Welcome to Caraito!

Caraito is owned and operated by Perla World LLC.

Caraito values your privacy and the protection of your personal data. This privacy policy describes what information we collect from you, how we collect it, how we use it, how we obtain your consent, how long we keep it in our databases and, if necessary, who we share it with when you use the Caraito platform and services.

By using the Caraito platform and services, you are accepting the practices described in this privacy policy. Your use of the platform is also subject to our terms and conditions. In this privacy policy, the words “platform” refer to the Caraito platform, "we", "us", "our", and "Caraito" refers to Perla World LLC, and "you" and "user", refers to you, the Caraito user.  

This privacy policy may change from time to time. Your continued use of the platform and services after we make changes to this privacy policy will be deemed acceptance of those changes, so please check this policy periodically for updates.

This privacy policy has been developed and is maintained in accordance with all applicable national and international privacy and data protection laws and regulations and specifically, the Personal Information Protection and Electronic Documents Act (PIPEDA) and the California Consumer Privacy Act (CCPA).

 

1. GENERAL INFORMATION

The personal data of users that is collected and processed through the Caraito platform will be under the responsibility and in the charge of:

• Perla World LLC.

• Email: info@caraito.com

 

2. HOW WE OBTAIN YOUR CONSENT

By using our platform, users consent to the collection, use, storage and processing of their personal information as set forth in this Privacy Policy. This consent is considered granted when the user performs any of the following activities:

• Visits and browses our website.

• Uses any of the functionalities available on the platform.

• Uses our services, either through the free plan or any payment plan.

• Purchases a payment plan through the methods provided.

• Communicates with us through the contact form or using any of the contact details available on the platform.

This consent constitutes a valid legal basis in accordance with the data protection laws applicable in the United States, including the California Consumer Privacy Act (CCPA), and in Canada, in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA). When carrying out any of the aforementioned activities, the user acknowledges and accepts that they have been informed about the use of their personal information, and that they give their consent freely, specifically, informed and unequivocally.

 

3. TYPES OF DATA COLLECTED

CARAITO collects different types of personal data provided directly by the user or collected automatically when the user interacts with the platform. The information collected may vary depending on the activity carried out by the user, such as visiting the website, using the platform's functionalities, purchasing a payment plan or communicating with us. The categories of data that we may collect are described below:

3.1. Personal data: Information that the user provides voluntarily when interacting with the platform, including, among others:

• Full name

• Email address

• Telephone number

• City and country of residence

3.2. Registration data and user account: In the event that the user creates an account (if applicable), we may collect:

• Username

• Password or other authentication method

• User preferences in relation to vehicles

3.3. Payment data: When the user purchases a payment plan, we collect the information necessary to process the transaction, including:

• Name of the cardholder

• Credit or debit card information (processed by a third-party payment provider)

• Billing address

• Purchase history

3.4. Platform usage data: Information related to the user's use of our services, such as:

• Questions answered in the recommendations questionnaire

• Search preferences

• Results and recommendations generated by the platform

• Interactions with advisors

3.5. Data collected automatically by the website: When the user accesses the website, we may automatically collect certain technical data, such as:

• IP address

• Browser type and version

• Operating system

• Pages visited and duration of the visit

• Reference URL

3.6. Analytical data: CARAITO may use analysis tools to collect data on user behavior on the website, including:

• Frequency of use of certain functions

• Time spent on the platform

• Data on clicks, scrolling and browsing patterns

3.7. Contact and communication data:: If the user communicates with us through the contact form or by other means, we may collect:

• Full name

• Email address

• Telephone number (if provided)

• Content of the message or query

• Any additional files or information that the user shares

 

4. HOW LONG WE KEEP YOUR DATA

The personal data provided by users through the platform will be kept for the time necessary to fulfill the legitimate purposes described in section 5 of this policy and/or until the user stops using the platform, closes the user account, or requests the deletion of their data. Caraito may retain personal data for a longer period provided that the user has given consent to such processing, as long as such consent is not withdrawn. In addition, Caraito may be obliged to retain personal data for a longer period if required to do so in order to comply with a legal obligation or by order of an authority. Once the retention period has expired, the personal data will be deleted. Therefore, the right of access, the right of deletion, the right of rectification and the right of data portability cannot be asserted after the retention period has expired.

 

5. PURPOSES OF DATA COLLECTION (LEGITIMATE PURPOSES)

CARAITO collects and processes user data only for specific, explicit and legitimate purposes that are directly related to the provision of the services offered on the platform. The specific purposes of the collection for each type of data are detailed below:

5.1. Personal data: It is collected for the purpose of:

• Identifying and authenticating the user when he/she interacts with the platform.

