PRIVACY NOTICE

LAST UPDATED DECEMBER 01, 2022

This Finishline Auto Club App Privacy Notice governs your use of the AAA software application on a mobile device (“Finishline Auto Club App” or “App”) that was created by the T.R. Funding, LLC of Westlake Village, You will need to review and accept its terms before this App can be downloaded. We want you to know how your personal information will be collected and used. A separate privacy notice would apply to information collected through other means including from the use of our website, AAA membership and insurance, AAA OnBoard telematics services, and affiliate partner products and services. You should consult those notices if necessary.

The Finishline Auto Club App improves on-the-go access to trusted AAA services including marketplace, membership, events, announcement, and Messaging.

KEY FEATURES INCLUDE

Manage your vehicles and condo
Connect with other members in club online
Manage and Join Events
Get announcement from club
Buy and Sell vehicle in marketplace
Connect with preferred vendors
Logs vehicle activity and set reminders

WHAT INFORMATION DOES THE FINISHLINE AUTO CLUB APP COLLECT AND HOW IS IT USED?

USER PROVIDED INFORMATION

The Finishline Auto Club App collects the information you provide when you download and register the application. Registration is mandatory to use the app’s basic features. When you register and use the Finishline Auto Club App, you provide:

(a) your name, email address, age, ZIP Code, username, password, and other registration information

(b) vehicles related information for managing vehicles and their logs

(d) information you enter into our system when using the application, such as a PIN if you select the “keep me logged in” feature

We may also use the information you provide to contact you from time to time with important information, required notices, renewal reminders, and marketing promotions.

AUTOMATICALLY COLLECTED INFORMATION

In addition, the Finishline Auto Club App may collect certain information automatically, such as:

The type of mobile device you use
Your mobile device’s unique device ID
The IP address of your mobile device
Your mobile operating system
The type of mobile Internet browsers you use
Information about the way you use the App

DOES THE FINISHLINE AUTO CLUB APP COLLECT PRECISE REAL TIME LOCATION INFORMATION OF THE DEVICE?

No. The Finishline Auto Club App does not collect precise information about the location of your device.

DO THIRD PARTIES SEE OR HAVE ACCESS TO INFORMATION OBTAINED BY THE FINISHLINE AUTO CLUB APP?

No. We don’t share your information with third parties.

AUTOMATIC DATA COLLECTION AND ADVERTISING

We may work with analytics companies to help us understand how the application is being used, such as the frequency and duration of usage. These companies do not collect personally identifiable information for their analysis. We do not share your information with advertisers and third-party advertising networks.

STOP COLLECTION OF INFORMATION BY THE APP

There are multiple options for users of the Finishline Auto Club App:

STOP ALL INFORMATION COLLECTION BY UNINSTALLING THE FINISHLINE AUTO CLUB APP

You can stop all collection of information by the Finishline Auto Club App by uninstalling the application. You may use the standard uninstall processes that are available as part of your mobile device or via the mobile App marketplace or network. Doing so will remove the App and its benefits.

You may at any time opt out from further allowing us to have access to your location data by managing your phone’s settings as described above.

DATA RETENTION POLICY, MANAGING YOUR INFORMATION

We will retain user-provided data for as long as you use the App and for a reasonable time thereafter. Please note that some or all of the user-provided data may be required in order for the App to function properly, and we may be required to retain certain information by law.

CHILDREN

We do not use the Finishline Auto Club App to knowingly solicit data from or market to children under the age of 13. If a parent or guardian becomes aware that his or her child provided us information without consent, contact us at app@finishlineautoclub.com.

SECURITY

We are concerned about safeguarding the confidentiality of your information. We maintain physical, electronic, and procedural safeguards to protect information we process and maintain. For example, we limit access to this information to authorized employees and contractors who need to know that information in order to operate, develop or improve the Finishline Auto Club App. We review the information security practices of vendors with whom we share personal information. Please be aware that, although we make every effort to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

CHANGES

This Notice may be updated from time to time for any reason. We will notify you of changes by posting the new notice. You are advised to consult this Notice regularly for any changes.

YOUR CONSENT

By using the services, you are consenting to our processing of user-provided and automatically collected information as set forth in this Notice now and as amended by us. "Processing” means using cookies on a computer/handheld device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining, and disclosing information.

CONTACT US

If you have any questions regarding privacy while using the Finishline Auto Club App, or have questions about our practices, please contact us via email at app@finishlineautoclub.com. For questions about the California Consumer Privacy Act, please contact us via email at Tony@FinishLineAutoClub.com.

