Effective Date: October 1, 2026
1. Introduction
We respect your privacy. This Privacy Policy describes how we collect, use, disclose, and retain personal information when you visit www.zavir.us, create or use an account or customer portal, configure a vehicle, submit an inquiry or reservation, place an order, make a payment, or otherwise interact with our United States website and related online services (collectively, the "Service"). This Privacy Policy applies to United States consumers and does not cover vehicle-generated or telematics data unless the Service expressly states otherwise at the point of collection.
2. Information We Collect
Information You Provide to Us
Identifiers and Account Information: Name, postal address, email address, phone number, company information, account credentials, customer or account number, and other information you provide when you create or use an account, customer portal, or contact form.
Communications and Preferences: Information you provide when you contact us, including customer service inquiries, marketing preferences, survey responses, and records of communications with us.
Professional and Commercial Information: Job title, employer, company size, industry, vehicle interests and configurations, reservation and order details, transaction history, and other business-related or purchasing information.
Payment and Transaction Information: Payment method, billing address, transaction amount, reservation or order status, and limited payment-card information. Full payment-card details may be collected directly by our payment processor rather than ZAVIR.
Preferences and Inferences: Vehicle preferences, saved configurations, likely interests, and inferences derived from your activity and interactions with the Service.
Information We Collect Automatically
Usage and Interaction Data: Information about how you use the Service, including pages viewed, links selected, searches, vehicle configurations, referring and exit pages, time spent, features used, and interactions with emails, advertisements, embedded content, and customer-support tools.
Device and Approximate Location Information: IP address, browser type, operating system, device identifiers, language and time-zone settings, mobile network information, and approximate location inferred from IP address.
Cookies and Similar Technologies: We and our service providers and advertising partners may use cookies, pixels, tags, web beacons, software development kits, local storage, and similar technologies to collect information about your browser, device, and activities over time and across websites or online services.
3. How We Use Your Information
We use the information we collect to:
a. Provide, maintain, secure, personalize, and improve the Service, including accounts, customer portals, vehicle configurators, reservations, orders, and payments;
b. Process reservations, orders, deposits, payments, refunds, and related transactions, and send confirmations and other transactional information;
c. Send technical notices, updates, security alerts, and support messages;
d. Respond to your comments, questions, and customer service requests;
e. Communicate with you about ZAVIR products, services, events, promotions, and offers, subject to your communication preferences;
f. Analyze trends, measure advertising and campaign performance, understand user preferences, and develop and improve the Service, products, and customer experience;
g. Authenticate users; detect, investigate, and prevent fraud, security incidents, prohibited conduct, and other illegal activities; protect rights, safety, and property; and enforce our agreements; or
h. Comply with legal obligations, respond to lawful requests, establish or defend legal claims, and enforce our Terms and Conditions.
4. How We Share Your Information
We may share your information in the following circumstances:
Service Providers and Processors: We may disclose personal information to vendors that provide services on our behalf, including hosting, cloud storage, cybersecurity, identity verification, customer relationship management, analytics, communications, payment processing, order fulfillment, customer service, and marketing support. These providers may use personal information only as permitted by their agreements with us and applicable law.
Affiliates and Business Transfers: We may disclose personal information to our corporate affiliates for the purposes described in this Privacy Policy and may disclose or transfer it in connection with, or during negotiations of, a merger, financing, reorganization, bankruptcy, sale of company assets, or acquisition of all or part of our business.
Legal, Safety, and Enforcement Purposes: We may disclose personal information when reasonably necessary to comply with law or valid legal process; respond to public authorities; protect the rights, safety, and property of ZAVIR, our users, or others; investigate fraud or security incidents; or enforce our agreements and policies.
Analytics Providers and At Your Direction: We may disclose identifiers and internet or other electronic network activity to analytics providers to understand how the Service is used. We may also disclose personal information with your consent or at your direction.
5. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction. You are responsible for maintaining the confidentiality of your account credentials and should use a unique, strong password. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
6. Data Retention
We retain each category of personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide accounts and services, complete reservations and transactions, maintain business and tax records, resolve disputes, enforce agreements, protect against fraud and security threats, and satisfy legal obligations. Retention periods vary based on the nature and sensitivity of the information, the duration of our relationship with you, operational requirements, and applicable law. We may retain deidentified information for lawful business purposes and will not attempt to reidentify it except as permitted by law.
7. Your Rights and Choices
Account Information: You may access, correct, or update certain information through your account settings or by contacting us. You are responsible for maintaining accurate and current account information.
