Privacy Policy

01

Information We Collect

Information You Provide

When you submit our contact form or correspond with us, we collect the information you provide, which includes your name, email address, telephone number, the subject category you select, and the content of your message.

Information Collected Automatically

When you visit this website, our hosting infrastructure and security software automatically record:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Pages viewed, time spent on pages, and referring website
• Date and time of access
• Failed login attempts, recorded to protect against unauthorized access

Information Collected by Our Divisions

Our divisions sell products, sell vehicles, provide vehicle rentals, and offer financial services. These transactions require categories of information beyond what this website collects, and in some cases include sensitive information such as government identification numbers, driver's license details, financial and credit information, and vehicle location data.

Where information is shared with Gregory and Gregory International, Ltd. at the headquarters level for oversight, administration, or legal purposes, we handle it in accordance with this Policy.

02

How We Use Your Information

We use the information described above for the following purposes:

• To respond to your inquiries and route them to the appropriate division
• To provide information about our companies, products, and services that you have requested
• To operate, maintain, secure, and improve this website
• To detect, investigate, and prevent fraud, abuse, and unauthorized access
• To carry out corporate oversight, administration, and internal reporting across our divisions
• To comply with applicable legal obligations and to establish, exercise, or defend legal claims

We do not sell your personal information. We do not share your personal information with third parties for their own independent marketing purposes.

Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) or UK GDPR applies to you, we process your personal information on the following legal bases: performance of a contract, where processing is necessary to respond to a request you initiated; legitimate interests, where processing supports website security, fraud prevention, corporate oversight, and business operations, balanced against your rights; consent, where you have affirmatively opted in, such as to non-essential cookies; and legal obligation, where processing is required by law.

03

Cookies and Tracking Technologies

Cookies are small text files placed on your device when you visit a website. This site uses the following categories:

• Strictly necessary cookies. Required for the website to function, including session management, security, and load balancing. These cannot be disabled.
• Functional cookies. Remember your preferences and settings.
• Analytical cookies. Help us understand how visitors use the site so we can improve it.
• Advertising cookies. May be used to measure the effectiveness of marketing campaigns.

Where required by law, we request your consent before placing non-essential cookies. You may change or withdraw your cookie preferences at any time through the consent controls on this site, or by adjusting your browser settings. Disabling certain cookies may affect site functionality.

Embedded content on this site, including our location map, is provided by third parties who may set their own cookies. See Section 4.

04

Sharing Your Information

Service Providers

We engage third parties to perform functions on our behalf. These providers may access personal information only to the extent necessary to perform their services and are contractually restricted from using it for any other purpose. Our providers include:

• Website hosting. Stores site data and server logs.
• Contact form processing. Submissions are transmitted through a third-party form delivery service which forwards the message to us and does not retain the content for its own purposes.
• Mapping services. Our contact page embeds a map provided by Google, which may collect data about your interaction with it under its own privacy policy, available at policies.google.com/privacy.

Within Our Group

We may share your information among Gregory and Gregory International, Ltd. and its divisions, Wheel World Unlimited, Inc.; Seasha, Ltd.; G & G Car Dealer, LTD; Gregory Rent-A-Car, Inc.; and G & G International Holding, LTD, where doing so is necessary to respond to your inquiry, route it appropriately, or carry out corporate administration.

Legal and Protective Disclosures

We may disclose information where we believe in good faith that disclosure is required by law, subpoena, court order, or governmental request, or where necessary to protect the rights, property, or safety of Gregory and Gregory International, Ltd., our customers, or others.

Business Transfers

If Gregory and Gregory International, Ltd. is involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.

05

Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encrypted connections (SSL/TLS) across the website, access controls limiting who may view submitted information, restricted handling of sensitive information, login protection and monitoring software, and regular backups.

No method of transmission over the internet or method of electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

06

Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law.

• Contact inquiries. Up to twenty-four months following our final correspondence with you, unless an ongoing business relationship warrants longer retention.
• Server and security logs. Typically up to twelve months.

Records held by our divisions in connection with a transaction are retained under that division's policy and applicable law. Certain records, including those relating to vehicle titles, credit transactions, and rental agreements, are subject to mandatory retention periods that may exceed several years.

When information is no longer needed, we delete it or render it anonymous.

07

Your Rights and Choices

Depending on where you reside, you may have some or all of the following rights regarding your personal information:

• Access. Request confirmation of whether we hold personal information about you, and a copy of it.
• Correction. Request correction of inaccurate or incomplete information.
• Deletion. Request that we delete your personal information, subject to legal retention requirements.
• Portability. Request a copy of your information in a structured, machine-readable format.
• Restriction and objection. Request that we restrict or stop certain processing.
• Limit use of sensitive information. Request that we limit use of sensitive personal information to what is necessary to provide the service.
• Withdraw consent. Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
• Non-discrimination. Exercise these rights without receiving discriminatory treatment.

To exercise any of these rights, contact us using the details in Section 11. We will respond within the timeframe required by applicable law and will direct requests concerning division records to the appropriate division. We may need to verify your identity before acting on a request.

California Residents

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, California residents have the rights described above, including the right to know what personal information is collected, used, and disclosed, the right to correct and delete, and the right to limit the use of sensitive personal information. Gregory and Gregory International, Ltd. does not sell or share personal information as those terms are defined under that law.

European Economic Area and United Kingdom Residents

If you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local supervisory authority if you believe our processing of your personal information infringes applicable law.

08

International Data Transfers

Gregory and Gregory International, Ltd. is headquartered in the United States, and our servers and service providers are located primarily in the United States. If you access this website from outside the United States, your personal information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or the UK equivalent, to protect that information.

09

Children's Privacy

This website is not directed to children, and we do not knowingly collect personal information from anyone under the age of sixteen. Our products and services are offered only to adults of legal age. If you believe a child has provided us with personal information, contact us using the details in Section 11 and we will delete it promptly.

10

Third-Party Websites

This website contains links to the websites of our operating divisions and to other third-party sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any website you visit through a link from this site.

11

Changes and Contact

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The version number and effective date at the top of this page indicate when it was last revised. Material changes will be communicated through a prominent notice on this website. Your continued use of the site after an update takes effect constitutes acceptance of the revised Policy.

If you have questions about this Policy, or wish to exercise any of the rights described in Section 7, contact us using the details below. Please include "Privacy Request" in your subject line so we can route your message appropriately.