New? Create an account
Enter your registered email address below to receive password reset instructions.
Please check your inbox and follow the password reset instructions.
You can now save favorites
Access favorites on any device
Get price alerts
Last Updated: September 5, 2023
Welcome to www.echopark.com, the website of EchoPark Automotive, Inc., a Delaware corporation, on our own behalf and on behalf of our parent company, Sonic Automotive, Inc. and our respective subsidiaries and affiliates, including our dealerships and vehicle buying centers located throughout the United States (collectively, our “Dealerships,” “we,” “us,” or “our”).
This Policy includes supplemental terms in its final section that apply solely to California residents covered by the California Consumer Privacy Act (“CCPA”).
“Consent” means the voluntary, affirmative approval of, or agreement to, a right, authority, or permission requested by us regarding our collection, use, or processing of information in any form, including by a Customer’s electronic execution of a document, affirmative action signifying agreement (such as a Customer’s clicking on an electronic button or asking us to take his or her picture on vehicle delivery) or physical signature of a document delivered in person.
“Customers” are former, current, or prospective purchasers of one or more vehicles or Dealership Services from us and any other person or business which visits our website or our Dealerships or otherwise undertakes to do business with us in any manner, including business partners, vendors, suppliers, and service providers.
“Customer Data” means a Customer’s personal information that a Customer submits, emails, transmits, or otherwise makes available to us through the use of this website or otherwise from communications or transactions with us; provided that Customer Data does not include any Dealership Data.
“Dealership Data” means all data and information that is created, developed, licensed, stored, or used in or by us or our Dealerships or in any of our products, services, or activities, including information about a Customer we obtain from third party sources.
“Dealership Services” or “Services” mean all products and services other than vehicles that we may offer, sell, lease, or provide at any time, including parts, repair services, maintenance services, customer support services, finance services, leasing services, and other tangible and intangible materials and benefits.
“Vehicle Data” means the digital information collected, stored, or used in a vehicle’s on-board diagnostics or other electronic systems that may include vehicle user names, contact information, phone numbers, emails, texts, GPS location data, vehicle service history, and other information.
"You," “your,” or “user” means any and all of our website visitors and Customers regardless of how such persons may interact, communicate, or do business with us.
Our website describes a wide range of vehicles and Services that we offer, sell, lease, and provide to a broad range of Customers. Our website is for general commercial and informational purposes and is designed to facilitate and enhance communications and transactions with Customers for the purchase of our vehicles and Services. While any person may review the information on our website, it is not intended for communications or transactions with persons below the legal age of contracting (generally age 18).
4.1 Overview. This section explains generally the sources from which, and the means by which, we collect and process personal information and the purposes for which we do so.
4.2 Customer registration. A Customer who subscribes to or accesses any of our newsletters, email reminder services, or other product or Service or who desires to purchase or lease a vehicle from us will need to create an account, complete an online registration form, and indicate the matters of interest to him or her. Your account data may include your name, physical address, phone number, email address, and other information that will enable us to respond efficiently to your request or interest. If you desire more information about our vehicles and Services or desire to schedule a call with one of our representatives, you may do so online as well.
4.4 Other means of collection. We collect personal information by a variety of means and methods, including the following:
5.1 Personal information collected. The personal information we collect varies by user, transaction, and purpose, but our primary purpose is the efficient and satisfactory conduct of our business and for related legal purposes. The types of personal information that we collect do not apply at all times or to all Customers, and most types are based on a Customer’s voluntary submission of data or other voluntary interaction with us or our business partners.
5.2 Exclusions from coverage. The term personal information does not include:
5.3 Sources of collection. We may obtain personal information from the following sources:
5.4 Personal information
6.1 Purposes. We use the personal information that we collect or receive from our Customers for the purposes described in this Policy and for other business purposes allowed by law, including the development, delivery, and performance of our products and services, sharing with our affiliates for related business purposes, and as follows:
6.2 Exercise of legal rights. We may also process your personal information where necessary for the establishment, exercise or defense of tax, audit, or other legal rights or to exercise our rights, duties or obligations under applicable laws.
6.3 Activities with customer consent. When you do business with us, whether online or in person, and Consent to certain actions or activities by us, we will undertake, perform, and process such activities as you authorize. This may include credit checks, loan processing, vehicle warranty applications, license and title registration, and other actions. If you Consent to communications with us by phone calls, text messages and emails, we will communicate with you at the phone number or email address you provide, unless and until you withdraw your Consent in writing. You agree that we may rely upon your Consent for all purposes referenced in the applicable Consent document and this Policy.
7.1 We disclose certain personal information to affiliates, including Sonic Automotive, Inc., and to third parties for purposes related to the conduct of our business. We also share user data with certain data analytics firms who assist in our analysis and improvement of our website and in the generation of Customer leads for our business (e.g., Google Analytics; Twilio Sendgrid, CDK eLead, etc.).
7.2 We disclose your personal information to Dealership and call center personnel and business partners as necessary to process your requests for vehicles and Services. All authorized personnel are subject to duties of confidentiality with regard to such information.
