Privacy Policy

Toyota, Lexus, and Scion Privacy Policy Respecting Customer Information

1. The TCI Commitment to Your Privacy

Toyota Canada Inc., which includes Toyota, Lexus and Scion brands (collectively “TCI”), respects your right to privacy. This Policy outlines how TCI’s privacy principles protect your privacy as a key part of TCI’s on-going sales and services relationship with you as a valued customer. The privacy principles apply to all personal information that TCI collects from customers. Personal information refers to any personally identifiable information about you. It does not include information about non-identifiable individuals, such as aggregate or anonymized information.

2. What Personal Information Does TCI Collect?

In connection with your vehicle purchase or lease, TCI collects the information provided by you that is necessary for your TCI dealership to complete the transaction, including your name, address, telephone number(s), email address, driver’s license and insurance information. TCI also records information respecting the vehicle purchased or leased, the price and other transaction information.

TCI will also collect personal information from you through customer surveys, inquiries or requests for information and your visits to TCI Sites. You will only be asked to provide personal information in order to enable TCI to provide you with a service (such as sending you a new vehicle brochure, assisting you in contacting a dealership, or enabling you to complete online credit or job applications).

If you apply for credit with Toyota Credit Canada Inc. (“TCCI”), TCCI will obtain credit approval information from you and third parties. The full TCCI Privacy Policy, which outlines how TCCI’s privacy principles protect your privacy as a key part of its ongoing business relationship with you as a valued customer, is available here: TCCI Privacy Policy or at www.toyota.ca/privacy.

TCI will collect information relating to your service transactions with authorized Toyota and Lexus dealerships. As part of TCI’s ongoing efforts to better understand your automotive needs and improve the products and the quality and efficiency of TCI and its dealerships’ provision of these products and services to you, TCI will, from time to time, ask you to provide information regarding your purchase preferences, demographics and lifestyle through customer surveys.

TCI will also collect any information that you provide through your customer service inquiries or when TCI responds to your requests for information.

TCI also collects information that you provide during visits to TCI web sites, dealership web sites, interactive features, and applications, as well as our X (formerly known as Twitter), Facebook and other social media network sites (collectively, “Sites”), including contact information, vehicle information, customer survey information, visitor’s dealership and language preferences, owner information, and contest entry information.

3. How Is Your Personal Information Collected?

TCI uses different methods to collect personal information from and about you including through:

• Direct interactions.

  You may give TCI your personal information by corresponding with TCI or by using our Sites, including without limitation TCI’s web sites’ features and services. This includes personal information you provide when you:

  • Purchase, lease, or finance a new vehicle from a Toyota or Lexus dealer;
  • Purchase a Toyota-branded or Lexus-branded product such as an extended care plan, a tire and rim protection plan, or a roadside assistance plan;
  • Signup for a user account and update such user account;
  • Contact us in person, by email, or by telephone;
  • Input or upload personal information through our Sites; and
  • Subscribe to a newsletter, sign up for product updates, enter a contest, respond to a survey, fill out a form, or otherwise input, upload, or provide information or files through our Sites or in person at an event such as an auto show or an event at which TCI is a participant or a sponsor.
• Automated technologies or interactions.

  As you interact with our Sites, we will automatically collect technical information and internet activity information about your device(s) and browsing actions and patterns. We collect this information by using cookies, pixels, server logs and other similar technologies.

4. How is Your Personal Information Used?

TCI may use your personal information for the following purposes:

• to complete sales and service transactions with you;
• to respond to your requests for products, services or information;
• to improve products and services and better understand your automotive needs, including through customer surveys;
• to improve the operation/administration of our independently owned and operated dealer network, including quality assurance and training;
• to administer your new vehicle warranty coverage, recalls, your Extra Care Protection and/or Roadside coverage;
• to increase your awareness of Toyota, Lexus or Scion brand products and services;
• to initiate, customize and administer connected vehicle services as described in Section 6 below; and
• to include you in advertising or marketing campaigns to offer you TCI’s or other products and/or services where you have subscribed to such communications.

5. With Whom is Your Personal Information Shared?

For the purposes outlined above TCI may disclose your personal information to (i) TCCI; (ii) Toyota and Lexus dealerships; (iii) Toyota and Lexus dealer associations; (iv) SiriusXM; and (v) their and our respective service providers, and by all of them to each other.

TCI will also share your information with select TCI marketing partners who may provide you with information about their products and services. You will be provided with an opportunity to opt out of communications with TCI’s marketing partners. Your personal information may be transferred to third-party service providers that TCI uses to assist in managing and processing your personal information.

TCI will not disclose any of your personal information to any other persons, except (i) with your prior consent; (ii) in connection with a sale of all or substantially all of the assets of one of TCI’s businesses; or (iii) as may be required or permitted by law.

6. Connected Vehicle Services

Some of our products and services may have additional privacy terms that apply, such as vehicles equipped with Connected Services technologies. Please go to our Connected Services Privacy Notice at www.toyota.ca/connectedservices-privacy to learn more about our Connected Services vehicle and personal data collection, use and sharing practices. Where product- or service-specific terms conflict with this Privacy Policy, the product or service specific terms shall govern.

7. Does TCI Transfer Information Outside of Your Jurisdiction?

By providing us with personal information, you acknowledge and agree that such personal information may be transferred to other jurisdictions for processing and storage, including in servers located across Canada and in the United States, where laws regarding the protection of personal information may be less stringent than the laws in your jurisdiction. Further, such personal information may be accessible to law enforcement, national security authorities, government authorities, and the courts of such jurisdictions.

8. Your Consent

Your consent may be given expressly or implied, depending on the circumstances.

In connection with your vehicle purchase or certain service requests you will be asked to consent expressly to TCI’s collection of personal information for the purposes identified herein.

When you visit TCI’s Sites and/or provide us with an online-based consent, you consent to TCI’s collection, use and disclosure of your personal information that you provide on the Sites.

In other cases, your consent is communicated through your decisions or actions, such as when you respond to a customer satisfaction survey, request a product information brochure from the Sites, register for updates on the Sites or complete an online job application.

By providing any personal information in any email request or any interactive activities on TCI’s Sites, you consent to TCI’s collection, use and disclosure of that information consistent with this Privacy Policy.

If you provide TCI with any personal information of another individual, you represent that you have obtained all necessary consents from such individual to enable us to use and disclose such personal information consistent with this Privacy Policy.

9. Your Consent and Electronic Messages

Unless you request TCI not to do so, you agree that TCI may use and disclose to TCCI, Toyota, Lexus, and Scion dealerships and to dealer associations your personal information for the purposes of selectively including you in advertising and marketing campaigns designed to increase the awareness of Toyota, Lexus or Scion brand products and services and the goodwill associated with TCI’s businesses. Some of TCI’s advertising and marketing campaigns include sending out Toyota, Lexus or Scion newsletters, service reminders and promotional offers, or the making of calls. If you would prefer that TCI not use your personal information for such advertising or marketing campaigns, please contact TCI in any of the ways described below under the heading “Contact Us”.

