Privacy policy
exoticcar.loans (ExoticCar.Loans, "we") is an independent website. Contact us through the form on /contact/. This page says what we collect when you use the site or write to us, what we do with it, and what you can ask us to do about it.
What we collect
The contact form sends us what the message is about (question, correction, privacy request or legal notice), your name, your email address and your message.
The "ask about your loan" form sends us your name and email address, plus what you choose to tell us about the car and the loan: year, make and model, what kind of car it is, who's selling it (or a refinance or cash-out), price, down payment, the term you want, any interest in a balloon, who the car will be titled to (you or a business), the state you live in, your own guess at your credit range, where you are in buying, and any message. The credit range is your guess from a list. We don't check your credit and we don't ask for a Social Security number, date of birth, income, or bank or account numbers. Please don't send them.
With either form we also receive the page you sent it from, which form it was, the consent sentence shown next to the button, and, if your visit started from a link carrying campaign tags (such as utm_source) or from another website, those tags and that referring address. Your browser keeps those two items for the visit only (session storage) and adds them to the form when you send it.
The calculator runs in your browser. The numbers you type into it aren't sent to us. If you press the button that carries your numbers to the ask form, the price, down payment, term and balloon percentage are put in that page's web address, so they pass through our hosting provider's systems like any page request, and they're sent to us only if you then send the form.
When you browse, our hosting provider, Cloudflare, processes technical information such as your IP address, browser type and the pages you request, to deliver the site and protect it from abuse.
Analytics and cookies: the site runs no analytics, advertising or tracking tools and sets no cookies of its own.
Where it goes and how we use it
What you send through a form is stored in a database we run on Cloudflare (Cloudflare D1) and emailed to us through Cloudflare's email service, so a person can read it and reply. We use it to reply to you and help with what you asked, to keep the site working and secure, and to meet legal obligations. Nothing you send is passed to a lender, broker, dealer or auction house.
Sharing
We don't sell what you send us, and we don't share it with lenders, brokers, dealers, auction houses or advertisers. The only companies that handle it are the service providers that run the site for us (Cloudflare, for hosting, the database and email delivery), and only to provide that service. We would disclose information if the law requires it, such as a valid subpoena. If the site is ever sold, its records would go to the buyer, and we would post a notice here first.
If we ever want to share what you send with a lender or anyone else, we'll update this policy first and ask for your consent on the form before anything is shared. Messages sent before that change won't be shared.
How long we keep it
We delete form messages 24 months after we receive them, sooner if you ask. Cloudflare keeps its own technical request logs for a short period under its policies.
Your rights
You can ask us what we hold about you, ask us to correct it, ask us to delete it, or ask for a copy, by sending a privacy request through the contact form (choose "Privacy request"). We'll reply by email within 45 days. Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with consumer privacy laws have these rights under those laws to the extent they apply to us, and we give them to everyone. We don't sell or share personal information for targeted advertising, so there is nothing to opt out of, but we honor Global Privacy Control signals as an opt-out anyway. We won't treat you differently for using any of these rights. If we turn down a request, reply to our answer to appeal and someone who didn't handle the first request will review it.
Children
This site is for adults buying or financing a car. It isn't meant for anyone under 18, and we don't knowingly collect information from children under 13. If you think a child has sent us information, tell us through the contact form and we'll delete it.
Security
The site is served only over HTTPS, form messages are stored with access limited to the people who answer them, and we ask for no financial account or ID numbers. No system is perfectly secure, so please don't send anything you'd not want stored.
Changes
When this policy changes, we update this page and the date at the top. A change that would share what you send with anyone new only applies after we've asked for your consent.
Contact
Privacy questions and requests go through the contact form.