Cars.com Privacy Notice

California Notice at Collection

Please click the sections below to learn more about how we process personal data. California residents may also view the California section of the Supplemental Privacy Notice for information specific to California residents.

• Personal information we collect
• How we use personal information
• How we disclose personal information
• How long we retain personal information
• How we protect personal information

Introduction and scope

Cars.com, Inc. (collectively with its in‑scope affiliates, “Cars.com,” “we,” “us,” or “our”) respects your privacy and is committed to being transparent about how we handle your personal information. This Privacy Notice describes our practices for the websites and mobile applications that link to it (the “Sites”), the services we offer through or in connection with the Sites (the “Services”), and our offline data processing activities.

This Privacy Notice applies to the following entities when they process personal information in connection with the Services: Cars.com, Inc.; AccuTrade, LLC; Dealer Inspire, Inc.; DealerRater.com, LLC; and CreditIQ, LLC. The Services include an online automotive marketplace for shoppers (“Consumer Marketplace Services”) and advertising, analytics, and consumer lead solutions for dealers and original equipment manufacturers (“OEMs”) (“Dealer Commerce and Advertising Services”). This Privacy Notice does not cover job applicants.

By using the Sites and the Services, you acknowledge that you have read and agree to this Privacy Notice and expressly consent to Cars.com’s data processing as described below including its information collection. You further acknowledge and consent to the use of cookies, pixels, software development kits (“SDKs”), JavaScript tags, clear gifs, and similar tracking technologies by Cars.com and third parties on the Sites, as described in this Privacy Notice and in our Cookie Policy, including the collection of your browsing activity, device information, IP address, and interactions with content and advertisements through such technologies. You additionally agree that you are subject to the Terms and Conditions of Use.

1. Information we collect

Categories and examples

We collect the following categories of personal information. Examples are illustrative and may vary by product, feature, or user choices.

Notes: (i) While OEMs can target audience segments on our platform, we do not disclose SPI to OEMs or other advertisers. (ii) We do not sell/share personal information of consumers we know are under 16.

Sources of information

• Directly from you when you create an account, submit a lead, save searches or preferences, contact support, post reviews, or otherwise use the Services.
• Automatically from your browser, device, and applications through cookies, pixels (also known as web beacons, clear gifs, or tracking pixels), software development kits (SDKs), JavaScript tags, and similar automated tracking technologies when you interact with the Sites and Services. These technologies are deployed by both Cars.com (first-party) and by third parties, including advertising networks, analytics providers, social media platforms, and identity resolution partners. For more detail about the specific cookies and pixels deployed on our Sites and their purposes, please review our Cookie Policy.
• From third parties, including data management and enrichment providers; advertising and analytics partners; social media platforms; dealers and OEMs (e.g., campaign performance, not SPI); and publicly available sources. In some cases we append (“enrich”) profile data using identity resolution and data‑matching partners. We may also receive limited dealer‑provided outcomes about campaigns (e.g., lead disposition or sales attribution) to improve reporting and fraud prevention.

2. How we use information

We use personal information for the following purposes:

• Operations and service delivery: provide, operate, and support the Sites and Services; fulfill your requests and leads; provide pricing tools, reviews, and financing resources; and, where permitted, combine online and limited offline information (e.g., recorded support or dealer calls) to support core features.
• Account and communications: send account notices, safety or security alerts, and service updates; respond to inquiries; conduct surveys and service feedback; and send marketing communications where permitted.
• Personalization and targeted advertising: personalize your experience with our Sites and Services; build and manage audience segments using data collected through cookies, pixels, and similar tracking technologies; deliver targeted advertisements to you on our Sites and on third-party websites and platforms; perform retargeting and suppression (e.g., after purchase or inquiry); apply frequency capping; and conduct cross-device matching and lookalike audience creation, consistent with your choices and applicable law. Third-party advertising partners, including ad networks, demand-side platforms, and social media platforms, may use cookies and pixels on our Sites to collect information about your browsing activity for these purposes.
• Measurement, analytics, and attribution: measure and report on product and advertising performance, including through the use of performance cookies, analytics pixels, and similar technologies such as Google Analytics; perform identity resolution and data enrichment to enhance profiles; track ad impressions, clicks, and conversions across our Sites and third-party properties; and operate internal dashboards for performance and fraud monitoring.
• Product and feature development: research, design, test, and improve features, algorithms, and user experience; debug and monitor Site reliability and quality.
• Security, integrity, and fraud prevention: detect, prevent, and investigate fraud, abuse, and violations of terms; protect against bot activity and threats; ensure platform reliability; and conduct quality assurance, including review of call quality for dispute resolution and safety.
• Business operations and partner reporting: manage relationships with affiliates, dealers, OEMs, lending and integration partners; perform financial reconciliation and auditing; and provide aggregated or deidentified insights to partners where permitted by law.
• Preferences and privacy choices: record and honor your choices (including Global Privacy Control signals and accountlevel optouts) and manage verification and appeals workflows.
• Legal, compliance, and corporate governance: comply with law and legal process; respond to lawful requests; enforce our agreements and terms; and support corporate transactions and governance.