TCI will only send email, text or other electronic messages to you if you have existing vehicle warranty and/or Extra Care Protection coverage or some other form of business relationship with TCI, or have asked for or otherwise agreed to receive emails, texts or other electronic messages from TCI. TCI may also from time to time request your consent on behalf of any of or all of TCCI or Toyota, Lexus, and Scion dealerships and dealer associations, and TCI marketing partners.

10. TCI’s Web Sites

Non-Personal Information. Except for Device Identifiers, as noted below, when you visit TCI’s web sites, and unless you tell TCI who you are or reveal any other personal information, TCI does not collect or store any information about you. The only information TCI collects and stores is non-personally identifiable information such as the name of your Internet service provider, the type of the Internet browser you used, and referring web site and the pages you request. TCI uses this non-personally identifiable information to generate aggregate statistics regarding TCI’s web site activity such as page views, use of the Sites. (collectively, “Usage Information”). Usage Information is generally non-identifying but if at any time TCI can associate such information with you as a specific and identifiable person, TCI treats it as Personal Information.

Cookies Cookies are files that your web browser places on your computer's hard drive that permit TCI to tell whether, and if so, how many times, you have accessed TCI’s web sites previously, your language of choice, your dealer of choice, the province in which your internet provider resides, internet user behavioral analysis. Cookies may also be used to associate you with social networking Sites, such as Facebook or X. Cookies may also be used to associate you with third-party social media sites, such as Facebook, Instagram, YouTube, TikTok or X.

You may choose to decline or accept cookies if your browser permits, but doing so may affect your use of TCI’s web sites and your ability to access certain features of the web sites.

Pixel tags. A pixel tag is a transparent graphic image, sometimes called a web beacon, clear GIFs or tracking beacon, placed on a web site or in an e-mail, which indicates to us that a page or e-mail has been viewed. In addition, a pixel tag may tell your browser to get content from another server.

Device Identifier. TCI automatically collects your IP address or other unique identifier ("Device Identifier") for the device (computer, mobile phone, tablet or other device) you use to access the Sites. A Device Identifier is a number that is assigned to your device when you access a website or its servers, and our computers identify your device by its Device Identifier. TCI, and our affiliates and service providers may use a Device Identifier to, among other things, administer the Sites; help diagnose problems with our servers; analyze trends; track Usage Information and gather broad demographic information for aggregate use.

Third-Party Links. TCI’s web sites contain links to other sites. When you click on links that take you to third party web sites, you will be subject to the third parties' privacy policies. While TCI supports the protection of privacy on the Internet, TCI is not responsible for the actions of third parties or for their privacy practices. TCI encourages the users of its web sites to be aware when they leave the web sites and to read the privacy policies of each and every web site with which they interact.

Children. TCI does not use its web sites to knowingly solicit personal information from or to market to persons under the age of consent.

11. Advertising/Behavioral Targeting; How to Opt-Out

TCI licenses technology to serve advertisements on its own web sites and within its content as that content is served across the Internet.

Ad network providers, data providers, publishers and other media-related companies, and/or analytics service providers may set and access their own cookies, pixel tags and similar technologies on your device’s web browser and they may otherwise collect or have access to information about you. We and they may use information about your browsing behavior on one or multiple devices to establish an online profile and to target advertisements for products and services in which you might be interested based on your visits to both the TCI web sites and other web sites and applications. We and they may use a variety of companies to serve advertisements. For example, you may be served with advertising of TCI products on other third-party websites or applications. TCI generally does not link this information to you personally, except as described in this Privacy Policy. The use of cookies, pixel tags, web beacons, or similar technologies by these providers is subject to their own privacy policies. You may also visit the privacy policies of these third-party websites for your options for opting out of behavioural or interest-based advertising.

If you prefer not to allow TCI, or third parties acting on TCI’s behalf, to use these technologies to collect or use your personal information for purposes of targeted advertising on third-party websites, you may opt-out by following the procedure on the NAI Opt-Out Page.

These opt-outs will not be effective if your browser is configured to reject cookies, or if you subsequently erase your cookies, use a different computer or change browsers.

In addition, TCI may use third-party ad networks, publishers and other entities to serve advertisements and third-party analytics vendors to evaluate and provide us with information about the use of the TCI web sites and viewing of our content. For example, we may share personal information with third parties (e.g., social media sites, other advertisers, advertising agencies, advertising networks, data exchanges, etc.) in order to deliver to you content on our website or third-party sites. For information about your ability to opt-out of these practices, please contact us at socialmedia@toyota.ca

Please note that even if you opt out, you will still see advertisements while you are browsing online. However the advertisements you see may be less relevant to you and your interests. Additionally, many network advertising programs allow you to view and manage the interest categories they have compiled from your online browsing activities. These interest categories help determine the types of targeted advertisements you may receive. The NAI Opt-Out Page provides a tool that identifies its member companies that have cookies on your browser and provides links to those companies.

Moreover, if you would like to access and/or delete any personal information that Google (one of our analytics and ad service partners) holds about you, then you may do so via “My Activity”.

12. How Long Does TCI Retain Your Personal information?

TCI retains your personal information as long as is required for the purposes identified when you provided the personal information and for any new purposes identified and consented to by you, and for an appropriate time thereafter in accordance with applicable legal obligations and TCI’s document retention policies.

13. How Does TCI Protect Your Personal Information?

TCI strives to protect your personal information using security measures appropriate to the sensitivity of the information. For example, TCI’s web sites are members of the Entrust Digital Certificate Program which involves applying security sockets layer software encryption technology to all information that you submit through the web sites.

Beyond this, we employ physical, administrative, contractual and technological safeguards to protect your personal information. However, despite these efforts, no security measures are perfect and no systems are impenetrable. Please consider these limitations before sharing your personal information with us.

14. Your Rights

To the extent permitted by applicable law, and subject to a number of legal exceptions, you have the following rights in relation to the personal information that TCI holds about you:

(a) Your right of access

At your written request we will inform you whether we hold personal information relating to you. If we do, you have the right to receive a general account of our processing of such personal information. If your request is made in writing, subject to applicable laws and the provisions of this Privacy Policy, we will also provide you with access to your personal information that is in our possession. A reasonable fee may be levied if you request the transcription, reproduction or transmission of such information and you will have to provide information or documentation to verify your identity. We will inform you of the approximate cost before proceeding to respond to your request.

Your rights to access your personal information are not absolute. Access can be denied for several different reasons under applicable law. If we deny your request for access to your personal information, we will explain why.

(b) Your right to correction

If we hold personal information about you and you believe that it is not accurate, complete and up-to-date, you can request to have it corrected (or correct it yourself via your the “Update Customer Info” portal on Toyota,ca or Lexus,ca. If we discover that information is not accurate, complete and up-to-date, we will take reasonable steps to correct it. We will also send any information that has been amended, where appropriate, to any third parties that have access to the information. If we refuse a request to correct information, we shall explain why and we will make a note of this in your file (and forward such note to anyone else who received the earlier information).

(c) Your right to withdraw consent

You may at any time withdraw or change your consent to TCI’s use or disclosure of your personal information, or request TCI to dispose of it, subject to legal and contractual restrictions. However, if you do not provide personal information required to supply a product or service, or decide to withdraw your consent to our use and disclosure of such information, TCI may not be able to provide that product or service.

