Privacy Policy
Privacy Statement
Copart respects your privacy and is committed to protecting your Personal Data, which is any information that can be used to identify or potentially identify a particular person.
The scope of this Privacy Notice relates to any Personal Data that Copart processes under applicable data privacy laws. This Privacy Notice applies to your use of this website and all Copart services, regardless of how you access or use the services, including access via mobile devices and applications. Unless otherwise specified, this policy applies to the operations of Copart do Brasil relating to vehicles that are physically located within Brasil.
This version was last updated in February 26, 2024. We may update this notice from time to time, and if we do so, we will upload a new version to our website.
Important Information
This website is not intended for children, and we do not knowingly collect data relating to children. When you register with Copart as a member, you acknowledge that you are of legal age to make bids on vehicles and further agree to our terms and conditions.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing Personal Data about you. This privacy notice supplements other notices and is not intended to override them.
Data Controller
Copart do Brasil Organização de Leilões Ltda. (referred to as “Copart”, “we”, “us” or “our”) is the data controller that is responsible for the personal data collected and used within the scope of this policy:
Jurisdiction | Entity | Address |
---|---|---|
Brasil | Copart do Brasil Organização de Leilões Ltda. | A/c: Diretor de Proteção de Dados Rua Henry Ford, 965 – Osasco – SP CEP: 06210-108 |
Personal Data We Collect
Depending on the context of your relationship with us, we may collect different categories of data.
We collect Personal Data for the following reasons:
- To provide you with information, products, or services that you request from us.
- To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
- As necessary or appropriate to protect the rights, property or safety of us, our members, our customers, or others.
- To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
The following table details personal data we collected in the last twelve (12) months:
Data Category | Identity Data |
---|---|
Data Elements Corresponding to Data Category |
|
How We Collect Your Personal Data: |
|
LGPD Lawful Basis |
|
Data Category | Contact Data |
---|---|
Data Elements Corresponding to Data Category |
|
How We Collect Your Personal Data: |
|
LGPD Lawful Basis |
|
Data Category | Financial Data |
---|---|
Data Elements Corresponding to Data Category |
|
How We Collect Your Personal Data: |
|
LGPD Lawful Basis |
|
Data Category | Technical and device Data |
---|---|
Data Elements Corresponding to Data Category |
|
How We Collect Your Personal Data: |
|
LGPD Lawful Basis |
|
Data Category | Marketing Data |
---|---|
Data Elements Corresponding to Data Category |
|
How We Collect Your Personal Data: |
|
LGPD Lawful Basis |
|
Data Category | Vehicle Data |
---|---|
Data Elements Corresponding to Data Category |
|
How We Collect Your Personal Data: |
|
LGPD Lawful Basis |
|
Data Category | Usage Data |
---|---|
Data Elements Corresponding to Data Category |
|
How We Collect Your Personal Data: |
|
LGPD Lawful Basis |
|
Data Category | Transaction Data |
---|---|
Data Elements Corresponding to Data Category |
|
How We Collect Your Personal Data: |
|
LGPD Lawful Basis |
|
Data Category | Data Elements Corresponding to Data Category | How We Collect Your Personal Data: | LGPD Lawful Basis |
---|---|---|---|
Identity Data |
|
|
|
Contact Data |
|
|
|
Financial Data |
|
|
|
Technical and device Data |
|
|
|
Marketing Data |
|
|
|
Vehicle Data |
|
|
|
Usage Data |
|
|
|
Transaction Data |
|
|
|
Special Categories
We do not collect Sensitive Data, which is information regarding criminal convictions or offenses, and we do not intentionally collect any details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, affiliation to any religious, political or philosophical organization, or information about your health, genetics and biometric data. However, because some of our communication channels, such as e-mail, social media, and telephony systems allow end users to provide us with unstructured data, it is possible for Copart to receive unsolicited Personal Data provided by the message sender. We request that you refrain from sharing Sensitive Data through any of these channels.
Sharing Personal Data
In addition to sharing your Personal Data within the Copart Group, we may disclose your Personal Data to external third parties in order to provide you with certain of the services you have requested from us. When we disclose Personal Data to an external third party vendor for a business purpose, we enter into a contract with the vendor that describes the purpose of the processing and requires the recipient to both keep that Personal Data confidential and not use it for any purpose except performing the contract.