• To personalize the user experience, including sending recommendations and content tailored to the user's interests.

• To facilitate communication with the user in case of queries, assistance or relevant updates.

• To manage any request or interaction initiated by the user.

• To connect vehicle dealers with users.

5.2. Registration data and user account: These are collected to:

• Create, maintain and manage the user's account within the platform (if applicable).

• To allow access to personalized features or features reserved for registered users.

• To save user preferences, settings and responses to offer a more efficient and continuous experience.

5.3. Payment data: It is collected for the purpose of:

• Correctly processing transactions linked to the purchase of payment plans.

• Issuing payment receipts and keeping financial records.

• Detect and prevent fraud related to payment processing.

5.4. Platform usage data: Collected for:

• Generating personalized recommendations based on user responses and preferences.

• Analyzing the user's driving profile and needs to offer more accurate advice.

• Continuously improving the quality and accuracy of the services provided by the platform.

5.5. Data collected automatically by the website: They are collected with the aim of:

• Ensuring the technical functioning and security of the website.

• Adapting the website to the device, browser and user preferences.

• Monitoring the performance of the platform and correcting technical errors.

5.6. Analytical data: They are collected to:

• Better understand the general behavior of users on the website.

• Evaluate the performance of the functionalities and content offered.

• To make informed decisions about improvements to the user experience and the evolution of the product.

5.7. Contact and communications data: These are collected to:

• Respond to queries, support requests or comments sent by the user.

• Keep the user informed about the status of their requests or contracted services.

• Keep a record of communications with the user for administrative or customer service purposes.

 

6. HOW WE SHARE INFORMATION

The personal information of our customers and users is an important and fundamental part of our platform. Under no circumstances will we sell or share information with third parties that has not been previously authorized by the user or owner of the personal data. We share user information only and exclusively as described below.

6.1. Third-Party Service Providers. We use third-party services to perform certain functions on our platform. Some of these functions and services include: hosting the website, processing payments (Stripe), data storage services, sending emails, and performing tracking and analysis functions on the platform.

These third-party services and tools may have access to personal information needed to perform their functions, but may not use that information for other purposes. Information shared with these third-party services will be treated and stored in accordance with their respective privacy policies and our privacy policy.

6.2. Transfer of data to third parties for advisory purposes: In order to improve the user experience and facilitate the vehicle search process, Caraito may share certain personal data provided by the user, such as their email address, with dealers, distributors, or other third parties linked to the automotive sector, when it is considered that they can offer options in line with the preferences, needs, or interests expressed through the platform.

By using the services and the platform, the user expressly authorizes this transfer of data, which will be carried out in a limited manner and for purposes strictly related to Caraito's main purpose. Although Caraito requires third parties to comply with appropriate data protection standards, it is not responsible for the subsequent use that such third parties may make of the information or for the conditions or communications that may arise as a result of such interaction. The user may object to this transfer at any time by making an express request through the contact channels provided in this policy.

6.3. Marketing: By using our services and platform, you consent to the use of your personal information, including name and email address, for the sole purpose of receiving marketing communications about our platform and services. Caraito respects your privacy and does not share this information with unaffiliated third parties. If you wish to stop receiving marketing communications, you can unsubscribe at any time by using the "unsubscribe" option available in the same marketing emails or by sending your request through our contact information.

6.4. Business Transfers. In the event that Caraito creates, merges with, or is acquired by another entity, your information will most likely be transferred. Caraito will email you or place a prominent notice on our platform before your information becomes subject to another privacy policy.

6.5. Protection of Caraito and others. We release personal information when we believe release is appropriate to comply with the law, enforce or apply our Terms and conditions and other agreements, or protect the rights, property, or safety of Caraito, our users or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

6.6. With Your Consent. Other than as set out above, you will receive notice when personally identifiable information about you might go to third parties, and you will have an opportunity to choose not to share the information.

 

7. DATA BREACH NOTIFICATIONS

In the event of a security breach that compromises the confidentiality of the personal data of our users, Caraito undertakes to notify those affected in a timely manner. This notification will be made through the means of contact that have been provided by the user on our platform. We will take all reasonable measures to protect the information and remedy any situation that compromises the security of your data.

 

8. INTERNATIONAL DATA TRANSFER

Caraito may transfer users' personal data outside their country of origin due to the use of hosting, storage and processing services provided by third parties that operate servers located in different countries. These transfers are necessary to guarantee the continuous functioning of the platform and provide an efficient user experience. Although Caraito is based in the United States, the technological infrastructure used may involve data being stored or processed in jurisdictions with data protection laws that differ from those of the country of origin of the data.