15. Contact Us

If you have any questions or concerns regarding TCI’s policy and procedures, if you wish to change your consent to TCI’s use and disclosure of your information, or if you wish to review, update, correct or have TCI delete your information from files, please contact:

Attn:Privacy Officer
Toyota Canada Inc.
One Toyota Place
Toronto, Ontario
M1H 1H9

by telephone: Dial and Call Dial and Call 1-888-TOYOTA-8 or Dial and Call Dial and Call 1-800-26-LEXUS or by visiting us at toyota.ca or lexus.ca.

16. Will TCI’s Privacy Policy Change?

TCI reserves the right, at any time, to modify this Policy at TCI’s sole discretion, and you agree to be bound by any such modifications once we provide you with notice of the change. Notice includes but is not restricted to posting a link to the new Policy, posting a new Policy on our web sites, or sending you a link to the new Policy via the contact information you have provided to us. Such change will be effective with respect to your use of the services after TCI has given notice of the change. Please review the Policy periodically to see whether it has changed. Any engagement by you with TCI after we provide notice to you constitutes your acceptance of those modifications.

POSTED: February 20, 2024

TCCI Privacy Policy

Toyota Credit Canada Inc.

Toyota Credit Canada Inc. ("TCCI" or “we”, “us”, “our”) operates throughout Canada under the business name of "Toyota Financial Services”. TCCI is the financial services provider to the Distributor (defined below).

This Privacy Policy

As a provider of financial services, the collection, use, and disclosure of your personal information is very important to our day-to-day business operations. The purpose of this Privacy Policy ("Privacy Policy") is to inform you of the specific types of personal information we collect, why we collect it, how it is used, how it is disclosed and how you may correct errors in your personal information collected by us.

In this Privacy Policy, the “Distributor” is the Canadian distributor of the vehicle for which you are applying for credit or for which you have entered a finance or lease agreement and the “Dealer” is the Distributor’s authorized dealership through whom you are applying for credit or through whom you have leased or financed your vehicle.

This Privacy Policy applies to information we collect, use, or disclose about our customers, including information you provide:

• When you submit your credit application (the “Application”).
• When you enter into a finance or lease agreement with us (the “Agreement”).
• On or through portal.toyotafinancial.ca (the “Portal”).
• In email, text, and other electronic messages between you and us.

The Portal may include links to third-party websites, plug-ins, services, or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. If you follow a link to a third-party website or engage a third-party plugin, please note that these third parties have their own privacy policies and we do not accept any responsibility or liability for these policies. We do not control these third-party websites, and we encourage you to read the privacy policy of every website you visit.

We understand the importance of your personal information and take pride in our commitment to maintaining its confidentiality. We ensure that your personal information is collected, used and disclosed only in the manner in which you have consented. Our organization ensures that we meet or exceed the requirements of all laws and regulations applicable in Canada.

Please read this policy carefully to understand our policies and practices for collecting, processing, and storing your information. If you do not agree with our policies and practices, your choice is to not provide information to TCCI or not use the Portal.

What is "Personal Information"?

"Personal information" is any personally identifiable information about you, which may include, but is not limited to, your name, mailing address, credit history, credit card number, banking information and voice recordings as well as the terms of your financing and lease agreements (as applicable). It does not include aggregated information that does not allow you to be directly identified.

How Do We Collect Personal Information?

When you finance or lease a vehicle through us, we will collect the personal information you provide to us in your credit application.

Your personal information is also collected when you enter into a finance or lease agreement with us, and when you provide documents, including banking or insurance documents, necessary for the administration of your finance or lease agreement with us.

We may also collect information during our interactions with you for our mutual protection including, monitoring or recording your telephone discussions with our representatives for servicing accuracy, quality assurance and/or for training purposes. We may also collect your personal information from third parties including, but not limited to, third parties referenced on your credit application and other credit providers or credit bureaus, however, your consent will have always been obtained prior to any third parties being approached. For example, when you have given us your consent to contact your references or your employer by providing us with their contact information on your credit application.

When you access and use the Portal, we use different methods to collect your personal information, including through:

• Direct interactions with you when you provide personal information to us, for example, by filling in forms, uploading documents, or corresponding with us by phone, email, or otherwise.
• Automated technologies or interactions, as you navigate through the Portal. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies.

The information we collect directly from you on or through the Portal may include:

• Information that you provide by filling in forms or uploading documents on our Portal. This includes information provided at the time of registering to use our Portal, or when requesting further services. We may also ask you for information when you report a problem with our Portal.
• Records and copies of your correspondence (including email addresses), if you contact us by correspondence.
• Your responses to surveys that we might ask you to complete for research purposes.
• Details of the transactions you carry out through our Portal, such as updating your account information, and our fulfillment of your request. You may be required to provide financial information before placing a request through our Portal.
• Your search queries on the Portal.

Information We Collect Through Cookies

We use cookies to analyze traffic on the Portal and to make improvements to the Portal in order to create the best possible experience for users. We also share information about your use of the Portal on an anonymous basis with our analytics partners (including advertisers, ad networks and servers, content providers, and application providers) who may combine it with other information that you’ve provided to them or that they have collected from your use of their services. By continuing to use the Portal, you consent to our use of cookies.

How is Your Personal Information Used and Disclosed?

We may use and share your Application and Agreement personal information with the Distributor, your Dealer and the third parties described below, for the following purposes:

• To help us evaluate your credit application to finance or lease a vehicle through us.
• To credit bureaus, consumer reporting agencies and other credit providers for the purpose of evaluating your credit application and confirming, verifying and updating any information (including but not limited to, your account balance and payment record) provided to us regarding your credit application or your finance or lease agreement.
• To the Dealer for the purpose of assessing your credit application and/or informing them of our decision on your credit application.
• To help us detect and prevent fraud.
• To third party service providers for the purpose of detecting and preventing fraud.
• Account administration, including collection of overdue accounts, audit and archival purposes.
• To third party service providers for the purpose of collecting on an overdue account, for registering our security interest on your vehicle and to confirm that valid insurance has been purchased for your vehicle.
• To third party service providers that, only in accordance with our instructions to them and only on our behalf, provide us with analytics in relation to information that includes your personal information to help us meet our internal and external financial reporting requirements (e.g., preparing financial statements, run periodic volume reports, and analyze the profitability of previous transactions), keep visibility over our fleet of leased vehicles and plan their return to us, and to better understand our customers and personalize our products and services to your needs.
• Third party service providers for the administration of optional products and services that you have purchased.
• To a third party in connection with a transfer or assignment by us of our interest in your lease or finance agreement, including securitization transactions.
• To include you in any advertising or marketing campaigns in which we alone or, together with the Distributor and its dealers, offer you our or their products and/or services. To respond to your requests for products, services or information, and improve our services, information and products, including asking you to reply to customer surveys. To better understand your automotive needs and to increase your awareness of the Distributor’s brand of products and services and the goodwill associated with our businesses.

