Privacy Policy

Privacy Statement

Copart respects your privacy and is committed to protecting your Personal Data, which is any information that can be used to identify or potentially identify a particular person.

The scope of this Privacy Notice relates to any Personal Data that Copart processes under applicable data privacy laws. This Privacy Notice applies to your use of this website and all Copart services, regardless of how you access or use the services, including access via mobile devices and applications. Unless otherwise specified, this policy applies to the operations of Copart do Brasil relating to vehicles that are physically located within Brasil.

This version was last updated in February 26, 2024. We may update this notice from time to time, and if we do so, we will upload a new version to our website.

Important Information

This website is not intended for children, and we do not knowingly collect data relating to children. When you register with Copart as a member, you acknowledge that you are of legal age to make bids on vehicles and further agree to our terms and conditions.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing Personal Data about you. This privacy notice supplements other notices and is not intended to override them.

Data Controller

Copart do Brasil Organização de Leilões Ltda. (referred to as “Copart”, “we”, “us” or “our”) is the data controller that is responsible for the personal data collected and used within the scope of this policy:

Jurisdiction	Entity	Address
Brasil	Copart do Brasil Organização de Leilões Ltda.	A/c: Diretor de Proteção de Dados Rua Henry Ford, 965 – Osasco – SP CEP: 06210-108

Personal Data We Collect

Depending on the context of your relationship with us, we may collect different categories of data.

We collect Personal Data for the following reasons:

To provide you with information, products, or services that you request from us.
To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
As necessary or appropriate to protect the rights, property or safety of us, our members, our customers, or others.
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

The following table details personal data we collected in the last twelve (12) months:

Data Category	Identity Data
Data Elements Corresponding to Data Category	Identifiers and characteristics of a protected class, including first name, last name, username or similar identifier, password, title, date of birth, gender, social security number, tax ID, photo ID, driving license and passport information.
How We Collect Your Personal Data:	Directly from an individual who corresponds with us Directly from our vendors Directly from our members Directly from an individual who sells us a vehicle Directly from an individual who pick up vehicles at one of our yards
LGPD Lawful Basis	Performance of a contract Your consent Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms Compliance with legal obligations

Data Category	Contact Data
Data Elements Corresponding to Data Category	Identifiers, including your postal address, street address for vehicle pickup, email address and phone number and also your business license information.
How We Collect Your Personal Data:	Directly from an individual who corresponds with us Directly from our vendors Directly from our members Directly from an individual who sells us a vehicle Directly from an individual who picks up a vehicle at one of our yards
LGPD Lawful Basis	Performance of a contract. Your consent Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms Compliance with legal obligations

Data Category	Financial Data
Data Elements Corresponding to Data Category	Identifiers and financial information, including credit card or debit card information and bank account/sort code details.
How We Collect Your Personal Data:	Directly from our members Directly from an individual who sells us a vehicle Directly from an individual who picks up a vehicle at one of our yards.
LGPD Lawful Basis	Performance of a contract. Your consent Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms Compliance with legal obligations

Data Category	Technical and device Data
Data Elements Corresponding to Data Category	Internet or other electronic network activity information, including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, server logs, operating system and platform and other technology on the devices you use to access this website.
How We Collect Your Personal Data:	Directly and indirectly from people who visit our website (www.copart.com.br)
LGPD Lawful Basis	Performance of a contract. Your consent Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms Compliance with legal obligations

Data Category	Marketing Data
Data Elements Corresponding to Data Category	Includes your preferences in receiving marketing from us and our contracted third parties and your communication preferences. This also includes information you provide to us through one of our communication channels.
How We Collect Your Personal Data:	Directly from our members Directly from an individual who corresponds with us.
LGPD Lawful Basis	Performance of a contract Your consent

Data Category	Vehicle Data
Data Elements Corresponding to Data Category	Includes the make, model, condition of the vehicle, and vehicle identification number (VIN), which some jurisdictions classify as Personal Data.
How We Collect Your Personal Data:	Directly from an individual who sells us a vehicle.
LGPD Lawful Basis	Performance of a contract. Your consent. Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms. Compliance with legal obligations.

Data Category	Usage Data
Data Elements Corresponding to Data Category	Internet or other electronic network activity information, including information about how you use our website, products, and services.
How We Collect Your Personal Data:	Indirectly from our members. Indirectly from individuals who visit our website and use our services.
LGPD Lawful Basis	Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.

Data Category	Transaction Data
Data Elements Corresponding to Data Category	Commercial information, consisting of information about your transactions with us, including information about items on which you place bids.
How We Collect Your Personal Data:	Indirectly from our members.
LGPD Lawful Basis	Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.

