Privacy Policy

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the right to request deletion of your personal information, and the right to know whether your personal information has been sold or disclosed. We do not sell personal information. To exercise any of these rights, submit a request to legal@getnegotiated.com. We will respond within 45 days of receiving a verifiable request.

Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of this website after any update constitutes acceptance of the revised policy. We encourage you to review this page periodically.

Children's Privacy

This website and our services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 13. If you believe a minor has submitted information through this site, contact us at legal@getnegotiated.com and we will delete it promptly.

Cookies and Analytics

We use Google Analytics and Google Ads conversion measurement (Google LLC) to understand site use and whether an advertising click results in an inquiry. When you submit a lead form, Google Analytics and Google Ads may collect the email address and phone number you enter and send them to Google in hashed form (converted into a coded string that cannot be read back as the original) so Google can measure whether an advertising click led to your inquiry. We may also upload hashed email addresses and phone numbers of inquiries and clients to Google Ads to measure whether an advertising click led to an engagement. Google processes this data under its own terms. Those services may use cookies or similar browser storage and may receive page, device, referral, approximate location, and interaction data under Google’s own privacy terms.

We also use the Reddit Pixel (Reddit, Inc.) to measure whether Reddit advertising results in site visits and inquiries. The pixel may set cookies and may receive page, device, referral, and interaction data, and when you submit a lead form it records a lead event with a random submission identifier. We do not send your name, email address, phone number, or other form contents to Reddit. The Reddit Pixel is not loaded when your browser sends a Global Privacy Control signal. Reddit processes this data under its own privacy terms.

For campaign attribution, this site stores only explicitly allowlisted fields (gclid, wbraid, gbraid, gad_source, gad_campaignid, utm_source, utm_medium, utm_campaign, utm_content, and utm_term), the landing pathname, and a capture timestamp for up to 90 days. We never persist an arbitrary query string. If you submit a lead form, those allowlisted fields may be included with your inquiry so we can measure advertising performance.

If you book a consultation through the embedded Calendly scheduler, the stored utm_source, utm_medium, utm_campaign, and utm_term values are passed to Calendly with your booking, and a Google click identifier (gclid, gbraid, or wbraid), if one was stored, is passed in Calendly's utm_content field so the booking can be matched to the advertising click. When a booking is completed, the site records a consultation-booked event in Google Analytics with the landing pathname, whether a click identifier was present, and the campaign and source. It does not send your name, contact details, booking details, or the click identifier itself to Google Analytics.

We use Vercel Analytics and Speed Insights for aggregate traffic and performance measurement. We load Elfsight on page load for the hero review widgets and review badges, and as lower review areas approach the viewport, and Cloudflare Turnstile when a protected form approaches the viewport or a consultation modal opens. Those providers may receive technical request data such as IP address, browser information, and interaction signals needed to deliver their services.

Lead forms are sent directly to Web3Forms and include the information you enter, consent evidence, Turnstile verification, and any allowlisted campaign attribution described above. The consultation scheduler in the booking pop-up and on the Schedule a Consultation page is provided by Calendly, LLC and loads from Calendly only on those scheduling experiences. The name, email address, phone number, and answers you enter when booking are sent directly to Calendly, which stores them with your booking and sends booking confirmations and reminders. Stripe checkout links connect you to Stripe when followed, the Stripe Climate badge in the footer loads from Stripe, and the BBB accreditation seal in the footer loads from the Better Business Bureau. Each provider processes data under its own privacy terms.

Blocking cookies, local storage, or third-party requests may limit analytics and attribution and may prevent reviews, scheduling, or bot-protected forms from working correctly. We do not sell personal information. Apart from the hashed Google conversion measurement described above, we do not use the form information you submit for third-party advertising.

Data Breach Notification

If we discover an unauthorized disclosure or breach affecting the client data we hold for your engagement, we will notify you in writing within 72 hours of discovering it.

