Privacy Policy

Privacy Statement

Copart respects your privacy and is committed to protecting your Personal Data, which is any information that can be used to identify or potentially identify a particular person.

The scope of this Privacy Notice relates to any Personal Data that Copart processes under applicable data privacy laws. This Privacy Notice applies to your use of this website and all Copart services, regardless of how you access or use the services, including access via mobile devices and applications. Unless otherwise specified, this policy applies to the operations of Copart do Brasil relating to vehicles that are physically located within Brasil.

This version was last updated in February 26, 2024. We may update this notice from time to time, and if we do so, we will upload a new version to our website.

Important Information

This website is not intended for children, and we do not knowingly collect data relating to children. When you register with Copart as a member, you acknowledge that you are of legal age to make bids on vehicles and further agree to our terms and conditions.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing Personal Data about you. This privacy notice supplements other notices and is not intended to override them.

Data Controller 

Copart do Brasil Organização de Leilões Ltda. (referred to as “Copart”, “we”, “us” or “our”) is the data controller that is responsible for the personal data collected and used within the scope of this policy:

Jurisdiction Entity Address
Brasil Copart do Brasil Organização de Leilões Ltda. A/c: Diretor de Proteção de Dados
Rua Henry Ford, 965 – Osasco – SP
CEP: 06210-108

Personal Data We Collect 

Depending on the context of your relationship with us, we may collect different categories of data.

We collect Personal Data for the following reasons:

  • To provide you with information, products, or services that you request from us.
  • To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
  • As necessary or appropriate to protect the rights, property or safety of us, our members, our customers, or others.
  • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

 

The following table details personal data we collected in the last twelve (12) months:

 
 

Data CategoryIdentity Data
Data Elements Corresponding to Data Category
  • Identifiers and characteristics of a protected class, including first name, last name, username or similar identifier, password, title, date of birth, gender, social security number, tax ID, photo ID, driving license and passport information.
How We Collect Your Personal Data:
  • Directly from an individual who corresponds with us
  • Directly from our vendors
  • Directly from our members
  • Directly from an individual who sells us a vehicle
  • Directly from an individual who pick up vehicles at one of our yards
LGPD Lawful Basis
  • Performance of a contract
  • Your consent
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms
  • Compliance with legal obligations

Data CategoryContact Data
Data Elements Corresponding to Data Category
  • Identifiers, including your postal address, street address for vehicle pickup, email address and phone number and also your business license information.
How We Collect Your Personal Data:
  • Directly from an individual who corresponds with us
  • Directly from our vendors
  • Directly from our members
  • Directly from an individual who sells us a vehicle
  • Directly from an individual who picks up a vehicle at one of our yards
LGPD Lawful Basis
  • Performance of a contract.
  • Your consent
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms
  • Compliance with legal obligations

Data CategoryFinancial Data
Data Elements Corresponding to Data Category
  • Identifiers and financial information, including credit card or debit card information and bank account/sort code details.
How We Collect Your Personal Data:
  • Directly from our members
  • Directly from an individual who sells us a vehicle
  • Directly from an individual who picks up a vehicle at one of our yards.
LGPD Lawful Basis
  • Performance of a contract.
  • Your consent
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms
  • Compliance with legal obligations

Data CategoryTechnical and device Data
Data Elements Corresponding to Data Category
  • Internet or other electronic network activity information, including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, server logs, operating system and platform and other technology on the devices you use to access this website.
How We Collect Your Personal Data:
  • Directly and indirectly from people who visit our website (www.copart.com.br)
LGPD Lawful Basis
  • Performance of a contract.
  • Your consent
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms
  • Compliance with legal obligations

Data CategoryMarketing Data
Data Elements Corresponding to Data Category
  • Includes your preferences in receiving marketing from us and our contracted third parties and your communication preferences. This also includes information you provide to us through one of our communication channels.
How We Collect Your Personal Data:
  • Directly from our members
  • Directly from an individual who corresponds with us.
LGPD Lawful Basis
  • Performance of a contract
  • Your consent

Data CategoryVehicle Data
Data Elements Corresponding to Data Category
  • Includes the make, model, condition of the vehicle, and vehicle identification number (VIN), which some jurisdictions classify as Personal Data.
How We Collect Your Personal Data:
  • Directly from an individual who sells us a vehicle.
LGPD Lawful Basis
  • Performance of a contract.
  • Your consent.
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.
  • Compliance with legal obligations.

