This Online Privacy Notice applies to this website and any affiliate or subsidiary interface that links to this Notice. In this Notice we describe how we collect, use and share your online personal information and the steps taken to protect it. A separate privacy notice would apply to information collected through other means and with other AAA services such as membership, insurance, travel, AAA OnBoard telematics, and AAA mobile applications. Please consult those notices if they apply to you.
 

In using our website, you may be directed to third party sites that have their own separate privacy policy that would apply to information they collect. For example, when you apply online for the AAA Member Rewards Visa^® Credit Card, you are directed to the Bank of America website that is governed by its own privacy and security policy. To determine if you are on a third-party site, please examine the URL address at the top of the web page and the privacy disclosure at the bottom. Review these separate non-AAA privacy policies when you encounter them. 
 

Information We Collect.

 

We collect information that you provide directly when you use our website. This could include your contact information (such as your name, postal address, email address, and telephone number), membership number, driver’s license, vehicle and property information, financial account information and other information that you provide. When you visit this site, third parties including advertising partners and analytics providers may collect other information over time about your online activity across websites and the various devices you use.
 

We may also indirectly gather information about your online visit including your Internet service provider, Internet Protocol (IP) address, unique device ID, browser type, operating system, the date and time the website that referred you and the pages you visit while at our site. We may also use session replay scripts to learn how you interact with our website. These scripts track your online movements to learn how you navigate and interact with our site and can be used to improve our website by identifying and correcting confusing and non-functioning parts of a web page.

We gather such information through the use of a “cookie” which is a feature of your Internet browser that places a small file on your computer’s hard drive. A cookie facilitates site navigation for Internet sessions and helps maintain security. It can remember your personal settings, pre-fill forms for you, and monitor how you use our website which information we use to improve our services. (If you do not enable cookies on your browser, you will not be able to use some of the services on our website).
 

If you provide your email address, we may send you email offers (such as for travel or membership benefits) and otherwise conduct business with you. With each marketing offer, we will give you the opportunity to opt out of future email offers. If you opt out of marketing offers, we may still email you for non-marketing purposes. For example, we could send an email confirmation if you request a quote.
 

We also use cookies, tags (also referred to as pixel tags, 1x1s, or transparent GIFs), and other technologies to manage our email programs. These tags gather information to analyze the performance of our email marketing and help us understand how consumers respond to our messages.
 

Information We Share.

 

We share your information with others as permitted or required by law. This includes within our family of companies, within the AAA federation, with affiliate partners, government entities and regulatory bodies, and with other third parties for many reasons. These reasons can include marketing, to process a transaction, to provide a quote or other service, for everyday business purposes, for legal, regulatory or compliance purposes, for security purposes, to prevent fraud, to respond to court orders and legal investigations, and to report to third party organizations such as consumer reporting agencies.
 

Information Protection.

 

Protecting your information while you visit our website is important to us. We maintain physical, electronic, and procedural safeguards to protect your personal information. For example, we limit access to this information to authorized employees and contractors who need to know. We review the information security practices of vendors with whom we share personal information. Please be aware that although we make every effort to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.
 

Interest Based Advertising. 

 

We partner with third-party advertising networks to serve our ads when you visit other sites across the Internet. Our partner employs cookies, web beacons and other tracking technologies to gather information about your activity on this and other websites and to then provide you with our ads on other websites. These tracking technologies permit us to analyze, modify, and improve our advertising content.  We do not have access to or control over cookies or other features these third-party advertising networks may use, and their information practices are not covered by this Notice.
 

Opting Out & Tracking.

 

Our advertisements that appear on third party sites with the AdChoices icon provide the means for you to opt-out of our targeted online ads. You can do so by clicking on the blue AdChoices icon on one of our online advertisements and then following its instructions. Opting-out does not opt you out of being served advertising. You may continue to receive generic non-targeted ads.
 

We also comply with the Self-Regulatory Program for Online Behavioral Advertising managed by Digital Advertising Alliance (DAA). When you opt out, your election is conveyed to the applicable advertising network(s) that then places a cookie on your specific computer and browser.  Please note that clearing your browser of cookies will require you to opt out again. To opt out from all participating DAA companies, please visit http://www.aboutads.info/choices/.
 

