PRIVACY POLICY
The International Automotive Oversight Bureau (“IAOB,” also referred to as “we,” “our,” “us”) was established to
implement and manage the IATF 16949 registration scheme oversight activities on behalf of the IATF.
1. What Information Do We Gather?
When you visit our Website and related Portals (“Site(s)”), we collect only the information and personal data you
have agreed to provide to us that is necessary to identify your needs and to provide you with better service.
Through your use of the Site or registration as a new user, we may request personal data including, but notlimited to:
•
•
•
•
•

Name, company, and job title
Contact information including email address and cell phone number
Demographic information including postal code, preferences, and interests
Internet Protocol (“IP”) Address and other persistent identifiers
If you become a registered user or if you conduct transactions through this Site, we will collectinformation about the transactions you engage in while on the Site and other potential activities
on the Site. This information may include, without limitation, areas of the Site that you visit,transaction type, content that you view, download, or submit, transaction amounts, payment, andbilling information as well as the nature, quantity, and price of the services you exchange and theindividuals or entities with whom you communicate or transact business.

Some of this personal data, including name, company, and contact information, will only be collected if you
voluntarily provide it during the user registration process. We may also track information such as the domainname and the name of the web page from which you entered our Site, and how much time you spend on eachof our pages. We collect information that is combined with other web visitors' information, such as how manytimes visitors click on each web page and the methods by which our Site was found.
We may collect IP addresses and website usage information from you when you visit our Site via the use of"cookies." An IP address is a number that is assigned to your computer when you are using your browser on
the Internet. A cookie is a small file that is stored on the hard drive of your computer ready for future accesswhen you return to our Site. We use cookies to deliver web content specific to you and to keep track of youronline order activity. Cookies cannot pass viruses, harm your computer or pass on private information such as
an email address without the computer user's intervention. Cookies contain session identification numbers thatallow our systems to recall previous sessions for authentication efforts and assemble information from ourgathered data. You can configure your computer's browser to alert you when a site is attempting to send you a
cookie and allow you to accept or refuse the cookie. Further information on how to prevent cookies from being
stored on your device can be found at http://www.allaboutcookies.org under the ‘manage cookies’ section.
Alternatively, you can access further information by going to the help menu within your internet browser. To opt
out of being tracked by Google Analytics across all websites visit: http://tools.google.com/dlpage/gaoptout.
We use cookies to give you the best experience on our Site. If you continue without changing your cookie
settings, we assume that you consent to our use of cookies on this device. You can change your cookie settingsat any time but if you do, you may lose some functionality on our Site.
2. What Do We Do With the Personal Information We Collect?
You will be asked to provide personal data in certain fields on this Site that allow you to be able to use our
Services. The personal data we collect is used only for the purpose we state at the time of collection or for
purposes contained below. For example, our uses may include, but are not limited to, the following:

