Privacy Notice

Updated on: March 11, 2024

ALLDATA Automotriz S. de R.L. de C.V., with its registered address at Av. Fundadores 1001, Col. Alfareros, Monterrey, N.L., Mexico, C.P. 64753 ("ALLDATA Mexico"), is committed to making you feel secure and comfortable when doing business with us. This Privacy Notice informs you about how we collect, use, and manage your personal information through our websites and applications or when you use any of the services we provide through our websites and applications.

For the purposes of this Privacy Notice, you, as the Data Subject, implicitly consent and accept that your data will be processed in the manner established in this Privacy Notice under its terms and conditions unless you express your opposition through written notification and/or by email in accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties or other regulations in force in Mexico.

ALLDATA Mexico complies with the principle of information established in the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter the Law), articles 8, 15, 16, 17 section II, 33, and 36; its Regulation articles 14, 24, 26, 27, 28, 30, 40, 41, 42, 68, 90, and 102, and the Privacy Notice Guidelines articles 10º, 18º, 20º, 21º, 22º, 23º, 24º, 25º, 26º, 27º, 28º, 29º, 30º, 31º, 32º, 33º, 37º, and 41º, as well as other applicable laws or regulations. ALLDATA Mexico respects your right to privacy and the protection of personal and/or biometric data; therefore, your personal data is duly safeguarded in accordance with the administrative, technical, and physical security provisions established in the relevant Law to protect your personal data from potential damage, loss, alteration, or unauthorized access.

ALLDATA Mexico is responsible for the database where your information is stored and informs you of the existence and main characteristics of the treatment to which your personal data will be subjected, as follows:

Scope of this Privacy Notice and Personal Data We Will Use

This Privacy Notice describes the privacy practices of ALLDATA Mexico and applies to the personal information we collect, use, and manage when you interact with us through the following "Services":

• Using our websites, including mobile websites and applications: ALLDATA Diagnostics, ALLDATA Repair, ALLDATA Collision, ALLDATA Manage Online, ALLDATA Tech-Assist, ALLDATA Mobile, and ALLDATA.com/mx for professional shops, as well as ALLDATA diy.com websites and mobile services.
• Using our desktop software and/or applications acquired through our websites that provide a dedicated non-browser-based interaction between you and our websites and/or services.
• Purchasing our products online through our websites.
• Participating and utilizing phone features, text messages, emails, interactive chat, and other interactive communications with us, such as ALLDATA Community or ALLDATA Tech Assist, or when you communicate with customer service.
• Registering and participating in our ALLDATAdiy affiliate partner program.
• Engaging in social media interactions with us on our websites and our pages on third-party websites like Facebook, Instagram, Twitter, LinkedIn, and YouTube.
• Viewing our online ads or emails.

For the purposes of this Privacy Notice, personal data refers to any data and/or information that identifies or makes identifiable the Data Subject. The personal data collected or that may be collected include the following: full name, phone number, email, company, or entity where you work, position, address, identification data, contact details, work information, immigration information, financial data, and other extraordinary data you may provide (the "Personal Data"). Specifically, the data and information we collect or may collect include:

