Jump toall listings ·Nissan ·Toyota ·Honda

Privacy Policy

This policy describes how CRG Media Ltd., operating as JDMBUYSELL, handles personal information collected through this site.

CRG Media Ltd. Privacy Policy

This Privacy Policy (the "Policy") shall apply to CRG Media Ltd. including all of its subsidiaries and affiliates including, but not limited to, CRG Media Ltd. dba "JDMBUYSELL" (collectively "CRG Companies").

The CRG Companies values your personal information and commits to ensuring that your personal information is collected, used and disclosed only in accordance with this Policy and the requirements of the British Columbia Personal Information Protection Act ("PIPA").

PIPA governs how CRG Companies may collect, use and disclose personal information about our users, employees, contractors and those with or from whom we provide or receive services.

"Personal Information" under this policy shall use the same definition as PIPA, which is the following:

  • information about an identifiable individual and includes employee personal information but does not include
    • (a) contact information, or
    • (b) work product information.

CRG Companies collects, retains and uses Personal Information for legitimate purposes only.

Personal Information is not shared with outside parties except to the extent necessary to manage our employment, commercial or marketing purposes. This exception does not apply to mobile telephone numbers or SMS consent data: mobile information and text messaging opt-in consent are never shared with third parties or affiliates for marketing or promotional purposes, as described in the SMS Communications section below.

In collecting, using and disclosing Personal Information, CRG Companies will abide by and be guided by the following:

  1. Accountability – The CRG Companies' ROLE will oversee our legislative compliance under this Policy. The ROLE will be responsible for analyzing the handling practices and what personal information is collected and why; how it is collected; what it is being used for; how it is being stored and secured; who has access to it; to whom it is being disclosed and for what purpose; and how it is being disposed of.
  2. Identifying the purpose of collection – While this Policy sets out the purposes for the collection of Personal Information by the CRG Companies, we will advise further as to why we are collecting any additional personal information and the purpose for such collection if and when such inquiries are made.
  3. Consent – With limited exceptions, the person to whom the Personal Information relates must consent to its collection. As such, consent must be voluntarily given and the individual must be aware of why information is being collected. This Policy is intended to provide such awareness. However, if any further information is required into issues of collection, use and disclosure of Personal Information, please contact the CRG Companies' ROLE.

Although consent must usually be express, it may be implied in some instances; such as when an individual applies for a position of employment or uses the services made available by or through CRG Companies' products.

Under this Policy, consent from individuals is deemed to be provided when an individual:

  • uses, accesses or conveys information to or via the products, portals or services made available by CRG Companies;
  • applies for or accepts work and/or employment or an engagement with one or more of the CRG Companies;
  • an individual provides Personal Information, or any other identifying or other data, information or particulars, to the CRG Companies; or
  • otherwise engages in, or signals an intent to engage in, business, commerce or other engagement with the CRG Companies.

Furthermore, there are certain circumstances in which consent is not required, such as when information is publicly available, it is a medical emergency, or obtaining consent may compromise the availability or accuracy of the information which is relevant to an investigation of a breach of an agreement or a contravention of law.

4. Limited Collection – CRG Companies will only collect Personal Information or other information that is necessary for its stated purpose. For example, in the course of conducting a credit check, an organization would not need to collect information related to an individual's religious affiliation.

5. Limited use, disclosure and retention – information that was collected cannot be used for any purpose other than that which was stated or for which additional authorization is provided by the individual. If there is information required apart from that for which consent was given, new consent authorizing disclosure must be obtained. For example, information regarding dependents gathered for life insurance purposes cannot be transferred to a medical insurer for the purpose of obtaining medical coverage without obtaining a specific new consent. There are certain circumstances in which additional consent may not be required; such as in an emergency; where information is publicly available.

6. Accuracy – All individuals are required to ensure that any Personal Information provided or made available to CRG Companies is complete and accurate. If use or disclosure of out-of-date or incomplete information would harm the individual, CRG Companies will make best efforts to ensure that the information is accurate and current.

7. Providing safeguards – CRG Companies will protect Personal Information against theft, loss or unauthorized access. For example, written, hard copy Personal Information will be kept in locked drawers with keys accessible only to those who need access.

8. Transparency – This Policy and procedures that flow from it will be readily available to customers, clients, users, employees, contractors and suppliers of CRG Companies.