Data CategoryUsage Data
Data Elements Corresponding to Data Category
  • Internet or other electronic network activity information, including information about how you use our website, products, and services.
How We Collect Your Personal Data:
  • Indirectly from our members.
  • Indirectly from individuals who visit our website and use our services.
LGPD Lawful Basis
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.

Data CategoryTransaction Data
Data Elements Corresponding to Data Category
  • Commercial information, consisting of information about your transactions with us, including information about items on which you place bids.
How We Collect Your Personal Data:
  • Indirectly from our members.
LGPD Lawful Basis
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.

Data CategoryData Elements Corresponding to Data CategoryHow We Collect Your Personal Data:LGPD Lawful Basis
Identity Data
  • Identifiers and characteristics of a protected class, including first name, last name, username or similar identifier, password, title, date of birth, gender, social security number, tax ID, photo ID, driving license and passport information.
  • Directly from an individual who corresponds with us
  • Directly from our vendors
  • Directly from our members
  • Directly from an individual who sells us a vehicle
  • Directly from an individual who pick up vehicles at one of our yards
  • Performance of a contract
  • Your consent
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms
  • Compliance with legal obligations
Contact Data
  • Identifiers, including your postal address, street address for vehicle pickup, email address and phone number and also your business license information.
  • Directly from an individual who corresponds with us
  • Directly from our vendors
  • Directly from our members
  • Directly from an individual who sells us a vehicle
  • Directly from an individual who picks up a vehicle at one of our yards
  • Performance of a contract.
  • Your consent
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms
  • Compliance with legal obligations
Financial Data
  • Identifiers and financial information, including credit card or debit card information and bank account/sort code details.
  • Directly from our members
  • Directly from an individual who sells us a vehicle
  • Directly from an individual who picks up a vehicle at one of our yards.
  • Performance of a contract.
  • Your consent
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms
  • Compliance with legal obligations
Technical and device Data
  • Internet or other electronic network activity information, including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, server logs, operating system and platform and other technology on the devices you use to access this website.
  • Directly and indirectly from people who visit our website (www.copart.com.br)
  • Performance of a contract.
  • Your consent
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms
  • Compliance with legal obligations
Marketing Data
  • Includes your preferences in receiving marketing from us and our contracted third parties and your communication preferences. This also includes information you provide to us through one of our communication channels.
  • Directly from our members
  • Directly from an individual who corresponds with us.
  • Performance of a contract
  • Your consent
Vehicle Data
  • Includes the make, model, condition of the vehicle, and vehicle identification number (VIN), which some jurisdictions classify as Personal Data.
  • Directly from an individual who sells us a vehicle.
  • Performance of a contract.
  • Your consent.
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.
  • Compliance with legal obligations.
Usage Data
  • Internet or other electronic network activity information, including information about how you use our website, products, and services.
  • Indirectly from our members.
  • Indirectly from individuals who visit our website and use our services.
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.
Transaction Data
  • Commercial information, consisting of information about your transactions with us, including information about items on which you place bids.
  • Indirectly from our members.
  • Our legitimate business interests, except where such interests are overridden by your interests or fundamental rights and freedoms.

Special Categories

We do not collect Sensitive Data, which is information regarding criminal convictions or offenses, and we do not intentionally collect any details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, affiliation to any religious, political or philosophical organization, or information about your health, genetics and biometric data. However, because some of our communication channels, such as e-mail, social media, and telephony systems allow end users to provide us with unstructured data, it is possible for Copart to receive unsolicited Personal Data provided by the message sender. We request that you refrain from sharing Sensitive Data through any of these channels.

