Please read this Privacy Policy carefully as it will help you make informed decisions about sharing your personal information with us.

Introduction

ToyotabyCFAO is thoroughly committed to protecting the privacy of our site visitors and customers. We fully appreciate and respect the importance of privacy on the Internet. We respect each visitor’s and customer’s right to personal privacy. To this end, we collect and use information throughout our website only as disclosed in this Privacy Policy.

Who We Are

ToyotabyCFAO is a business division under CFAO Motors Nigeria Limited, an authorized distributor of Toyota Vehicles and Parts in Nigeria. CFAO Motors Nigeria Limited is a part of the CFAO Group – www.cfaogroup.com headquartered in France. Our business focuses on the sale and distribution of brand new Toyota vehicles, the provision of aftersale services to our B2B and B2C customers across our service centres located in different parts of Nigeria; the sale and distribute of original Toyota automotive spare parts.

This website is operated by a member of the CFAO Group.

About this Notice

This Privacy Notice provides information on how ToyotabyCFAO collects and processes your personal data when you visit our website or mobile applications. It sets out what we do with your personal data and how we keep it secure and explains the rights that you have in relation to your personal data.

What this policy covers

How we collect information from you.
How we protect customers’ information.
How we use the information, and share all personal information which you provide when you use our website.
General information in line with extant laws and regulations.
This policy does not apply to the practices of third party agents, or people of which we do not exercise direct control, employment or management.

The Data We Collect About You?

You provide us with your Personal Data when you visit our website, register/create an account on the website and mobile platforms and transact with the same. The kind of Personal Data we collect includes but is not limited to your email address(es), name(s), phone number(s), physical addresses, location, photo, online identifiers, your date of birth, age or age range and gender, online registration information (such as your password and other authentication information from you when you set up a free account with ToyotabyCFAO.com, banking details (when you make purchases), information provided as part of online questionnaires (such as responses to any customer satisfaction surveys or market research), in certain cases your marketing preferences etc.). While you can browse some sections of our site without being a registered member, certain activities (such as placing an order) do require registration. We do use your contact information to send you offers based on your previous orders and your interests. The information and personal data are as freely provided by you to us using any technology at the material time.

How we use your Personal Data

We use your Personal Data to operate, provide, develop and improve the products and services that we offer, including the following:
Registering you as a new customer.
Processing and delivering your orders.
Managing your relationship with us.
Enabling you to participate in promotions, competitions and surveys.
Improving our website, applications, products and services
Recommending/advertising products or services which may be of interest to you.
Enabling you to access certain products and services offered by our partners and vendors.
Complying with our legal obligations, including verifying your identity where necessary.
Detecting fraud.

Use of Demographic and Profile Data

We use your Personal Data to provide the services you request. To the extent we use your Personal Data to market to you, we will provide you the ability to opt-out of such uses. We use your Personal Data to resolve disputes; troubleshoot problems; help promote a safe service; measure consumer interest in our products and services, inform you about online and offline offers, products, services, and updates; customize your experience; detect and protect us against error, fraud and other criminal activity; enforce our terms and conditions; and as otherwise described to you at the time of collection. In our efforts to continually improve our product and service offerings, we collect and analyse demographic and profile data about our users’ activity on our website. We identify and use your IP address to help diagnose problems with our server, and to administer our website. Your IP address is also used to help identify you and to gather broad demographic information. We use this data to tailor your experience at our site, providing you with content that we think you might be interested in–and to display content according to your preferences.

Cookies and other Identifiers

A cookie is a small file of letters and numbers that we put on your computer, mobile phone or tablet if you agree. Cookies allow us to distinguish you from other users of our website and mobile applications, which helps us to provide you with an enhanced browsing experience. For more information about cookies and how we use them, please read our Cookie Notice.

