Privacy, in plain English.

Who we are

This site is operated by East Hills Chevrolet of Freeport (“we,” “us,” or “DriveWithAddys”), a New York licensed motor-vehicle dealer at 42 E Sunrise Hwy, Freeport, NY 11520. Day-to-day data decisions are made by Addys Mejia. If you want a human, that's the human: drivewithaddys@gmail.com or (516) 630-3060.

What we collect, and why

From you, when you contact us. Your name, phone, email, and whatever you tell me about the car you're looking for. We use this to answer you. That's it.

From your browser, automatically. Stuff every website sees: your IP address, what pages you viewed, how you got here, what device you're on. We use this to make the site work and to tell which features people actually use.

If you apply for financing. We collect what the lender asks for — Social Security number, address history, employment, references. This information goes directly to the bank. We don't store credit applications longer than legally required.

Saved cars and preferences. Stored entirely in your browser's localStorage. It never leaves your device unless you sign in to sync.

How long we keep it

• Lead inquiries (text, email, web form): 24 months from last contact, then archived or deleted.
• Credit applications: the period required by federal Equal Credit Opportunity Act recordkeeping (typically 25 months for denied, longer for approved).
• Sales records: retained for the period required by NY DMV and IRS — typically 7 years.
• Web analytics (Plausible): aggregated visit data, no personal identifiers, retained 24 months.
• SMS conversation history: up to 24 months for service continuity.

What we don't do

• We do not sell your information to third parties for monetary value.
• We do not use third-party advertising trackers (no Facebook Pixel, no Google Ads remarketing).
• We do not share your contact details with other dealerships or aggregators.
• We do not use your data to train AI models.

Cookies and local storage

We use a small set of essential cookies (login state, your saved-cars list, your theme preference) and one analytics provider (Plausible Analytics — privacy-friendly, no cookies, no personal identifiers, EU-hosted). The cookie banner you saw on first visit gives you Accept, Reject, or Customize options. You can change your decision at any time by clearing the dwa.cookie.v2key from your browser's storage or by using the cookie controls at the bottom of this page in a future release.

Third parties we share with

The companies we share data with, and only when we need to. All operate under written contracts that prohibit secondary use of your data:

• Cloudflare — sits in front of our site for performance and DDoS protection. Sees IP addresses but not your form submissions.
• Plausible Analytics — aggregated, anonymized page-view counts. No personal identifiers. EU-based servers.
• Our CRM / dealer management system — stores leads and sales records on encrypted, US-based infrastructure.
• The bank or finance company you choose — receives the credit application you fill out.
• The DMV — receives the registration paperwork after you buy.
• The state of New York — receives sales tax remittance.

Your rights — California (CCPA / CPRA)

If you're a California resident, you have the right to know what personal information we collect, to delete it, to correct it, to limit the use of sensitive personal information, and to opt out of any “sale” or “sharing.” We do not sell your personal information for monetary value, but we acknowledge that sharing data with service providers can fall under the CPRA's definition of sharing in some interpretations. To exercise these rights — or to designate an authorized agent to do so — visit our Do Not Sell or Share My Personal Information page.

Your rights — New York (SHIELD Act)

New York's Stop Hacks and Improve Electronic Data Security (SHIELD) Act requires us to maintain reasonable administrative, technical, and physical safeguards for the private information of NY residents. We do. Specifically:

• Administrative: a designated security coordinator, vendor due diligence, and staff training.
• Technical: HTTPS-only transport, encryption at rest for lead and finance data, role-based access, and routine vulnerability scanning.
• Physical: locked file storage at the dealership, badge access for sensitive areas, and secure shredding of paper records.

If we ever discover unauthorized access to private information, we'll notify affected New Yorkers and the NY Attorney General as required by law — and we'll do it directly, not through a press release.

Your rights — EU / UK (GDPR)

If you're visiting from the European Union or the United Kingdom, you have the rights guaranteed by the GDPR / UK GDPR: access, rectification, erasure, restriction, portability, and objection. Our lawful basis for processing is typically legitimate interest (responding to your inquiries) or consent (analytics, marketing). You can withdraw consent or object at any time by emailing drivewithaddys@gmail.com. We do not have an EU representative because we do not regularly target EU residents — but we will honor any GDPR request a visitor makes.

Children (COPPA)

The site isn't aimed at children under 13 and we do not knowingly collect their personal information. If you believe a child has submitted information through the site, email drivewithaddys@gmail.comand we'll delete it immediately. We do not target advertising to anyone under 18.

How to exercise your rights

For any of the rights above — access, deletion, correction, portability, opt-out of sharing — email drivewithaddys@gmail.comwith the words “Privacy Request” in the subject. We'll respond within 30 days (45 if the request is complex). We won't make you jump through verification hoops — your inquiry from the email address we have on file is itself a strong signal you're you. Authorized agents may submit requests with written authorization.

Security

The site runs over HTTPS only. Lead and finance data is encrypted in transit and at rest, sits on US-based servers, and is accessed only by authorized people at the dealership. We've never had a known breach. If we ever do, you'll hear from us — not from a news article.

SMS messaging

When you text us, you're consenting to receive transactional and informational SMS replies. Reply STOP to opt out. Full disclosure on our SMS consent page.

Changes

If we update this policy materially, we'll re-prompt the cookie banner and show a notice the next time you visit. Minor edits are dated above.