We use personal information that we collect about you or that you provide to us on or through the Portal, for the following purposes:

• To present our Portal and its contents to you.
• To provide you with information, products, or services that you request from us.
• To fulfill the purposes for which you provided the information or that were described when it was collected, or any other purpose for which you provide it.
• To provide you with notices about your account.
• To carry out our obligations and enforce our rights arising from any contracts with you, including for billing and collection or to comply with legal requirements.
• To notify you about changes to our Portal or any products or services we offer or provide to you.
• To improve our Portal, products or services, marketing, or customer relationships and experiences.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

We may also use your information to contact you about our own and third-parties' goods and services that may be of interest to you, as permitted by law. If you do not want us to use your information in this way, please use the unsubscribe mechanism at the bottom of our marketing e-mails or contact us by telephone at Dial and Call 1-888-TOYOTA-8.

We may share personal information that we collect or you provide through the Portal as described below:

• To your Dealer for the purposes of updating your contact information in the Dealer’s records.
• To the Distributor for the purpose of including you in any advertising or marketing campaigns in which we alone or, together with the Distributor and its dealers, offer you our or their products and/or services.
• To third party service providers for the purpose of: (1) collecting on an overdue account, for registering our security interest on your vehicle and to confirm that valid insurance has been purchased for your vehicle; (2) account administration, including collection of overdue accounts, audit and archival purposes; (3) the administration of optional products and services that you have purchased; (4) responding to your requests for products, services or information, and improving our services, information and products, including asking you to reply to customer surveys; and (5) better understanding your automotive needs and to increase your awareness of the Distributor’s brand of products and services and the goodwill associated with our businesses.
• To a third party in connection with a transfer or assignment by us of our interest in your lease or finance agreement, including securitization transactions.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also share your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law.
• To enforce or apply the Portal’s Legal Terms and Conditions (available at portal.toyotafinancial.ca ) and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of TCCI, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Your Consent

We will only collect, use and disclose your personal information with your consent.

Your consent may be given expressly or implied, depending on the circumstances and the sensitivity of the information. In connection with your Application(s) and Agreement(s) you will be asked to consent expressly to our collection of personal information for the purposes identified herein. Additionally, you will be asked to consent expressly to any collection of personal information about you that is particularly sensitive, such as information about your credit history and social insurance number. In other cases, your consent is understood, such as when you respond to a customer satisfaction survey, register for updates on this Portal or speak with our representatives after having been notified that the call may be recorded.

Customers who prefer not to have their calls recorded can conduct their business with us in writing or you can immediately advise the Customer Service representative that you do not wish to be recorded and we will ensure that procedures are activated to comply with your request.

You may notify us that you do not wish us to use your personal information for any purposes that are not required to supply you with a product or service at any time by contacting us in any of the ways described below under the heading "How You Can Review and Update Your Personal Information". We will seek your further consent to any additional uses of personal information for which we have not obtained your consent previously.

Subject to legal and contractual restrictions, you may at any time withdraw or change your consent to our use or disclosure of your personal information, or request us to delete it from our files. However, if you do not provide personal information required to supply a product or service or withdraw or change your consent, we may not be able to provide that product or service. Notwithstanding any withdrawal of consent, we may retain and use your information for account administration purposes, including collection of any amounts you owe us.

Our services do not address anyone under the age of 16 (“child” or “children”). We do not knowingly collect personal information from children. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our systems.

With Whom is Your Personal Information Shared?

We may share your personal information with the Distributor, the Dealer and with other third parties, as described in this section and above in the section called “How is Your Personal Information Used and Disclosed?” for the purposes described therein. We will not disclose any of your personal information to any other persons except with your prior express consent, or in connection with a sale of all or substantially all of the assets of one of our businesses, or as may be required or permitted by law.

Your personal information may be transferred to third party service providers that we use to assist in managing and processing your personal information. Our third party service providers are required to use, maintain and disclose your personal information only in accordance with our instructions to them and only on our behalf.

We will also share your information with our joint-marketing partners who may provide you with information about their products and services. You will be provided with an opportunity to opt-out of communications with our joint-marketing partners.

Does TCCI Transfer Information Outside of Your Jurisdiction?

The personal information that you provide to TCCI may be transferred outside of Canada (and for Quebec customers, outside of Quebec) for storage and processing. TCCI uses service providers that store and process your personal information on servers located in Canada, the United States and Ireland. When TCCI uses service providers to store and process your personal information, TCCI's policy is to have appropriate contractual provisions in place with those service providers limiting the purposes for which your personal information is being transferred to them and stipulating security requirements for that information. When required by applicable law, we conduct privacy impact assessments to assess the risk associated with transferring personal information outside of Canada (or outside of Quebec, as applicable). Please note that the privacy laws in other jurisdictions may differ from Canadian privacy laws and in some jurisdictions your personal information may be accessed by law enforcement authorities or the courts. If you have any questions regarding our policies and practices relating to storage and processing of personal information outside of Canada, please contact us in any of the ways described below under "How You Can Review and Update Your Personal Information".

How Long Do We Retain Your Personal information?

We retain your personal information as long as is required for the purposes identified when you provided the personal information and for any new purposes identified by us and consented to by you, and for an appropriate time thereafter. We then delete the personal information or anonymize it as described in the follow paragraph.

Under some circumstances we may anonymize, pseudonymise, or de-identify your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous, pseudonymous, or de-identified data for any serious and legitimate business purpose without further notice to you or your consent.

How Do We Protect Your Personal Information?

We protect your personal information using security systems appropriate to the sensitivity of the information. In our ongoing effort to safeguard your personal information from unauthorized collection, use or disclosure, we have put in place a number of safeguards including; contractual, organizational, structural and technological security standards.

Your Rights Regarding Your Personal Information

You have the following rights with respect to the personal information that we hold about you:

• you may access and review any of your personal information held in our files and your consent regarding its use and disclosure at any time, and you may obtain a copy of such personal information;
• you may ask us to correct any personal information that we hold about you that is inaccurate, incomplete or equivocal; and
• you may withdraw your consent as described above under “Your Consent”.

Please note, we rely primarily on you to provide us with your most complete, accurate and up-to-date personal information and to inform us of any changes to your personal information.

If you are a Quebec customer, you may also ask that we cease disseminating personal information about you in certain circumstances provided by applicable law.

For any inquiry related to your rights described in this section or this Privacy Policy, please contact us as follows:

Customer Service Manager
Toyota Credit Canada Inc.
80 Micro Court, Suite 200
Markham, Ontario
L3R 9Z5

or by telephone: Dial and Call Dial and Call 1-888-TOYOTA-8

If you have any questions or concerns regarding our privacy policy and procedures, including with respect to your right to access or rectify your personal information, or to withdraw your consent, please contact the Privacy Officer at privacy@toyotacredit.ca or using the address provided below:

Privacy Officer
Toyota Credit Canada Inc.
80 Micro Court, Suite 200
Markham, Ontario
L3R 9Z5

Will this Privacy Policy Change?

We reserve the right, at any time, to modify this Privacy Policy at our sole discretion, and you agree to be bound by any such modifications, which shall be effective immediately upon our posting the revised Privacy Policy on our web site or the Portal.