(CCPA)

RESIDENTS OF CALIFORNIA CALIFORNIA CONSUMER PRIVACY ACT RIGHTS

Starting January 1, 2020 California consumers have new privacy rights to their personal information (PI) including the right to not be discriminated against for exercising any of these rights. You can request:

a copy of your PI (subject to statutory exceptions) that we collected in the past 12 months including a disclosure of the categories of PI collected, sold and shared for a business purpose
to delete PI we collected from you unless we need to keep it for certain reasons. For example, if you are a member, we need your PI to provide your membership. We can also keep your PI when we use it internally;
to opt-out of the sale of your PI if we sell it

You can request your information twice in a 12-month period. We must respond and provide your information within 45 days unless we inform you that we need more time in which event we will have 90 days to respond.

You can exercise your privacy rights and make a CCPA request. We will first confirm that you are a California consumer and authenticate your identity through a third party. To designate someone to make a CCPA request on your behalf, or to make a CCPA request over the phone, please call (833) 612-6032.

The CCPA also requires that we disclose the categories of PI collected, sold and shared for a business or commercial purpose during the past 12 months. Our practices are described below and in the following table/matrix version.

Please note that certain personal information is exempt from the CCPA. For example, PI collected pursuant to a federal law called the Gramm-Leach-Bliley Act or California’s Financial Information Privacy Act is exempt. As a result, insurance information would not be disclosed. Other exceptions include medical information and protected health information; PI used to generate a consumer report and PI under the Driver Privacy Protection Act.

The CCPA sets forth 11 categories of personal information as set forth below.

CATEGORIES OF PERSONAL INFORMATION

CATEGORY A.IDENTIFIERS

Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, SSN, driver’s license number, passport number or other similar identifiers.

CATEGORY B. CIVIL CODE 1798.80 INFORMATION

Information that identifies, relates to, describes, or is capable of being associated with, an individual or household, including, but not limited to:

name
signature
social security number
physical characteristics or description
address
telephone number
passport number
driver's license or state identification card number
insurance policy number
education, employment, employment history
bank account number
credit card number, debit card number, or any other financial information
medical information, or health insurance information
“Personal information” does NOT include publicly available information that is lawfully made available to the public from federal, state, or local government records

CATEGORY C. CHARACTERISTICS

Characteristics of protected classifications under California or federal law such as race, color, sex, age, national origin, disability, citizenship status, genetic information, ancestry, sexual orientation, gender identity or expression, religion, medical conditions, AIDS/HIV, marital status, military/vet status, political affiliations or activities, victims of domestic abuse and/or assault/stalking.

CATEGORY D. COMMERCIAL INFORMATION

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

CATEGORY E. BIOMETRIC

Records used to uniquely identify a person including fingerprints, retinal scans, facial scans, signatures, handwriting analysis and voice pattern recognition.

CATEGORY F. INTERNET ACTIVITY

Internet or other electronic network activity information, including but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application or advertisement.

CATEGORY H. SENSORY

Audio, electronic, visual, thermal, olfactory, or similar information.

CATEGORY J. EDUCATION

Pertaining to school, grades or years attended.

CATEGORY K. INFERENCES

Inferences drawn from any of the above identified information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities and aptitudes

COLLECTION OF PERSONAL INFORMATION

During the prior 12 months, we would have collected Personal Information for each of these categories (A-K). However, the fact that we collected information for a category does not mean that we collected all the information in the category. For example, category A (identifiers) includes name, address, driver’s license, social security number, passport, etc. If we state that we collect this category of information, it does not mean that we collected every one of these identifiers. Frequently, we only collect name and contact information and don’t collect more sensitive information such as driver’s license, social security number or passport unless it is required for the service requested such as a driver’s license for DMV services. While category C (characteristics) includes a broad list of characteristics of protected classifications (e.g., genetic information or sexual orientation, etc.) if we collect information for this category, it is generally limited to sex and/or age.

WHEN USING OUR PRODUCTS AND SERVICES

Below, you will find a description of our products and services and the information that should be collected for each one.

If you purchased Membership, we should collect your name, gender, contact information and payment information. If you purchased an associate membership for someone else, similar information about these individuals should be collected, too. (Categories A, B and C).

A full listing of member benefits is found in the Member Guide. Generally, for any service we will request your name, proof of membership and contact information. (Categories A and B).

When you request Emergency Roadside Service we collect your phone number, name, breakdown location and the nature of your request. When the independent service provider arrives, you should be asked to provide identification such as a driver’s license for authentication. Information about your transaction (vehicle information and nature of service) is provided to us through the independent service provider. We may also collect information about your membership and transaction from AAA or other AAA motor clubs in the AAA Federation if you belong to another AAA motor club. (Categories A, B and D).

