Your California Consumer Privacy Rights
Effective Date: January 9, 2023
Sirius XM Connected Vehicle Services Inc. (“Sirius XM CV”) provides connected vehicle services on behalf of certain automotive manufacturer customers as well as under the Sirius XM brand. This Privacy Policy (this “Policy”) addresses how Sirius XM CV collects, shares, and protects information obtained from or about prospective and existing business customers, including through the operation of its website to the trade at www.siriusxmcvs.com (the “Site”). This Policy does not cover information collected from or about consumers in the context of the performance by Sirius XM CV of any of the connected vehicle programs it supports, whether under the Sirius XM brand, the Connected Vehicle Services brand, or the brand of an automotive manufacturer. Please see the automotive manufacturer’s website for the privacy policy governing the respective connected vehicles program. The SiriusXM Guardian Privacy Policy may be found at https://www.siriusxmcvs.com/privacy-policy/. This Policy does not govern information collected independently by Sirius XM Radio Inc., Sirius XM Canada Inc., or any direct or indirect subsidiary of Sirius XM Radio Inc.
The Site is intended for use in North America only and does not solicit or intend to collect information from business customers outside of North America.
Canadian residents: Please see For Residents of Canada below for additional information.
Please note this Policy may be changed from time to time, and that any changes will supersede any previous version of this Policy.
WHAT INFORMATION WE COLLECT AND WHY
We collect information that you provide to us directly, including your business contact information such as name, company name, job title, company address, and phone number. We will also collect information about you if you post comments or queries on the Site or send them to us electronically or through the postal mail. We use your information to respond to your comments or inquiries, and to send you information you requested from us or that we think you may find interesting or useful about our business and the services we provide.
We also collect information from you automatically when you interact with the Site (“Site Usage Data”). Such information may include without limitation the date and time you visit the Site, time spent, type of browser, and IP address, the type of device used to access the Site and what pages were visited. Site Usage Data is pseudonymous, and does not identify you individually as a person. We use Site Usage Data to assess, administer and improve the visitor experience to the Site, to troubleshoot and maintain the Site, and to enhance the understanding and marketing of our business.
We do not solicit nor do we wish to receive any confidential, secret or proprietary information or other material through the Site. By sending any material to us through the Site or through any other means, unless subject to separate written agreement between you and us, you grant us the royalty-free, unrestricted, worldwide, perpetual, irrevocable, non-exclusive and fully sub-licensable right and license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, perform and display such material, including any information, suggestions, ideas, drawings or concepts contained in such material, worldwide and/or to incorporate it in other works in any form, media, or technology now known or later developed.
Cookies and Cookie Policy.
We and our third party service providers may collect information about you during your visit to the Site through server logs, analytics programs such as Google Analytics, or through the use of cookies and other technologies known as “beacons” or “tracking pixels” (each, a “Beacon”) (“Site Usage Data”). A cookie is a small text file inserted onto your computer as part of the webpage containing an alphanumeric code and records Site Usage Data. We use both session and persistent cookies. A session cookie expires when you close your browser. A persistent cookie remains on your hard drive for an extended period of time. You may be able to remove persistent cookies by following directions provided in your browser’s “help” section. If you use the browser setting to reject these first-party cookies you may still use our website, but your ability to use some areas of our website may be limited. A Beacon is a one-pixel-by-one-pixel clear image that is embedded in HTML content, and is about the size of a period at the end of a sentence. When HTML content containing a Beacon is rendered, the Beacon transmits Site Usage Data to a server, such as a numeric count, unique identifier, or IP address. We use Beacons to help us better manage the content and performance of our Site.
Other than as described here, we do not share Site Usage Data with third parties.
You may have received a tracking mechanism prior to your visit to the Site from other parties that will continue to track your activity while on the Site. Such data would be subject to the privacy policy of the other party from whom you received the mechanism, and we do not control or receive data from such mechanisms. For more information on how to opt-out of advertiser tracking mechanisms, please visit www.networkadvertising.org/managing/opt_out.asp.
WHO DO WE SHARE YOUR INFORMATION WITH AND WHY
We may share your information with third party suppliers to process and facilitate the purposes for which we may use the information, such as website and database hosting companies; website analytics companies; CRM service providers; helpdesk or other customer service providers; security firms; and marketing, print and email delivery services. We may use third party suppliers for the collection of Site Usage Data and for the collection of personal information that you enter during your visit to the Site. We may share your business contact information with sponsors of events at which we appear or with our automotive manufacturer customers. We do not sell your contact information or other personal information we collect from you to third parties for their own purposes.
In response to a legal obligation or a valid subpoena or court order, we may disclose your information, including personal information, to law enforcement, government or quasi-government agencies, or in other instances to comply with the law or orders of courts or other governmental authorities, to enforce or apply the terms of our agreements with you, or to act under exigent circumstances to protect the property, rights or safety of Sirius XM CV, users of the Services, the Site, or any third party.
We may also provide aggregate statistics about our business to third-party suppliers, business customers, or event sponsors, but these statistics will not include any personally identifying information.
Your information may be disclosed and transferred by us as part of any merger, acquisition, financing, sale of company assets or interests. In the unlikely event of insolvency, bankruptcy, or receivership, personal information may also be transferred as a business asset. Our assignees or successors of our business or assets may use and disclose your information for similar purposes as those described in here.
UPDATING OR CHANGING YOUR ACCOUNT INFORMATION
You may modify, correct, change or update the information you provide to us by emailing us with your request at [email protected].
SAFEGUARDING YOUR INFORMATION
We use a variety of procedural, physical, and technological safeguards to protect your information from unauthorized access, use, or disclosure. All personal information is stored under secure measures with limited access by authorized individuals.