We do not currently respond to a web browser’s “Do Not Track” signal. Such a signal enables a person to opt out from having information about their web browsing activities monitored and collected; however, since there is not uniform industry agreement as to how to respond, we do not currently honor such a request.
 

Children’s Privacy.

 

We do not intend to collect personally identifiable information from persons less than 13 years of age. If your child provides us with their personal information, as the parent, you can contact us at the address in the “Contacting Us” section below, to request that your child’s information be deleted from our records. We will make reasonable efforts to accommodate any such request.
 

Your Contact Information. 

 

Some information is accessible by you for your review and modification on our website. Changing any personal information requires that you log in with a unique user name and password created by you.
 

As a membership organization, it’s vital for us to have our members’ current contact information (e.g., address, phone, and email) in order to provide member benefits and to inform members of the various products and services we offer. We will ask for your contact information when you first become a member. Thereafter, when you contact us, we will ask for your contact information to authenticate your identity and to ensure that we have your most current contact information.
 

Contacting Us. For questions regarding this Notice, please contact us at:
 

Automobile Club of Southern California
Attention: OGC, A451 re Privacy
3333 Fairview Road, Costa Mesa, CA 92626

 

By email. aaa-privacy@aaa-calif.com
 

Changes to This Privacy Notice.

 

We may amend this Privacy Notice at any time. Please review it periodically. Any changes are effective upon our posting of the revised Privacy Notice. Your use of our website following any such change constitutes acceptance.
 

Solicitation and Marketing.

 

If you do not want offers from us or our affiliates, please request to be placed in our Do Not Solicit file by visiting or calling your local AAA branch, going to your online account, or writing to us: Attention: Membership Privacy, PO Box 25001 Mail Stop A112, Santa Ana, CA 92799-5001 and provide your full name and street address, membership number, telephone number and email address along with your request to be placed in our Do Not Solicit file. Your request will take effect within 60 days of receipt. During this time, you may receive mailings that were already in progress. You will continue to receive your member magazine, other communications directly related to your membership, and promotional offers with your bills and renewal notices. 
 

This Notice is provided on behalf of our companies that link to this Notice. 
AAA is a national federation of independently chartered local AAA motor clubs and organizations. The companies listed below are part of the Automobile Club of Southern California family of companies that include, but are not necessarily limited to, the companies listed below. They offer membership, automotive, insurance, and travel services. The list may change from time to time.
 

• AAA East Central
  
• AAA Hawaii, LLC
  
• AAA New Mexico, LLC
  
• AAA Northern New England
  
• AAA Texas, LLC
  
• Alabama Motorists Association, Inc. (dba AAA Alabama)
  
• Automobile Club of Southern California
  
• Automobile Club of Missouri (dba AAA Missouri)
  
• Auto Club Services, LLC
  
• Tidewater Automobile Association of Virginia, Incorporated (dba AAA Tidewater Virginia)

Residents of California
 

California Consumer Privacy Act (CCPA) Rights. 

Starting January 1, 2020 California consumers have new privacy rights to their personal information (PI) including the right to not be discriminated against for exercising any of these rights. You can request:

• a copy of your PI (subject to statutory exceptions) that we collected in the past 12 months including a disclosure of the categories of PI collected, sold and shared for a business purpose; 
  
• to delete PI we collected from you unless we need to keep it for certain reasons. For example, if you are a member, we need your PI to provide your membership. We can also keep your PI when we use it internally; and
  
• to opt-out of the sale of your PI if we sell it.
   

You can request your information twice in a 12-month period. We must respond and provide your information within 45 days unless we inform you that we need more time in which event we will have 90 days to respond.
 

You can exercise your privacy rights and make a CCPA request. We will first confirm that you are a California consumer and authenticate your identity through a third party. To designate someone to make a CCPA request on your behalf, or to make a CCPA request over the phone, please call (833) 612-6032.
 

The CCPA also requires that we disclose the categories of PI collected, sold and shared for a business or commercial purpose during the past 12 months. Our practices are  described below and in the following table/matrix version.
 