3. How we disclose information

We disclose personal information to the following recipient categories for the purposes described above.

• Affiliates and subsidiaries: within our corporate family for centralized operations (e.g., consolidated reporting, security administration, product engineering support, internal audit, and corporate governance) and as otherwise consistent with this Notice.
• Service providers: vendors performing services for us under contracts that restrict their use of personal information, including cloud hosting and infrastructure; product development and quality assurance; customer support tools and contact center services; security monitoring and incident response; payment processing and billing; analytics and attribution; call routing/recording and transcription; email/SMS delivery; prize fulfillment and sweepstakes administration.
• Data management and enrichment providers: identity resolution, data matching, hygiene, enrichment, audience segmentation; enriched attributes are returned to Cars.com for our advertising, analytics, and personalization uses.
• Advertising partners and platforms: to deliver, personalize, and measure ads on our Sites and third‑party properties, including through the use of cookies, pixels, and similar tracking technologies that these partners deploy on our Sites. Our advertising partners include, but are not limited to, advertising networks, demand-side platforms, real-time bidding exchanges, social media advertising platforms (such as Facebook/Meta, TikTok, Snapchat, and LinkedIn), retargeting platforms, and identity resolution providers. These partners may collect information about your browsing activity on our Sites and across other websites over time for purposes of targeted advertising.
• Dealers and dealer groups: to fulfill leads or requests you initiate and for performance reporting and analytics.
• OEMs: to enable campaign delivery to audience segments that run on the Cars.com platform.
• Legal, safety, and corporate transactions: to comply with subpoenas, court orders, and other lawful requests; enforce terms and investigate violations; protect the rights, property, and safety of Cars.com, users, dealers, and the public; and in connection with due diligence and completion of mergers, acquisitions, financings, or asset transfers.

We may also disclose information with your consent or at your direction. “At your direction” includes sharing a lead you submit with a specific dealer or OEM to fulfill your request. When we engage vendors, we require contracts that restrict use of personal information to our documented instructions and prohibit sale, sharing, or targeted advertising by those vendors.

4. Targeted advertising, sale, and sharing

Definitions

• “Sale” of personal information: disclosing personal information to a third party for monetary or other valuable consideration.
• “Share” of personal information: disclosing personal information to a third party for cross‑context behavioral advertising or, more simply, “targeted advertising.”
• “Targeted advertising”: displaying ads to you based on your activities across non‑affiliated websites, applications, or services, over time and across devices.

Targeted Advertising, sale, and sharing practices

Cars.com sells and shares personal information and processes personal information for targeted advertising. This includes disclosures to enrichment/identity providers and advertising partners, as described above. Certain cookies, pixels, and similar tracking technologies deployed on our Sites by third-party advertising partners may constitute a “sale” or “sharing” of personal information under data privacy laws, because they enable those third parties to collect identifiers, browsing activity, and device information from our Sites for targeted advertising purposes. We do not sell or share personal information of consumers we know are under 16.

Depending on where you live, you may have the right to opt out of your personal information being used for these purposes. Please visit the U.S. State Privacy Rights, California Privacy Rights, and International Residents Supplement for additional information.