Data Category	Data Elements Corresponding to Data Category	How We Collect Your Personal Data:	LGPD Lawful Basis
Identity Data	Identifiers and characteristics of a protected class, including first name, last name, username or similar identifier, password, title, date of birth, gender, social security number, tax ID, photo ID, driving license and passport information.	Directly from an individual who corresponds with us Directly from our vendors Directly from our members Directly from an individual who sells us a vehicle Directly from an individual who pick up vehicles at one of our yards	Performance of a contract Your consent Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms Compliance with legal obligations
Contact Data	Identifiers, including your postal address, street address for vehicle pickup, email address and phone number and also your business license information.	Directly from an individual who corresponds with us Directly from our vendors Directly from our members Directly from an individual who sells us a vehicle Directly from an individual who picks up a vehicle at one of our yards	Performance of a contract. Your consent Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms Compliance with legal obligations
Financial Data	Identifiers and financial information, including credit card or debit card information and bank account/sort code details.	Directly from our members Directly from an individual who sells us a vehicle Directly from an individual who picks up a vehicle at one of our yards.	Performance of a contract. Your consent Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms Compliance with legal obligations
Technical and device Data	Internet or other electronic network activity information, including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, server logs, operating system and platform and other technology on the devices you use to access this website.	Directly and indirectly from people who visit our website (www.copart.com.br)	Performance of a contract. Your consent Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms Compliance with legal obligations
Marketing Data	Includes your preferences in receiving marketing from us and our contracted third parties and your communication preferences. This also includes information you provide to us through one of our communication channels.	Directly from our members Directly from an individual who corresponds with us.	Performance of a contract Your consent
Vehicle Data	Includes the make, model, condition of the vehicle, and vehicle identification number (VIN), which some jurisdictions classify as Personal Data.	Directly from an individual who sells us a vehicle.	Performance of a contract. Your consent. Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms. Compliance with legal obligations.
Usage Data	Internet or other electronic network activity information, including information about how you use our website, products, and services.	Indirectly from our members. Indirectly from individuals who visit our website and use our services.	Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.
Transaction Data	Commercial information, consisting of information about your transactions with us, including information about items on which you place bids.	Indirectly from our members.	Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.

Special Categories

We do not collect Sensitive Data, which is information regarding criminal convictions or offenses, and we do not intentionally collect any details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, affiliation to any religious, political or philosophical organization, or information about your health, genetics and biometric data. However, because some of our communication channels, such as e-mail, social media, and telephony systems allow end users to provide us with unstructured data, it is possible for Copart to receive unsolicited Personal Data provided by the message sender. We request that you refrain from sharing Sensitive Data through any of these channels.

Sharing Personal Data

In addition to sharing your Personal Data within the Copart Group, we may disclose your Personal Data to external third parties in order to provide you with certain of the services you have requested from us. When we disclose Personal Data to an external third party vendor for a business purpose, we enter into a contract with the vendor that describes the purpose of the processing and requires the recipient to both keep that Personal Data confidential and not use it for any purpose except performing the contract.

In the last twelve (12) months we have disclosed the following categories of Personal Data for a business purpose to the corresponding categories of third parties indicated below:

Data Category	Identity Data
Third Party Category	Regulatory Compliance Service Provider Vehicle Subhaulers Marketing Service Providers Data Analytics Service Providers Data Analytics Service Providers Identification Verification Service Providers Customer Relationship Management Service Providers Vendor Management Service Provider
Business Purpose	To comply with the regulatory obligations applicable to our business operations. To perform a vehicle pickup as part of our service offering. To provide you with information regarding our products and services in which we think you may be interested. To analyze trends and performance of our website and electronic services. To ensure the appropriate individual is collecting a vehicle from us. To manage our relationship with you. To manage the vendors who help us provide our service offerings.

Data Category	Contact Data
Third Party Category	Communications Service Providers Marketing Service Providers Vehicle Subhaulers Customer Relationship Management Service Providers Regulatory Compliance Service Provider Vendor Management Service Provider
Business Purpose	To facilitate communications channels between us and you. To provide you with information regarding our products and services in which we think you may be interested. To perform a vehicle pickup as part of our service offering. To manage our relationship with you. To comply with the regulatory obligations applicable to our business operations. To manage the vendors who help us provide our service offerings.

Data Category	Financial Data
Third Party Category	Financial Service Providers
Business Purpose	To facilitate payment for the goods or services you purchase from us or sell to us.

Data Category	Technical Data
Third Party Category	Information Technology Service Providers Data Analytics Service Providers
Business Purpose	To effectively operate and protect our website and electronic services. To analyze trends and performance of our website and electronic services.

Data Category	Vehicle Data
Third Party Category	Regulatory Compliance Service Provider
Business Purpose	To comply with the regulatory obligations applicable to our business operations.