Data Retention

We retain client engagement records for three years following the completion or termination of an engagement, consistent with standard business record-keeping practices and applicable New Jersey law. If you would like your information removed from our records following a completed or cancelled engagement, contact us at legal@getnegotiated.com with a deletion request. We will process your request within 30 days.

Deletion of Personal Data

You have the right to request deletion of your personal information at any time. To submit a deletion request, email legal@getnegotiated.com with the subject line "Deletion Request." We will verify your identity and process your request within 30 days. Please note that we may retain certain records where required by law or where necessary to complete an active engagement.

Disclosure of Personal Data

We may disclose your personal information if required to do so by law, or in response to valid requests by public authorities such as a court order, subpoena, or government investigation. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate potential violations of our Terms of Service.

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any change in ownership or use of your personal information.

Do Not Track

Some browsers transmit Do Not Track or Global Privacy Control signals. The site does not currently change analytics or advertising-measurement behavior in response to Do Not Track. When your browser sends a Global Privacy Control signal, the site does not load the Reddit Pixel. Where applicable law requires us to recognize an opt-out signal, we will treat the signal as required. You can also block or clear cookies and local storage in your browser, though bot-protected forms and embedded services may be affected.

How We Use Your Information

The information you provide is used exclusively to facilitate your advisory engagement with Negotiated LLC. Specifically, we use your contact information to reach out regarding your inquiry, your vehicle details to prepare for dealer negotiations on your behalf, and your email address to send engagement confirmations and updates.

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not send unsolicited commercial email.

Information Sharing

We share information only as needed to provide the services you request, operate the site, meet legal obligations, or protect users and the business. Service providers include Web3Forms for lead delivery, Cloudflare for bot protection, Google for analytics and Ads measurement, Calendly for consultation scheduling, Vercel for hosting and performance analytics, Microsoft Clarity for anonymized session analytics (how visitors use the site), Reddit for advertising conversion measurement, Elfsight for reviews, and Stripe for checkout links and the climate badge.

In the course of conducting a negotiation on your behalf, we may communicate with automotive dealers and financing institutions. We share only the transaction information needed for the engagement and do not share your personal contact information with dealers without your consent. Providers may not use information we give them beyond providing their contracted service, subject to their own terms and legal obligations.

Information We Collect

When you submit an intake, audit, or consultation form, we collect the information you provide, such as your name, phone number, email address, vehicle details, purchase timeline, concerns, and SMS consent evidence. If you arrived through a measured campaign, we may also collect the allowlisted campaign fields, landing pathname, and capture time described in “Cookies and Analytics.” We do not retain arbitrary URL query strings for attribution. When you book a consultation through the Calendly scheduler, we receive the name, email address, phone number, and answers you provide there, together with the campaign fields described in “Cookies and Analytics.”

Our hosting, analytics, bot-protection, review, scheduling, and payment providers may receive standard technical data such as IP address, browser or device characteristics, referring page, pages visited, performance measurements, and interaction signals. Payment-card information is collected by Stripe on its hosted checkout and is not collected by this site.

Nevada Privacy Rights

Nevada residents may opt out of the sale of their personal information under Nevada SB 220. We do not sell personal information. If you have questions, contact us at legal@getnegotiated.com with "Nevada Privacy" in the subject line.

Security

This website is served over HTTPS with an SSL/TLS certificate. Form submissions are transmitted over encrypted connections. We do not store credit card numbers, social security numbers, or other sensitive financial identifiers on our servers.

SMS and Mobile Data Sharing

Mobile information and SMS consent will not be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Third-Party Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and this policy does not apply to them. We encourage you to review the privacy policy of any third-party site you visit.

Transfer of Personal Data

Because Negotiated LLC provides nationwide advisory services, your personal information may be processed and stored in locations outside your state of residence. By using our website and services, you consent to the transfer of your information to the State of New Jersey, where our offices are located, and to any other jurisdiction where our service providers operate. We take reasonable steps to ensure that your data is treated securely and in accordance with this privacy policy regardless of where it is processed.