Marketing Communications: You may opt out of receiving promotional emails from us by following the instructions in those emails or contacting us directly.
Cookies and Privacy Signals: You may manage non-essential cookies through your browser controls. Where required, we process recognized opt-out preference signals, including the Global Privacy Control, as requests to opt out of sale or sharing for the browser or device that sends the signal. Cookie choices may be browser- and device-specific.
8. California Privacy Rights
If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), applies to our processing, you may have the following rights, subject to applicable exceptions:
a. Right to Know and Access: You may request the categories and specific pieces of personal information we have collected about you, the categories of sources, our business or commercial purposes, the categories of third parties to whom we disclose personal information, and the categories of personal information sold, shared, or disclosed for a business purpose.
b. Right to Delete and Correct: You may request deletion of personal information we collected from you or correction of inaccurate personal information, subject to applicable exceptions.
c. Right to Opt Out or Limit: You may opt out of the sale or sharing of personal information and may limit certain uses or disclosures of sensitive personal information where the CCPA provides that right. ZAVIR does not sell personal information for money and does not share personal information for cross-context behavioral advertising. You may exercise applicable opt-out rights by emailing privacy@zavir.us, by writing to us at the mailing address in the Contact section below, or through a recognized opt-out preference signal, including the Global Privacy Control.
d. Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights. We will not retaliate against you for exercising a privacy right.
California Collection and Disclosure Summary
For purposes of the CCPA, the categories of personal information ZAVIR may collect include identifiers; customer records; protected classification characteristics if voluntarily provided; commercial information; internet or other electronic network activity; approximate geolocation; audio, electronic, visual, or similar information submitted through customer-support channels; professional or employment-related information; inferences drawn from other information; and sensitive personal information limited to account credentials and transaction information handled for permitted purposes. We collect these categories from the sources described in Section 10 and use them for the purposes described in Section 3.
ZAVIR may disclose these categories to service providers and contractors for business purposes, including hosting, security, customer relationship management, analytics, communications, payment processing, order fulfillment, and customer support. ZAVIR does not sell personal information for money. ZAVIR does not share personal information for cross-context behavioral advertising. ZAVIR does not knowingly sell or share personal information of consumers under 16.
Exercising Your California Privacy Rights: To submit a request, send email to privacy@zavir.us or mail to the mailing address below in the Contact section. We will confirm receipt as required by law and generally respond to verifiable requests within 45 days, subject to any permitted extension. We will use information provided with a request only to verify the requestor's identity or authority and process the request. You may designate an authorized agent by providing written authorization or a valid power of attorney, and we may verify both your identity and the agent's authority. If we decline to act, our response will explain the decision and any available appeal process. Requests to opt out of sale or sharing do not require identity verification, although we may ask for information needed to process the request.
9. Additional U.S. State Privacy Rights
Residents of certain U.S. states may have privacy rights under applicable state law. Depending on your state and applicable exceptions, those rights may include:
Applicability varies by state and may depend on ZAVIR's activities and statutory thresholds. We will honor applicable rights and use the request methods described in Section 8.
Additional State Privacy Rights:
Right to Confirm and Access: You may confirm whether we process your personal information and request access to it.
Right to Correct: You may request correction of inaccuracies in your personal information.
Right to Delete: You may request deletion of personal information that we maintain about you, subject to applicable exceptions.
Right to Opt Out of Sale or Targeted Advertising: You may opt out of the sale of personal information or its processing for targeted advertising where applicable.
Right to Data Portability: You may receive a portable copy of personal information you previously provided to us where technically feasible and required by law.
Right to Opt Out of Profiling: You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, where applicable. ZAVIR does not currently engage in such profiling through the Service.
Right to Withdraw Consent: Where we process personal information based on your consent, you may withdraw that consent, subject to applicable law and prior processing.
Right to Appeal: If we decline to act on your request, you may appeal our decision by emailing privacy@zavir.us with the subject line "Privacy Request Appeal."
Submitting Requests: Use the request methods in Section 8. We may require information reasonably necessary to authenticate and process a request.
Authorized Agents: You may use an authorized agent where permitted by law. We may require proof of authorization and may ask you to verify your identity directly with us.
Response and Appeal: We will respond within the period required by applicable law. If we deny a request, we will explain the basis for the denial and provide appeal instructions where required.
Regulatory Contact: You may contact your state attorney general or other applicable privacy regulator if you have concerns about our privacy practices.
10 . European Union Privacy Rights (GDPR)
If you are a resident of the European Union, you have certain rights under the General Data Protection Regulation (GDPR):
Legal Basis for Processing: We process your personal data based on the following legal grounds: (a) your consent; (b) performance of a contract; (c) compliance with legal obligations; (d) protection of vital interests; or (e) legitimate interests pursued by us or third parties.
