Please be aware that, unless prohibited by law, your use and continued use of this website signifies your express consent that information may be transferred to or stored on servers and processed outside the country of your residence. Please also be aware that the privacy laws of the United States, or other countries where information may be stored, may not be as comprehensive or offer as much protection as the laws of other countries.
What personal data is collected by GST?
We collect the following categories of personal data:
How does GST use personal data?
We use the information we collect to understand your needs, provide you with a better service, and in particular, for the following purposes:
When you purchase or lease a new Toyota vehicle from a Toyota dealership within the GST Region, GST receives the following personal data if available:
Vehicle make and model
Vehicle Identification Number (“VIN”)
When you service your Toyota vehicle at a Toyota dealer within the GST region, GST receives the following personal data if available:
Vehicle make and model
Vehicle Identification Number (“VIN”)
Date of vehicle service
GST does not collect any categories of personal information beyond the categories of personal information outlined in section above, and not for the purposes other than outlined above. If GST plans to collect and use personal information for any purposes beyond the ones outlined in this Policy, additional consent will be obtained prior to use.
How does GST share personal data with third parties?
We may disclose the information we collect from and about you to third parties only in certain circumstances:
1. Legal reasons
We will share personal information with companies, organizations or individuals outside our organization if we have a good faith belief that access, use, preservation or disclosure of the information is necessary:
• to identify, contact or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, customers or other users of our website, or anyone else who could be harmed by such activities;
• to respond to judicial process and provide information to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law, or otherwise as required by law, or
• to transfer your information as a business asset in the event we or our related entities sell or buy other businesses or entities, or we or substantially all of our assets are acquired.
2. Administrative, technical or marketing purposes
We will share information with third parties, business partners or related entities, subject to confidentiality agreements as appropriate, for research and analytical purposes; for administrative or technical support or other business purposes, or to analyze our data or to maintain and improve our services or your user experience. We may also share aggregated information about our customers with our advertisers and our marketing partners. We may share website usage information about visitors to our website with third party advertising companies.
We also share personal data with third parties, other than those described above, when we have your consent to do so.
What personal data rights do California residents have?
Subject to certain limitations and exceptions, California residents have a number of legal rights in relation to the processing of personal data, including:
You will not receive discriminatory treatment by GST for exercising the above individual rights. Prohibited discriminatory treatment includes denying goods or services, charging different prices or rates for goods or services (including discounts or other benefits or imposing penalties), providing a different level or quality of goods or services to you, or even suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
How can California residents exercise these rights?
To exercise access and deletion rights as a California resident, please click here or call us at 1-888-891-6989. You will be asked for personal information such as name, phone number and/or email address to verify your identity, as well as the type of right you want to exercise, such as access, or deletion.
For access requests we must first verify your identity by using identifiers. Verification identifier may include but are not limited to: Name, Address, Email, Phone Number and Vehicle Identification Number (VIN). Once we verify your identity, we will search for personal data collected and provide you a report with
- list of categories of personal data we collected
- sources we collected from
- purposes of collecting
- categories of third parties with whom we share data
For deletion requests, once we verify your identity, we will confirm receipt of the deletion requests and provide an estimated timeline for deletion completion unless the processing of your personal information falls under a regulatory exception to deletion in which case we will notify you of such exception. For deletion requests initiated through our web form, an additional confirmation question will be asked to confirm that you want to delete your data.
We are concerned with the security of your personal information and try to provide secure transmission of your information from your web browser to our servers. Unfortunately, no data transmission over the Internet can be guaranteed to be absolutely secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information transmitted over the Internet. Once we receive your information, we take steps that we believe are reasonably appropriate to protect its security, both internally and externally, from loss, misuse, unauthorized access, disclosure, alteration or destruction, and to ensure the integrity of the data we collect. We use a combination of technological, physical and administrative procedures we deem appropriate to protect this data.
If you have a username and password for any of the features on our website, you have the responsibility of keeping your password secret. You should not reveal your password to anyone. We will not ask you in an unsolicited telephone call or email for your password. In addition, you should take reasonable precautions when using a computer that is not your own or in a public setting.
Cookies and other tracking technology
We use certain tracking technologies to improve the functionality of the website and your experience when you access it. To view the notice, click on the Cookie Consent Options link below. We also keep a record of third party websites accessed when you are on our website and click on a hyperlink. However, we do not track users to subsequent sites and do not serve targeted advertising to them. We may also use pixel tags (also known as “clear gifs”, “web beacons” or “1x1 gifs”) on our website and Toyota.com. A pixel tag is a type of technology placed either on a website or in the body of an email for the purpose of tracking activity on websites, or when emails are opened or accessed. Pixel tags may be used in combination with cookies. We also use Google Analytics to track how often people gain access to or read our content. We use this information in the aggregate to understand what content our site visitors find useful or interesting, so we can produce the most valuable content to meet their needs.
This website is not directed to, and we do not knowingly solicit personal information from children under the age of 13. We recommend that parents actively participate in their children’s use of the Internet. If you are under the age of 13, please do not submit your email address or any other personal information to us through this website.
Questions or concerns
Last update date