Data Category	Third Party Category	Business Purpose
Identity Data	Regulatory Compliance Service Provider Vehicle Subhaulers Marketing Service Providers Data Analytics Service Providers Data Analytics Service Providers Identification Verification Service Providers Customer Relationship Management Service Providers Vendor Management Service Provider	To comply with the regulatory obligations applicable to our business operations. To perform a vehicle pickup as part of our service offering. To provide you with information regarding our products and services in which we think you may be interested. To analyze trends and performance of our website and electronic services. To ensure the appropriate individual is collecting a vehicle from us. To manage our relationship with you. To manage the vendors who help us provide our service offerings.
Contact Data	Communications Service Providers Marketing Service Providers Vehicle Subhaulers Customer Relationship Management Service Providers Regulatory Compliance Service Provider Vendor Management Service Provider	To facilitate communications channels between us and you. To provide you with information regarding our products and services in which we think you may be interested. To perform a vehicle pickup as part of our service offering. To manage our relationship with you. To comply with the regulatory obligations applicable to our business operations. To manage the vendors who help us provide our service offerings.
Financial Data	Financial Service Providers	To facilitate payment for the goods or services you purchase from us or sell to us.
Technical Data	Information Technology Service Providers Data Analytics Service Providers	To effectively operate and protect our website and electronic services. To analyze trends and performance of our website and electronic services.
Vehicle Data	Regulatory Compliance Service Provider	To comply with the regulatory obligations applicable to our business operations.

In addition, we may also disclose your Personal Data in the following circumstances:

In connection with the sale of a business (including merger, acquisition, or sale of all or a material portion of the business’s assets, change in corporate control, or insolvency or bankruptcy proceedings).
To enforce our terms of service or rules; to ensure the safety and security of our users and third parties; to protect our rights and property and the rights and property of our users and third parties; and to comply with legal process, including pursuant to a judicial warrant, rule, order or subpoena, or in other cases if we believe in good faith that disclosure is required by law or regulation, in each case, without obligation to contest such legal process.

Promotional Marketing

Depending on the location in which you are located and, if applicable whether you provide your affirmative consent, we may use your identity, contact, technical, usage and transaction data to form a view on what products or services we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant to you.

Withdrawing Consent for Promotional Marketing

Depending on the location in which you are located, we have established a preference center through which certain of our members may opt-out of direct marketing. The same category of members may also opt-out of promotional marketing by submitting your request to privacy@copart.com.br. All recipients of marketing and promotional communications from us may opt-out of future marketing communications by clicking on the “remove me” link that we include at the bottom of all of our marketing communications.

International Transfers

For the purposes of the LGPD, some recipients of your Personal Data are located outside of your country or have offices in countries where data protection laws may provide a different level of protection than the laws in your country. When transferring Personal Data to such recipients, we provide appropriate safeguards.

The transmission of Personal Data between and among certain members of the Copart Group, which consists of Copart, Inc. and its direct and indirect wholly-owned subsidiaries, is based on our worldwide data protection principles contained in our Intra-Group Processing Agreement, which incorporate both controller to controller and controller to processor model clauses prescribed by the National Authority. Through our Intra-Group Processing Agreement, the Copart Group undertakes to protect your Personal Data and to comply with applicable data protection obligations.

Your Rights and Choices

Subject to possible restrictions under national law, as a data subject under the LGPD, you may have certain rights regarding the Personal Data that we collect on you.

Those rights are described in the below table:

Rights under LGPD	Access / to Know
Description	A consumer has the right to request that a business that collects personal information about the consumer disclose: (1) The categories of personal information it has collected about that consumer; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose for collecting or selling personal information; (4) the categories of third parties with whom the business shares personal information; and (5) the specific pieces of personal information it has collected about that consumer.

Rights under LGPD

Access / to Know

Description

A consumer has the right to request that a business that collects personal information about the consumer disclose: (1) The categories of personal information it has collected about that consumer; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose for collecting or selling personal information; (4) the categories of third parties with whom the business shares personal information; and (5) the specific pieces of personal information it has collected about that consumer.

Rights under LGPD	Rectification
Description	An individual may request that inaccurate personal data be corrected or rectified.

Rights under LGPD	Deletion/Erasure
Description	A consumer has the right to request that a business delete any personal information about the consumer that the business has collected from the consumer.

Rights under LGPD	Restrict Processing
Description	You have the right to block or temporarily suspend any processing operation that is unnecessary, excessive, or processed in noncompliance with the provisions of the LGPD.

Rights under LGPD	Data Portability
Description	In certain circumstances, you shall have the right to portability of your data to another service or product provider, by means of an express request and subject to commercial and industrial secrecy, pursuant to the regulation of the controlling agency.

Rights under LGPD	Object to Processing
Description	In certain circumstances, you can object to our processing of your personal data if the legal basis for processing does not include consent and we fail to comply with the LGPD.