POSTED: September 22, 2023

Toyota Canada Inc.
Connected Services Privacy Notice

Updated as of June 19, 2024

We may modify this Privacy Notice by posting a new version at www.toyota.ca/connectedservices-privacy or www.lexus.ca/connectedservices-privacy, effective on the date of publication. Your continued use of the Services (as that term is defined in the Vehicle Connected Services Terms of Use) after we make changes indicates that you accept and consent to those changes, so please check this Privacy Notice periodically for updates. We will notify you in advance of any material changes to this Privacy Notice and obtain your consent to any new ways that we collect, use, and disclose your personal information.

Toyota Supra Connect: This Privacy Notice DOES NOT apply to use of Toyota Supra Connect. Please visit supraconnect.ca for relevant terms.

This Privacy Notice DOES NOT apply to data collection unrelated to the Services, for example: on Toyota or Lexus websites, on sites that we do not own, operate, or control, or at in-person events.

This Privacy Notice DOES NOT apply to any Toyota or Lexus vehicles equipped with the Services located outside of Canada, the continental United States, Alaska, and Hawaii.

This Privacy Notice MAY NOT apply to rental vehicles to the extent certain Services are not made available by the rental company. For rental vehicles, the terms and conditions and privacy policy of the applicable rental company may also govern how data about the vehicle is collected and used.

I. INTRODUCTION

This Privacy Notice applies to your personal information and vehicle data that we collect, use, store, share and secure to provide the Services to you, including when you use the Toyota or Lexus apps. This Privacy Notice also applies to vehicles manufactured in partnership with other companies that are equipped with Toyota or Lexus Connected Services, including the Subaru Solterra.

Privacy laws in Canada generally define "personal information" as any information about an identifiable individual, which includes information that can be used on its own or with other information to identify, contact, or locate a single person.

1. How We Use, Store, Share and Secure Data From You and Your Vehicle Equipped With the Services. When you purchased or leased your vehicle, your vehicle may have been equipped with an active “Connected Services” or “Vehicle Wireless Services” system which operates by collecting data from you and your vehicle, including vehicle location, vehicle health and driving data, to support navigation assistance, emergency services, remote engine start, maintenance alerts, infotainment apps and more, all as described in this Privacy Notice. When you purchased or leased a vehicle equipped with a “Connected Services” system, you had the opportunity to opt-in to receiving the Services, and in the event you did not want to receive the Services, you were presented with instructions on how to disable the Services upon taking possession of the vehicle. If your vehicle was produced after September 22, 2023, it was delivered in “Privacy Mode”, and Services can only be activated by downloading the Toyota app or the Lexus app, as applicable, and completing the registration process which includes an opt-in to receive the Services. When opting-in to receive the Services, you also specifically consented to our collection, use, and disclosure of your personal information and vehicle data and our storage of such data as described in this Privacy Notice. You are in control over the “Connected Services” system. You can choose to opt-out of the Services at any time. You can also request deactivation of data transmission by waiving the Services, which disables our collection and use of vehicle data and certain personal information through the Services.

   A vehicle in “Privacy Mode” can only transmit wireless location data if the SOS button is pressed or during a vehicle collision. The vehicle will stop being in Privacy Mode upon activation of the Services.

   
   

   The bolded terms used below are defined in Section II of this Privacy Notice.

   1. Safety Connect. Your vehicle’s Safety Connect feature provides roadside and emergency assistance, automatic collision notifications, stolen vehicle assistance and accident advisory services. Safety Connect uses your vehicle’s Location Data or “vehicle location” (your vehicle’s latitude and longitude) to determine where your vehicle needs assistance and to dispatch assistance to you, your Vehicle Information (such as your vehicle’s model, year, and VIN) to verify your vehicle type and to help emergency responders identify your vehicle, your Account Information (such as your name, address, phone number, email address, etc.) to verify your identity and account, and your Voice Recordings (when you call our Response Center) for quality assurance.
   2. Service Connect. Your vehicle’s Service Connect feature uses your Account Information and your Vehicle Health Data (such as odometer readings, fuel level, oil life, and diagnostic trouble codes) to send you vehicle health reports, alert you of needed maintenance, and subject to your consent, to contact you by phone for service-related marketing.
   3. Remote Connect. Certain Remote Connect services such as vehicle finder, vehicle status, remote door lock and unlock, guest driver monitor, and vehicle alerts use your vehicle’s Location Data to find your vehicle and Vehicle Health Data to provide status updates as well as facilitate repairs.
   4. Navigation. Your vehicle’s navigation feature (such as Drive Connect) allows you to choose a place of interest, a location on a map, one of your favorites, a destination from your history, or enter an address or coordinates (latitude and longitude). In certain vehicles, navigation includes the Destination Assist program, which connects you with a live agent to provide navigation directions. Your vehicle’s Location Data and your Account Information are used to verify your account and to offer these features.
   5. Digital Key². Digital Key technology allows you to access (e.g. unlock, lock, start) your vehicle through the Toyota or Lexus app. When you bring your smartphone close to your vehicle, the app authenticates an encryption key before performing a vehicle function (e.g. unlock, lock, start). Your Account Information is used to offer this feature.
   6. Toyota Safety Sense. Vehicles equipped with Toyota Safety Sense use sensor and/or image data (in Version 3.0 or later) from the vehicle’s exterior to provide safety features such as lane departure alerts and pedestrian detection. If you have a vehicle equipped with Toyota Safety Sense, the feature may use your Vehicle Health Data and your vehicle’s Location Data. If you have a vehicle equipped with Toyota Safety Sense (Version 3.0 or later), the feature may also use Exterior Image Data.
   7. Traffic Jam Assist¹. Vehicles equipped with Traffic Jam Assist use sensor and/or image data from the vehicle’s interior and exterior to evaluate the vehicle’s surroundings in order to propose and perform certain automated driving operations, including but not limited to: steering, acceleration, and braking on the highway. If you have a vehicle equipped with Traffic Jam Assist, the feature may use your Vehicle Health Data, your vehicle’s Location Data, Interior Image Data, and Exterior Image Data.
   8. Face Identification. Certain vehicles equipped with an interior, driver-facing camera use sensor and/or image data from the vehicle’s interior to scan your face when you open the vehicle’s door. If you opt-in and link your user profile using the in-vehicle “Setup Face” process, the Face Identification feature may use your Facial Geometric Features and Profile Data to verify your identity and load your saved user profile on the vehicle. Your Facial Geometric Features will only be stored on your vehicle.
   9. Last Load Profile. Owners of certain vehicles may choose to create and save multiple user profiles on the vehicle. If you choose to save a user profile on your vehicle, the Last Load Profile feature will use your Account Information and Profile Data to reload the last saved user profile at vehicle start.
   10. App Suite, Toyota/Lexus+ Compatible Third Party Services, and other Services You Connect. The App Suite is available even if you do not have a subscription for the Services. To use the App Suite, you must download the application and accept the End User License Agreement. When you use our App Suite for traffic, fuel, weather, music or other apps, you will need to sign into your account with each compatible third party service in the App Suite; and we will pass the log-in information that you provide to us to the corresponding compatible third party service. Each compatible third-party service in the App Suite will also be given access to the vehicle data necessary for you to use its service. For more information about the vehicle information needed by each third-party service, please review the applicable third-party service’s privacy policy. We will use Voice Recordings to improve our responses and voice recognition. To facilitate functionality of your App Suite and linked third party services, your vehicle may share your Location Data and Voice Recordings transcriptions with your third-party services and upon their receipt, the respective third party’s privacy policy and terms will apply to their use of your Location Data and Voice Recording.
2. We Protect Your Data
   1. We protect your data through multi-layer defense technologies determined by the use of a risk-based secure by design program that relies upon a range of technical and administrative controls, such as the use of dedicated networks and encryption, as appropriate. Your vehicle is designed only to respond to commands from you and any authorized users, or from us and only for those features we provide, including door unlock, remote engine start and vehicle finder. These technologies provide a level of protection that is reasonable given the sensitivity of the information, the purposes for which it is to be used, the quantity and distribution of the information and the medium on which it is stored.
   2. Your Account Information (e.g., name, address, phone number, email), provided when you subscribe for the Services, is retained on servers that are secured as described in Article VI (Security), below, and that provide a level of protection that is reasonable given the sensitivity of the information, the purposes for which it is to be used, the quantity and distribution of the information and the medium on which it is stored.
3. Your Responsibilities