IAOB Privacy Policy
18 April 2023

Page 1 of 11

•
•
•

•
•

•

•

•

To process transactions. IAOB uses personal data such as name, work address, telephone number,email address, and company/institution to engage in interactions with you, including contacting you about
your transactions with the site.
To process payments. We use financial/credit card and payment information to process your order andmay need to share some of this information with credit card clearing houses and other third parties tocomplete the transaction.
To provide support or other services. IAOB may use your personal data to provide you with support
or other services that you have requested. IAOB may also use your personal information to responddirectly to your requests for information, including registrations for newsletters, webinars, or other specificrequests, or pass your contact information to the appropriate entities for further follow-up related to yourinterests.
To provide information based on your needs and respond to your requests. IAOB may use yourpersonal data to provide you with notices of new IATF developments.
To select content, improve quality, and facilitate the use of the websites. IAOB may use yourpersonal data, including the information gathered as a result of site navigation and electronic protocols
and cookies (including third-party cookies), to help create and personalize website content, improve
website quality, track marketing campaign responsiveness, evaluate page response rates, conductusability testing, and facilitate your use of the websites (for example, to facilitate navigation and the login
process, avoid duplicate data entry, enhance security, keep track of shopping cart additions, andpreserve order information between sessions).
To engage with third parties. We may share your personal data with third parties in connection withservices that these individuals or entities perform for or with us. These third parties are restricted fromusing this data in any way other than to provide services for us or for the collaboration in which they and
IAOB are contractually engaged. We carefully select these third parties, and they are obligated to keep
your data secure. From time to time, we may also share your information with third parties whom we thinkmight provide content, products, or services of interest to you.
To protect IAOB content and services. We may use your personal data to prevent potentially illegal
activities and to enforce our terms and conditions. We also use a variety of technological systems todetect and address anomalous activity and to screen content to prevent abuse, such as spam. These
efforts may, on occasion, result in a temporary or permanent suspension or termination of some functions
for some users. By using our Site, you acknowledge and agree that we may access, retain and disclose
the personal data we collect and maintain about you if required to do so by law or in a good faith belief
that such access, retention, or disclosure is reasonably necessary to: (a) comply with legal process (e.g.
a subpoena or court order) or law; (b) enforce our Terms of Service, this Privacy Policy, or other contracts
with you, including investigation of potential violations thereof; (c) respond to claims that any content
violates the rights of third parties; (d) respond to your requests for customer service; and/or (e) protect
the rights, property or personal safety of IAOB, its agents and affiliates, its users and/or the public. This
includes exchanging information with other companies and organizations for fraud protection, compliancewith applicable law, spam/malware prevention, and similar purposes.
To protect IAOB information assets as well as your own personal data. Our Information Security
Program protects the confidentiality, integrity, and availability of IAOB information assets by following arisk management approach based on policies, standards, guidelines, and procedures to meet security
objectives while supporting business and operational goals.

To the extent that we collect certain demographic information about you, we may use this information in ourmarket research, but we will do so only after we “anonymize” or “pseudonymize” the data, i.e., remove
information that would confirm your identity. We will not use your personal data, however, to send commercial
or marketing messages to you unless we have a legal basis for doing so, such as your consent or a contract
with us for which, in either case, you will have the ability to opt out of by sending an email to contact_us@iaob.org.

IAOB Privacy Policy
18 April 2023

Page 2 of 11

This Site does not collect personal data when you browse the Site and request pages from our servers unless
you voluntarily and knowingly provide such information to us. This means that we will not know your name, youremail address, or any other personal data just because you browse the Site unless you:•access the Site from a link in an email that we have sent to you;•have created a profile and you either log in to your account or choose to be remembered via your cookie
or your web-enabled mobile device.

In these cases, we will know who you are based on the information you previously supplied to us. When you
request a page from our Site, our servers log the information provided in the HTTP request header including the
IP number, the time of the request, the URL of your request, and other information that is provided in the HTTP
header. We collect the HTTP request header information in order to make our Site functions correctly andprovides you with the functionality that you expect to see. We also use this information to personalize content
presented to you, and better understand how visitors use our Site and how we can better tune it, its contents,and functionality to meet your needs. We only use your personally identifiable information for those activities
listed at the time you submit your information to us. For example, if you provide us with an email to inform youof special events, then that is what we will use your email address to do. If we would like to use your personallyidentifiable information for an unrelated activity, we will first request your consent to do so.
3. Who Can Use the Information We Collect and How?
We may provide your personal data to third parties, or third parties may collect personal data from you on ourbehalf if we have contracted with that third party to provide some part of the information or service that you haverequested. Other than those who act on our behalf and except as explained in this Policy, personal data you
provide at this Site will not be transferred to unrelated third parties unless we have a legal basis to do so.
However, please note that personal data provided to this Site is subject to disclosure pursuant to judicial or othergovernment subpoenas, warrants, or orders. We will only provide this information after approximately two weeks
following receipt of a valid subpoena or other legal processes in a civil case.
4. How Do We Protect the Personal Information We Collect?
Security of Personal Data
We are committed to protecting the security of your personal data. Depending on the circumstances, we may
hold your information in hard copy and/or electronic form. For each medium, we use technologies and proceduresto protect personal data. We review our strategies and update them as necessary to meet our business needs,changes in technology, and regulatory requirements. We take our security obligations seriously and so shouldyou. While we are responsible for maintaining the security of this Site, you must also access and use this Site
in a manner that is responsible and secure. In addition, we have implemented a series of policies, procedures,and training to address data protection, confidentiality, and security, and we update and review theappropriateness of these measures on a regular basis.
Disclosure and Sale of Personal Data
IAOB discloses the following categories of personal information for business purposes: Name, Contact
Information
Storage and Transfer of Personal Data
The personal data we collect may be stored and processed in your region, in the United States, or in any othercountry where we, our affiliates, or contractors maintain facilities, including outside the European Union. We takesteps to ensure that the data we collect under this Privacy Policy is processed pursuant to the terms thereof andthe requirements of applicable law wherever the data is located.
IAOB Privacy Policy
18 April 2023