9. Individual access – Subject to specified exceptions, CRG Companies will provide individuals with details about the Personal Information being held about them by CRG Companies and a means to gain access to it upon request. There are exceptions to what an individual should have access to but if there is Personal Information in a CRG Company file that contains Personal Information about another individual, any and all third-party identifiers should be removed prior to viewing. Also, if Personal Information is collected or gained as part of an investigation into a breach of an agreement or law, or information was generated in the course of a formal dispute resolution process, such information may and should be removed by CRG Companies and not disclosed. Where access to Personal Information is denied by CRG Companies, we will provide an explanation as to the basis for such denial.

10. Data Deletion – You have the right to request the deletion of your Personal Information held by CRG Companies. To request deletion of your data, please contact us by our contact form with the subject line "Data Deletion Request." In your request, please include sufficient information to identify you and the data you wish to have deleted. Upon receiving a verified deletion request, CRG Companies will delete your Personal Information from our active records within 30 days, unless we are required or permitted to retain such information by law, or where the information is necessary to complete a transaction or fulfill a contractual obligation. We will confirm completion of your deletion request by email. Please note that certain data may persist in backup systems for a limited period, and that anonymized or aggregated data that cannot be used to identify you may be retained. If you have accessed or used our services through a third-party platform (such as Facebook), you may also submit a data deletion request through that platform, and we will process it in accordance with this Policy.

11. Complaints and Concerns – CRG Companies values your trust and your Personal Information. In the event of a concern or complaint in regard to your Personal Information or our legislative compliance, please direct the same via our contact form. Furthermore, concerns about compliance with PIPA may be directed to the Office of the Information and Privacy Commissioner for British Columbia.

All employees are expected to follow the terms of this Policy as terms of their employment. Violations of this Policy may result in disciplinary action up to and including dismissal for just cause.

SMS Communications

CRG Media Ltd. (operating as JDMBUYSELL) may send transactional SMS text messages to users who have provided a verified mobile phone number and have opted in to SMS notifications through one of the surfaces described below. SMS messages sent by JDMBUYSELL are transactional in nature — they notify participants in active conversations about new messages — and are not used for marketing or promotional purposes.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the data-sharing categories described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates. This applies notwithstanding any other provision of this policy, including the advertising and analytics practices described in the Mediavine Programmatic Advertising section, which concern cookie and device identifiers only and never mobile telephone numbers or SMS consent data.

What SMS messages we send

We send a single type of SMS: a brief notification that a new message has been posted in an active buyer–seller conversation on the platform. No marketing, promotional, or advertising content is included. Message frequency depends on conversation activity; a user with one active conversation will receive at most one SMS per message the other participant sends. Users with multiple active conversations may receive correspondingly more notifications. We estimate a typical user receives no more than a few SMS notifications per active conversation per week, though this may vary.

How we obtain consent to send SMS

We obtain SMS opt-in consent through two surfaces:

  1. Account Preferences page (/account/preferences/). After verifying a mobile phone number, users see a "SMS notifications — New messages" checkbox. The disclosure text displayed next to that checkbox at the time of opt-in reads verbatim: "Standard message and data rates may apply. Reply STOP to any SMS from JDMBUYSELL to opt out at any time." Checking the box and saving constitutes express written consent. The consent event, including the verbatim disclosure text, the timestamp, the user's IP address, and the user agent string, is recorded in an append-only consent log retained for the period described in the "Consent record retention" section below.
  2. Inquiry modal on listing pages. When a prospective buyer submits an inquiry by selecting "Continue with phone," they are asked to provide and verify a mobile phone number. The page displays: "We'll text you a 6-digit code to verify it's you. SMS rates may apply." Phone verification through this flow associates a verified phone number with the user's account. Subsequent SMS notification consent requires an explicit opt-in action on the Account Preferences page; phone verification alone does not constitute opt-in to ongoing SMS notifications.

SMS notifications are off by default. A user's sms_new_message preference defaults to false and is only set to true through an affirmative opt-in action as described above.

Full program terms, including delivery and liability disclaimers, are set out in the SMS Notifications section of our Terms of Service.

Carrier fees

Standard message and data rates may apply depending on the recipient's mobile carrier plan. CRG Media Ltd. does not charge any fee for SMS notifications; any fees are those charged by the recipient's carrier.