Please note that certain personal information is exempt from the CCPA. For example, PI collected pursuant to a federal law called the Gramm-Leach-Bliley Act or California’s Financial Information Privacy Act is exempt. As a result, insurance information would not be disclosed. Other exceptions include medical information and protected health information; PI used to generate a consumer report and PI under the Driver Privacy Protection Act. Additionally, employee and job applicant PI and business-to-business PI need not be disclosed at this time. For information regarding our CCPA Worker Privacy Notice, visit our Career Site or email jobs@aaa-calif.com

The CCPA sets forth 11 categories of personal information as set forth below. Each category of PI is listed and associated with a letter (A-K).

Categories of Personal Information
 

Category A.  Identifiers

 

Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, SSN, driver’s license number, passport number or other similar identifiers. 

 

Category B.  Civil Code 1798.80 Information

 

Information that identifies, relates to, describes, or is capable of being associated with, an individual or household, including, but not limited to:

 

• name
  
• signature
  
• social security number
  
• physical characteristics or description
  
• address
  
• telephone number
  
• passport number
  
• driver's license or state identification card number
  
• insurance policy number
  
• education, employment, employment history
  
• bank account number
  
• credit card number, debit card number, or any other financial information
  
• medical information, or health insurance information
  
• “Personal information” does NOT include publicly available information that is lawfully made available to the public from federal, state, or local government records
   

Category C.  Characteristics  

 

Characteristics of protected classifications under California or federal law such as race, color, sex, age, national origin, disability, citizenship status, genetic information, ancestry, sexual orientation, gender identity or expression, religion, medical conditions, AIDS/HIV, marital status, military/vet status, political affiliations or activities, victims of domestic abuse and/or assault/stalking. 

 

Category D.  Commercial Information

 

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

 

Category E.  Biometric

 

Records used to uniquely identify a person including fingerprints, retinal scans, facial scans, signatures, handwriting analysis and voice pattern recognition.  

 

Category F.  Internet Activity

 

Internet or other electronic network activity information, including but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application or advertisement.

 

Category G.  Geolocation   

 

Used to identify an electronic device’s physical location, such as GPS coordinates. 

 

Category H.  Sensory

 

Audio, electronic, visual, thermal, olfactory, or similar information.

 

Category I.  Employment Related    

 

Professional or employment-related information such as job application, salary and job performance information.

 

Category J.  Education

        
Pertaining to school, grades or years attended.

 

Category K.  Inferences      

 

Inferences drawn from any of the above identified information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities and aptitudes. 

Collection of Personal Information
 

During the prior 12 months, we would have collected Personal Information for each of these categories (A-K). However, the fact that we collected information for a category does not mean that we collected all the information in the category.  For example, category A (identifiers) includes name, address, driver’s license, social security number, passport, etc.  If we state that we collect this category of information, it does not mean that we collected every one of these identifiers.  Frequently, we only collect name and contact information and don’t collect more sensitive information such as driver’s license, social security number or passport unless it is required for the service requested such as a driver’s license for DMV services.  While category C (characteristics) includes a broad list of characteristics of protected classifications (e.g., genetic information or sexual orientation, etc.) if we collect information for this category, it is generally limited to sex and/or age.  

When Using our Products and Services

Below, you will find a description of our products and services and the information that should generally be collected for each one. 
 

If you purchased Membership, we should collect your name, gender, contact information and payment information.  If you purchased an associate membership for someone else, similar information about these individuals should be collected, too. (Categories A, B and C).
 

A full listing of member benefits is found in the Member Guide.  Generally, for any service we will request your name, proof of membership and contact information.  (Categories A and B).
 

When you request Emergency Roadside Service we collect your phone number, name, breakdown location and the nature of your request. When the independent service provider arrives, you should be asked to provide identification such as a driver’s license for authentication. Information about your transaction (vehicle information and nature of service) is provided to us through the independent service provider.  We may also collect information about your membership and transaction from AAA or other AAA motor clubs in the AAA Federation if you belong to another AAA motor club. (Categories A, B and D).
 

