credit card number or geo-location information), we encrypt the transmission of that information using Secure Sockets Layer technology.

Beware of Phishing Scams: There have been noticeable increases in the number of suspicious e-mails claiming that the e-mail recipient has won a Toyota lottery or other promotion. Sometimes the e-mail claims that the recipient has won a new Toyota Prius. In order to claim the prize, the e-mail asks that Personal Information be sent to a Gmail or Yahoo e-mail address.

This type of e-mail solicitation is known commonly as a "phishing" scam, with the primary objective being to obtain one's Personal Information. This information can then be utilized to steal a person's identity. For example, a "Toyota Lottery" phishing scam is often sent from Chinese (.cn), German (.de) or British (.co.uk) addresses but can originate from anywhere and look very official even to the most savvy of Internet users. Toyota will never ask you to send passwords, login names, Social Security numbers, or other Personal Information through e-mail or U.S. mail or fax or text message. If you receive an email or letter by U.S. mail or fax or text message from Toyota asking you to update your credit card information, do not respond: this is a phishing scam. Recipients of suspicious e-mail like this should delete the message from their in-box and, if possible, update their e-mail filter settings to block e-mails from the e-mail address being used. The Federal Trade Commission and the Antiphishing Workgroup are also good sources of information about these types of security threats and how they may be reported to the authorities.

The Platforms may contain links to other sites that we do not own or operate, such as the site for Toyota Financial Services and to sites for Toyota dealers, as well as links from advertisers, sponsors and/or partners. We do not control, recommend or endorse and are not responsible for these sites or their content, products, services or privacy notices or practices, even though they may use the Toyota name or logo on their site through an agreement with us. These other sites may send their own cookies to your Device, they may independently collect data or solicit Personal Information and may or may not have their own published privacy notices. You should also independently assess the authenticity of any site which appears or claims that it is one of our Platforms (including those linked to through an email or social networking page). 

The Platforms may make available chat rooms, forums, message boards, and news groups. Remember that any information that you disclose in these areas becomes public information and is not subject to the provisions of this Privacy Notice.

The Platforms are governed by and operated in, and in accordance with the laws of, the United States, and are intended for the enjoyment of residents of the United States. Toyota makes no representation that the Platforms are governed by or operated in accordance with the laws of any other nation. Given that we are an international business, our use of your information necessarily involves the transmission of data on an international basis. If you are located in the European Union, Canada or elsewhere outside of the United States, please be aware that information we collect may be transferred to and processed in the United States. By using the Platforms, or providing us with any information, you (a) acknowledge that the Platforms are subject to the laws of the United States, (b) consent to the collection, processing, maintenance and transfer of such information in and to the United States and other applicable territories in which the privacy laws may not be as comprehensive as or equivalent to those in the country where you reside and/or are a citizen, and (c) waive any claims that may arise under those laws.

We may update this Privacy Notice to reflect changes to our information practices. If we make any material changes, we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on our Platforms prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Privacy laws in the United States give consumers certain privacy rights related to their Personal Information. This section contains additional information for residents in the United States regarding our Personal Information handling practices and data privacy rights.

Summary of Personal Information Handling Practices

Toyota may collect Personal Information from you in different ways and for different purposes. It is important to note that the types of Personal Information we collect will depend on your interaction with us, including the types of products or services you use. We provide in the chart below a summary of our prior 12-month Personal Information handling practices. We collect the below categories of Personal Information from the following sources: consumer-provided; dealers; service providers, contractors, or processors; third-party companies (non-service providers Toyota acquires data from); consumer online activity; affiliated companies; and Toyota internally derived data. You can learn more about the information we collect at or before the point of collection above in the Information We Collect, How We Collect Information, How We Use The Information We Collect, and How We Disclose Information sections. Please note that our prior 12-month practices are the same as our current Personal Information handling practices.

Selling or Sharing of Personal Information

Below, we describe the categories of Personal Information we may sell or share for targeted advertising currently and in the preceding 12 months. We also describe the third parties who received or may receive the Personal Information and the business or commercial purpose for the sale or sharing. However, we do not knowingly sell, share, use for targeted advertising, or disclose the Personal Information of minors under the age of 16. For more information about opting out of the sale or sharing of your Personal Information, please see the Your Privacy Rights section below.