We offer various Automotive Services

For AAA Approved Auto Repair (AAR), you generally provide your name, contact information, and membership number. We may also collect your transaction history with the AAR facility including your vehicle information (e.g., make and model). (Categories A, B and D).
For the Car Buying service, we generally collect your name and contact information, membership number, zip code and information about the vehicle(s) you were interested in. (Categories A, B and D).
For Driver Training, you should generally provide the name of the driver (such as your teen driver) and contact information. (Categories A and B).
For Smog Testing Centers, we generally collect your name, contact information, membership number, vehicle information (year, make, model and VIN), results of the test and driver’s license number. (Categories A, B and D).

We offer many additional Member Benefits including:

FINANCIAL SERVICES

If you applied for the AAA Member Rewards Credit Card, you would have provided your personal information directly to our partner. The information you share with them could include your membership number, name, contact information, citizenship, country of residence, date of birth, employment status, (employment & financial information) total annual income and source, monthly housing payment, and social security number. (Categories A, B, C and I).
If you purchased a AAA MemberPay Visa® Prepaid Card (a reloadable prepaid card), you would have provided your personal information directly to the card provider. The information you share with them could include your name, member number, date of birth, social security number, and contact information. (Categories A, B and C).
If you purchased Foreign Currency, you would have provided your personal information to the third-party provider directly online or we would have entered this information into the third-party provider’s system. The information you share with them could include your name, contact information, identification card information (passport or driver’s license), and social security number. (Categories A and B).

BRANCH SERVICES

If you used Notary Services, you generally would have provided your name, address, signature, driver’s license and we may have taken your fingerprint. (Categories A, B and E).
If you requested a DMV transaction, we should collect your name, address, phone, vehicle information, and driver’s license to provide to the DMV. If you requested a handicap placard, we would also collect medical information. (Categories A, B, and C).
If you requested an International Driving Permit, you should have provided your name, contact information, driver’s license, birthplace city, and date of birth. (Categories A, B and C).

DISCOUNTS & EVENT TICKETS

If you purchased Entertainment & Attraction Tickets, we would have collected your ticket request, name, contact information, and membership number to provide to the service provider honoring your request. (Categories A and B).
If you purchased from our Discounts & Rewards partners online through our website, you would have provided your name, member number, contact information and payment information directly to our partner. (Categories A and B).

ID THEFT PROTECTION

If you enrolled in ProtectMyID® identity theft protection, you would have provided your personal information directly to our partner. The type of information you share with them depends on the product, but can include your name, membership number and zip code, contact information, date of birth and social security number and payment information. (Categories A, B and C).

TRAVEL PRODUCTS & SERVICES

If you requested a quote or purchased Travel products or services, you would have provided your name, address, phone, date of birth, passport, known traveler number and payment card information to us and/or our travel partners. If travel was purchased for another person, we would have normally collected similar information about them. We would have your travel itinerary. (Categories A, B, C and D).

WHEN CONTACTING US

When you contact us, we should ask you to provide and/or confirm your contact information. (Categories A and B).

If you visited a branch or ouradministrative offices, video surveillance may have recorded you. We should have asked you to check in by swiping your membership card or otherwise providing your name and contact information. To service your request, we would have collected personal information (as described previously). (Categories A, B, E and H).

If you attended an Auto Club special event such as a motorsports or travel event, we may have collected your name and contact information from you. (Categories A and B).

If you visited online or used the Finishline Auto Club App, your internet/online activity and online identifier would have been collected. This includes your geolocation when using the App and your membership number. To service your request, we would have collected personal information (as described previously). (Categories A, B, F and G).

If you called, your phone number may have been automatically collected and your call may have been recorded. To service your request, we would have collected personal information (as described previously). (Categories A, B, and H).

CONDUCTING BUSINESS

SECURITY PURPOSES

Our efforts to safeguard personal and company information, facilities and people require that we monitor and collect information by different means and from many environments. This could include through video surveillance or internet/online activity for cyber security purposes. Sources may include from the consumer, third party security providers and/or government entities including law enforcement. (Categories A, B, E, F and H).

TRANSACTIONAL PURPOSES

To fulfill a transaction or request or to process a payment, we may collect information from you and service providers. For example, with any purchase we collect payment information depending on the method of payment. This could include payment card information or financial account information from a check or with an ACH enrollment. (Categories A, B and D).

LEGAL, REGULATORY, COMPLIANCE PURPOSES

We may collect personal information for legal, regulatory and compliance purposes. For example, we may collect your contact information from third party sources (government entities, law enforcement, regulatory bodies and/or private businesses) to ensure that we have your current contact information (e.g., physical address) and to honor your requests to not be contacted or solicited. For example, we purchase Do Not Call lists to honor the wishes of those who do not wish to be called for marketing purposes. (Categories A, B and C).