Page 3 of 11

We also collaborate with third parties such as cloud hosting services and suppliers located around the world toserve the needs of our business, workforce, and customers. In some cases, we may need to disclose or transfer
your personal data within IAOB or to third parties in areas outside of your home country. When we do so, wetake steps to ensure that personal data is processed, secured, and transferred according to applicable law.
If you would like to know more about our data transfer practices, please contact contact_us@iaob.org.
Retention of Personal Data
We retain personal data for as long as necessary to provide the services and fulfill the transactions you haverequested, or for other business purposes such as complying with our legal obligations, resolving disputes, andenforcing our agreements. We are required by law to keep some types of information for certain periods of time(e.g., statute of limitations). If your personal data is no longer necessary for the legal or business purposes forwhich it is processed, we will generally destroy or anonymize that information.
5. What Are Your Rights Regarding Your Personal Data?
We respect your right to access and control your personal data. You have choices about the data we collect.
When you are asked to provide personal data that is not necessary for the purposes of providing you with our
Products and Services, you may decline. However, if you choose not to provide data that is necessary to provide
a Service, you may not have access to certain features, Sites, Products, or Services.
Access to personal data: In some jurisdictions, you have the right to request access to your personal data. In
these cases, we will comply, subject to any relevant legal requirements and exemptions, including identity
verification procedures. Before providing data to you, we will ask for proof of identity and sufficient information
about your interaction with us so that we can locate any relevant data. We may also charge you a fee for providing
you with a copy of your data (except where this is not permissible under local law).
Correction and deletion: In some jurisdictions, you have the right to correct or amend your personal data if it isinaccurate or requires updating. You may also have the right to request the deletion of your personal data. Please
note that such a request could be refused because your personal data is required to provide you with the products
or services you requested, e.g. to deliver a product or send an invoice to your email address, or that it is requiredby the applicable law.
Portability: If you reside within the European Union, you have the right to ask for a copy of your personal data
and/or ask for it to be ported to another provider of your choice. Please note that such a request could be limited
to the only personal data you provided us with or that we hold at that given time and subject to any relevant legal
requirements and exemptions, including identity verification procedures.
Marketing preferences: If you have provided us with your contact information, we may, subject to any applicable
Spam Act or similar regulation, contact you via email about our services and events that may be of interest toyou, including newsletters.
E-mail communications you receive from us will generally provide an unsubscribe link allowing you to opt out ofreceiving future emails or to change your contact preferences. E-mail communications may also include a link todirectly update and manage your marketing preferences. Please remember that even if you opt out of receiving
marketing emails, we may still send you important Service information related to your accounts.
If you are in the EU/UK, you have certain additional privacy rights that are listed below in Section 11.
6. How Do You Opt-out of Personal Information Sharing with Our Business Partners?
We may use third-party analytics vendors to evaluate and provide us with information about the use of ourServices and viewing of our content. Some of the information you see on our Sites may be customized based
IAOB Privacy Policy
18 April 2023
Page 4 of 11