• Identifiers/contact and identification data: such as your name, address, postal code, phone number, and personal email address. When creating an online ALLDATA account, we will also collect the name, email address, phone number, postal code, and password you enter when creating the account. We will also collect your ALLDATA account number when you register for certain Services, such as training or certifications.
• Demographic information: which may include protected characteristics under applicable laws and regulations, such as your gender and age.
• Commercial information: about your purchases of ALLDATA products, interests, histories, or trends of products and services, including products or services you like, reviews you submit, or where you shop.
• Financial information: such as bank account information or credit/debit card details and billing address when purchasing products on our website. However, your payment card information is securely transmitted to our payment card processor, and ALLDATA Mexico does not store it.
• Internet, device, and online activity information: related to online activities such as browsing history, search history, web pages visited, visit duration, application usage details, and other details about your interactions with websites, including full Uniform Resource Locators (URLs), clickstream data to, through, and from our website (including date and time); services viewed or searched; page response times, download errors, visit duration to certain pages, page interaction information such as scrolling, clicks, and mouse movements commonly known as session replay technology or methods used to navigate away from the page. We also collect device information such as your Internet Protocol (IP) address, browser or operating system information, login information; time zone settings, browser plug-in types and versions, mobile device type, or other information related to your interaction with our websites. In some situations, this information may be used or combined in a way that identifies you, your company, or your role within your company. In such cases, this information will be treated as personal information as required by applicable laws.
• ALLDATA mobile application: The information collection involves collecting additional information beyond what may be collected when accessing our websites through a browser. For example:
  • Device information and settings: We may collect your device identification and request you to provide location information when using our applications or websites.
  • Camera, photos, and multimedia files: As part of your experience, you may download photos and images from your device through the applications. To do this, the applications may need to access or modify your camera, photo gallery, or other parts of your device containing multimedia files.
• Audio, electronic, or visual information: such as a photograph with prior consent when attending an event and/or providing a testimonial, an audio or video recording when you call us (but please note that we may not be able to associate such recordings with you), and the content of your emails or chats with us when communicating with customer service or participating in ALLDATA Community and/or TechAssist.
• Educational information: such as the educational institution you are affiliated with, your position, and contact information (email address, phone number).
• Professional information: ALLDATA Pro products and services are provided to repair and collision shops, car dealerships, and other commercial customers to help them meet their business needs. This means that much of the information we collect from our commercial customers relates to their businesses and the purchase of our products and services. This information includes the name, address, postal code, phone number, email address, financial account information, ALLDATA account username and password, certain vehicle information, and other information related to your business. Additionally, ALLDATA Mexico may need to collect information related to an individual's role within the company to fulfill an order or inquiry with ALLDATA Mexico, such as the individual's name, title, location, phone number, email address, other contact information, information related to the ALLDATA account with the websites, and other information. We will also collect your email address and a password you choose when applying for a commercial ALLDATA account on the websites.
• Inferences or preferences: we learn or infer about you from other information we have collected about you.
• Statistical or aggregated information: is information that does not directly or indirectly reveal your identity or otherwise relate to an individual. Statistical or aggregated information does not directly identify a specific person, but we may derive non-personal statistical information from personal information. For example, we may aggregate personal information to calculate the percentage of users accessing a specific website feature.

Consent for the processing of personal data will not be necessary when:

• Provided by law.
• Data is listed in public access sources.
• Personal data is subject to a prior dissociation procedure.
• It aims to fulfill obligations arising from a legal relationship between the Data Subject and the personal data.
• There is an emergency situation that potentially damages an individual's property or person.

In all cases, we are committed to treating such data under strict security measures, always ensuring its confidentiality.

If you provide any personal data related to another person as a reference for the purposes of this Privacy Notice, you declare and accept that you have obtained the prior consent of that person for this.

This Privacy Notice does not apply to third-party practices on their websites, including our service providers, marketing partners, or other third parties, even when those services are branded ALLDATA or provided on behalf of ALLDATA. When accessing a third-party website through links on our websites, the information collected about you by others on those third-party websites is governed by those entities' privacy policies. ALLDATA Mexico is not responsible for nor controls the security or privacy of your information when visiting those sites.

This Privacy Notice applies to personal information collected through our national or Mexico websites of ALLDATA. This notice does not apply to the practices of ALLDATA's international subsidiaries or affiliates outside of Mexico, such as ALLDATA Europe, ALLDATA Canada, and ALLDATA US.

ALLDATA Mexico is owned by AutoZone. To view the comprehensive AutoZone Mexico Privacy Notice, which applies to the collection, handling, and use of personal data by AutoZone Mexico, visit www.autozone.com.mx. This Privacy Notice does not apply to the practices of AutoZone, AutoZone Mexico, or our international subsidiaries and affiliates, such as ALLDATA Europe or ALLDATA Canada, AutoZone US, or AutoZone Brazil.

ALLDATA Mexico respects and protects your right to privacy and the protection of personal data, which are protected by law. ALLDATA Mexico will be responsible for the database where this information will be stored, as well as its storage and supervision. Furthermore, the information collected is duly safeguarded under the administrative, technical, physical security provisions and other precautions and security measures established in the Law to protect the information from potential damage, loss, alteration, and/or unauthorized access.

How We Collect Your Personal Data

ALLDATA Mexico collects different types of personal data from various sources, including information you provide directly, information we collect automatically, information we obtain from other sources, including third parties (specified below), and information we infer about you.