Sharing Personal Data 

In addition to sharing your Personal Data within the Copart Group, we may disclose your Personal Data to external third parties in order to provide you with certain of the services you have requested from us. When we disclose Personal Data to an external third party vendor for a business purpose, we enter into a contract with the vendor that describes the purpose of the processing and requires the recipient to both keep that Personal Data confidential and not use it for any purpose except performing the contract.

In the last twelve (12) months we have disclosed the following categories of Personal Data for a business purpose to the corresponding categories of third parties indicated below:

 
 

Data CategoryIdentity Data
Third Party Category
  • Regulatory Compliance Service Provider
  • Vehicle Subhaulers
  • Marketing Service Providers
  • Data Analytics Service Providers
  • Data Analytics Service Providers
  • Identification Verification Service Providers
  • Customer Relationship Management Service Providers
  • Vendor Management Service Provider
Business Purpose
  • To comply with the regulatory obligations applicable to our business operations.
  • To perform a vehicle pickup as part of our service offering.
  • To provide you with information regarding our products and services in which we think you may be interested.
  • To analyze trends and performance of our website and electronic services.
  • To ensure the appropriate individual is collecting a vehicle from us.
  • To manage our relationship with you.
  • To manage the vendors who help us provide our service offerings.

Data CategoryContact Data
Third Party Category
  • Communications Service Providers
  • Marketing Service Providers
  • Vehicle Subhaulers
  • Customer Relationship Management Service Providers
  • Regulatory Compliance Service Provider
  • Vendor Management Service Provider
Business Purpose
  • To facilitate communications channels between us and you.
  • To provide you with information regarding our products and services in which we think you may be interested.
  • To perform a vehicle pickup as part of our service offering.
  • To manage our relationship with you.
  • To comply with the regulatory obligations applicable to our business operations.
  • To manage the vendors who help us provide our service offerings.

Data CategoryFinancial Data
Third Party Category
  • Financial Service Providers
Business Purpose
  • To facilitate payment for the goods or services you purchase from us or sell to us.

Data CategoryTechnical Data
Third Party Category
  • Information Technology Service Providers
  • Data Analytics Service Providers
Business Purpose
  • To effectively operate and protect our website and electronic services.
  • To analyze trends and performance of our website and electronic services.

Data CategoryVehicle Data
Third Party Category
  • Regulatory Compliance Service Provider
Business Purpose
  • To comply with the regulatory obligations applicable to our business operations.

Data CategoryThird Party CategoryBusiness Purpose
Identity Data
  • Regulatory Compliance Service Provider
  • Vehicle Subhaulers
  • Marketing Service Providers
  • Data Analytics Service Providers
  • Data Analytics Service Providers
  • Identification Verification Service Providers
  • Customer Relationship Management Service Providers
  • Vendor Management Service Provider
  • To comply with the regulatory obligations applicable to our business operations.
  • To perform a vehicle pickup as part of our service offering.
  • To provide you with information regarding our products and services in which we think you may be interested.
  • To analyze trends and performance of our website and electronic services.
  • To ensure the appropriate individual is collecting a vehicle from us.
  • To manage our relationship with you.
  • To manage the vendors who help us provide our service offerings.
Contact Data
  • Communications Service Providers
  • Marketing Service Providers
  • Vehicle Subhaulers
  • Customer Relationship Management Service Providers
  • Regulatory Compliance Service Provider
  • Vendor Management Service Provider
  • To facilitate communications channels between us and you.
  • To provide you with information regarding our products and services in which we think you may be interested.
  • To perform a vehicle pickup as part of our service offering.
  • To manage our relationship with you.
  • To comply with the regulatory obligations applicable to our business operations.
  • To manage the vendors who help us provide our service offerings.
Financial Data
  • Financial Service Providers
  • To facilitate payment for the goods or services you purchase from us or sell to us.
Technical Data
  • Information Technology Service Providers
  • Data Analytics Service Providers
  • To effectively operate and protect our website and electronic services.
  • To analyze trends and performance of our website and electronic services.
Vehicle Data
  • Regulatory Compliance Service Provider
  • To comply with the regulatory obligations applicable to our business operations.