on automated predictions about your interests, which predictions are generated from your visits over time andacross different websites, using tools such as Google Analytics. This information allows us to create content ofgreater interest to you and can also be used to serve ads based on your past visits to our Sites. Note that you
can opt out of a third-party vendor's use of cookies, including use by Google, by visiting the Network Advertising
Initiative opt-out page at: http://www.networkadvertising.org/choices.
For more information about how targeted Network Advertising works, please visit: http://www.youradchoices.com
or http://www.networkadvertising.org/understanding-online-advertising.
You may opt-out of third party targeted advertising or analytics in two ways: 1) By directly notifying a Network
Advertising service provider via its opt-out tools (Please see above), or 2) using your browser’s Do Not Track(DNT) settings to indicate that you do not wish to receive targeted advertising based on your overall internet
usage. For more information about DNT and how it works, please visit the Future of Privacy Forum’s website:
http://www.allaboutdnt.com/.
We will make a good faith reasonable effort to honor your DNT browser settings for opting out of receiving
targeted third-party advertising based on your overall Internet usage. Please note that various browsers
frequently update technology or change their settings and business practices without advance notice, and we
may not have the latest information on how to honor your preferences. If you exercise either opt-out option –the cookie opt-out or the browser opt-out – you will continue to receive advertising, but such advertising may not
relate to your specific interests, previous purchases, or search history.
7. How Do You Correct and Update Your Personal Data?
We aim to keep all personal data that we hold accurate, complete, and up-to-date. While we will use our best
efforts to do so, we encourage you to tell us if you change your contact details. If you believe that the information
we hold about you is incorrect, incomplete, or out-of-date, please contact contact_us@iaob.org.
You can change or correct your personal data at any time. Just send an email with your old information andyour corrections to contact_us@iaob.org with "Correction" in the subject line.
8. What is Our Privacy Policy If You Are an Underage Child?
We understand the importance of protecting the privacy of all individuals, especially the very young. Our services
are intended for United States audiences over the age of 18. You must also be old enough to consent to theprocessing of your personal data in your country.
9. What Happens When You Link to a Third-Party Web Site?
If you click on a link and go to another site, you will be subject to that website’s privacy policy. We encourage
you to read the posted privacy policy statement on any website before submitting any personal data at all.
10. What Happens When We Update Our Privacy Policy?
We may on occasion update our Privacy Policy. Your acceptance of any minor changes to this Privacy Policy
is indicated by your continued use of our Services. If we make any material changes to our Privacy Policy, we
will post a notice about the change at a prominent location on our Site. We encourage you to periodically review
our Site and this Privacy Policy for any changes.
11. Your European Union Privacy Rights
Under the General Data Protection Regulation (Regulation EU 2016/679) (also known as GDPR), if you are an
individual protected by the GDPR you may have certain rights as a data subject. To request information aboutor avail yourself of those rights, please send an email to contact_us@iaob.org with "GDPR Request" in the
IAOB Privacy Policy
18 April 2023

Page 5 of 11

subject line. In the email please describe, with specificity, the GDPR right you are requesting assistancewith. Please note additional information may be requested prior to initiation of a request and that IAOB reserves
the right to charge a fee with respect to certain requests. Upon IAOB’s completion of its review, you will be
notified if your request has been granted, denied, or exemptions apply.
12. Your California Privacy Rights
We have adopted the following disclosures to comply with the California Consumer Privacy Act of 2018, as
amended, and implementing regulations (“CCPA”), the California Privacy Rights Act (“CPRA”), effective
January 1, 2023, and other California privacy laws. Any terms defined in the CCPA/CPRA, other California
privacy laws, or in our Privacy Policy have the same meaning when used in this notice.
Information We Collect and How We Use and Share It
We collect information that identifies, relates to, describes, references, is capable of being associated with, or
could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal
information”).
The following is a description of our data collection practices, including the personal data we may collect, thesource of that information, the purposes for which we collect information (in addition to as otherwise set forth
herein), and whether we disclose that information to external parties. We may use any and all of theinformation for any purposes described in this Privacy Notice. We may not collect additional categories of
personal information or use personal information collected for additional purposes that are incompatible withthe disclosed purposes for which the personal information was collected, without providing consumers with
notice. Our collection, use, retention, and sharing of a consumer’s personal information shall be necessary andproportionate to achieve the purposes for which such information is collected or processed, or for anotherdisclosed purpose that is compatible with the context in which the personal information was collected, and notfurther processed in a manner that is incompatible with those purposes.
Retention
We may not retain a consumer’s personal information or sensitive personal information for each disclosed
purpose for which the personal information was collected for longer than is reasonably necessary for that
disclosed purpose.
PERSONAL IDENTIFIERS● We collect your name, address, phone number, and email address when you provide to us. We use thisinformation to provide our Services and to respond to your requests.
● We may collect the name of beneficiaries and the annuitant owner in order to provide the Services.
● We collect your IP address automatically when you use our Services. We use this information to
identify you, and gauge online activity.
● We collect your Device ID automatically when you use our Services. We use this information to monitor
your use and the effectiveness of our Services and to identify you.
PERSONAL DATA PROTECTED AGAINST SECURITY BREACHES (CAL. CIV. CODE § 1798.80(E))● We collect your name, address, and phone number when you create an account with us or provide it tous. We use this information to provide our Services, and respond to your requests.
PROFESSIONAL OR EMPLOYMENT-RELATED INFORMATION● We collect business information, including your name, company, and business contact details from you
when sending us a request through our Site. We use this information to reach out to you.
IAOB Privacy Policy
18 April 2023