5. How to exercise your choices

• Webform: visit My Privacy Choices to submit optout requests (sale/sharing/targeted advertising) and manage other privacy preferences which may be available to you, depending where you reside.
• Global Privacy Control (GPC): if you enable a browser‑ or device‑level GPC signal, we will recognize it as a valid request to opt out of sale/sharing/targeted advertising in applicable jurisdictions. We apply GPC at the browser/device level; if you are logged in, we will also attempt to associate your opt‑out with your account so it can persist across sessions and, where feasible, across browsers/devices. Please note that we do not respond to Do Not Track signals.
• Cookie/Preference tools: you can adjust cookie and tracking preferences via Cookie Preference Center and through your browser/device settings. You may disable or delete individual cookies through your browser settings; however, disabling certain cookies may affect the functionality of the Sites. For information about the specific cookies and pixels in use and their purposes, please review our Cookie Policy.
• Opt out of promotional messages: To opt out of promotional emails, you may follow “unsubscribe” instructions in the email message to opt out of receiving future marketing messages. To opt out of promotional text messages, you may reply to our message with “STOP” to opt out of future text messages. Reply “HELP” for assistance. Even if you opt-out of receiving marketing messages, we will still send you transactional messages, such as responses to your questions.
• Location sharing: control location permissions via your browser or device OS settings; disabling location may limit certain features (e.g., nearby search).
• Google Analytics: We use Google Analytics to better understand how our users interact with our Sites and we may use Google Analytics Advertising Features for advertising and marketing purposes. You can learn about Google Analytics’ currently available opt-outs at https://tools.google.com/dlpage/gaoptout/ and manage the information collected through Google Analytics Advertising Features through the settings on the relevant browser or device being used.

6. Sensitive Personal Information (SPI)

As described in Section 1, we collect certain personal information that may be considered “sensitive” under applicable privacy laws. This includes account credentials; precise geolocation when enabled; government IDs and financial account details within CreditIQ prequalification flows; and data revealing race, ethnic origin, citizenship status, or immigration status.

We generally use SPI for essential purposes, such as account security/authentication, fraud prevention, and credit prequalification processes performed in lender contexts. However, we use certain Sensitive Personal Information for advertising, analytics, and personalization purposes consistent with this Notice and applicable law. We do not disclose SPI to third parties.

7. Cookies, pixels, and other tracking technologies

We and our partners use cookies, pixels (also known as web beacons, clear gifs, or tracking pixels), software development kits (SDKs), JavaScript tags, and similar automated data collection technologies to operate the Sites, provide features, perform analytics, detect fraud, resolve identity, enrich data, personalize content and ads, and measure performance. Our Sites utilize these tracking technologies as signaling tools that may capture addressing and routing information from your device to facilitate communication with third-party service providers, including advertising platforms such as Meta, Google, and similar partners. Third parties, including advertising networks, analytics services, social media platforms, and identity resolution providers, also place these tools on our Sites to collect and process information about you, including information about your activity on other websites and online services. These technologies collect information that may include personal information, such as your IP address, browser and device type, unique device and cookie identifiers, pages viewed, links clicked, advertisements you interact with, date and time information, approximate location, and browsing history.

The types of cookies and similar technologies used on our Sites include:

• Strictly necessary cookies: These cookies are required for the operation of our Sites and Services. They enable core functionality such as user authentication, security, load balancing, fraud prevention (including bot detection services from providers such as Akamai and Cloudflare), and consent management (via OneTrust). These cookies cannot be disabled without impairing the Sites.
• Functional cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences, supporting affiliate programs (e.g., Impact Radius), determining your location for localized features, and enabling embedded content from third-party platforms (e.g., Brightcove for video hosting, Google AMP). If you do not allow these cookies, some features may not function properly.
• Performance and analytics cookies and pixels: These technologies allow us to count visits, measure traffic sources, and understand how visitors navigate our Sites so we can improve performance. They include first-party and third-party tools such as Google Analytics, Qualtrics, and Microsoft Bing UET. These tools assign unique identifiers to your browser and collect information such as pages visited, session duration, and interactions with content. All information collected by performance cookies may be aggregated, but certain tools may also collect personal information such as your IP address.
• Targeting, advertising, and identity cookies and pixels: These cookies and pixels may be set on our Sites by Cars.com and by our third-party advertising partners. They are used to build a profile of your interests, deliver relevant advertisements to you on our Sites and across other websites, facilitate real-time bidding and programmatic advertising, perform retargeting and audience segmentation, conduct cross-device tracking and matching, and measure the effectiveness of advertising campaigns. Third-party advertising partners that deploy targeting cookies and pixels on our Sites include, but are not limited to, acting as our service providers and contractors, build audiences for advertising purposes, including measuring ad performance, impressions, clicks, and conversions advertising exchanges and demand-side platforms, social media platforms (such as Meta, TikTok, Snapchat, and LinkedIn), retargeting and personalization platforms, identity resolution and data matching providers, cross-device tracking providers, and video and content tracking providers. When you interact with our forms, technology provided by our advertising partners may capture hashed identifiers (such as email addresses, phone numbers, and names) to associate your visit with your social media profile or advertising account, including through automated advanced matching features. These partners receive such data as our authorized vendors to support the advertising and measurement purposes described in this Notice.

For a comprehensive list of the specific cookies and pixels deployed on our Sites, including their names, purposes, first- or third-party status, and expiration periods, please review our Cookie Policy. You may also manage your cookie and tracking preferences through the Cookie Preference Center on our Sites.

8. Call recordings and offline collection

When you call Cars.com support, or when dealers contact Cars.com support, Cars.com or its service providers may record the call date, time, duration, originating number, and the content of the call. We collect and process call recordings to support quality assurance, training, metrics/analytics (e.g., call volumes), fraud prevention, security, and dispute resolution. Where required by law, we provide call‑recording notices and obtain consent. We do not use call recordings for our own marketing or profiling, and we do not sell or share call recordings for targeted advertising. We disclose call recordings to service providers that support these limited purposes under appropriate contracts, to the relevant dealership (as applicable), and as required by law.

9. Data retention

We retain personal information for as long as needed to provide the Services, for the purposes outlined in this Notice, to comply with legal obligations, resolve disputes, enforce agreements, and protect our rights and users. Retention varies by category and context; we apply documented criteria such as business need, sensitivity, user expectations, legal/regulatory requirements, and technical constraints. When we no longer need personal information, we will delete, de‑identify, or aggregate it consistent with applicable law. When we de‑identify information, we commit to maintain it in de‑identified form and not to attempt to reidentify it except to test and validate our de‑identification processes.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit, and monitoring. Please note, however, that no system can be guaranteed to be 100% secure.

11. Additional Services

• Listing Services: Cars.com offers you the ability to either receive an Instant Offer for your vehicle, or privately list and sell your vehicle (“Listing Services”). You acknowledge that any information you choose to include in the Listing Services may be made publicly available via the Site and other media in which Cars.com vehicle listings are published, including third-party websites and print publications. You are required to create an account in order to use the Listing Services.
• Review Platforms and Message Boards: Cars.com also may offer review posting platforms, message boards, , comments areas or other forums (“Forums”) on the Site for use by visitors who are 18 years of age or older. Any information you disclose when posting a message in these Forums may become public. You should not include any information in your posting that you do not want other parties to see or use. Moreover, if you post any messages in the Forums that include your email address or phone number you may receive unsolicited emails or calls from third parties.
• Email a Page: The Site offers you the ability to email certain pages of the Site to a friend or other third party. If you choose to use the “Email a Page” functionality, your name, email address and any message you are allowed to include will be visible to the recipient of the email. The “Email a Page” functionality is for informational purposes only and may not be used for any unlawful purpose. Information collected through the “Email a Page” functionality shall be used in accordance with this Privacy Notice.

12. Children’s privacy

Our Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it. We do not sell or share personal information of consumers we know are under 16. We apply audience‑based ad‑tech controls intended to avoid targeting known minors and will honor applicable platform‑level minor protections where available.