Your GDPR Rights:
Right to Access: You have the right to obtain confirmation of whether we process your personal data and request a copy of such data.
Right to Rectification: You have the right to request correction of inaccurate personal data.
Right to Erasure: You have the right to request deletion of your personal data under certain circumstances.
Right to Restrict Processing: You have the right to request restriction of processing under certain conditions.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format.
Right to Object: You have the right to object to processing of your personal data for direct marketing or based on legitimate interests.
Right to Withdraw Consent: You have the right to withdraw consent at any time where processing is based on consent.
Right Regarding Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling.
Data Protection Officer: For GDPR-related inquiries, please contact privacy@zavir.us.
Cross-Border Transfers: When we transfer your personal data outside the EU, we ensure adequate protection through Standard Contractual Clauses or other appropriate safeguards approved by the European Commission.
Exercising Your Rights: To exercise your GDPR rights, you may submit requests through the following methods: (1) email us at privacy@zavir.us or (2) mail us to the address at the bottom of this Privacy Policy. We will respond to your request within one month, which may be extended by two months for complex requests.
Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates the GDPR.
11. Sources of Personal Information
We collect personal information directly from you; automatically from your browser, device, and interactions with the Service; from our affiliates, service providers, payment processors, customer relationship management providers, analytics and advertising partners; from your employer or other representatives of a business customer; and from publicly available sources. We may combine information from these sources for the purposes described in this Privacy Policy.
12. Children’s Privacy
The Service is intended for adults and is not directed to children under 16 years of age. We do not knowingly collect, sell, or share personal information of children under 16. If you are a parent or guardian and believe a child has provided personal information to us, contact us so that we can take appropriate action.
13. Do Not Track Disclosure
Some browsers offer a "Do Not Track" setting. Because no uniform industry standard governs Do Not Track signals, the Service does not respond to them. This does not affect our obligation to process recognized opt-out preference signals, including the Global Privacy Control, where required by law. Third parties may collect information about your online activities over time and across websites when you use the Service. You may manage non-essential cookies through your browser controls and applicable opt-out preference signals.
14. Cookies and Similar Technologies
We and our service providers use cookies, web beacons, pixels, tags, local storage, and similar technologies to operate and secure the Service, remember preferences, understand usage, measure performance, and prevent fraud.
Types of Cookies We May Use:
Essential Cookies: These cookies are necessary to operate, secure, authenticate, and administer the Service and cannot be disabled through our cookie settings. They include session, security, load-balancing, payment, and consent-preference cookies.
Performance and Analytics Cookies: These cookies collect information about how you use the Service, including pages viewed, time spent, features used, errors, and navigation paths. We use Google Analytics 4 (GA4) to analyze performance and user interactions.
Functional Cookies: These cookies remember preferences and settings, support vehicle configurations and saved items, and provide a more personalized experience, such as language, region, and accessibility settings.
Marketing and Advertising Cookies: The Service does not currently use marketing or advertising cookies or share personal information with advertising or social media partners. If we introduce these cookies or partnerships in the future, we will update this Privacy Policy and provide applicable privacy choices.
15. Third-Party Links and Websites
The Service may contain links to, integrations with, or embedded content from third-party websites, services, applications, dealers, payment providers, financing providers, and other business partners that ZAVIR does not own or control. Those parties are separate entities and their privacy notices govern their processing. A link, integration, or referral does not imply that ZAVIR controls or endorses the third party’s privacy practices. Review the privacy notices and terms that apply before providing information to a third party.
16. Sensitive Personal Information and Biometrics
The Service does not currently collect biometric information or precise geolocation and does not use sensitive personal information to infer characteristics about you. Payment card information may be collected directly by our payment processor and used only to process and protect transactions. Please do not submit health information, government identification numbers, account credentials for third-party services, biometric information, or other sensitive personal information unless we specifically request it. Before ZAVIR begins any materially different collection or use of biometric or other sensitive personal information, we will provide any separate notice, consent mechanism, and privacy choices required by applicable law.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the revised Privacy Policy and update the "Effective Date." If changes materially affect how we handle personal information, we will provide additional notice or obtain consent where required by law.
18. Contact Us
If you have questions or concerns about this Privacy Policy or wish to exercise privacy rights, contact us at:
ElDorado National (California), Inc.
Attn: ZAVIR Legal
9670 Galena St, Riverside, CA 92509
Email: legal@zavir.us