Page 6 of 11

EDUCATION INFORMATION● We do not collect any information about the institutions you have attended.
BIOMETRICS● We do not collect information about your physiological, biological, or behavioral characteristics.
When we disclose personal information for a business purpose, we enter a contract that describes the purpose
and requires the recipient to both keep that personal information confidential and not use it for any purpose
except performing the contract. The CCPA prohibits third parties who purchase the personal information
we hold from reselling it unless you have received explicit notice and an opportunity to opt out offurther sales.
Either we or our Service Providers also may use your information for the following Business Purposes (asdefined in the CCPA) on a day-to-day basis:• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, andprosecuting those responsible for that activity.
• Debugging to identify and repair errors that impair existing intended functionality.
Does IAOB “Sell” or “Share” Your Personal Information?
We do not “sell” your personal information as currently defined under the CCPA and as amended by the
CPRA, meaning that we do not rent, disclose, release, transfer, make available, or otherwise communicate
your personal information to a third party for monetary or other valuable consideration. We will not sell yourinformation unless we modify this Privacy Policy and take the additional steps required under the CCPA.
We do not “share” your personal information as currently defined under the CCPA and as amended by the
CPRA, meaning that we do not share, rent, release, disclose, disseminate, make available, transfer, orotherwise communicate orally, in writing, or by electronic or other means, your personal information to a third
party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.
For the purposes of defining what it means to “share,” the term “cross-context behavioral advertising” means
the targeting of advertising to a consumer based on the consumer’s personal information obtained from theconsumer’s activity across businesses, distinctly-branded websites, applications, or services, other than thebusiness’s distinctly-branded website, application, or service with which the consumer intentionally interacts.
How to Exercise Your Rights Under the CCPA
Under the CCPA and CPRA, you have the right to find out about the personal information that we havecollected and how that information has been used or disclosed. You also have the right to request that wedelete or correct your personal information or opt out of the sharing of your personal information. If you wish to
exercise any of the rights listed below, or if you would like additional information, please contact us atcontact_us@iaob.org.
1. The Right to Access and Know About Personal Information Collected, Disclosed, Sold, orSharedYou have the right to request that we disclose certain information to you about our collection and use of yourpersonal information over the past 12 months. Once we receive and confirm your verifiable consumer request,
we will disclose to you:••

The categories of personal information we collected about you.
The categories of sources for the personal information we collected about you.

IAOB Privacy Policy
18 April 2023

Page 7 of 11

•
•
•
•

Our business or commercial purpose for collecting or selling that personal information.
The categories of third parties to whom we disclose that personal information.
The specific pieces of personal information we collected about you (also called a data portability
request).
If we disclosed your personal information for a business purpose, we identify the personal information
categories that each category of recipient obtained.

