Privacy Policy

1. Information We Collect

Depending on how you interact with Cardinal, we may collect the following categories of information.

Customer Contact Information

We may collect:

• name;
• email address;
• telephone number;
• mailing address; and
• other contact information you voluntarily provide.

Vehicle and Claim Information

When you request an appraisal, we may collect information concerning the vehicle and, where applicable, the related insurance claim, including:

• vehicle identification number (VIN);
• year, make, model, trim, and other vehicle specifications;
• mileage;
• vehicle ownership information;
• vehicle condition;
• accident or loss history;
• repair history;
• insurance company information;
• claim number;
• date of loss;
• information concerning an insurer's valuation or settlement offer;
• information concerning repairs, estimates, invoices, and payments; and
• other information reasonably necessary to prepare the requested appraisal.

Photographs and Uploaded Documents

You may upload photographs, documents, and other files in connection with an appraisal.

These materials may include photographs of the vehicle, repair records, repair estimates, insurance documents, valuation information, receipts, correspondence, and other materials relevant to the appraisal.

Cardinal uses uploaded materials for purposes reasonably related to providing the requested services, maintaining its business records, and complying with applicable legal obligations.

You are responsible for ensuring that you have the right to provide information and documents that you upload to Cardinal.

Payment Information

Payments for Cardinal's services are processed through Stripe, a third-party payment processor.

Cardinal does not need to receive or retain your complete payment-card number when payment processing is performed through Stripe. Payment information submitted through the payment process may be collected and processed directly by Stripe in accordance with Stripe's applicable privacy practices and terms.

Cardinal may receive transaction information from Stripe, such as payment status, transaction amount, date, and other information reasonably necessary to administer the transaction.

Website and Technical Information

When you visit the website, certain information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• referring website or page;
• pages viewed;
• dates and times of visits; and
• information concerning how you interact with the website.

This information may be collected through server logs, cookies, analytics tools, or similar technologies.

2. How We Use Information

Cardinal may use information we collect to:

• provide and administer appraisal services;
• prepare appraisal reports and related documents;
• communicate with customers concerning requested services;
• review information and documentation supplied for an appraisal;
• process and administer payments;
• provide customer support;
• maintain and improve the website;
• monitor website performance and security;
• detect and prevent fraud, unauthorized activity, or misuse;
• comply with applicable laws, regulations, legal process, or governmental requests;
• establish, exercise, or defend legal claims;
• maintain appropriate business, accounting, and appraisal records; and
• perform other purposes disclosed to you at or before the time information is collected or otherwise permitted by law.

Cardinal does not use customer information for purposes unrelated to the services or business purposes described in this Privacy Policy except as permitted by applicable law.

3. Cookies and Similar Technologies

The Cardinal website uses cookies and similar technologies for purposes including website functionality, security, privacy preference management, analytics, and other functions described below.

Necessary Cookies

Cardinal may use cookies and similar technologies that are reasonably necessary to:

• operate and secure the website;
• maintain a session or connection;
• process requests submitted through the website;
• remember privacy or other settings selected by the visitor;
• provide functionality specifically requested by the visitor; and
• prevent fraud, abuse, or unauthorized activity.

These technologies may be used without separate consent where permitted by applicable law because they are necessary for the operation or security of the website or for a service specifically requested by the visitor.

Analytics Cookies

Cardinal may use analytics cookies and similar technologies to understand how visitors use the website and to evaluate and improve website performance, functionality, and content.

Analytics technologies may collect information such as:

• pages visited;
• time spent on pages;
• referring websites;
• browser and device information;
• approximate geographic information;
• interactions with website features; and
• other information concerning website usage.

Analytics technologies are optional and are not necessary to request or purchase Cardinal's services.

Where applicable law requires consent for analytics cookies or similar technologies, Cardinal will not activate those technologies until the visitor provides the required consent.

Advertising and Marketing Technologies

Cardinal does not currently use cookies or similar technologies for behavioral advertising, cross-site advertising, or the sale or sharing of personal information.

If Cardinal begins using such technologies, Cardinal will update this Privacy Policy and, where required by applicable law, obtain the required consent or provide the required opt-out mechanism before using those technologies.

Cookie Preferences

When required by applicable law, visitors may choose whether to permit optional cookies through Cardinal's cookie-preference mechanism.

Visitors may:

• accept optional cookies;
• reject optional cookies; or
• select individual categories of optional cookies.

Visitors may change their preferences at any time by selecting the Cookie Preferences link available on the website.

Where applicable law requires Cardinal to recognize an opt-out preference signal, including Global Privacy Control (GPC), Cardinal will process the signal in accordance with applicable law.

Third-Party Technologies

Some cookies or similar technologies may be provided by third-party service providers that assist Cardinal with website operation, security, analytics, payment processing, or other services.

Where a third party places or accesses cookies or similar technologies through the website, Cardinal will identify the applicable category and, where required, obtain the visitor's consent before permitting the technology to operate.

For more information concerning third-party services used by Cardinal, including payment processing through Stripe, see the applicable portions of this Privacy Policy.

Payment processing. Payments for Cardinal's services are processed through Stripe. When you make a payment, information necessary to process the transaction may be provided directly to Stripe. Cardinal may receive transaction-related information, such as payment status, transaction amount, date, and other information reasonably necessary to administer the transaction. Stripe's handling of information is governed by Stripe's applicable privacy policy and terms.

Browser Controls

Most web browsers allow users to control or delete cookies through browser settings.

Browser controls do not necessarily provide the same functionality as Cardinal's cookie-preference mechanism, particularly where applicable law requires Cardinal to recognize a specific privacy preference or consent choice.