• Category of Personal Information: Contact information: attributes that identify a natural person, which may be considered an "identifier" or information covered under the California Customer Records Act. Examples include name, address, phone number, email, owner account information, online identifier, user ID, social media ID, and site visitor details (names, addresses, etc.) and demographic information (such as Zip Code and age).
  • Sold or Shared: We may have sold or shared this category of Personal Information.
  • Category of Third Party: We may have sold or shared this category of Personal Information to third parties who provide advertising , vehicle financing, insurance, and satellite radio subscription services.
  • Business or Commercial Purpose for Sale or Sharing: To provide advertising, vehicle financing, insurance, and satellite radio subscription services.
• Category of Personal Information: Consumer product and service data, which may be considered "commercial information," such as consumer vehicle ownership records associated with the consumer's current and/or prior owned vehicles. Examples include vehicle ownership transactions, Retail Delivery Report records, recall records, warranty records, repair order records, part order records, Toyota Insurance Management Solutions insurance product records, and incentive offers accepted by a consumer.
  • Sold or Shared: We may have sold or shared this category of Personal Information.
  • Category of Third Party: We may have sold or shared this category of Personal Information to third parties who provide advertising, vehicle financing, insurance, and satellite radio subscription services.
  • Business or Commercial Purpose for Sale or Sharing: To provide advertising, vehicle financing, insurance, and satellite radio subscription services.
• Category of Personal Information: Consumer interaction data, which may be considered "audio, visual or other similar information," such as consumer's interaction with Toyota via telephone, email, chat, text and/or postal mail. Examples include call center records and screen, audio and/or video recordings.
  • Sold or Shared: We may have sold or shared this category of Personal Information.
  • Category of Third Party: We may have sold or shared this category of Personal Information to third parties who provide advertising, vehicle financing, insurance, and satellite radio subscription services.
  • Business or Commercial Purpose for Sale or Sharing: To provide advertising, vehicle financing, insurance, and satellite radio subscription services.
• Category of Personal Information: Consumer online activity, which may be considered "identifiers" and "Internet or other electronic network activity information," such as consumer's online interactions with Toyota. Examples include online accounts, browsing history, cookies, IP addresses, social media information.
  • Sold or Shared: We may have sold or shared this category of Personal Information.
  • Category of Third Party: We may have sold or shared this category of Personal Information to third parties who provide advertising, vehicle financing, insurance, and satellite radio subscription services.
  • Business or Commercial Purpose for Sale or Sharing: To provide advertising, vehicle financing, insurance, and satellite radio subscription services.
• Category of Personal Information: Marketing, which may be considered "identifiers," "inferences," or information covered under the California Customer Records Act. This includes information under the pre- and post-sale marketing interactions with a consumer. Examples include information collected at events, vehicle purchase negotiation information, vehicle service marketing information, direct marketing information, and retention marketing information.
  • Sold or Shared: We may have sold or shared this category of Personal Information.
  • Category of Third Party: We may have sold or shared this category of Personal Information to third parties who provide advertising, vehicle financing, insurance, and satellite radio subscription services.
  • Business or Commercial Purpose for Sale or Sharing: To provide advertising, vehicle financing, insurance, and satellite radio subscription services.
• Category of Personal Information: Research data, which may be considered "identifiers," "inferences," or information covered under the California Customer Records Act. This includes information collected by Toyota related to consumer and product research. Examples include survey information, syndicated product and/or service studies, predictive behavioral studies, and focus-group information.
  • Sold or Shared: We may have sold or shared this category of Personal Information.
  • Category of Third Party: We may have sold or shared this category of Personal Information to third parties who provide advertising, vehicle financing, insurance, and satellite radio subscription services.
  • Business or Commercial Purpose for Sale or Sharing: To provide advertising, vehicle financing, insurance, and satellite radio subscription services.

Opt-Out Preference Signals

If you visit certain Toyota websites while logged in to your account, we also honor opt-out preference signals if technically capable. An opt-out preference signal is a signal that is sent by a platform, technology, or mechanism on your behalf that communicates your choice to opt out of sharing for targeted advertisements or sale of your Personal Information. You can learn more about implementing opt-out preference signals at https://globalprivacycontrol.org/, or by exploring other developing technologies and services that offer this tool.

Sensitive Personal Information

Under United States privacy laws, certain types of Personal Information are considered “sensitive” Personal Information or data and require additional data privacy rights and obligations. We collect precise geolocation data, account login information, driver's license, and financial information, which may be considered “sensitive” Personal Information under privacy laws. Where required by law, we will obtain your consent before processing your sensitive Personal Information. We will also generally use your sensitive Personal Information for limited purposes, such as to provide the goods or services you requested; to prevent, detect, and investigate security incidents; to resist malicious, deceptive, fraudulent or illegal actions; to ensure physical safety; and to verify or maintain the quality or safety of our products, services or devices.

Your Privacy Rights

U.S. privacy laws provide consumers with certain rights regarding their Personal Information. This section explains those rights. If you are a U.S. consumer and would like to exercise any of those rights, please see the How to Submit a Request section below, for more information on how to submit a request.