For data portability requests, we will select a format to provide your personal information that is readily useable
and should allow you to transmit the information from one entity to another entity without hindrance.
2. The Right to Request Deletion of Your Personal Information by IAOB and Third Parties
Subject to certain exceptions, you have the right to request that we delete any of all of your personal
information that we collected from you and retained over the past 12 months. Once we receive and confirm
your verifiable consumer request, we will delete (and direct our service providers or contractors to delete) yourpersonal information from our records, unless an exception applies. Additionally, upon receiving a verifiableconsumer request, we will notify all third parties to whom IAOB has sold or shared such personal information todelete the consumer’s personal information unless doing so is proven to be impossible or involves a
disproportionate effort. You may request that only a portion of your information be deleted.
We may deny all or part of your deletion request if retaining the information is necessary for us or our service
providers to:• Complete the transaction for which we collected the personal information, provide a service that you
requested, take actions reasonably anticipated based on our ongoing business relationship with you, orotherwise perform our agreement with you• Help to ensure security and integrity to the extent the use of the consumer’s personal information isreasonably necessary and proportionate for those purposes.
• Debug products to identify and repair errors that impair existing intended functionality• Exercise free speech or ensure the right of another consumer to exercise their right of free speech orother right provided for by law• Engage in public or peer-reviewed scientific, historical, or statistical research that conforms or adheres
to all other applicable ethics and privacy laws, when the business’s deletion of the information is likely
to render impossible or seriously impair the ability to complete such research if the consumer has
provided informed consent• To enable solely internal uses that are reasonably aligned with the expectations of the consumer basedon the consumer’s relationship with the business and compatible with the context in which theconsumer provided the information• Comply with the law or a legal obligation
IAOB may maintain a confidential record of deletion requests solely for the purpose of preventing the personal
information of a consumer who has submitted a deletion request from being sold, for compliance with otherlaws, or for other purposes solely to the extent permissible under the CPRA.
3. The Right to Opt-Out of the Sale or Sharing of Your Personal Information1“DO NOT SELL OR SHARE MY INFORMATION”

1 This is required if it is determined that the COMPANY “sells” or shares data. The DO NOT SELL MY INFORMATION link on the homepage should

direct to this section of the privacy policy.

IAOB Privacy Policy
18 April 2023

Page 8 of 11

The CCPA and CPRA provide you with the right to opt out and stop businesses from selling or sharing yourpersonal information. This right applies to all California consumers ages 16 or older and may be exercised at
any time.
The right to opt out of sharing personal information includes sharing with a third-party even when there is no
exchange of consideration between the parties. This can include the right to opt out of IAOB using
technologies like cookies and pixels to track you across other websites, apps, or services that then share that
information with ad networks to deliver targeted advertisements to you.
If you are 16 years of age or older, you have the right to direct us to not sell or share your personal information
at any time (the "right to opt out"). Our websites and products are not intended for minors. We do not sell the
personal information of consumers we actually know are less than 16 years of age, unless we receive
affirmative authorization to sell or share (the "right to opt-in") from either the consumer who is at least 13 but
not yet 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who
opt in to personal information sales may opt out of future sales at any time.
How to exercise this right:•

By sending an email to contact_us@iaob.org providing details of your request

4. The Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA or CPRA rights, and will not engage inthe following behaviors:
•
•
•
•
•

Denying you goods or services
Charging you different prices or rates for goods or services, including through granting discounts orother benefits, or imposing penalties
Providing you with a different level or quality of goods or services
Suggesting that you will receive a different price or rate for goods or services or a different level or qualityof goods or services
Retaliating against an employee, applicant for employment, or independent contractor as defined under
the CPRA, for exercising their rights under the CPRA

When you exercise these rights and submit a request to us, we will verify your identity by asking for information
about your relationship with IAOB, such as the email address on file.
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require
more time, we will inform you of the reason and extension period in writing.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's
receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
5. The Right to Correct Inaccurate Personal Information
You shall have the right to request that IAOB maintains inaccurate personal information about you as correctsuch as inaccurate personal information, taking into account the nature of the personal information and the
purposes of the processing of the personal information. If IAOB collects your personal information IAOB shalldisclose, pursuant to the CPRA, section 1798.130, your right to request correction of inaccurate personal
information.