   As the owner/lessee of a vehicle equipped with a “Connected Services” system, you are responsible for: (1) informing passengers and drivers of your vehicle of how and why data is collected and used by us, (2) notifying us of a subsequent sale or transfer of your vehicle to another owner/lessee, and (3) deleting your personal and vehicle information contained in the vehicle, and your vehicle information contained in your Toyota or Lexus app, prior to the sale or transfer of your vehicle to another owner/lessee. If you do not notify us of a sale or transfer, your information may continue to be accessible from the vehicle and/or we may continue to send data about the vehicle to your account. To avoid this from occurring, and to ensure your privacy and that of the new owner/lessee, you must advise us of the sale or transfer and delete your personal and vehicle information prior to the sale or transfer. We are not responsible for any privacy related damages suffered by you or the new owner/lessee as a result of failure to take these steps.

II. COLLECTION AND USE

1. On a Regular and Continuous Basis, We Collect and Use Your
   1. Account Information. When you enter or update your name, address, phone number, email address, language preference and other information linked or directly related to you (“Account Information”), we create or update your account so that we can provide the Services and communicate with you. We collect and use Account Information so that we can provide the Services and communicate with you.
   2. Vehicle Information. We collect your vehicle’s make, model, year, body type, VIN and other information linked to your vehicle (“Vehicle Information”) so we can verify your vehicle type and provide the Services.
   3. Location Data. We collect and use your vehicle’s latitude and longitude (“Location Data” or “vehicle location”) to deliver the Services and App Suite services to you and for quality confirmation and product development. We record and transmit your vehicle’s Location Data when you contact us for emergencies, roadside assistance, stolen or missing vehicle, missing persons, and destination services.
   4. Remote Data. At last ignition off, we may collect the real-time status of your vehicle (i.e., vehicle location, status of powered doors, windows, hood, trunk, sunroof, hazard lights, odometer reading, oil life, fuel economy, trip distance, distance to empty) so you can remotely access your vehicle’s most recent information. This information is used to deliver Remote Connect services to you.
   5. Driving Data. We collect your driving behavior data (“Driving Data”) which includes the acceleration and speed at which your vehicle is driven, travel direction, and use of the steering and braking functionality in your vehicle. Driving Data is used to deliver the Services and App Suite services to you, and for quality confirmation, and product development.
   6. Profile Data. If your vehicle is equipped with the ability to create and save user profiles, we may collect your in-vehicle preferences (i.e., your linked Apple Music or Amazon Music account), favorites (i.e., your saved locations on maps or your preset radio stations), and usage history (i.e., your search and routing history on maps). This information is used to deliver Connected Services tailored to your profile.
   7. Interior Image Data. If your vehicle is equipped with advanced driver assistance features such as Traffic Jam Assist, interior, driver-facing camera(s), and sensors are used to collect information about the status of the driver (“Interior Image Data”). Interior Image Data is used to ensure safety and vehicle control, such as checking that the driver is paying attention to the road and wearing a seatbelt before enabling certain automated driving operations.
   8. Exterior Image Data. If your vehicle is equipped with advanced driver assistance features, such as Toyota Safety Sense (Version 3.0 or later) or Traffic Jam Assist, external camera(s) and sensors are used to evaluate the vehicle’s surroundings (“Exterior Image Data”). This data is used to improve and develop advanced driver assistance and safety features.
   9. Facial Geometric Features. If your vehicle is equipped with face scanning features such as Face Identification, interior, driver-facing camera(s) and sensors are used to scan your face and create a computer-generated code linked to your facial features (“Facial Geometric Features”). This data is not readable by humans, and it is used to verify your identity and load your saved user profile on the vehicle. Your Facial Geometric Features will only be stored on your vehicle.
   10. Vehicle Health Data.
       1. “Vehicle Health Data” includes odometer readings, fuel level, oil life, Diagnostic Trouble Codes, and related data from your vehicle’s on-board diagnostic system to identify malfunction events. Related data includes engine coolant temperature, fuel injection volume, engine rotation per minute (RPM), and other data to assist in identifying issues and analyzing the performance of your vehicle. For hybrid vehicles, Vehicle Health Data includes hybrid battery data correlated to Location Data. For electric vehicles, Vehicle Health Data includes battery charge data and electricity consumed for charging.
       2. If you opt-in to Service Connect, we use Vehicle Health Data to (a) tell you when your vehicle is due for maintenance or service, (b) provide you with vehicle health reports (maintenance and malfunction statuses, and service campaign and safety recall information) and vehicle alerts (notifications when your vehicle reports malfunction-related events) and (c) contact you.
   11. Multimedia Screen Data. We may collect and use Multimedia Screen Data (how you interact with your screen) for quality confirmation, and to improve functionality and product offerings.
   12. Voice Recordings. If you or anyone in your vehicle speaks with the Response Center for purposes of emergency services, roadside assistance, stolen vehicle locator, Destination Assist, or any other reason, your conversation will be recorded (“Voice Recordings”) to deliver the Services to you and for quality assurance.
   13. Voice Recognition Recordings. In select models with hands-free control of in-car multimedia and a linked smartphone, we may collect Voice Recordings to improve the quality and performance of voice recognition capabilities.
   14. Anonymized or Aggregated Information. We may anonymize or aggregate personal information collected from you and use such anonymized and aggregated information for data-analysis, research, and any other purposes. We may continue to use such anonymized or aggregated personal information after you have requested deletion of your personal information.
   15. Other Uses. Where applicable, we use Location Data, Driving Data, Vehicle Health Data, data derived from Safety Connect (which includes automatic collision notification, roadside, emergency and stolen vehicle assistance), navigation, Remote Connect, Service Connect, and Wi-Fi connectivity for the following purposes:
       1. Improve Safety.
       2. Develop New Vehicles and Features.
       3. Confirm Quality.
       4. Analyze Data (e.g., Vehicle Trends).
       5. Prevent Fraud or Misuse.
       6. As Required or Permitted by Law or Legal Process.