In the last twelve (12) months we have disclosed the following categories of Personal Data for a business purpose to the corresponding categories of third parties indicated below:
Data Category | Identity Data |
---|---|
Third Party Category |
|
Business Purpose |
|
Data Category | Contact Data |
---|---|
Third Party Category |
|
Business Purpose |
|
Data Category | Financial Data |
---|---|
Third Party Category |
|
Business Purpose |
|
Data Category | Technical Data |
---|---|
Third Party Category |
|
Business Purpose |
|
Data Category | Vehicle Data |
---|---|
Third Party Category |
|
Business Purpose |
|
Data Category | Third Party Category | Business Purpose |
---|---|---|
Identity Data |
|
|
Contact Data |
|
|
Financial Data |
|
|
Technical Data |
|
|
Vehicle Data |
|
|
In addition, we may also disclose your Personal Data in the following circumstances:
- In connection with the sale of a business (including merger, acquisition, or sale of all or a material portion of the business’s assets, change in corporate control, or insolvency or bankruptcy proceedings).
- To enforce our terms of service or rules; to ensure the safety and security of our users and third parties; to protect our rights and property and the rights and property of our users and third parties; and to comply with legal process, including pursuant to a judicial warrant, rule, order or subpoena, or in other cases if we believe in good faith that disclosure is required by law or regulation, in each case, without obligation to contest such legal process.
Promotional Marketing
Depending on the location in which you are located and, if applicable whether you provide your affirmative consent, we may use your identity, contact, technical, usage and transaction data to form a view on what products or services we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant to you.
Withdrawing Consent for Promotional Marketing
Depending on the location in which you are located, we have established a preference center through which certain of our members may opt-out of direct marketing. The same category of members may also opt-out of promotional marketing by submitting your request to privacy@copart.com.br. All recipients of marketing and promotional communications from us may opt-out of future marketing communications by clicking on the “remove me” link that we include at the bottom of all of our marketing communications.
International Transfers
For the purposes of the LGPD, some recipients of your Personal Data are located outside of your country or have offices in countries where data protection laws may provide a different level of protection than the laws in your country. When transferring Personal Data to such recipients, we provide appropriate safeguards.
The transmission of Personal Data between and among certain members of the Copart Group, which consists of Copart, Inc. and its direct and indirect wholly-owned subsidiaries, is based on our worldwide data protection principles contained in our Intra-Group Processing Agreement, which incorporate both controller to controller and controller to processor model clauses prescribed by the National Authority. Through our Intra-Group Processing Agreement, the Copart Group undertakes to protect your Personal Data and to comply with applicable data protection obligations.
Your Rights and Choices
Subject to possible restrictions under national law, as a data subject under the LGPD, you may have certain rights regarding the Personal Data that we collect on you.
Those rights are described in the below table:
Rights under LGPD | Access / to Know |
---|---|
Description | A consumer has the right to request that a business that collects personal information about the consumer disclose: (1) The categories of personal information it has collected about that consumer; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose for collecting or selling personal information; (4) the categories of third parties with whom the business shares personal information; and (5) the specific pieces of personal information it has collected about that consumer. |
Rights under LGPD | Rectification |
---|---|
Description | An individual may request that inaccurate personal data be corrected or rectified. |
Rights under LGPD | Deletion/Erasure |
---|---|
Description | A consumer has the right to request that a business delete any personal information about the consumer that the business has collected from the consumer. |
Rights under LGPD | Restrict Processing |
---|---|
Description | You have the right to block or temporarily suspend any processing operation that is unnecessary, excessive, or processed in noncompliance with the provisions of the LGPD. |
Rights under LGPD | Data Portability |
---|---|
Description | In certain circumstances, you shall have the right to portability of your data to another service or product provider, by means of an express request and subject to commercial and industrial secrecy, pursuant to the regulation of the controlling agency. |
Rights under LGPD | Object to Processing |
---|---|
Description | In certain circumstances, you can object to our processing of your personal data if the legal basis for processing does not include consent and we fail to comply with the LGPD. |
Rights under LGPD | Object to Automated Decision-Making |
---|---|
Description | In certain circumstances, you have the right to request a revision of decisions that affect your interests and that are taken solely on the basis of automated processing. |
Rights under LGPD | Description |
---|---|
Access / to Know | A consumer has the right to request that a business that collects personal information about the consumer disclose: (1) The categories of personal information it has collected about that consumer; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose for collecting or selling personal information; (4) the categories of third parties with whom the business shares personal information; and (5) the specific pieces of personal information it has collected about that consumer. |
Rectification | An individual may request that inaccurate personal data be corrected or rectified. |
Deletion/Erasure | A consumer has the right to request that a business delete any personal information about the consumer that the business has collected from the consumer. |
Restrict Processing | You have the right to block or temporarily suspend any processing operation that is unnecessary, excessive, or processed in noncompliance with the provisions of the LGPD. |
Data Portability | In certain circumstances, you shall have the right to portability of your data to another service or product provider, by means of an express request and subject to commercial and industrial secrecy, pursuant to the regulation of the controlling agency. |
Object to Processing | In certain circumstances, you can object to our processing of your personal data if the legal basis for processing does not include consent and we fail to comply with the LGPD. |
Object to Automated Decision-Making | In certain circumstances, you have the right to request a revision of decisions that affect your interests and that are taken solely on the basis of automated processing. |
Exercising Your Rights
You may generally exercise one or more of your rights described above free of charge. If you submit a request related to personal data we share with a supplier to achieve one of the legitimate purposes informed to you, we will inform the supplier of your request, so that it can execute the same response as Copart.