7.3 We may disclose your personal information to our authorized technology subcontractors, vendors, and processors who are subject to confidentiality obligations with regard to the processing of such personal information.
7.4 Financial transactions relating to our vehicles and Services are generally paid by check, ACH transaction, wire transfer, or through payment services providers (e.g., banks, credit card companies, etc.). We share transaction data with our vehicle lenders, lessors, and payment services providers to process payments and refunds and to resolve issues relating to Customer transactions.
7.5 We may also disclose your personal information when necessary for compliance with a legal obligation to which we are subject, in response to law enforcement requests, in order to secure our networks, to avoid fraud or malicious network behavior, to protect your vital interests or the vital interests of another natural person, to establish or defend legal claims, or to comply with applicable laws.
7.6 We may also share your personal information as allowed by applicable law.
8.1 We use a browser feature known as a “Cookie,” web beacons (also known as pixels), and other technologies primarily to collect information from users of our website. A Cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Manage cookies.
8.2 Cookies may be either “persistent” Cookies or “session” Cookies. A persistent Cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date. A session Cookie, on the other hand, will expire at the end of the user session when the web browser is closed.
8.3 Personal information we hold may be linked to the information obtained from Cookies.
8.6 We use Google Analytics, Content Square and Optimizely to analyze the use of our website. These providers gather information about website use by means of Cookies. The information gathered relating to our website is used to create reports about the use of our website.
We implement and maintain administrative, technical, physical, and organizational measures that we believe are appropriate to protect personal information against unlawful or unauthorized access, use, or disclosure.
10.1 Our data retention policies are designed to comply with our legal obligations in relation to the retention and deletion of personal information, whether held by us or by any of our data processors or vendors.
10.2 Personal information that we process will be kept for as long as necessary to fully perform the purpose for which it is collected and for such additional periods of time as we deem necessary or appropriate to the sound operation of our business. Our legal rights, obligations, and interests require that we retain personal information after the completion of specific transactions with our Customers.
10.3 We may retain your personal information for the longer of: (i) the period of your consent to our collection and use of such information; (ii) the period necessary for us to fulfill the purposes of our tax, audit, or other legal rights, duties, and interests with regard to Customer Data; and (iii) such longer period as permitted under applicable laws. Customer Data which has been de-identified, pseudonymized or aggregated is no longer personal information.
10.4 We may retain your personal information for longer periods of time in order to comply with a legal obligation, such as obligations we may have with respect to litigation or arbitration, in order to protect your vital interests or the vital interests of another person, or to meet our tax, audit, or other legal rights, duties, and interests.
The CCPA provides Consumers with certain additional rights and information regarding their personal information. This Supplement provides those disclosures and describes those additional rights and explains how such additional rights may be exercised. Please read this Supplement as an expansion of the terms of the Policy set forth above as to Consumers interacting or doing business with us.
13.1 Definitions. As used in this supplement, the following terms shall mean as follows:
(a) “Consumer(s)” means California resident(s) who are subject to CCPA and are identified or identifiable from or through the use of “personal information” collected or used by us as such term is defined in the CCPA.
(b) “Sell,” “Selling,” “Sale,” or “Sold” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer’s personal information by a business subject to the CCPA to another covered business or to a third party for monetary or other consideration.
(c) “Service Provider” means a for-profit legal entity that processes a Consumer’s personal information on behalf of a CCPA-covered business that has disclosed such information to the recipient for a business purpose pursuant to a written contract that restricts the use of such data by the recipient to providing services to the disclosing business.
13.2 Categories of personal information collected. Listed below are the categories of personal information that we collect and use in our business for commercial purposes. These categories of data do not all apply at all times or as to all Consumers and often our receipt of this data is based on a Consumer’s voluntary submission of it to us for specific purposes or transactions requested by the Consumer:
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, insurance policy number, passport number or other similar identifiers.
B. Commercial information
Records of vehicles or Services purchased, obtained or considered, contractual relationships entered into with vendors, suppliers, Service Providers, or distributors or other purchasing or consumption histories, preferences, or tendencies.
C. Internet or other network activity
Online browsing history, search history or other information relating to a Consumer’s interaction with websites, applications, or advertisements.
D. Geolocation data
Information relating to physical location or movements.
E. Employment-related information.
Current job and salary or other income information for credit and vehicle financing purposes, excluding information about our own employees in their roles as such.
F. Inferences drawn from other personal information
Consumer profile data reflecting a person’s preferences, characteristics or predispositions toward the purchase, sale, lease, or servicing of a vehicle.
13.3 Sale of personal information
(a) Sale of personal information. The CCPA requires that we disclose if we sell the personal information of Consumers to third parties which do not meet the definition of Service Providers under the CCPA. The common understanding of the term “sell” is to transfer property (in this case, personal information) for monetary consideration (i.e., cash), but under the CCPA, the definition of “sell” includes exchanging data for a business benefit other than cash. We do not sell, disclose, or transfer any Consumer’s personal information to a third party which does not meet the definition of Service Providers under the CCPA.