III. STORAGE OF INFORMATION

1. Account Information
   1. We store your Account Information for four (4) years after expiration of your subscription for the Services.
2. Vehicle Location, Driving Data, Health Data, Multimedia Screen Data, Voice Recordings, and Remote Data
   1. Data collected from your vehicle is stored for different periods of time.
      1. Location Data. We will store Location Data in an identifiable format for a period of time not to exceed 10 years from the date of creation.
      2. Driving Data. We will store Driving Data in an identifiable format for a period of time not to exceed 15 years from the date of creation.
      3. Multimedia Screen Data. We will store Multimedia Screen Data in an identifiable format for a period of time not to exceed 10 years from the date of creation.
      4. Vehicle Health Data. We will store Vehicle Health Data in an identifiable format for a period of time not to exceed 15 years from the date of receipt by us. We will also store your vehicle health reports for 12 months from the date of creation.
      5. Voice Recordings. If you (or vehicle occupants) speak with the Response Center, your conversation may be recorded and stored for up to two (2) years; and a record of your conversation may be stored for up to four (4) years.
      6. Remote Data. We store the real time status and Location Data of your vehicle from the last ignition off for the purpose of delivering your vehicle’s most recent information in support of Remote Connect services. We retain this data for four (4) years.
      7. As Required or Permitted by Law. For all of (a) through (f), notwithstanding the retention periods set out above, we may retain such information as required or permitted by law, legal process or litigation, and to support requests from you or law enforcement.

IV. SHARING OF INFORMATION

1. Account Information
   1. We may share your Account Information with:
      1. Emergency Responders. To provide emergency assistance to you with our Safety Connect feature. This includes roadside assistance providers.
      2. Our Affiliates. To support vehicle improvement. Also, if your lienholder/lessor is Toyota Credit Canada Inc. (“TCCI”) and TCCI requests that we find your vehicle because of (1) alleged fraud or (2) breach of your lease, retail installment contract or vehicle loan with TCCI, we can try to locate your vehicle and share that location with TCCI. TCCI will be required to contact us directly and provide us with the information we request to verify the fraud or breach of your lease, retail installment contract, or vehicle loan.
      3. Our Parent Company. We may also share your personal information to support safety, research, analysis, and product development by our parent company, Toyota Motor Corporation.
      4. Third Party Service Providers. We contractually bind our third party service providers and contractors to keep your personal information confidential and to use it only for the purposes for which we disclose it to them, and to process your personal information in accordance with the same standards set out in this Privacy Notice. For example, Toyota Connected North America, Inc. provides customer support and the other services that are part of the Services, and apps such as Amazon (example: “Alexa, start my vehicle”) may store and use the information you provide to them in order to verify your account and provide you with their services.
      5. Your Dealer. We may share your Account Information and Vehicle Health Data (for Service Connect) with a specified dealer only if you have provided your prior express consent or as required or permitted by law.
      6. Vehicle Sale or Transfer. As the owner/lessee of a vehicle equipped with a “Connected Services” system, if you do not notify us of a sale or transfer of your vehicle, and do not take steps to remove your information from the vehicle and from your Toyota or Lexus app, your information may continue to be accessible from the vehicle and/or we may continue to send data and reports about the vehicle to your account. We are not responsible for any privacy related damages suffered by you or the new owner/lessee as a result of failure to take these steps.
      7. Law Enforcement. We DO NOT share your personal information with law enforcement unless we are required or permitted to do so by law or legal process, in response to government investigations, as may be required or permitted for national security, or where we believe it necessary to prevent harm, injury or loss, or to investigate suspected instances of fraud.
   2. We DO NOT share your Account Information with:
      1. Data Resellers.
      2. Social Networks.
      3. Ad Networks.
      4. Insurance Providers, unless we have your consent or as required or permitted by law.
2. Your Vehicle Location Data, Driving Data, and Health Data

   We may share the following data with our affiliates and business partners for quality confirmation, and product development. We also share the following data with others if required or permitted by law, litigation, legal process, customer service and our legitimate business purposes.

   1. Location Data. We may share your vehicle’s Location Data, linked to your VIN, and Account Information with emergency responders, law enforcement, our affiliates and service providers acting on our behalf, as well as any compatible third party services you have authorized to receive your vehicle’s Location Data. With your consent, if your vehicle is stolen or you are attempting to locate missing persons, we can try to locate your vehicle and share that Location Data with local authorities. We can work with local authorities to recover the vehicle utilizing the vehicle’s GPS.

      Automatic collision notification operates so that if the airbag sensor is triggered or there is a severe rear-end collision of your vehicle, your vehicle will send an electronic signal to our Response Center and record and transmit your vehicle location, so that we can share your Account Information and vehicle location with emergency responders and provide assistance to you. If you press the “SOS” button, your vehicle will send an electronic signal to our Response Center and record and transmit your vehicle location so that we can share your Account Information and vehicle location with emergency responders and provide assistance to you.

   2. Voice Recordings. We share Voice Recordings with law enforcement and our service providers acting on our behalf in order to provide Connected Services to you.
   3. Remote Data. We share your vehicle’s Location Data based on last ignition off to assist you in finding your vehicle. When you press the “Destination Assist” button on your in-vehicle navigation unit, your vehicle will send an electronic signal to the Response Center which identifies your vehicle location to the Response Center agent who answers your call. We also share real time status of your vehicle (i.e., vehicle location, status of powered doors, windows, hood, trunk, sunroof, hazard lights, odometer reading, fuel economy, trip distance, distance to empty) with you and with any individual who holds a connected services account that is linked to your vehicle and who has been granted Remote Authorization by the primary account holder. If you opt-in to fuel cell or electric vehicle plug-in hybrid vehicle applications, such as Low Carbon Fuel Standards and Vehicle Grid Integration, your vehicle will send us real-time status data, such as the vehicle location, status of powered doors, windows, trunk, hood, sunroof, hazard lights, odometer reading, oil life, fuel economy information, and distance to empty.
   4. Multimedia Screen Data. We may share your Multimedia Screen Data with our parent company for quality confirmation, and to improve functionality and product offerings.
   5. Driving Data. We share Driving Data with our affiliates and service providers so we can work together to provide Connected Services to you and for product improvement. We will also share Driving Data with compatible third party services but only when you authorize us to do so.
   6. Vehicle Health Data. If you specifically agree to allow us to share your Vehicle Health Data with a specific dealer for its own use, we will share your most current Vehicle Health Data, linked to your VIN and Account Information, and last 12 monthly vehicle health reports with such dealer.
   7. Aggregated Data Sharing. We may sometimes share anonymized and aggregated Location Data, Driving Data and Vehicle Health Data with business partners for education and research related to environmental and energy issues, advanced technologies, and usage analysis.
   8. Compatible Third Party Services. We may send Location Data and voice request transcriptions to compatible third party services or technologies you have linked to your Connected Services account.