To exercise your rights, please submit a verifiable consumer request by either:
- Calling us at 972-391-5380;
- Emailing us at privacy@copart.com.br.
Additionally, as a data subject under the LGPD, you have the right to lodge a complaint with your applicable supervisory authority. However, we would appreciate the chance to deal with your concern before you approach the supervisory authority so please contact us in the first instance.
Cookies and Similar Technologies
When you use our services, except as described in this Privacy Notice regarding the opt-in consent we obtain from certain of our web site visitors based on their location, we and selected third parties may use cookies and similar technologies to provide you with a better, faster, and safer user experience or to show you personalized advertising. Cookies are small text files that are automatically created by your browser and stored on your device when you use the services.
Our cookies and similar technologies have different functions:
- They may be technically necessary for the provision of our services;
- They help us optimize our services technically (e.g. monitoring load times and errors);
- They help us improve your user experience;
- They allow us to show you more relevant advertisements.
Online Tracking
Do Not Track (DNT) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. We generally do not recognize your choice to opt out of tracking via a DNT request. However, depending on your location we may request that you expressly opt-in to cookies that are not essential to our web-site functionality, including tracking and marketing analytics cookies.At any time you can control cookies through your browser settings and other tools. If you reject cookies, this could affect the availability and functionality of our services.
Data Security and Data Retention
We implement and maintain reasonable security measures to prevent your Personal Data from being used, accessed, altered, or disclosed in an unauthorized way. Please note that any information you send to us electronically may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware that despite our best efforts, no security measures are perfect or impenetrable.
Data Retention
We will only retain your Personal Data for as long as necessary to fulfill the purpose we collected it for, including for the purpose of satisfying any legal, accounting, or reporting requirements.
Furthermore, we may retain data that has been anonymized or otherwise does not constitute or contain personal information. We do not authorize our storage or service providers to retain, use or disclose data except as necessary to perform services on our behalf or comply with legal requirements according to applicable laws"
To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Third-Party Links
This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
If You Fail to Provide Personal Data
When we need to collect Personal Data by law, or under the terms of the contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. For example, if you do not provide us with required Personal Data, we may be unable to provide you with the services you have requested. In this case, we may have to cancel a contract you have with us, but we will notify you if this is the case.
Change of Purpose
We will only use your Personal Data for the purposes for which we collected it, unless we reasonably conclude that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to obtain an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us by emailing privacy@copart.com.br.
If we need to use your Personal Data for an unrelated purpose, we will notify you and request your consent, if applicable, or we will explain the legal basis which allows us to do so.
Every time we process your data, it will be done only to the extent necessary to achieve the purpose of the processing and using the adequate means.
Please note that we may process your Personal Data without your consent, in compliance with the above rules, where this is required or permitted by law.
Changes to this Privacy policy
Changes to our Privacy Notice
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through another appropriate communication method.
Contact Information
Contact Information
If you have any questions or comments about this policy, the ways in which we collect and use your Personal Data, your choices and rights regarding such use, or wish to exercise your rights under the LGPD, please do not hesitate to contact us at:
Website: www.copart.com.br
Email: privacy@copart.com.br
Postal Address:
Attn: Data Protection Officer
Rua Henry Ford, 965 - Osasco - SP
CEP: 06210-108