Rights under LGPD	Object to Automated Decision-Making
Description	In certain circumstances, you have the right to request a revision of decisions that affect your interests and that are taken solely on the basis of automated processing.

Rights under LGPD	Description
Access / to Know	A consumer has the right to request that a business that collects personal information about the consumer disclose: (1) The categories of personal information it has collected about that consumer; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose for collecting or selling personal information; (4) the categories of third parties with whom the business shares personal information; and (5) the specific pieces of personal information it has collected about that consumer.
Rectification	An individual may request that inaccurate personal data be corrected or rectified.
Deletion/Erasure	A consumer has the right to request that a business delete any personal information about the consumer that the business has collected from the consumer.
Restrict Processing	You have the right to block or temporarily suspend any processing operation that is unnecessary, excessive, or processed in noncompliance with the provisions of the LGPD.
Data Portability	In certain circumstances, you shall have the right to portability of your data to another service or product provider, by means of an express request and subject to commercial and industrial secrecy, pursuant to the regulation of the controlling agency.
Object to Processing	In certain circumstances, you can object to our processing of your personal data if the legal basis for processing does not include consent and we fail to comply with the LGPD.
Object to Automated Decision-Making	In certain circumstances, you have the right to request a revision of decisions that affect your interests and that are taken solely on the basis of automated processing.

Exercising Your Rights

You may generally exercise one or more of your rights described above free of charge. If you submit a request related to personal data we share with a supplier to achieve one of the legitimate purposes informed to you, we will inform the supplier of your request, so that it can execute the same response as Copart.

To exercise your rights, please submit a verifiable consumer request by either:

Calling us at 972-391-5380;
Emailing us at privacy@copart.com.br.

Additionally, as a data subject under the LGPD, you have the right to lodge a complaint with your applicable supervisory authority. However, we would appreciate the chance to deal with your concern before you approach the supervisory authority so please contact us in the first instance.

Cookies and Similar Technologies

When you use our services, except as described in this Privacy Notice regarding the opt-in consent we obtain from certain of our web site visitors based on their location, we and selected third parties may use cookies and similar technologies to provide you with a better, faster, and safer user experience or to show you personalized advertising. Cookies are small text files that are automatically created by your browser and stored on your device when you use the services.

Our cookies and similar technologies have different functions:

They may be technically necessary for the provision of our services;
They help us optimize our services technically (e.g. monitoring load times and errors);
They help us improve your user experience;
They allow us to show you more relevant advertisements.

Online Tracking

Do Not Track (DNT) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. We generally do not recognize your choice to opt out of tracking via a DNT request. However, depending on your location we may request that you expressly opt-in to cookies that are not essential to our web-site functionality, including tracking and marketing analytics cookies.At any time you can control cookies through your browser settings and other tools. If you reject cookies, this could affect the availability and functionality of our services.

Data Security and Data Retention

We implement and maintain reasonable security measures to prevent your Personal Data from being used, accessed, altered, or disclosed in an unauthorized way. Please note that any information you send to us electronically may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware that despite our best efforts, no security measures are perfect or impenetrable.

Data Retention

We will only retain your Personal Data for as long as necessary to fulfill the purpose we collected it for, including for the purpose of satisfying any legal, accounting, or reporting requirements.

Furthermore, we may retain data that has been anonymized or otherwise does not constitute or contain personal information. We do not authorize our storage or service providers to retain, use or disclose data except as necessary to perform services on our behalf or comply with legal requirements according to applicable laws"

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

If You Fail to Provide Personal Data

When we need to collect Personal Data by law, or under the terms of the contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. For example, if you do not provide us with required Personal Data, we may be unable to provide you with the services you have requested. In this case, we may have to cancel a contract you have with us, but we will notify you if this is the case.

Change of Purpose

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably conclude that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to obtain an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us by emailing privacy@copart.com.br.

If we need to use your Personal Data for an unrelated purpose, we will notify you and request your consent, if applicable, or we will explain the legal basis which allows us to do so.

Every time we process your data, it will be done only to the extent necessary to achieve the purpose of the processing and using the adequate means.

Please note that we may process your Personal Data without your consent, in compliance with the above rules, where this is required or permitted by law.

Changes to this Privacy policy

Changes to our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through another appropriate communication method.

Contact Information

Contact Information

If you have any questions or comments about this policy, the ways in which we collect and use your Personal Data, your choices and rights regarding such use, or wish to exercise your rights under the LGPD, please do not hesitate to contact us at:
Website: www.copart.com.br
Email: privacy@copart.com.br
Postal Address:

Copart do Brasil Organização de Leilões Ltda
Attn: Data Protection Officer
Rua Henry Ford, 965 - Osasco - SP
CEP: 06210-108