• Information you provide to us: You may choose to provide us with information about yourself when interacting with us online or by phone.

By submitting your personal information to ALLDATA Mexico, you acknowledge and accept that ALLDATA Mexico and its subsidiaries and/or affiliates may access, store, and use your customer profile. ALLDATA Mexico recognizes the importance of the responsible use of the information you choose to provide us.

• Information obtained through the use of our services: We collect certain information from you through the use of our Services, such as website usage data and other information about your interaction with the website or device.
• Information obtained from other sources: We may also obtain your personal data from business partners who help us provide our Services.
• Information collected by automated means (cookies and tracking data): Websites may use first-party and third-party products and services to collect traffic statistics through cookies, pixels, tags, and web beacons. A cookie is a small piece of information stored on your device that helps websites and multiple servers recognize you. ALLDATA Mexico and its external service providers may also use other tracking technologies, such as pixels or transparent GIF files, for application and website management and user tracking.

Some of the cookies we use are "strictly necessary" for the functionality of our websites. Others enhance the functionality of our websites but are not strictly necessary.

• Your choices regarding cookies and tracking data: When it comes to how you want to use or allow cookies to be used on your devices, you are in control. You can set your browser or device settings to block or reject all cookies, to indicate when a cookie is being sent, or to otherwise control which cookies your browser or mobile device accepts through the browser or mobile device settings. Additionally, you can choose to modify your settings and delete cookies that would otherwise be stored on your device. Refer to the instructions provided by your browser or mobile device manufacturer to discover how to control the placement and/or deletion of cookies or other technologies. However, be aware that limiting or disabling the use of cookies and other technologies may affect or negatively impact your ability to perform certain transactions, use certain features, and access certain content on our websites.

ALLDATA Mexico transmits non-personal device and website interaction information about website users to third parties to analyze cross-device interaction and targeted advertising, including on other sites. To do this, ALLDATA Mexico may also use third-party companies to provide advertising services and/or collect certain information when you visit and interact with the websites. These third-party companies may collect and use device and website interaction information (e.g., clickstream information, browser type, date and time, subject of ads clicked or scrolled over) during your visit to the websites and/or other websites to provide advertisements about goods and services that are likely to be of greater interest to you. These third-party companies may use cookies and other technologies to recognize your browser and collect and record information about your web browsing activity, including your activities on the websites. In addition to adjusting your browser or device's cookie settings, you may also opt-out of having third-party service providers use your information or cookies to serve you ads.

Purposes for Managing and Using Your Personal Data

ALLDATA Mexico collects, uses, and manages your personal data to provide the Services that ALLDATA Mexico offers to you. We collect and manage your personal data for various business reasons, including:

• To communicate with you and provide you with our Services and products that you request:
  • Filling orders to ensure correct delivery or provision of Services.
  • Administering your participation in a promotion or sending you discounts you may have earned.
  • Registering you for a specific website, training, or certification program, or providing you with information about such programs or Services.
  • Facilitating your participation in the ALLDATAdiy Affiliate Program.
  • Processing a return.
  • Requesting a demonstration of our products.
  • Registering for a certification test.
  • Responding to a product review.
  • Entering into a contract with you, including processing and fulfilling your ALLDATA orders on our website.
  • Responding to any questions or inquiries you make, including diagnostic and repair questions you ask ALLDATA Tech-Assist.
  • With your permission, for example, when you register for an ALLDATA account and choose to receive special offers, promotions, news, surveys, and correspondence from ALLDATA.
• To facilitate our business and operational objectives:
  • Performing tasks related to the operation of our Services, including our Websites, such as placing advertisements and/or providing personalized content to our users.
  • Maintaining and improving our Services, including the Websites.
  • Detecting security incidents.
  • Improving our Service offerings.
  • Debugging and repairing errors affecting the functionality of our Websites or Services.
  • When collection is necessary to provide our Services:
  • Enabling you to participate in interactive features of our Services, including ALLDATA Tech Assist.
  • Providing customer service to you and our other members, customers, and visitors.
  • Collecting analytics or valuable information to improve and enhance our Services.
  • Monitoring the use of our Services.
  • Detecting, preventing, and addressing technical issues.
• For marketing purposes:
  • Providing you with news (e.g., ALLDATA News), special offers, promotional materials, or marketing information about other goods, services, and events we offer that are similar to those you have already purchased or inquired about or that we believe may be of interest to you, unless you have opted out of receiving such information. If you are an ALLDATA Mexico customer, we will use your information to provide you with email notifications, promotional messages, newsletters, and other information from ALLDATA.
  • Providing you with advertisements or other personalized content on the Websites and email messages we send you in connection with your use of the Websites.
  • We may also use automatically collected information and cookie information to:
    