We offer various Automotive Services
 

• For AAA Approved Auto Repair (AAR), you generally provide your name, contact information, and membership number.  We may also collect your transaction history with the AAR facility including your vehicle information (e.g., make and model). (Categories A, B and D).
  
• For the Car Buying service, we generally collect your name and contact information, membership number, zip code and information about the vehicle(s) you were interested in. (Categories A, B and D).
  
• For Driver Training, you should generally provide the name of the driver (such as your teen driver) and contact information. (Categories A and B).
  
• For Smog Testing Centers, we generally collect your name, contact information, membership number, vehicle information (year, make, model and VIN), results of the test and driver’s license number. (Categories A, B and D).
   

We offer many additional Member Benefits including:
 

Financial Services
 

• If you applied for the AAA Member Rewards Credit Card, you would have provided your personal information directly to our partner.  The information you share with them could include your membership number, name, contact information, citizenship, country of residence, date of birth, employment status, (employment & financial information) total annual income and source, monthly housing payment, and social security number. (Categories A, B, C and I).
  
• If you purchased a AAA MemberPay Visa^® Prepaid Card (a reloadable prepaid card), you would have provided your personal information directly to the card provider.  The information you share with them could include your name, member number, date of birth, social security number, and contact information.  (Categories A, B and C).
  
• If you purchased Foreign Currency, you would have provided your personal information to the third-party provider directly online or we would have entered this information into the third-party provider’s system.  The information you share with them could include your name, contact information, identification card information (passport or driver’s license), and social security number.  (Categories A and B).
   

Branch Services
 

• If you used Notary Services, you generally would have provided your name, address, signature, driver’s license and we may have taken your fingerprint. (Categories A, B and E).
  
• If you requested a DMV transaction, we should collect your name, address, phone, vehicle information, and driver’s license to provide to the DMV.  If you requested a handicap placard, we would also collect medical information. (Categories A, B, and C).
  
• If you requested an International Driving Permit, you should have provided your name, contact information, driver’s license, birthplace city, and date of birth. (Categories A, B and C).
   

Discounts & Event Tickets
 

• If you purchased Entertainment & Attraction Tickets, we should have collected your ticket request, name, contact information, and membership number to provide to the service provider honoring your request. (Categories A and B).
  
• If you purchased from our Discounts & Rewards partners online through our website, you should have provided your name, member number, contact information and payment information directly to our partner.  (Categories A and B). 
   

ID Theft Protection
 

• If you enrolled in ProtectMyID^® identity theft protection, you would have provided your personal information directly to our partner.  The type of information you share with them depends on the product, but can include your name, membership number and zip code, contact information, date of birth and social security number and payment information.  (Categories A, B and C).
   

Travel Products & Services
 

• If you requested a quote or purchased Travel products or services, you could have provided your name, address, phone, date of birth, passport, known traveler number and payment card information to us and/or our travel partners. If travel was purchased for another person, we would have normally collected similar information about them.  We would have your travel itinerary. (Categories A, B, C and D).

When Contacting Us

When you contact us, we should ask you to provide and/or confirm your contact information. (Categories A and B).  
 

If you visited a branch or our administrative offices, video surveillance may have recorded you.  We should have asked you to check in by swiping your membership card or otherwise providing your name and contact information.  To service your request, we would have collected personal information (as described previously). (Categories A, B, E and H).
 

If you attended an Auto Club special event such as a motorsports or travel event, we may have collected your name and contact information from you. (Categories A and B).
 

If you visited online or used the Auto Club App, your internet/online activity and online identifier would have been collected.  This includes your geolocation when using the App and your membership number. To service your request, we would have collected personal information (as described previously). (Categories A, B, F and G).
 

If you called, your phone number may have been automatically collected and your call may have been recorded.  To service your request, we would have collected personal information (as described previously). (Categories A, B, and H).

Conducting Business

 

Marketing & Understanding Consumers

 

We collect information to better understand consumers and to more effectively market our products and services to members and potential members.

 

This includes collecting internet activity information for those online or using the Auto Club App.  We collect information for online behavioral advertising and analytics purposes.  (Categories A and F).
 