13. External links and user forums

The Sites may link to third‑party websites or services, and their privacy practices are governed by their own policies. We are not responsible for the websites, content, or privacy practices of any third party. Public forums and review platforms on our Sites may display information that you post publicly, so please avoid sharing information you would not want others to view.

14. Changes to this Privacy Notice

We will update this Privacy Notice from time to time. If we make material changes, we will post the updated Notice and adjust the “Last Updated” date. Your continued use of the Sites after changes indicates acceptance of the updated Notice.

15. How to contact us

• Email: [email protected]
• Phone (toll‑free): 877-807-2679
• Mailing address:

  Cars.com, Inc.

  300 S. Riverside Plaza, Suite 1100

  Chicago, IL 60606

U.S. State Privacy Rights

Supplemental Notice for U.S. State Residents

If you reside in one of the following states, this section applies to you and supplements the information above: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia. To exercise any of the rights described below consistent with applicable law, please follow the instructions in the “Exercising Your Rights” subsection.

To comply with your request, we may ask that you verify your identity for security purposes before we take further action. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

1. Your Rights Under Applicable State Law

Most residents covered by this section share the following core rights. State-specific variations and additional rights are described in the callouts below.

• Right to Access and Data Portability: You have the right to confirm whether Cars.com is processing your personal information and to access that personal information. You may obtain a copy of the information in a portable and readily usable format, to the extent technically feasible.
• Right to Correct: You have the right to correct inaccuracies in your personal information, taking into account the nature of, and purposes for, processing the personal information.

Note: Utah and Iowa residents do not have a statutory right to correct (only to delete).

• Right to Delete: You have the right to delete your personal information that Cars.com has collected from you and retained, subject to certain exceptions.

Right to Opt Out: You have the right to opt out of your personal information being processed:

• For targeted advertising;
• For the sale of personal information; or
• For profiling to make automated decisions that produce legal or similarly significant effects (this right applies in most states but not Utah or Iowa).

We sell and process for targeted advertising the following categories of personal information: identifiers and contact information, personal records, personal characteristics or traits, commercial information, internet and other electronic network usage information (including browsing activity, ad interactions, and device information collected through cookies, pixels, and similar tracking technologies), geolocation information, audiovisual and similar information, and inferences based on this information. To opt out of your personal information being used for these purposes, click My Privacy Choices in the footer of our Sites, use a Global Privacy Signal, or email [email protected]. You may also manage your cookie preferences through the Cookie Preference Center on our Sites.

Please note that Cars.com engages in profiling by using its CarsonAI chatbot to create consumer profiles based on user-provided information and search interactions; however, we do not engage in profiling to make automated decisions that produce legal or similarly significant effects.

• Right to Appeal: You may appeal Cars.com’s refusal to take action on your consumer rights request within a reasonable time after you received Cars.com’s decision. We will respond within the timeframe required under applicable law, generally 45 or 60 days of receipt of your appeal. You may contact the state Attorney General if you have concerns about the result of the appeal.
• Right to Consent to Processing of Sensitive Personal Information: Several states grant residents the right to consent to—or to limit—the processing of Sensitive Personal Information. As noted in Section 1 of the Privacy Notice, we process the following categories of personal information that may be “Sensitive Personal Information” under various privacy laws, including: account credentials; SSN; financial account numbers; precise geolocation (when enabled); and data revealing race, ethnic origin, or citizenship. You may withdraw your consent to the processing of this data at any time.

2. State-Specific Callouts

3. How to Exercise Your Rights

To exercise the rights described in this section, please submit a verifiable consumer request by:

• Email: [email protected]
• Phone (toll‑free): 877-807-2679
• Mailing address:

  Cars.com, Inc.

  300 S. Riverside Plaza, Suite 1100

  Chicago, IL 60606

4. Verifiable Consumer Requests

Your verifiable consumer request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected information, and describe your request in sufficient detail that allows us to properly respond to it. We cannot respond to your request if we cannot verify your identity.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. To designate an authorized agent, please contact us via the methods noted above.