    • Personalize our Services, such as remembering your information so you do not have to re-enter it during your visit or the next time you visit the Websites.
    • Provide personalized advertising, content, and information from third parties.
    • Monitor and analyze the effectiveness of our marketing activities and those of third parties.
    • Monitor aggregate usage metrics, such as the total number of visitors, pages viewed, etc.
    • Track your entries, submissions, and status in any special offers, promotions, or other activities.
• For security, fraud prevention, and asset protection purposes:
  • Mitigating credit losses.
  • Detecting and preventing fraud and malicious activities on our digital offerings and your accounts.
  • Investigating, protecting, and assisting in prosecuting individuals responsible for malicious, deceptive, fraudulent, or illegal activities involving or affecting ALLDATA and ALLDATA Mexico, our Services, and/or our customers.
  • Facilitating disclosures to tax authorities and other entities to investigate potential criminal activities and other civil infractions.
• Confirming your identity and the veracity of the information provided, including beneficiaries, references, co-debtors, guarantees, or guarantors as applicable.
• Performing feasibility and credit risk analysis; complying with regulations, policies, and security measures.
  

If you do not want your personal data to be processed for these purposes, you may communicate this to us through the following mechanism: written notification in accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties and regulations in force in Mexico. The notification should be sent to Av. Fundadores 1001, Col. Alfareros, Monterrey, N.L., Mexico, C.P. 64753, or by email to datos.personales@autozone.com, Attention: Legal Department. Refusal to use your personal data cannot be a reason for denying you the Services and products you request or contract with ALLDATA Mexico.

Transfer of Personal Data

We inform you that your personal data is shared within and outside the country with the following persons, companies, organizations, or authorities other than us.

• Service Providers: ALLDATA Mexico has external providers and third parties with contractual or commercial relationships to facilitate and help us provide our Services ("Service Providers"). These Service Providers perform activities or functions on our behalf, provide payment processing, and other services or help us analyze how our Services are used. Service Providers have access to your personal data only to perform the previously mentioned activities and are obligated not to disclose or use it for any other purpose or end.
• ALLDATA affiliated entities, subsidiaries, and parent companies: In certain circumstances, ALLDATA Mexico will transfer your data to its affiliated entities, subsidiaries, parent companies, controlled entities, or any other related entity or company within the group (e.g., AutoZone).
• Marketing Associates: In certain cases, we may provide your personal data to our Marketing Associates to help us provide information about our Services to you, including promotions and discounts.
• Customer Relationship Management Repair Contractors: According to the Terms and Conditions of Use of ALLDATA Manage Online, when indicated by a customer of a repair shop, we will disclose personal information to customer relationship management companies advertising the repair shop with which the consumer has interacted.
• Analytics Services: We may use third-party analytics services such as Google Analytics or similar analytics services. To learn how Google Analytics processes and collects your information and how you can opt-out, visit: Google Analytics Opt-Out. You can also opt-out of Google's use of cookies for advertising purposes, including DoubleClick cookies, by visiting the Google Ads Settings page. We recommend that you read the various Google privacy policies available here: Google Privacy Policies.
• By Judicial Resolution or Law Requirement: ALLDATA Mexico is also authorized to transfer your personal data in specific cases as established by law.

If ALLDATA Mexico is required to disclose your personal data by judicial resolution, by law requirement, in the context of legal proceedings, and/or by formal request from a governmental authority, both in Mexico and abroad, ALLDATA Mexico may disclose information about you if ALLDATA Mexico considers that such disclosure is necessary or appropriate for national security reasons, to comply with such requirement or with applicable legislation, or for any other significant reason for public order or in jurisdictions where ALLDATA Mexico operates.

