CarMax Information Privacy & Safeguards Notice

Introduction
At CarMax, we value our customers and are committed to protecting your privacy, as well as safeguarding the information we receive and maintain about you. We do not sell information about you to others. We only share it as expressly allowed by law. Consequently, you do not need to notify us not to share information about you, because we have chosen to limit this for you. This Privacy Policy will help you understand what information we collect, how we use it, and the ways we maintain your privacy and the security of personal information about you.

The CarMax family is made up of several companies, or "affiliates." As of the date of this Privacy Policy, these companies include, but are not limited to:

CarMax, Inc.
CarMax Auto Superstores, Inc.
CarMax Auto Superstores West Coast, Inc.
CarMax Auto Superstores California, LLC
CarMax Auto Mall, LLC
CarMax of Laurel, LLC
CarMax Business Services, LLC (includes CarMax Auto Finance, a division)
CarMax Auto Superstores Services, Inc.

When we use the term CarMax, us, we, or our, it refers to each affiliate in the CarMax family.

The Information CarMax Collects
Depending upon the type of transaction or relationship you have with us, we may collect the following types of information about you:

  • Demographic or identifying information (name, address, phone number, social security number, drivers license number, state identification card number and e-mail address)
  • Credit related information (your workplace, debts and income)
  • Transactional information (license and registration)
  • Non-transactional information (responses from surveys, including the CarMax Survey)

This information is gathered from the following sources:

  • You, in credit applications and other transaction forms
  • Reports from consumer reporting agencies (also known as credit bureaus)
  • Current and previous transactions or experiences with us or our affiliates (purchase of a vehicle, vehicle service history)
  • Current and previous transactions or experiences with other third parties (relating to your credit, or other relationships with them and to confirm employment or insurance)
  • Our websites (from transactions, surveys, site navigation, cookies*, image tags**, or other technology used to remember information you enter on our websites or your navigation through our websites)***
  • Other third parties for marketing programs (demographic firms, direct marketing database firms)
  • The following only applies to Website users: If any information we have about you is incorrect, we will gladly correct it. Simply Email us noting the incorrect information and the correction. We reserve the right to verify the correctness of this information. Please note that in the event we amend the Privacy Policy, posting the amendment will serve as notice to you of that change and the policy will note its effective date. The effective date for this Privacy Policy is October 1, 2008.

The Information CarMax Shares
CarMax does not sell information about you to other companies. We only share the information described above as allowed or required by law. A detailed description follows below.

Necessary Third Parties
CarMax may share some or all of the information described above with third parties, including our affiliates, when needed to provide products and services you have requested or already have with us. Examples of this include sharing information about you with the Department of Motor Vehicles to title your vehicle, and with financial institutions to obtain financing for your purchase.

Third Party Service Providers
CarMax may share some or all of the information described above with third parties, including our affiliates, who perform services for us or act on our behalf. Examples include companies that send you information on our behalf about products and services, companies that process payments for us, and companies that perform analysis for us.

Joint Marketers
We also may share some or all of the information described above with financial institutions with whom we have a joint marketing agreement. A joint marketing agreement is an agreement between CarMax and a financial institution so that we can offer you a product together. An example would be a private label credit card.

Affiliates
CarMax shares some or all of the information described above, except for credit related information not based on our own transactions and experiences (e.g. credit bureau reports), among its affiliates as allowed by law. Credit related information not based on our own transactions and experiences is only shared among affiliates when permissible under the law.

Unaffiliated Third Parties
CarMax does not share the information described above with third parties outside of the CarMax family unless it is allowed or required by law. For example, we may disclose information about you in connection with a fraud investigation, to comply with a subpoena or other legal process, or in connection with a merger or sale of all or part of our business. In the event of an extraordinary event—such as a CarMax bankruptcy—CarMax may have to share information about you outside of an exception allowed under the law. In such an event, CarMax will notify you and give you an opportunity to opt out.

The Security and Confidentiality of Information About You
Employees are only authorized to access personal information about you when it is necessary to perform their job duties. Our employees are trained to maintain the privacy and security of personal information about you in compliance with applicable regulations. We also maintain physical, electronic and procedural safeguards to protect personal information about you.

We may change this policy at any time, and will notify you of changes as required by law.

Important Information About Credit Reporting For CarMax Auto Finance Customers
We may report information about your account to credit bureaus. Late payments, missed payments or other defaults on your account may be reflected in your credit report.

*A "cookie" is a small text file that a website can place on your computer's hard drive in order to collect information about your activities on the website. Most browsers automatically accept cookies, but you have the option to change your browser to decline them. We use cookies on certain pages of our websites, but these cookies are not used to identify anonymous site visitors. Our cookies enable you to proceed smoothly through our sites and enable us to know whether you've visited our sites before to eliminate some steps that are directed to new visitors.

**Image tags work in conjunction with cookies. An image tag, also referred to as a clear GIF or web beacon, is a small image file that may be located on select pages on our websites.

***At this time, CarMax has contracted with Omniture and TruEffect to collect information about how website users navigate our websites. This information will not be disclosed and will be used only to generate anonymous visitor profiles, which do not contain personally identifiable information. The anonymous profiles are used to provide website users content specifically tailored to them. To opt out of Omniture’s collection of information about how you navigate our websites, please go to http://www.omniture.com/en/company/acquisitions/visualsciences/privacy/policy. To opt out of TruEffect’s collection of information about how you navigate our websites, please go to http://www.trueffect.com/privacy.

CarMax may change what companies we use to collect this type of information at any time. If we do, we will revise this policy to reflect this change and notify you as required by law.

YOUR CALIFORNIA PRIVACY RIGHTS
FOR RESIDENTS OF CALIFORNIA ONLY. Section 1798.83 of the California Civil Code requires select businesses to disclose policies relating to the sharing of certain categories of customers' personal information with third-parties. These businesses are required to accept such requests from customers but are only required to honor one request per calendar year. Businesses have thirty (30) days to respond to each inquiry. Each inquiring customer will receive an explanation of the categories of customer information shared and the names and addresses of the third-party businesses. In limited circumstances, customers' failure to submit requests in the manner specified will not require a response from the business.

If you are a current CarMax customer in California, you may request such information from CarMax by sending an email correspondence noting your name, address, and email address. You must also include a request that CarMax provide such information to you using the following or similar verbiage. "I request that CarMax provide its third-party information sharing disclosures required by section 1798.83 of the California Civil Code." Press the link at the end of this sentence to create your message: EMAIL. The same request may be made by regular mail by sending the above information to CarMax, 12800 Tuckahoe Creek Parkway, Richmond, VA 23238, ATTENTION: Legal Department.