In addition, we may also disclose your Personal Data in the following circumstances:

  • In connection with the sale of a business (including merger, acquisition, or sale of all or a material portion of the business’s assets, change in corporate control, or insolvency or bankruptcy proceedings).
  • To enforce our terms of service or rules; to ensure the safety and security of our users and third parties; to protect our rights and property and the rights and property of our users and third parties; and to comply with legal process, including pursuant to a judicial warrant, rule, order or subpoena, or in other cases if we believe in good faith that disclosure is required by law or regulation, in each case, without obligation to contest such legal process.

 

Promotional Marketing 

Depending on the location in which you are located and, if applicable whether you provide your affirmative consent, we may use your identity, contact, technical, usage and transaction data to form a view on what products or services we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant to you.

Withdrawing Consent for Promotional Marketing

Depending on the location in which you are located, we have established a preference center through which certain of our members may opt-out of direct marketing. The same category of members may also opt-out of promotional marketing by submitting your request to privacy@copart.com.br. All recipients of marketing and promotional communications from us may opt-out of future marketing communications by clicking on the “remove me” link that we include at the bottom of all of our marketing communications.

International Transfers 

For the purposes of the LGPD, some recipients of your Personal Data are located outside of your country or have offices in countries where data protection laws may provide a different level of protection than the laws in your country. When transferring Personal Data to such recipients, we provide appropriate safeguards.

The transmission of Personal Data between and among certain members of the Copart Group, which consists of Copart, Inc. and its direct and indirect wholly-owned subsidiaries, is based on our worldwide data protection principles contained in our Intra-Group Processing Agreement, which incorporate both controller to controller and controller to processor model clauses prescribed by the National Authority. Through our Intra-Group Processing Agreement, the Copart Group undertakes to protect your Personal Data and to comply with applicable data protection obligations.

Your Rights and Choices 

Subject to possible restrictions under national law, as a data subject under the LGPD, you may have certain rights regarding the Personal Data that we collect on you.

Those rights are described in the below table:

 
 

Rights under LGPDAccess / to Know
Description

A consumer has the right to request that a business that collects personal information about the consumer disclose: (1) The categories of personal information it has collected about that consumer; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose for collecting or selling personal information; (4) the categories of third parties with whom the business shares personal information; and (5) the specific pieces of personal information it has collected about that consumer.

Rights under LGPDRectification
Description

An individual may request that inaccurate personal data be corrected or rectified.

Rights under LGPDDeletion/Erasure
Description

A consumer has the right to request that a business delete any personal information about the consumer that the business has collected from the consumer.

Rights under LGPDRestrict Processing
Description

You have the right to block or temporarily suspend any processing operation that is unnecessary, excessive, or processed in noncompliance with the provisions of the LGPD.

Rights under LGPDData Portability
Description

In certain circumstances, you shall have the right to portability of your data to another service or product provider, by means of an express request and subject to commercial and industrial secrecy, pursuant to the regulation of the controlling agency.

Rights under LGPDObject to Processing
Description

In certain circumstances, you can object to our processing of your personal data if the legal basis for processing does not include consent and we fail to comply with the LGPD.

Rights under LGPDObject to Automated Decision-Making
Description

In certain circumstances, you have the right to request a revision of decisions that affect your interests and that are taken solely on the basis of automated processing.

Rights under LGPDDescription
Access / to Know

A consumer has the right to request that a business that collects personal information about the consumer disclose: (1) The categories of personal information it has collected about that consumer; (2) the categories of sources from which the personal information is collected; (3) the business or commercial purpose for collecting or selling personal information; (4) the categories of third parties with whom the business shares personal information; and (5) the specific pieces of personal information it has collected about that consumer.

Rectification

An individual may request that inaccurate personal data be corrected or rectified.

Deletion/Erasure

A consumer has the right to request that a business delete any personal information about the consumer that the business has collected from the consumer.