1. Right to Delete. You may have the right to request us to delete the Personal Information we have collected about you.
2. Right to Correct. You may have the right to request us to correct inaccurate Personal Information we maintain about you.
3. Right to Confirm Processing. You may have the right to confirm whether we are processing your Personal Information.
4. Right to Know and Access. You may have the right to request that we provide you with the Personal Information we have collected about you, including the categories of Personal Information; the categories of sources from which the Personal Information is collected; the business or commercial purpose for collecting, selling, or sharing Personal Information; the categories of third parties to whom we disclose Personal Information; and the specific pieces of Personal Information we have collected about you.
5. Right to Data Portability. You may have the right to receive the information under right (4) in a format, to the extent technically feasible, that is portable, usable, and allows you to transmit the Personal Information to a person without impediment, where the processing is carried out by automated means.
6. List of Specific Third Parties (Oregon Residents Only). You have the right, at our option, to receive a list of the specific third parties, other than natural persons, to which we have disclosed either (a) your personal information or (b) any personal information.
7. Right to Opt Out of Profiling. In the context of this Privacy Notice, we do not engage in any processing of your Personal Information for profiling in furtherance of decisions about you that produce legal or similarly significant effects, so there is no need to provide a right to opt out.
8. Rights Related to Sharing for Targeted Advertising or Sale. You may have the right to opt out of the sharing of your Personal Information for targeted advertising or the sale of your Personal Information.
9. Rights Related to Sensitive Personal Information. United States privacy laws may provide additional protection for sensitive Personal Information or data. Where required by law, we will process sensitive Personal Information with your consent and/or limit the use and disclosure of your sensitive Personal Information.
10. Right to No Discrimination. You have the right not to be discriminated against for exercising any of your privacy rights. This includes us not: (a) denying you goods or services; (b) charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; (c) providing you a different level or quality of goods or services; (d) suggesting to you that you will receive a different price or rate for goods or services or a different level or quality of goods or services; or (e) retaliating against you for exercising your privacy rights.
11. Right to Appeal. Under certain United States privacy laws, you may have the right to appeal our response to your privacy request. If we decline to take action in response to your exercise of a privacy right, we will inform you of the reason for denying your request and provide you instructions on how you may be able to appeal the decision.

How to Submit a Request

If you would like to exercise any of the privacy rights identified above, you may submit a request by either completing the online request form at https://privacy.toyota.com/ or by calling us at 855-226-4048.

Authorized Agents

Where permitted by state law, you may exercise your privacy rights through an authorized agent. If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request where permitted by state law, please contact us at 855-226-4048.

How We Verify Your Request

Except for rights related to sharing for targeted advertising or sale or if a certain privacy law does not permit verification (unless we need information to complete your request or find you in our systems), we cannot fulfill your request or provide you with your Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. Please also note that, as mentioned above, we use your “sensitive" Personal Information with your consent or for certain permitted purposes. As such, we will not verify your identity if you contact us to request to limit the use and disclosure of your "sensitive" Personal Information because we use such data only for the limited purposes noted above. However, we may request your information to answer any questions you have related to "sensitive" Personal Information.

To verify your identity, we will ask that you provide the following Personal Information when you submit your request:

• First name
• Last name
• Email address
• Mobile phone number
• Address
• City
• State
• Zip Code

You may need to provide additional information as part of your responses to our identity verification questions. We will only use this information to confirm your identity which may include the use of a third-party identity verification service. In the event we use a third-party identity verification service, our third-party identification verification tool will ask you certain identity verification questions and match those answers with what it has in its database. Depending on your type of request or the information requested by you, we may require additional information in order to verify your identity and fulfill your request. If we cannot successfully verify your identity, we will inform you of that fact.

Except for rights related to sharing for targeted advertising or sale, which we will honor within fifteen (15) business days, we will respond to your request within forty-five (45) calendar days. However, in certain circumstances, we may require additional time to process your request, as permitted by applicable law. We will advise you within forty-five (45) calendar days after receiving your request if such an extension is necessary and why it is needed. If we cannot fulfill your request, our response to you will also explain the reason why we cannot fulfill your request.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

You may only make a verifiable consumer request to know about or access your Personal Information twice within a 12-month period.

METRICS FOR REQUESTS BY CALIFORNIA RESIDENTS
(January 1, 2023, to December 31, 2023)

*Failed matching with internal system of consumer records, or request canceled where the submission failed to register with privacy tool.

**Request not verifiable with third party provider, failed matching with internal system of consumer records, or request canceled where the submission failed to register with privacy tool.

To contact us with a question call us at 800-331-4331, email us at Office.of.Privacy@toyota.com,or mail your inquiry to:

Toyota Motor Sales, U.S.A., Inc.
P.O. Box 259001
Plano, TX 75025-9001

You may also obtain an update on our information practices by sending a request to:

Toyota Motor Sales, U.S.A., Inc.
P.O. Box 259001
Plano, TX 75025-9001

(Effective as of January 1, 2024)
During 2023, we shared the following types of Personal Information about our customers with SiriusXM Satellite Radio, Toyota Financial Services, Toyota Insurance Management Solutions and our authorized Toyota dealers where the information was used for the recipient's own marketing:

Name
Address
Email address
Telephone number
Model vehicle purchased or leased

SiriusXM Satellite Radio is located at:
SiriusXM Radio
1221 Avenue of the Americas
36th Floor
New York, NY 10020

Toyota Financial Services is located at:
Toyota Financial Services - Mailstop EF10
P.O. Box 259001
Plano, TX 75025-9001

Toyota Insurance Management Services is located at:
Toyota Insurance Management Services
7600 Windrose Avenue, Suite G-240
Plano, TX 75024

Please click on the link below to view a list of authorized Toyota dealers.
Toyota dealers

You may also obtain this information by sending a request to:

Toyota Motor Sales, U.S.A., Inc.
P.O. Box 259001
Plano, TX 75025-9001