Residents of California, Iowa, Kentucky, Minnesota, Nebraska, Oklahoma, Tennessee, Texas, and Virginia may make a verifiable consumer request twice within a 12-month period, free of charge, unless the request is excessive, repetitive, or manifestly unfounded.

Residents of Colorado, Connecticut, Delaware, Indiana, Maryland, Montana, New Hampshire, New Jersey, Oregon, Rhode Island, and Utah may make one verifiable consumer request per 12-month period free of charge; subsequent requests may warrant a fee.

5. Cars.com Responses

• Response Time: We will respond to verifiable consumer requests within the time allotted under applicable law, generally forty-five (45) days of its receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing.
• Response Content: Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another without hindrance.
• Method of Response: You do not need to create an account with us to make a verifiable consumer request. However, if you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

California Privacy Rights

Supplemental Notice for California Residents

This section supplements the information contained in the Privacy Notice above and applies solely to individuals who reside in the State of California. We have adopted this notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), and any terms defined in the CCPA have the same meaning when used in this section.

1. Personal Information We Collect and Disclose

The following table identifies the categories of personal information we have collected from California consumers during the preceding 12 months, whether we have disclosed that information for a business purpose, and the business purposes for which it was collected:

2. Sources of Personal Information

We collect personal information from the following categories of sources:

• Directly from you, such as when you use our Sites and Services, create an account, or submit a lead.
• Automatically, through your use of our Sites and Services, such as through cookies, pixels (web beacons, clear gifs, tracking pixels), SDKs, JavaScript tags, and similar automated data collection technologies deployed by Cars.com and by third parties, including advertising networks, analytics providers, social media platforms, identity resolution providers, and real-time bidding exchanges, as described further in Section 7 (Cookies, Pixels, and Other Tracking Technologies) and in our Cookie Policy.
• From third-parties, such as data management and enrichment providers, dealerships, social media platforms and advertising networks.
• From publicly available sources, such as public records and other publicly accessible databases.

3. Disclosure of Personal Information

For more information about the information we disclose for a business purpose, please read the Privacy Notice. In the preceding 12 months, we have disclosed the following categories of personal information for a business purpose:

• Category A: Identifiers.
• Category B: California Customer Records personal information categories.
• Category D: Commercial information.
• Category F: Internet or other similar network activity.
• Category G: Geolocation data.
• Category I: Professional or employment related evaluations.
• Category K: Inferences drawn from other personal information.
• Category L: Sensitive Information

4. Sale and Sharing of Personal Information

We sell personal information to, and share it for cross-context behavioral advertising with, the following categories of third parties: data enrichment and data management providers, dealerships, OEMs, and at your discretion.

During the preceding 12 months, we have both sold and shared the following categories of personal information:

• Category A: Identifiers
• Category B: California Customer Records personal information categories
• Category D: Commercial information
• Category F: Internet or other similar network activity
• Category G: Geolocation data
• Category K: Inferences drawn from other personal information

5. Your California Privacy Rights

The CCPA provides California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

1. Right to Access, Use Limitation, and Data Portability

   You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Specifically, you may request that we:

   • Disclose to you the categories of personal information we collected about you;
   • Disclose to you the categories of sources for the personal information we collected about you;
   • Disclose to you our business or commercial purpose for collecting or selling that personal information;
   • Disclose to you the categories of third parties with whom we share that personal information;
   • Disclose to you the specific pieces of personal information we collected about you (data portability request);
   • Disclose to you if we sold, shared, or otherwise disclosed your personal information for a business purpose;
   • Disclose to you if we used automated decision-making technology to evaluate or create a profile of you and provide information about the logic involved; and
   • Limit the use and disclosure of your “Sensitive Personal Information.”
2. Right to Correct

   You have the right to request that we correct any inaccurate personal information we hold about you. Upon receipt and verification of your request, we will use commercially reasonable efforts to correct your personal information as directed by you, pursuant to applicable law.

3. Right to Delete

   You have the right to request that we delete your personal information that we have collected from you and retained, subject to certain exceptions.