Disabling necessary cookies may interfere with the operation or security of portions of the website.

4. How We Disclose Information

Cardinal does not sell customer personal information for monetary consideration.

Cardinal may disclose information when reasonably necessary to operate the business or provide requested services, including to:

• website hosting providers;
• payment processors, including Stripe;
• website analytics providers;
• information-technology and security providers;
• cloud-storage or document-management providers;
• email and communications providers;
• professional advisers;
• insurers or other service providers where reasonably necessary to provide an appraisal requested by you; and
• governmental authorities or other persons when disclosure is required or permitted by law.

Service providers may access information only as reasonably necessary to perform services for Cardinal or as otherwise permitted by law.

5. Insurance and Claim Information

Cardinal provides appraisal services in connection with vehicle insurance claims.

Cardinal may use claim information and documents provided by a customer to prepare the requested appraisal.

Cardinal does not determine insurance coverage, make claims decisions for an insurer, or determine the legal rights or obligations of the parties merely because Cardinal receives claim information.

Cardinal's services are limited to the services identified in the Terms of Service and the customer's service agreement.

6. Data Security

Cardinal takes reasonable administrative, technical, and physical measures designed to protect information in its possession against unauthorized access, acquisition, disclosure, alteration, or destruction.

No method of transmitting or storing information electronically is completely secure. Accordingly, Cardinal cannot guarantee that information will never be accessed, disclosed, altered, or destroyed as the result of a security incident.

7. Data Retention

Cardinal retains information for as long as reasonably necessary to provide requested services, maintain business and accounting records, comply with legal and regulatory obligations, resolve disputes, enforce agreements, establish or defend legal claims, and protect Cardinal's rights.

Appraisal reports, supporting documents, photographs, claim information, communications, and transaction records may therefore be retained after completion of an individual appraisal.

When information is no longer reasonably necessary for these purposes, Cardinal may delete, destroy, de-identify, or otherwise dispose of it in accordance with its ordinary business practices and applicable law.

8. Third-Party Services and Websites

The website may contain links to or use services operated by third parties, including payment processors, analytics providers, vehicle-information providers, insurers, or other service providers.

Cardinal does not control the privacy practices of third parties.

Information submitted directly to a third-party website or service is governed by that third party's privacy policy and terms.

For payment transactions, Stripe's handling of payment information is governed by Stripe's applicable privacy practices.

9. Your Privacy Requests

You may contact Cardinal concerning information that Cardinal maintains about you.

Depending upon the circumstances and applicable law, you may request access to, correction of, or deletion of personal information maintained by Cardinal.

Cardinal may need to verify your identity before responding to a request.

Cardinal may decline or limit a request when permitted or required by applicable law, including when retaining the information is reasonably necessary to provide services, comply with legal obligations, establish or defend legal claims, prevent fraud, maintain business records, or protect the rights or safety of Cardinal or another person.

Privacy requests may be submitted to:

Cardinal Appraisal Group

c/o The Craven Firm, PLLC

14555 N Scottsdale Rd Ste 320

Scottsdale, AZ 85254

jeff@cravenfirm.com

480-582-1547

10. California Privacy Rights

If and to the extent California privacy law applies to Cardinal and to your information, California residents may have additional privacy rights under applicable California law.

Depending upon the circumstances, these rights may include rights concerning access to, correction of, deletion of, or information about the collection and use of personal information, as well as rights relating to the sale or sharing of personal information.

Cardinal does not sell personal information for monetary consideration.

Cardinal also does not currently use personal information for cross-context behavioral advertising.

Where applicable California law requires Cardinal to provide a consumer with an opt-out from the sale or sharing of personal information, Cardinal will provide the required opt-out mechanism.

Cardinal will also honor qualifying opt-out preference signals, including Global Privacy Control (GPC), to the extent required by applicable California law.

California residents may submit privacy-related requests using the contact information provided in this Privacy Policy.

11. Children's Information

Cardinal's website and services are not directed toward children under 13 years of age.

Cardinal does not knowingly collect personal information from children under 13 through the website.

If you believe that a child under 13 has provided personal information to Cardinal, please contact us.

12. Legal Disclosures

Cardinal may disclose information when reasonably necessary to:

• comply with a subpoena, court order, law, regulation, or other legal requirement;
• respond to a governmental or regulatory request;
• investigate fraud or unlawful activity;
• enforce the Terms of Service or other agreements;
• protect the rights, property, or safety of Cardinal, its customers, or others; or
• establish, exercise, or defend legal claims.

13. Data Breaches

If Cardinal experiences a security incident involving personal information that requires notification under applicable law, Cardinal will investigate the incident and provide notices required by applicable law.

Nothing in this Privacy Policy limits Cardinal's obligations under applicable data-breach notification laws.

14. Changes to This Privacy Policy

Cardinal may update this Privacy Policy from time to time to reflect changes in its business practices, website functionality, technology, applicable law, or other circumstances.

When changes are made, Cardinal will update the “Effective Date” appearing at the beginning of this Privacy Policy.

Unless otherwise required by law, the updated Privacy Policy will become effective when posted on the website.

15. Governing Law

This Privacy Policy is governed by the laws of the State of Arizona, except to the extent federal law or another mandatory applicable law provides otherwise.

The governing-law and venue provisions contained in Cardinal's Terms of Service apply to disputes concerning this Privacy Policy to the extent legally permissible.

16. Contact Information

Questions concerning this Privacy Policy or Cardinal's privacy practices may be directed to:

Cardinal Appraisal Group, LLC

c/o The Craven Firm, PLLC

14555 N Scottsdale Rd Ste 320

Scottsdale, AZ 85254

jeff@cravenfirm.com

480-582-1547