• Miscellaneous: ALLDATA Mexico may also disclose information about you if ALLDATA Mexico determines that such action is reasonably necessary to ensure compliance with its operations and/or its users, shareholders, officers, employees, or legal representatives. Additionally, in the event of a merger, restructuring, bankruptcy, insolvency, or sale, we may transfer all personal data we have collected to the corresponding third party.

How to Exercise ARCO Rights (Access, Rectification, Cancellation, and Opposition)

To exercise your ARCO Rights (Access, Rectification, Cancellation, and Opposition), it is necessary that you consider and understand the following:

• To process any request for access, rectification, cancellation, opposition, or to limit the use/disclosure or to request the revocation of consent for your personal data, you must prepare a written request and send it to Av. Fundadores 1001, Col. Alfareros, Monterrey, N.L., Mexico, C.P. 64753, or by email to datos.personales@autozone.com, Attention: Legal Department. 
• Any request to exercise ARCO Rights, whether physical or electronic, must be accompanied by the following:
  • The name of the Data Subject, address, and/or any other means to communicate the response to your request.
  • Documents proving the identity or, if applicable, the legal representation of the Data Subject.
  • A clear and precise description of the personal data for which you seek to exercise any of the aforementioned rights.
  • Any other element or document that facilitates the location of the Data Subject's data, as well as their RFC and/or CURP to avoid any homonymy.
  • Clearly specify if the request is for access, rectification, cancellation, opposition, limitation of use, disclosure, or revocation of consent.
  • The reason for the request.
  • The required modifications if the request is for the rectification of personal data, and provide the documentation supporting your request.

If the information provided in the ARCO Request is insufficient or erroneous to address it, or if the necessary documents are not attached to process it, ALLDATA Mexico will require the Data Subject or their representative within five business days of receiving the request, to provide the necessary elements or documents to process it. The Data Subject or their representative will have ten business days from the day following the receipt of the requirement to respond.

ALLDATA Mexico will respond to the request with the determination reached within twenty business days from the receipt of the request, or in case additional information or documents have been requested, within twenty business days from the day following the response to the requirement.

If the request is granted, ALLDATA Mexico will make the determination effective within fifteen business days from when the response is communicated to the Data Subject or their representative. In the case of requests concerning the right of access to personal data, delivery of such data will be made upon proof of identity of the Data Subject or their representative.

ALLDATA Mexico may extend the response periods to a request and/or to make the determination effective once for equal periods in each case, provided it considers that the circumstances of the case justify it. In such cases, ALLDATA Mexico will notify the Data Subject or their representative of the circumstances justifying the extension within each original period to respond or make the determination effective.

Responses to requests will be delivered to the Data Subject or their legal representative in simple copies or electronic files, depending on the type and quantity of documents involved in each case.

To revoke consent, the Data Subject must submit their request at the address of ALLDATA Mexico. ALLDATA Mexico will make such a request effective, provided it does not involve personal data necessary for the existence, maintenance, and fulfillment of its legal relationship with the Data Subject.

ALLDATA Mexico may deny access, rectification, cancellation, or opposition to the processing of personal data in the following cases:

• When the applicant is not the Data Subject or the legal representative is not duly accredited.
• When personal data is not found in its database.
• When the rights of a third party are affected.
• When there is a legal impediment or a resolution of a competent authority that restricts access to personal data or prevents its rectification, cancellation, or opposition.
• When rectification, cancellation, or opposition has been previously carried out.

Procedure to Revoke Consent for the Use of Your Personal Data

You can revoke the consent you may have granted for the processing of your personal data. However, it is important to consider that not all cases allow us to process your request or conclude its use immediately, as it is possible that we may require continuing to process your personal data for some legal obligation. Likewise, you should consider that for certain purposes, revoking your consent will mean that we cannot continue providing the service you requested or the conclusion of your relationship with us.

To express your refusal in this regard, you must contact ALLDATA Mexico through the procedure established for exercising ARCO Rights mentioned in the previous section.

Protection and Security Mechanisms

The security of your personal data is important to us; therefore, for information management and security measures, your personal data is processed through secure network systems and can only be accessed by a limited number of persons with special rights who are required to keep such information confidential.

Updates to this Privacy Notice

This Privacy Notice may be modified, changed, or updated due to new legal requirements; our own needs for the products or services we offer; our privacy practices; changes in our business model, or other causes.

Last modification: March 11, 2024