V. TRANSFERRING INFORMATION

We may transfer personal information that we collect or that you provide as described in this Privacy Notice to contractors, service providers, and other third parties we use to support our business and who are contractually obligated to keep personal information confidential, use it only for the purposes for which we disclose it to them, and to process the personal information with the same standards set out in this Privacy Notice.

We process, store, and transfer your personal information in and to Canadian provinces outside of your province of residence. We may also process, store, and transfer your personal information outside Canada, namely in and to the USA and Japan, which are countries with different privacy laws that may or may not be as comprehensive as the law that applies in the jurisdiction in which you reside. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of that jurisdiction may be able to obtain access to your personal information through the laws of the that other jurisdiction. Whenever we engage a service provider, we require that its privacy and security standards adhere to this Privacy Notice and applicable Canadian privacy legislation.

VI. SECURITY

1. We take information security seriously.
2. We protect your data and secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure through the use of a risk-based security program that relies upon a range of physical, technical and administrative controls, such as the use of dedicated networks and encryption, as appropriate.
3. Our security program includes:
   1. System Defenses. We designed the Services technology to provide data security based on fundamental security principles such as integrity, confidentiality, and availability. It employs layers of defense to drive strong safeguarding practices, such as, where appropriate, code and design reviews, security testing, firewalls, intrusion detection systems, signing and encryption.
   2. Private and Public Wireless Networks. We use both private and public wireless networks to receive data transmitted from your vehicle. If a public network is used, the data is encrypted. In addition, your vehicle is designed only to respond to commands from you and any authorized users, or from us and only for those features we provide such as door lock/unlock, remote engine start/stop and vehicle location.
   3. No Warranties. Please note, however, that we cannot completely ensure or warrant the security of any information transmitted to us by you or your vehicle. Your use of your vehicle’s Connected Services and App Suite is at your own risk. You have the option to opt-out of Connected Services or request deactivation of data transmission (a) by contacting us via the “SOS” button in your vehicle, (b) by calling Customer Care, or (c) via your Toyota or Lexus App.

VII. CHOICE

1. Choices. We give you choices about what data you share with us.
   1. Opt-in/Opt-out.
      1. Service Connect Communication. You may opt-in to share Vehicle Health Data with your dealer for its own use and allow your dealer, with your express consent, to contact you by cell phone call for service appointments and service-related marketing at the number you provided.
      1. You may opt-out of Service Connect Communication at any time, and you will no longer receive phone calls about upcoming service appointments and other service-related marketing messages from your dealer. To opt-out, you must use the Toyota or Lexus app. This is the exclusive method to opt-out from Service Connect Communications for service appointments and service-related phone calls from your dealer. Please allow five (5) business days to process revocation status. I understand that opting out of Service Connect Communication does not turn off vehicle data transmission or opt me out of other connected services or opt me out from communications from my dealer generated independent of Service Connect.
      2. Fuel Cell and Plug-in Hybrid Vehicle Applications. You may opt-in or opt-out of fuel cell or electric vehicle plug-in hybrid vehicle applications, such as Low Carbon Fuel Standards and Vehicle Grid Integration. If you opt-out, your vehicle will not send us real-time status data, such as the vehicle location, status of powered doors, windows, trunk, hood, sunroof, hazard lights, odometer reading, oil life, fuel economy information, and distance to empty.
   2. Review and Update. You may also review and update your Account Information at any time by contacting us. (See Contact Us Section.)
   3. Deactivation. When you lease or buy a vehicle equipped with Connected Services, data collection is active. You may opt-out of Connected Services or request deactivation of data transmission at any time by contacting us and we will no longer collect certain Account Information, Location Data, Driving Data and Vehicle Health Data.

VIII. CONSENT

1. You Agree To This Privacy Notice When You:
   1. Opt in to receive the Services using the Connected Services Agreement provided at the time of purchase/lease from an authorized dealer.
   2. Agree to a Connected Services Master Data Consent for the Services through the App or through live agent enrollment.

      Warning: By agreeing to this Privacy Notice, you specifically consent to our collection, use, and disclosure of your personal information and data as described in this Privacy Notice, and our storage of such data as described in this Privacy Notice. You can choose to opt-out of the Services at any time. You can also request deactivation of data transmission, which disables our collection and use of certain Account Information and vehicle data as described above.

NOTE FOR VEHICLES PRODUCED on or BEFORE SEPTEMBER 22, 2023: If you did not accept the Connected Services Agreement provided to you by your Dealer upon delivery of your vehicle, and if you do not wish to receive Services, please notify us within 15 days of taking delivery of the vehicle and we will cancel your Services. Failure to cancel your Services within 15 days of receipt of the Connected Services Agreement will be deemed acceptance of the Connected Services Agreement. You can disable the Services at any time.

NOTE FOR VEHICLES PRODUCED AFTER SEPTEMBER 22, 2023: Your vehicle was delivered in “Privacy Mode”, and Services can only be activated by downloading the Toyota app or the Lexus app, as applicable, and completing the registration process which includes an opt-in to receive the Services. Completing the registration process and opting-in to receive the Services will be deemed acceptance of the Connected Services Agreement. You can disable the Services at any time.

IX. YOUR RIGHTS

1. ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

   It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes. By law you have the right to request access to and to correct the personal information that we hold about you. We will also comply with all other individual privacy rights that apply to us under applicable laws.

   You can review and change your Account Information by logging into the Lexus or Toyota app and visiting your account profile page.

   If you want to review, verify, correct, or withdraw consent to the use of your personal information you may also contact us using the information provided below to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. We may charge you a fee to access your personal information, however, we will notify you of any fee in advance.

   We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal information that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, erased, or made your personal information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

2. WITHDRAWING YOUR CONSENT

   Where you have provided your consent to the collection, use, and disclosure of your personal information, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us using the information provided below. Please note that if you withdraw your consent we may not be able to provide you with a particular product or service. We will explain the impact to you at the time to help you with your decision.

X. AGREEMENT

1. Sample Agreements. To view a copy our most recent Services related agreements, please go here www.toyota.ca/connectedservices-privacy or www.lexus.ca/connectedservices-privacy

XI. CONTACT US

1. Contact Us

   If you have questions or concerns about this Privacy Notice, or would like to request deactivation of data transmission, update your Account Information, or opt-in or opt-out from particular features, please contact us.

   • LEXUS VEHICLES:
     Phone: 1-800-265-3987
     Email: privacy@toyota.ca
     Address: Toyota Canada, One Toyota Place,
     Toronto, ON, M1H 1H9
     Attn: Privacy Officer
   • TOYOTA VEHICLES:
     Phone: 1-888-869-6828
     Email: privacy@toyota.ca
     Address: Toyota Canada, One Toyota Place,
     Toronto, ON, M1H 1H9
     Attn: Privacy Officer

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information, our compliance with this Privacy Notice, and with applicable privacy laws. To discuss our compliance with this Privacy Notice please contact our Privacy Officer using the contact information listed above.

Click here to see our Privacy Policy.

NOTE: If you did not accept the Agreement, please notify us within 15 days of taking delivery of the vehicle and we will cancel your Services. Failure to cancel your Services within 15 days of receipt of the Agreement will be deemed acceptance of the Agreement.