We purchase from third party vendors who are in the business of collecting personal information such as name, contact information, date of birth, demographic information and attributes. We may use this information with other collected information to create a profile, model or propensity score. (Categories A, B, C, D, I, J and K).
 

We may collect from our AAA affiliated partners and providers information about your transaction with them.  For example, when you use your membership card for a member discount, the third-party partner could share with us an identifier such as your name, contact information and transaction information.  This lets us better determine the value and use of member benefits and to more effectively offer our products and services. (Categories A, B and D). 
 

As a membership organization, we regularly measure member satisfaction by surveying members.  (Categories A, B and D).
 

Security Purposes

 

Our efforts to safeguard personal and company information, facilities and people require that we monitor and collect information by different means and from many environments. This could include through video surveillance or internet/online activity for cyber security purposes.  Sources may include from the consumer, third party security providers and/or government entities including law enforcement.  (Categories A, B, E, F and H).

 

Transactional Purposes

 

To fulfill a transaction or request or to process a payment, we may collect information from you and service providers.  For example, with any purchase we collect payment information depending on the method of payment.  This could include payment card information or financial account information from a check or with an ACH enrollment. (Categories A, B and D).

 

Legal, Regulatory, Compliance Purposes

 

We may collect personal information for legal, regulatory and compliance purposes. For example, we may collect your contact information from third party sources (government entities, law enforcement, regulatory bodies and/or private businesses) to ensure that we have your current contact information (e.g., physical address) and to honor your requests to not be contacted or solicited. For example, we purchase Do Not Call lists to honor the wishes of those who do not wish to be called for marketing purposes.  (Categories A, B and C). 

 

Business Purposes

 

We collect personal information for other business purposes and to operate as a business and membership organization. For example, we purchase National Change of Address lists to ensure that we have a current mailing address. (Categories A, B, C and D).

Sale of Personal Information
 

During the prior 12 months, we would have "sold" Personal Information for Categories A-D to offer a Club benefit (the AAA credit card) to members. The Auto Club receives a monetary benefit when members use their AAA credit card which is offered to members through our partner as a member benefit. Such arrangements help to keep annual membership dues low. For purposes of the CCPA this could be considered to be a “sale” of personal information. Our partner can only use the information we share to offer you the credit card. In this instance, information shared with our partner’s marketing service provider should include name, membership information, contact information, and date of birth. Information would not be sent for those who had requested to not be solicited.

Sharing of Personal Information

During the prior 12 months, we would have shared Personal Information for a business purpose with the types of third parties and for the categories of PI listed below.    

When Using our Products and Services
 

AAA Federation
 

In servicing members or those using our services, personal information could be shared within the AAA Federation of companies.  For example, transactional information from a service request for an out of territory member would be shared with the national office and that member’s motor club.  (Categories A, B and D).
 

ERS Provider
 

For Emergency Roadside Service (ERS), we generally share your name and contact information, breakdown location, membership information, vehicle information and nature of your request with an independent ERS provider. (Categories A, B and D).
 

Automotive Service Provider 
 

• For AAA Approved Auto Repair (AAR), we generally share your name and contact information, membership information, vehicle information and nature of your request with an independent AAR facility. (Categories A, B and D).
  
  
• For the Car Buying service, your name and contact information, and information about the vehicle you were interested in would have been shared with participating automotive dealers. (Categories A, B and D).
   

Financial Service Provider
 

• If you applied for the AAA Member Rewards Credit Card, you would have provided and shared your information to our financial partner directly either online or via a terminal or device that allows you to share your information directly with the provider.  We don’t otherwise share your information with the provider directly in this circumstance.  The information you share could include your membership number, name, contact information (phone, email and address), citizenship, country of residence, date of birth, employment status, (employment & financial information) total annual income and source, monthly housing payment, and social security number.  (Categories A, B, C and I).
  
  
• If you purchased a AAA MemberPay Visa^® Prepaid Card (a reloadable prepaid card), you would have provided your information to the card provider directly either online or via a terminal or device that allows you to share your information directly with the provider.  We don’t otherwise share your information with the provider directly in this circumstance.  The information you share could include your name, member number, date of birth, social security number, and contact information.  (Categories A, B and C).
  