4. Right to Appeal

   You may appeal Cars.com’s refusal to take action on your consumer rights request within a reasonable time after you received Cars.com’s decision. We will endeavor to notify you within 45 days of receipt of your appeal (and we will notify you if Cars.com requires an additional 60 days) what action Cars.com has taken in our written response. You may contact the state Attorney General if you have concerns about the result of the appeal.

5. Right to Opt Out

   As noted in Section 4 above, we sell and “share” (i.e., process for targeted advertising) personal information. You may opt out of the “sale” or “sharing” of your personal information by visiting “ My Privacy Choices” or emailing [email protected]. You may also utilize a Global Privacy Signal, which permits you to opt out of your information being used for sales and targeted advertising.

6. Right to Limit the Processing of Sensitive Personal Information

   We process certain categories of Sensitive Personal Information, including account login credentials, Social Security numbers and government-issued identifiers (within CreditIQ flows), financial account information, precise geolocation (when you enable location services), and data that may reveal racial or ethnic origin, citizenship status, or immigration statuts (received through third-party enrichment providers). Under California law, you have the right to direct us to limit our use and disclosure of your sensitive personal information to only what is reasonably necessary to perform the services or provide the goods you request. To exercise this right, visit My Privacy Choices or contact us using the methods described in this Notice.

7. Right to Non-Discrimination and Financial Incentives

   We will not discriminate against you for exercising any of your rights. However, we may offer you certain financial incentives permitted by California law that can result in different prices, rates, or quality levels. Any permissible financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

6. California Do Not Track Disclosure

Do Not Track (“DNT”) is a privacy preference that you can set in your web browsers, which allows you to opt out of tracking by websites and online services. We do not currently recognize or respond to DNT signals. For more information about DNT, please see https://www.eff.org/issues/do-not-track.

7. California Shine the Light

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Service who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to [email protected].

8. Exercising Your California Rights

To exercise the rights described above, please submit a verifiable consumer request by:

• Phone: 877-807-2679
• Email: [email protected]

California residents may make a verifiable consumer request twice within a 12-month period, free of charge, unless the request is excessive, repetitive, or manifestly unfounded.

If you are a California resident and wish to designate an authorized agent to make a request on your behalf, the authorized agent must be a natural person or a business entity registered with the Secretary of State of California, and you must sign a written declaration authorizing the agent to act on your behalf. Please mail a copy of your signed written declaration authorizing the authorized agent to act on your behalf to the address above. If you provide an authorized agent with power of attorney pursuant to California Probate Code sections 4121 to 4130, it may not be necessary to perform these steps.

International Residents

Supplemental Notice for International Residents

This section supplements the information contained in the Privacy Notice above and applies solely to individuals who reside outside the U.S.

Canada

If you are a Canadian resident, federal and provincial law may provide you with additional rights and information regarding our use of your personal information.

1. Transferring Personal Information

   We may process, store, and transfer your personal information in and to a foreign country, such as the United States, which has different privacy laws that may or may not be as comprehensive as Canadian law. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of that country may be able to obtain access to your personal information through the laws of the foreign country. We may use service providers in other jurisdictions as described in this Privacy Notice. By submitting your personal information or engaging with the Site and/or Services, you consent to this transfer, storage, and/or processing.

2. Accessing and Correcting Personal Information

   It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes. By law you have the right to request access to and to correct the personal information that we hold about you. You also have the right to request that we provide you with a copy of your personal information in a structured and commonly used format.

   If you want to review, verify, or correct your personal information you may also send us an email at [email protected]. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

   We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal information that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you.

3. Withdrawing Consent

   Where you have provided your consent to the collection, use, and transfer of your personal information, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us at [email protected]. Please note that if you withdraw your consent, we may not be able to provide you with a particular product or service.

Other International Residents

This Site and Services are intended for use solely in the United States (including its territories and commonwealths) and Canada by U.S. and Canadian residents. We make no claims that the Site and Services are appropriate for use outside of the United States or Canada. Cars.com does not knowingly collect or solicit personal information from residents of the European Union, United Kingdom, Switzerland, or any other jurisdiction other than the U.S. and Canada. If you believe that we may have any personal information from or about a non-U.S. or Canada resident, please email us at [email protected].