WE ASSUME NO RESPONSIBILITY OR LIABILITY WITH REGARD TO ANY THEFT, LOSS, ALTERATION OR MISUSE OF PERSONAL INFORMATION OR OTHER INFORMATION WHICH WE LAWFULLY PROVIDE TO THIRD PARTIES, OR WITH REGARD TO THE FAILURE OF ANY THIRD PARTY TO ABIDE BY THIS PRIVACY POLICY OR AGREEMENT BETWEEN THAT THIRD PARTY AND SIRIUS XM CV OR YOU.
YOUR CONSENT
By using the Site and by submitting information, comments, or inquiries to us, you agree to the practices and procedures described in this Policy. We may change this Policy at any time by posting an updated Policy at www.siriusxmcvs.com/privacypolicy with the applicable effective date. You can access the current Policy at that web site. Your continued use of the Site after any such change is made constitutes acceptance of any modifications to the Policy.
OUR POLICY CONCERNING CHILDREN
Neither the Site nor any services offered by Sirius XM CV are directed at children, and we do not knowingly collect, store, use or share information about anyone under the age of majority as determined by the laws of the state, province or territory of their residence. If you are under the age of majority so defined, please do not use the Site and do not send any information about yourself to us.
YOUR PRIVACY RIGHTS UNDER CERTAIN STATE LAWS
Please see below for additional provisions required under the privacy laws of certain states.
California Residents:
Your rights under the California Consumer Privacy Act of 2018 (“CCPA”): In accordance with our obligations under CCPA, please see information about your rights and the personal information (as defined by CCPA) we collect and disclose for business or commercial purposes at Your California Consumer Privacy Act Rights. Sirius XM CV does not sell personal information or other information of its business customers.
Under the CCPA, California Consumers have the following rights, all subject to the meanings and exceptions set forth in the CCPA:
Right to Opt-Out of Sale or Sharing – you may opt-out from the sale of your personal information, or from the sharing of your personal information to a third party for cross-context behavioral advertising;
Right to Know or Access – the right to request that we disclose to you what personal information we collect, use, disclose, share and sell, including the right to request that we provide to you the categories and specific pieces of Personal Information we have collected about you;
Right to Delete – the right to request that we delete certain personal information we collect about you, subject to exceptions specified under the CCPA; and
Right to Correct – the right to request that we correct inaccurate personal information we hold about you.
Your rights under Cal. Civ. Code § 1798.83 (Shine the Light law): We do not share personal information of individual, non-business customers (as defined under Cal. Civ. Code § 1798.83) with unaffiliated third parties for their own independent marketing purposes without consent. You may request the categories of personal information we shared with third parties for their own marketing purposes and the names of those third parties during the previous calendar year. To make your request to Sirius XM, please write to: Sirius XM, Attn: Legal Department – CA Privacy Rights, 1290 Avenue of the Americas, 11th Floor, New York, NY 10104. Requests that come to us by other means may result in a delayed response.
Virginia Residents:
As required under the Virginia Consumer Data Protection Act (“VCDPA”), this Privacy Policy describes the categories of personal data we process, the purpose for processing personal data, the categories of personal data shared, and the categories of third parties with whom personal data is shared. Virginia residents have the following rights, all subject to the meanings and exceptions set forth in the VCDPA:
- To confirm whether we are processing your personal data and to request a copy of the personal data previously provided by you to us, up to twice annually (“Right to Access“).
- To request that we delete the personal data provided by you or obtained about you (“Right to Delete”).
- To opt-out of the processing of your personal data for the purposes of a sale (“Right to Opt-Out of Sale“).
- Sirius XM CV does not sell personal data to third parties for monetary compensation.
- To opt-out of the processing of your personal data for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. (“Right to Opt-Out of Profiling“).
- Sirius XM CV does not process personal data for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects.
- To opt-in to the processing of sensitive data (as defined under VCDPA) (“Right to Opt-in to Processing of Sensitive Data“).
- To the extent Sirius XM CV processes sensitive data, we will obtain your opt-in consent in accordance with VA law.
If you are a Virginia resident and would like to exercise any of these rights described above pursuant to the VCDPA, and any implementing regulations adopted thereunder, please submit a request here.
Virginia residents also have the right to request correction of inaccurate personal data we hold about you (“Right to Correct“). This right may be exercised directly through your account online.
VCDPA Appeals:
Pursuant to the VCDPA, if, for any reason, you would like to appeal our decision relating to your request, you have the right to submit an appeal and can do so by submitting your request here. Please provide all of the requested information so that we may properly address your appeal.
Nevada Consumers:
Sirius XM CV does not sell personal information to third parties for their resale or licensing.
FOR RESIDENTS OF CANADA
This Site is operated from the United States for intended use in North America. Information, including personal information, may be collected from or about you as set forth in the Policy and may be transferred, stored, or processed outside of Canada, including in the United States. While outside of Canada, such information will be subject to applicable foreign laws, which may allow foreign government and national security authorities to access your personal information under certain circumstances. This Policy does not restrict our use or sharing of information which is anonymized or in an aggregated form. By using this Site and/or providing us with your personal information, you agree and consent that we may collect, use and disclose the information, including personal information, in accordance with this Policy. You also consent to allow us to contact you using the information you have provided to us.
YOUR COMMENTS
All privacy-related comments, queries or complaints should be made by writing to:
SIRIUS XM Connected Vehicle Services – Chief Privacy Officer
8550 Freeport Parkway,
Irving, Texas 75063
Or by sending an email to [email protected] and including Sirius XM CV in the subject line.
Please do not send personal or sensitive information via email.
We may provide translations of this policy for the convenience of visitors to the Site. This Policy was written in English, and to the extent the translated version of this Policy is inconsistent with the English version, the English version will control. We reserve the right to correct translation errors or other issues caused by offering translations of this Policy.