  
• If you purchased Foreign Currency, you would have provided and shared your information to the third-party provider directly online or we would have entered this information into the third-party provider’s system.  We don’t otherwise share your information with the provider directly in this circumstance.  The information you share could include your name, contact information, identification card information (passport or driver’s license), and social security number.  (Categories A and B).
   

Branch Services
 

• If you used Notary Services, you generally would have provided your name, address, signature, driver’s license and we may have taken your fingerprint.  Notaries are subject to independent professional notary association standards and your information could be shared with a regulatory body or third party in the event of a professional audit. (Categories A, B and E).
  
  
• If you requested a DMV transaction, we should have collected your name, address, phone, vehicle information, and driver’s license to provide to the DMV.  If you requested a handicap placard, we would also collect medical information to provide to the DMV. (Categories A and B).
   

Discounts & Event Tickets Provider
 

• If you purchased Entertainment & Attraction Tickets, we would have collected your ticket request, name, contact information, and membership number to provide to the service provider honoring your request. (Categories A and B).
  
  
• If you purchased from our Discounts & Rewards partners online through our website, you would have provided your information directly to the partner.  The information you share could include your name, member number, contact information and payment information.  (Categories A and B). 
   

ID Theft Protection Provider
 

• If you enrolled in ProtectMyID^® identity theft protection, you would have provided your personal information directly to our partner.  We don’t otherwise share your information with the ID Theft provider in this circumstance.  The type of information you share depends on the product, but can include your name, membership number and zip code, contact information (address, phone), date of birth and social security number and payment information. (Categories A, B and C).
   

Travel Service Provider
 

• If you requested a quote or purchased Travel products or services, you could have provided your name, address, phone, date of birth, passport, known traveler number and payment card information to us and/or our travel partners. If travel was purchased for another person, we normally would have shared similar information about them, too. (Categories A, B, C and D).

Conducting Business
 

Marketing Service Provider

 

We share information with service providers to market our products and services to members and potential members.  Your name, contact information, membership information, age/sex, and a profile about you could be shared depending on the method of solicitation.  (Categories A, B, C, D and K).

 

We share information to market the AAA credit card.  Information that would normally be shared with our partner’s marketing service provider includes name, membership information, contact information and date of birth. Information would not be sent for those who had requested to not be solicited.  (Categories A, B, C and D).
 

We collect internet activity information for those online or using the Auto Club App and share such information with providers for email marketing, online behavioral advertising and analytics purposes.  (Categories A and F).
 

As a membership organization, we regulary measure member satisfaction by surveying members.  We may share your contact information with those who provide these services. (Categories A and B).
 

Security Purposes

 

Our efforts to safeguard personal and company information, facilities and people require that we monitor and collect information by different means and from many environments and share information with service providers that assist in this regard. This could include through video surveillance or internet/online activity for cyber security purposes. In some circumstances, personal information may be shared with law enforcement, and security providers.  (Categories A, B, C, E, F and H).

 

Transactional Purposes

 

To fulfill a transaction or a request or to process a payment, we share information with various service providers.  For example, payment information such as payment card information or financial account information from a check or with an ACH enrollment would be shared with financial institutions and those service providers that process payments. (Categories A, B and D).

 

Legal, Regulatory, Compliance Purposes

 

We share personal information with third parties (government entities, law enforcement, regulatory bodies and/or private businesses) if required for legal, regulatory and compliance purposes and share with those that assist us in responding in such circumstances.  For example, we could be obligated to share your name, contact information, and other information in the event of a regulatory investigation or in the event of litigation.  (Categories A, B, C and D). 

 

Business Purposes

 

We share personal information with service providers that assist us in operating our business and membership organization. This could require sharing personal information for audit, accounting, financial or other professional reasons.  (Categories A, B, C and D).

 

California Shine the Light Law Rights.

 

Apart from the CCPA, California residents can request information regarding the personal information that a company they do business with shares with third parties for direct marketing purposes during the past year.  To request a copy, please contact aaa-privacy@aaa-calif.com and include “SB27 Request" on the subject line.