How to opt out

You may opt out of JDMBUYSELL SMS notifications at any time by either:

  • Replying STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT) to any SMS message sent by JDMBUYSELL. We will send one confirmation message and no further SMS will be sent. Reply START or YES at any time to re-enable notifications.
  • Unchecking the "SMS notifications — New messages" option on your Account Preferences page and saving.

Both opt-out methods are reflected immediately in our systems. For HELP information, reply HELP to any SMS from JDMBUYSELL.

SMS keyword responses

Our SMS system recognises the following standard carrier keywords and responds automatically:

  • STOP (and STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT): You will receive the response "You've been unsubscribed from JDMBUYSELL SMS notifications. Reply START to re-enable. No further messages will be sent."
  • HELP (and INFO): You will receive the response "JDMBUYSELL: transactional SMS for buyer/seller messages. Reply STOP to opt out, START to re-enable. Support: info@jdmbuysell.com"
  • START (and YES, UNSTOP): You will receive the response "You're re-subscribed to JDMBUYSELL SMS notifications for new messages. Reply STOP at any time to opt out."

Third-party SMS processor

SMS messages are transmitted through Twilio Inc. (twilio.com), a third-party messaging platform. To deliver messages, Twilio processes the recipient's phone number, the message body, and delivery status timestamps on our behalf. Twilio's privacy practices are described at twilio.com/legal/privacy. CRG Media Ltd. has a data processing agreement in place with Twilio governing this processing. We do not authorise Twilio to use your data for any purpose other than delivering messages on our behalf. Twilio is a service provider acting solely on our instructions; sharing your mobile number with Twilio for message delivery is not a sale, transfer, or disclosure of mobile information to a third party or affiliate for marketing or promotional purposes.

Data shared with Twilio for SMS delivery

The following data elements are transmitted to Twilio for each outbound SMS:

  • Recipient's mobile phone number (E.164 format)
  • Message body text
  • Messaging service identifier (internal reference)

Twilio returns delivery status timestamps (queued, sent, delivered, failed) which we retain alongside the message record.

Inbound SMS

When you reply to an SMS from JDMBUYSELL, Twilio forwards your reply to our servers. The content of your reply, your phone number, and the Twilio-assigned message identifier are processed. If your phone number is associated with a verified account on our platform, your reply may be recorded as a message in the relevant conversation. If your phone number is not associated with a verified account, the message is not stored.

Consent record retention

Every opt-in and opt-out event — including the verbatim disclosure text shown at the time of consent, the method of opt-in or opt-out, the timestamp, and (where technically available) the IP address and user agent — is recorded in an append-only consent log. JDMBUYSELL retains consent records for the period it considers necessary for its legitimate business purposes, including documenting that consent was given and demonstrating compliance with Canada's Anti-Spam Legislation (CASL) and other applicable requirements. This retention period applies even if your account is deleted.

International scope

JDMBUYSELL serves users in Canada, the United States, and other countries. SMS notifications may be sent to mobile numbers in any country where Twilio's messaging services operate. Users outside Canada and the United States should be aware that SMS regulations vary by jurisdiction; by opting in to SMS notifications you acknowledge that JDMBUYSELL's practices are designed to comply with Canadian (CASL) and US (TCPA/CTIA) requirements, which may or may not fully align with the regulations of your country of residence.

Relationship to data deletion rights

Section 10 of this policy describes your right to request deletion of personal information. Because JDMBUYSELL retains SMS consent records as part of its legitimate business-records practices (see "Consent record retention" above), a deletion request will not remove those consent records, which are retained to document that consent was given and to demonstrate compliance with applicable law. If you submit a data deletion request, we will delete all other personal data associated with your account within the 30-day window described in Section 10. We will describe this limitation in the deletion confirmation we send you.

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a "device") by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, "Tags") may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser's cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser's cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

  • IP Address
  • Operating System type
  • Operating System version
  • Device Type
  • Language of the website
  • Web browser type
  • Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor's referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance's AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

Cookies & Measurement

For details on the specific measurement services loaded on this site (Google Analytics 4, Meta Pixel, Microsoft Clarity), what each collects, and how to change your consent decision, see the Cookies & measurement page.