IAOB Privacy Policy
18 April 2023

Page 9 of 11

If IAOB receives a verifiable consumer request to correct inaccurate personal information, IAOB shall use
commercially reasonable efforts to correct the inaccurate personal information, as directed by you pursuant tosection 1798.130 and applicable regulations. IAOB shall also ask third parties and service providers with whichyour information has been shared or sold, to correct or delete your personal information upon request.
6. The Right to Limit Use and Disclosure of Sensitive Personal Information
Sensitive personal information is defined as personal information that reveals the following:• Your social security, driver’s license, state identification card, or passport number• Your login, financial account, debit card, or credit card number in combination with any required
security or access code, password, or credentials allowing access to an account• Your precise geolocation• Your racial or ethnic origin, religious or philosophical beliefs, or union membership• The contents of your mail, email, and text messages unless IAOB is the intended recipient of thecommunication• Your genetic data
• Biometric information for the purpose of uniquely identifying you• Personal information collected and analyzed concerning your health• Personal information collected and analyzed concerning your sex life or sexual orientation
However, information that is publicly available shall not be considered sensitive personal information or
personal information. IAOB does not collect sensitive personal information.
Authorized Agents
You may authorize a natural person or a business entity registered with the California Secretary of State to act
on your behalf to make a request to know or to delete your personal information.
To do so, you must (i) verify your identity to IAOB and provide that authorized agent written permission to
make such a request or (ii) provide the authorized agent with power of attorney pursuant to the California
Probate Code sections 4000 to 4465.
The authorized agent must include those authorizations in the verifiable consumer request.
Security Procedures
IAOB has implemented reasonable security procedures and practices appropriate to the nature of the personal
information collected to protect the personal information from unauthorized or illegal access, destruction, use,
modification, or disclosure.
Children 16 and Under
We do not knowingly collect, solicit, or share personal information from children under the age of 16. If we haveknowledge that a child under 16 has submitted personal information in violation of this Policy, we will deletethat information as soon as possible. If you believe we may have obtained information in violation of this Policy,
please email us at contact_us@iaob.org.

IAOB Privacy Policy
18 April 2023

Page 10 of 11

Questions About The CPRA?
If you have questions or concerns regarding this statement, you should first contact us via email at
contact_us@iaob.org.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Notice at our discretion and at any time. When we make changes tothis privacy notice, we will post the updated notice on the Website and update the notice’s effective date. Your
continued use of our website following the posting of changes constitutes your acceptance of such changes. If
we are required by applicable data protection laws to obtain your consent to any material changes before theycome into effect, then we will do so in accordance with the law.
California Shine the Light Law
If you are a California resident and have an established business relationship with us and want to receive
information about how to exercise your third-party disclosure choices, you must send a request to the following
address with a preference on how our response to your request should be sent (email or postal mail). You may
contact us in two ways. Send an email to contact_us@iaob.org.
Alternatively, you may contact us at:
International Automotive Oversight Bureau (IAOB)
26200 Lahser Rd. #320
Southfiled, MI 48033
Attn: Your California Privacy Rights
For requests sent via email, you must put the statement “Your California Privacy Rights” in the subject
field of your email. All requests sent via postal mail must be labeled “Your California Privacy Rights”
on the envelope or post card and clearly stated on the actual request. For all requests, please include yourname, street address, city, state, and zip code. (Your street address is optional if you wish to receive a response
to your request via email. Please include your zip code for our own recordkeeping.) We will not accept requests
via the telephone or by facsimile. We are not responsible for responding to notices that are not labeled or not
sent properly or do not have complete information.
If you are a California resident under the age of 18, and a registered user of any site where this policy is posted,
California Business and Professions Code Section 22581 permits you to request and obtain the removal ofcontent or information you have publicly posted. To make such a request, please send an email with a detailed
description of the specific content or information to contact_us@iaob.org. Please be aware that such a request
does not ensure complete or comprehensive removal of the content or information you have posted and that
there may be circumstances in which the law does not require or allow removal even if requested.
13. What If You Have Questions?
If you have questions or concerns regarding this statement, you should first contact us via email at
contact_us@iaob.org.

IAOB Privacy Policy
18 April 2023

Page 11 of 11