(b) Participation in advertising networks. We do participate in digital advertising activities through third party data analytics providers such as Google Analytics, which provides us with information collected on third-party websites on which we advertise our vehicles, including the identity of users of those websites. Our use of digital advertisers and participants helps us identify persons who are shopping for vehicles and enables us (i) to measure whether and how our ads were delivered to and interacted with by Consumers; (ii) provides us reporting about the effectiveness and performance of our ads; (iii) provides us reporting about users who interacted with our ads; and (iv) informs us about the percentage of our ads that had the opportunity to be seen.
13.4 Disclosures to categories of service providers. We disclose personal information for business purposes to the following categories of Service Providers under restrictive contracts which meet the requirements of the CCPA:
13.5 Consumer data rights
(a) Overview. We extend the following rights to Consumers relating to their personal information that we have collected, used, or hold (collectively, “Data Rights”).
(b) When data rights do not apply. Data Rights are subject to certain exceptions and limitations based on the specific data processing activities involved or other legal constraints like law enforcement and litigation uses. If any of those exceptions or limitations should apply to a Data Rights request, we will explain in our response why (or the extent to which) we are unable to honor a Consumer request.
(c) Data rights described. A Consumer’s rights relating to his or her personal information includes one or more of the following rights if and as applicable to a given request (a “Data Rights Request”). If a Consumer desires to exercise any of these rights, he or she should contact us by using the Data Rights Request Form referenced in Section 13.6 below.
(i) The right to know. A Consumer has a right to request that we disclose certain information to him or her about our collection and use of the Consumer’s personal information over the past 12 months. Upon such a request, after verification of the Consumer’s identity, we will confirm (i) the categories of personal information we have collected about the Consumer, (ii) the categories of sources from which such information was collected, (iii) the business or commercial purpose for our collection, disclosure or use of such data, (iv) the categories of any third parties with which we shared such personal information for a business purpose, and (v) the specific pieces of personal information we have collected about the Consumer.
(ii) The right of deletion. In some circumstances, a Consumer has the right to request that we delete personal information that we have collected from or about the Consumer. Those circumstances include when (i) the personal information is no longer necessary in relation to the purposes for which it was collected or processed; (ii) the Consumer withdraws his or her Consent to any consent-based processing such as marketing; and/or (iii) our continued processing of such data violates this Policy or is otherwise unlawful. However, there are exceptions to the right of deletion, including when our retention and processing of such data is reasonably necessary to (A) complete the transaction for which such data was collected, to fulfill the terms of a written warranty or product recall or otherwise perform our contract with the Consumer, (B) provide a product or service requested by the Consumer or take actions reasonably anticipated within the context of our ongoing business relationship, (C) detect security incidents or protect against deceptive, fraudulent or unlawful activity, (D) for internal use reasonably aligned with the Consumer’s expectations under this Policy or applicable law, and/or (E) compliance with a legal obligation.
(iii) The right to data portability. In certain circumstances under the Right to Know, a Consumer has the right to access the specific pieces of his or her personal information that we collected from such Consumer, by mail or electronically, and if provided electronically, in a portable, readily useable format to the extent technically feasible. However, this right does not apply where it is outweighed by other lawful needs or when the attempted return of it would adversely affect the rights or interests of others, such as when the personal information cannot be segregated from other protected data.
(iv) Right to opt-out of the sale of personal information. If and to the extent we are deemed to Sell a Consumer’s personal information to a third party, the Consumer has the right to direct us to stop Selling the Consumer’s personal information to such third parties (the “Right to Opt-Out”). To exercise the Right to Opt-Out, the Consumer may submit a Data Rights Request Form to us invoking such right. The Consumer does not need to create an account with us to exercise his or her Right to Opt-Out. We will only use personal information provided in an opt-out request to review and comply with the requesting Consumer’s request. A Consumer’s exercise of the Right to Opt-Out will only apply to our disclosures to third parties which are not Service Providers and will not affect our own communications and transactions with our Customers or communications by our business partners with our Customers in connection with our own business activities.
13.6 Exercising data rights
To exercise any Data Rights, please complete and submit the Data Rights Request Form at the bottom of this page or by:
Any data rights request must:
Consumers do not need to create an account with us to submit a Data Rights Request, but we do consider requests made through a password protected account sufficiently verified when the request relates to personal information associated with that account. We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.
We will promptly confirm receipt of any such request (generally within ten 10 days) and endeavor to substantively respond to it after verification within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically or as otherwise agreed.
Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. We do not charge a fee to process or respond to verifiable Data Rights Requests unless excessive, repetitive, or manifestly unfounded.
13.7 Right to non-discrimination
Consumers have the right to be free of discrimination relating to their exercise of any Data Rights. We do not discriminate against Consumers for exercising any of their Data Rights. This means that the exercise of Data Rights will not result in our:
13.8 Other California privacy rights
California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our website who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes in the past year, including the categories of personal information disclosed and the identity of such third parties. To make such a request, please send an email or write to us at the address set forth in Section 12 above (“Our Contact Information”).