BUSINESS PURPOSES

We collect personal information for other business purposes and to operate as a business and membership organization. For example, we purchase National Change of Address lists to ensure that we have a current mailing address. (Categories A, B, C and D).

SALE OF PERSONAL INFORMATION

During the prior 12 months, we would have “sold” Personal Information for Categories A-D to offer a Club benefit (the AAA credit card) to members. The Auto Club receives a monetary benefit when members use their AAA credit card which is offered to members through our partner as a member benefit. Such arrangements help to keep annual membership dues low. For purposes of the CCPA this could be considered to be a “sale” of personal information. Our partner can only use the information we share to offer you the credit card. In this instance, information shared with our partner’s marketing service provider should include name, membership information, contact information, and date of birth. Information would not be sent for those who had requested to not be solicited.

During the prior 12 months, we would have shared Personal Information for a business purpose with the types of third parties and for the categories of PI listed below

WHEN USING OUR PRODUCTS AND SERVICES

AAA FEDERATION

In servicing members or those using our services, personal information could be shared within the AAA Federation of companies. For example, transactional information from a service request for an out of territory member would be shared with the national office and that member’s motor club. (Categories A, B and D).

ERS PROVIDER

For Emergency Roadside Service (ERS), we generally share your name and contact information, breakdown location, membership information, vehicle information and nature of your request with an independent ERS provider. (Categories A, B and D).

AUTOMOTIVE SERVICE PROVIDER

For AAA Approved Auto Repair (AAR), we generally share your name and contact information, membership information, vehicle information and nature of your request with an independent AAR facility. (Categories A, B and D).
For the Car Buying service, your name and contact information, and information about the vehicle you were interested in would have been shared with participating automotive dealers. (Categories A, B and D).

FINANCIAL SERVICE PROVIDER

If you applied for the AAA Member Rewards Credit Card, you would have provided and shared your information to our financial partner directly either online or via a terminal or device that allows you to share your information directly with the provider. We don’t otherwise share your information with the provider directly in this circumstance. The information you share could include your membership number, name, contact information (phone, email and address), citizenship, country of residence, date of birth, employment status, (employment & financial information) total annual income and source, monthly housing payment, and social security number. (Categories A, B, C and I).
If you purchased a AAA MemberPay Visa® Prepaid Card (a reloadable prepaid card), you would have provided your information to the card provider directly either online or via a terminal or device that allows you to share your information directly with the provider. We don’t otherwise share your information with the provider directly in this circumstance. The information you share could include your name, member number, date of birth, social security number, and contact information. (Categories A, B and C).
If you purchased Foreign Currency, you would have provided and shared your information to the third-party provider directly online or we would have entered this information into the third-party provider’s system. We don’t otherwise share your information with the provider directly in this circumstance. The information you share could include your name, contact information, identification card information (passport or driver’s license), and social security number. (Categories A and B).

BRANCH SERVICES

If you used Notary Services, you generally would have provided your name, address, signature, driver’s license and we may have taken your fingerprint. Notaries are subject to independent professional notary association standards and your information could be shared with a regulatory body or third party in the event of a professional audit. (Categories A, B and E).
If you requested a DMV transaction, we should have collected your name, address, phone, vehicle information, and driver’s license to provide to the DMV. If you requested a handicap placard, we would also collect medical information to provide to the DMV. (Categories A and B).

ID THEFT PROTECTION PROVIDER

If you enrolled in ProtectMyID® identity theft protection, you would have provided your personal information directly to our partner. We don’t otherwise share your information with the ID Theft provider in this circumstance. The type of information you share depends on the product, but can include your name, membership number and zip code, contact information (address, phone), date of birth and social security number and payment information. (Categories A, B and C).

CONDUCTING BUSINESS

SECURITY PURPOSES

Our efforts to safeguard personal and company information, facilities and people require that we monitor and collect information by different means and from many environments and share information with service providers that assist in this regard. This could include through video surveillance or internet/online activity for cyber security purposes. In some circumstances, personal information may be shared with law enforcement, and security providers. (Categories A, B, C, E, F and H).

LEGAL, REGULATORY, COMPLIANCE PURPOSES

We share personal information with third parties (government entities, law enforcement, regulatory bodies and/or private businesses) if required for legal, regulatory and compliance purposes and share with those that assist us in responding in such circumstances. For example, we could be obligated to share your name, contact information, and other information in the event of a regulatory investigation or in the event of litigation. (Categories A, B, C and D).

CALIFORNIA SHINE THE LIGHT LAW RIGHTS

Apart from the CCPA, California residents can request information regarding the personal information that a company they do business with shares with third parties for direct marketing purposes during the past year. To request a copy, please contact app@finishlineautoclub.com and include “SB27 Request" on the subject line.