Caraito is committed to ensuring that all international transfers of personal data comply with applicable data protection regulations, including appropriate security measures to safeguard user information. This includes, among other things, the application of standard contractual clauses, the assessment of the adequacy of data protection in the receiving country, and compliance with the privacy regulations applicable to third-party services.

By using Caraito, users consent to the transfer, storage and processing of their data on servers located outside their country of residence, recognizing that such transfers are necessary for the operation of the platform. Caraito undertakes to take all reasonable measures to protect the integrity and security of personal data during such international transfers.

 

9. PROTECTION OF YOUR INFORMATION

We grant access to your personal information only to those outside persons or services that have a legitimate need to know it and in accordance with our privacy policy. We adhere to industry-recognized security standards to protect your personal information, both during transmission and in storage. However, it is important to note that no method of transmission over the Internet or electronic storage is foolproof and 100% secure. Therefore, while we at Caraito strive to implement commercially viable data protection methods, we cannot ensure absolute security of your personal information. We undertake not to sell, distribute or transfer your personal data to unauthorized third parties, unless we have your explicit consent or are required by law to do so.

 

10. RIGHTS

Users who provide information through our platform, as data subjects, have the right to access, rectify, download or delete their information, as well as to restrict and oppose certain processing of their information. While some of these rights apply generally, others only apply in certain limited circumstances. These rights are described below:

• Access and portability: to access and know what information is stored on our servers, you can send us your request through our contact information.

• Rectification, restriction, limitation and deletion: You may also rectify, restrict, limit or delete much of your information.

• Right to be informed: Users of our platform will be informed, upon request, about what data we collect, how it is used, how long it is kept and whether it is shared with third parties.

• Object: Where we process your data based on our legitimate interests, as explained above, or in the public interest, you may object to this processing in certain circumstances. In such cases, we will stop processing your information unless we have legitimate grounds to continue processing it or where necessary for legal reasons.

• Withdraw consent: Where you have previously given your consent, for example to allow us to process and store your personal information, you have the right to withdraw your consent to the processing and storage of your information at any time. For example, you can withdraw your consent by updating your settings. In certain cases, we may continue to process your information after you have withdrawn your consent if we have a lawful basis for doing so or if your withdrawal of consent was limited to certain processing activities.

• Complaint: If you wish to lodge a complaint about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority. Users may exercise all of these rights by contacting us via the contact information or contact page.

• Rights related to automated decision-making, including profiling: Users may request that we provide them with a copy of the automated processing activities we conduct if they believe that data is being unlawfully processed.

Users or holders of personal data provided through the platform may exercise these rights over their personal data at any time and without limitation by sending their request through our contact information. The request to exercise their rights will be attended and answered within a maximum period of 10 working days.

 

11. RIGHT OF EDITING AND DELETION

We are committed to ensuring that our users maintain full control over their data. We therefore grant users the explicit right to modify or delete any information they have provided to the platform.

Users may exercise this right directly through their user account by facilitating the editing or deletion of data such as their personal information, profile information, etc. In the event that certain requests cannot be handled through the user account, users may contact us through our contact information to make the necessary edits or deletions.

Our approach is designed to ensure that users have constant and effective control over their data, allowing them to manage their information in a way that protects their privacy and autonomy.

 

12. PROTECTION OF CHILDREN'S ONLINE PRIVACY

We comply with the requirements of national and international data protection regulations regarding the protection of personal data of minors. We do not collect any information from children under the age of 13 (minimum age allowed to collect and process information without parental or legal guardian consent). If we become aware that a child under the age of 13 has provided us with personal information, we will take steps to delete such information.  

 

13. THIRD PARTIES

Except as expressly included in this privacy policy, this document addresses only the use and disclosure of information Caraito collects from you. If you disclose your information to others, whether other users or Caraito vendors, different rules may apply to their use or disclosure of the information you disclose to them. Caraito does not control the privacy policies of third parties, and you are subject to the privacy policies of those third parties where applicable. Caraito is not responsible for the privacy or security practices of another Internet platform, including those linked to or from the Caraito platform. Please review the privacy policies of third-party websites or services that you access through the Caraito platform.

 

14. CHANGES TO PRIVACY POLICY

We reserve the right to change our privacy policy at any time. Changes will be promptly notified to our users and posted on the website. Your continued use of our website and services following these changes constitutes acceptance of the changes.

 

15. CONTACT INFORMATION

If you have questions or concerns about this privacy policy and the treatment and security of your data, please contact us through our contact forms or by using the following contact information:

Perla World LLC.

Email: info@caraito.com