Restrict Processing

You have the right to block or temporarily suspend any processing operation that is unnecessary, excessive, or processed in noncompliance with the provisions of the LGPD.

Data Portability

In certain circumstances, you shall have the right to portability of your data to another service or product provider, by means of an express request and subject to commercial and industrial secrecy, pursuant to the regulation of the controlling agency.

Object to Processing

In certain circumstances, you can object to our processing of your personal data if the legal basis for processing does not include consent and we fail to comply with the LGPD.

Object to Automated Decision-Making

In certain circumstances, you have the right to request a revision of decisions that affect your interests and that are taken solely on the basis of automated processing.

Exercising Your Rights

You may generally exercise one or more of your rights described above free of charge. If you submit a request related to personal data we share with a supplier to achieve one of the legitimate purposes informed to you, we will inform the supplier of your request, so that it can execute the same response as Copart.

To exercise your rights, please submit a verifiable consumer request by either:

Additionally, as a data subject under the LGPD, you have the right to lodge a complaint with your applicable supervisory authority. However, we would appreciate the chance to deal with your concern before you approach the supervisory authority so please contact us in the first instance.

Cookies and Similar Technologies 

When you use our services, except as described in this Privacy Notice regarding the opt-in consent we obtain from certain of our web site visitors based on their location, we and selected third parties may use cookies and similar technologies to provide you with a better, faster, and safer user experience or to show you personalized advertising. Cookies are small text files that are automatically created by your browser and stored on your device when you use the services.

Our cookies and similar technologies have different functions:

  • They may be technically necessary for the provision of our services;
  • They help us optimize our services technically (e.g. monitoring load times and errors);
  • They help us improve your user experience;
  • They allow us to show you more relevant advertisements.

 

Online Tracking

Do Not Track (DNT) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. We generally do not recognize your choice to opt out of tracking via a DNT request. However, depending on your location we may request that you expressly opt-in to cookies that are not essential to our web-site functionality, including tracking and marketing analytics cookies.At any time you can control cookies through your browser settings and other tools. If you reject cookies, this could affect the availability and functionality of our services.

Data Security and Data Retention 

We implement and maintain reasonable security measures to prevent your Personal Data from being used, accessed, altered, or disclosed in an unauthorized way. Please note that any information you send to us electronically may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us. Please be aware that despite our best efforts, no security measures are perfect or impenetrable.

Data Retention

We will only retain your Personal Data for as long as necessary to fulfill the purpose we collected it for, including for the purpose of satisfying any legal, accounting, or reporting requirements.

Furthermore, we may retain data that has been anonymized or otherwise does not constitute or contain personal information. We do not authorize our storage or service providers to retain, use or disclose data except as necessary to perform services on our behalf or comply with legal requirements according to applicable laws"

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Third-Party Links 

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

If You Fail to Provide Personal Data 

When we need to collect Personal Data by law, or under the terms of the contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. For example, if you do not provide us with required Personal Data, we may be unable to provide you with the services you have requested. In this case, we may have to cancel a contract you have with us, but we will notify you if this is the case.

Change of Purpose 

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably conclude that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to obtain an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us by emailing privacy@copart.com.br.

If we need to use your Personal Data for an unrelated purpose, we will notify you and request your consent, if applicable, or we will explain the legal basis which allows us to do so.

Every time we process your data, it will be done only to the extent necessary to achieve the purpose of the processing and using the adequate means.

Please note that we may process your Personal Data without your consent, in compliance with the above rules, where this is required or permitted by law.

Changes to this Privacy policy 

Changes to our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through another appropriate communication method.

Contact Information 

Contact Information

If you have any questions or comments about this policy, the ways in which we collect and use your Personal Data, your choices and rights regarding such use, or wish to exercise your rights under the LGPD, please do not hesitate to contact us at:
 Website: www.copart.com.br
 Email: privacy@copart.com.br
 Postal Address:

    Copart do Brasil Organização de Leilões Ltda
    Attn: Data Protection Officer
    Rua Henry Ford, 965 - Osasco - SP
    CEP: 06210-108