Legal basis for the processing of Personal Data

We will only process your Personal Data where we have a legal basis to do so. The legal basis will depend on the purposes for which we have collected and used your Personal Data. In almost every case the legal basis will be one of the following:

Consent: For example, where you register on our website or have provided your consent to receive certain marketing notices from us. You can withdraw your consent at any time, including by clicking on the “unsubscribe” link at the bottom of any marketing email we send you.

Our legitimate business interests: It is necessary for us to understand our customers, promote our services and operate effectively, provided in each case that this is done in a legitimate way which does not unduly affect your privacy and other rights.

Performance of a contract with you: This would also apply where we need to take steps prior to entering into a contract with you. For example, where you have purchased a product from us and we need to use your contact details and payment information in order to process your order and send the product to you.

Compliance with law: We are subject to a legal obligation and need to use your Personal Data in order to comply with that obligation.

How we share your Personal Data

We may share your Personal Data with our other corporate entities and affiliates to: help detect and prevent identity theft, fraud and other potentially illegal acts; correlate related or multiple accounts to prevent abuse of our services; and to facilitate joint or co – branded services that you request where such services are provided by more than one corporate entity. Those entities and affiliates may not market to you as a result of such sharing unless you explicitly opt -in. We may disclose your Personal Data if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal process. We may disclose your Personal Data to law enforcement offices, third-party rights owners, third-party vendors, contractors and suppliers who perform services for us or on our behalf and require access to such information to do that service, or others in the good faith belief that such disclosure is reasonably necessary to: enforce our Terms or Privacy Policy; respond to claims that an advertisement, posting or other content violates the rights of a third party; or protect the rights, property or personal safety of our users or the general public. CFAO Motors Nigeria Limited and its affiliates will share some or all of your Personal Data with another business entity should we (or our assets) plan to merge with, or be acquired by that business entity. Should such a transaction occur, that other business entity (or the new combined entity) will be required to follow this privacy policy with respect to your Personal Data.

International Transfers

We may transfer your Personal Data to locations in another country, if this is permissible pursuant to applicable laws in Nigeria. In the event of international transfers of your Personal Data, we shall put in place measures necessary to protect your Personal Data and ensure the same level of protection available in Nigeria. We shall continue to respect your legal rights pursuant to the terms of this Privacy Notice and applicable laws in Nigeria.

Data Retention

We will take every reasonable step to ensure that your Personal Data is processed for the minimum period necessary for the purposes set out in this Privacy Notice. Your Personal Data may be retained in a form that allows for identification only for as long as:

We maintain an ongoing relationship with you. This will enable us to improve your experience with us and to ensure that you receive communications from us;

Your Personal Data is necessary in connection with the purposes set out in this Privacy Notice and we have a valid legal basis;

The duration of: (i) any applicable limitation period (i.e., any period during which a person could bring a legal claim against us); and

We will actively review the personal data we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or consumer need for it to be retained.

Data Security

We have put in place security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Your Legal Rights

It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if your Personal Data changes during your relationship with us.

Under certain circumstances, you have rights under the relevant data protection laws in Nigeria relation to your Personal Data, including the right to access, correct or erase your Personal Data, object to or restrict processing of your Personal Data, right to ask that we transfer your Personal Data to a third party, and unsubscribe from our emails and newsletters.

Where you wish to permanently delete your Personal Data from our website and other applications, you can choose the option of closing your account. You can close your account. Once your account is closed, all products and services that you access through your account will no longer be available.

We can refuse to accede to your request where it is unreasonable or where you have failed to provide additional information necessary to confirm your identity.

Data Controllers and Contact

If you have any questions or concerns about our Privacy Notice or you need additional information on how we process your personal data, or wish to exercise your legal rights in respect of your personal data, please contact the Data Privacy Officer by email at itaesng@cfao.com

We will investigate any complaint about the way we manage Personal Data and ensure that we respond to all substantiated complaints within prescribed timelines.

Notification of Changes

ToyotabyCFAO reserves the right to make changes and/or updates to this Privacy Policy from time to time, without prior notice, and the latest version on this policy will be posted on our website. You are advised to view this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on our webpage.