Your website's privacy policy
Every website has a Privacy policy page in its footer, written in your dealership's name from how your site actually works. Write your own if you prefer.
Every site has a /privacy page, linked at the bottom of every page next to Accessibility, and from the cookie banner when your site shows one. Out of the box it carries a privacy policy in your dealership's name, written by AutoDealer.io from how your website actually works.
What it says
The policy is written from your site's settings, so it describes what your site does, and nothing it does not:
- Your forms: what a question about a car, a test drive request, the contact form, financing pre-qualification and a trade-in value send you. It says the pre-qualification form is not a credit application.
- Your chat assistant, when it is on: messages go to the AI company that writes its replies (Anthropic), the conversation stays in the shopper's browser, and a summary reaches you when they ask to be contacted.
- Your loan-account sign-in, when your borrower portal is on.
- Saved cars and car alerts: the cars a shopper saves stay in their browser; when they ask for email alerts, their address, the cars, the words they agreed to and a copy of each alert are kept, and no alert goes out until they confirm.
- Tools from other companies: it names the Google Analytics, Google Tag Manager and Meta Pixel tags you connected under Measurement and privacy, and your Custom code. It says whether they wait for the banner or load at once, and that Global Privacy Control stops them. With none of them, it says your site uses none.
- Content from other companies: your pictures (Cloudflare), the map on your contact page (Google Maps), reviewer photos (Google) when your Google reviews are connected, and a car's video (YouTube or Vimeo) when a shopper presses play.
- The rest: who you share information with, the shopper's choices and rights, how long you keep information (as long as you need it, and longer when the law requires), children, changes to the policy, and how to reach you, with your main location's email, phone and address.
When you change a setting the policy describes (for example, you add the Meta Pixel), the policy changes with it, and its Last updated date moves to that day. On a Spanish site the policy is in Spanish.
The policy is not legal advice. It describes how your website works; it cannot know everything your dealership does with information away from the website. Have your own lawyer read it, and write your own if your business needs something different.
Write your own
Under Website, Pages, add a page with the slug privacy (or privacy-policy) and publish it. Its title and text replace ours on /privacy, and the footer link opens it. Unpublish it and ours is back.
FAQ
Does my dealership need a privacy policy?
In general, yes. California's online privacy law (CalOPPA) requires one on any commercial website that collects personal information from California residents, and your forms do. Other states and federal rules add their own requirements; ask your counsel what applies to you.
Does it replace the privacy notice I give customers who finance?
No. That is a separate notice under federal law (the Gramm-Leach-Bliley Act), given when a customer finances a vehicle with you. The website policy says other notices may apply.
Can I hide the Privacy policy link?
No. It is on every site, like the Accessibility link.
Where does it get my phone number and address?
From your main location, the same details your footer and contact page show. With none set, the policy points shoppers to your Contact page.