Jump to all listings · Nissan · Toyota · Honda

Privacy Policy

This policy describes how CRG Media Ltd., operating as JDMBUYSELL, handles personal information collected through this site.

CRG Media Ltd. Privacy Policy

This Privacy Policy (the "Policy") shall apply to CRG Media Ltd. including all of its subsidiaries and affiliates including, but not limited to, CRG Media Ltd. dba "JDMBUYSELL" (collectively "CRG Companies").

The CRG Companies values your personal information and commits to ensuring that your personal information is collected, used and disclosed only in accordance with this Policy and the requirements of the British Columbia Personal Information Protection Act ("PIPA").

PIPA governs how CRG Companies may collect, use and disclose personal information about our users, employees, contractors and those with or from whom we provide or receive services.

"Personal Information" under this policy shall use the same definition as PIPA, which is the following:

  • information about an identifiable individual and includes employee personal information but does not include
    • (a) contact information, or
    • (b) work product information.

CRG Companies collects, retains and uses Personal Information for legitimate purposes only.

Personal Information is not shared with outside parties except to the extent necessary to manage our employment, commercial or marketing purposes. This exception does not apply to mobile telephone numbers or SMS consent data: mobile information and text messaging opt-in consent are never shared with third parties or affiliates for marketing or promotional purposes, as described in the SMS Communications section below.

In collecting, using and disclosing Personal Information, CRG Companies will abide by and be guided by the following:

  1. Accountability – The CRG Companies' ROLE will oversee our legislative compliance under this Policy. The ROLE will be responsible for analyzing the handling practices and what personal information is collected and why; how it is collected; what it is being used for; how it is being stored and secured; who has access to it; to whom it is being disclosed and for what purpose; and how it is being disposed of.
  2. Identifying the purpose of collection – While this Policy sets out the purposes for the collection of Personal Information by the CRG Companies, we will advise further as to why we are collecting any additional personal information and the purpose for such collection if and when such inquiries are made.
  3. Consent – With limited exceptions, the person to whom the Personal Information relates must consent to its collection. As such, consent must be voluntarily given and the individual must be aware of why information is being collected. This Policy is intended to provide such awareness. However, if any further information is required into issues of collection, use and disclosure of Personal Information, please contact the CRG Companies' ROLE.

Although consent must usually be express, it may be implied in some instances; such as when an individual applies for a position of employment or uses the services made available by or through CRG Companies' products.

Under this Policy, consent from individuals is deemed to be provided when an individual:

  • uses, accesses or conveys information to or via the products, portals or services made available by CRG Companies;
  • applies for or accepts work and/or employment or an engagement with one or more of the CRG Companies;
  • an individual provides Personal Information, or any other identifying or other data, information or particulars, to the CRG Companies; or
  • otherwise engages in, or signals an intent to engage in, business, commerce or other engagement with the CRG Companies.

Furthermore, there are certain circumstances in which consent is not required, such as when information is publicly available, it is a medical emergency, or obtaining consent may compromise the availability or accuracy of the information which is relevant to an investigation of a breach of an agreement or a contravention of law.

4. Limited Collection – CRG Companies will only collect Personal Information or other information that is necessary for its stated purpose. For example, in the course of conducting a credit check, an organization would not need to collect information related to an individual's religious affiliation.

5. Limited use, disclosure and retention – information that was collected cannot be used for any purpose other than that which was stated or for which additional authorization is provided by the individual. If there is information required apart from that for which consent was given, new consent authorizing disclosure must be obtained. For example, information regarding dependents gathered for life insurance purposes cannot be transferred to a medical insurer for the purpose of obtaining medical coverage without obtaining a specific new consent. There are certain circumstances in which additional consent may not be required; such as in an emergency; where information is publicly available.

6. Accuracy – All individuals are required to ensure that any Personal Information provided or made available to CRG Companies is complete and accurate. If use or disclosure of out-of-date or incomplete information would harm the individual, CRG Companies will make best efforts to ensure that the information is accurate and current.

7. Providing safeguards – CRG Companies will protect Personal Information against theft, loss or unauthorized access. For example, written, hard copy Personal Information will be kept in locked drawers with keys accessible only to those who need access.

8. Transparency – This Policy and procedures that flow from it will be readily available to customers, clients, users, employees, contractors and suppliers of CRG Companies.

9. Individual access – Subject to specified exceptions, CRG Companies will provide individuals with details about the Personal Information being held about them by CRG Companies and a means to gain access to it upon request. There are exceptions to what an individual should have access to but if there is Personal Information in a CRG Company file that contains Personal Information about another individual, any and all third-party identifiers should be removed prior to viewing. Also, if Personal Information is collected or gained as part of an investigation into a breach of an agreement or law, or information was generated in the course of a formal dispute resolution process, such information may and should be removed by CRG Companies and not disclosed. Where access to Personal Information is denied by CRG Companies, we will provide an explanation as to the basis for such denial.

10. Data Deletion – You have the right to request the deletion of your Personal Information held by CRG Companies. To request deletion of your data, please contact us by our contact form with the subject line "Data Deletion Request." In your request, please include sufficient information to identify you and the data you wish to have deleted. Upon receiving a verified deletion request, CRG Companies will delete your Personal Information from our active records within 30 days, unless we are required or permitted to retain such information by law, or where the information is necessary to complete a transaction or fulfill a contractual obligation. We will confirm completion of your deletion request by email. Please note that certain data may persist in backup systems for a limited period, and that anonymized or aggregated data that cannot be used to identify you may be retained. If you have accessed or used our services through a third-party platform (such as Facebook), you may also submit a data deletion request through that platform, and we will process it in accordance with this Policy.

11. Complaints and Concerns – CRG Companies values your trust and your Personal Information. In the event of a concern or complaint in regard to your Personal Information or our legislative compliance, please direct the same via our contact form. Furthermore, concerns about compliance with PIPA may be directed to the Office of the Information and Privacy Commissioner for British Columbia.

All employees are expected to follow the terms of this Policy as terms of their employment. Violations of this Policy may result in disciplinary action up to and including dismissal for just cause.

SMS Communications

CRG Media Ltd. (operating as JDMBUYSELL) may send transactional SMS text messages to users who have provided a verified mobile phone number and have opted in to SMS notifications through one of the surfaces described below. SMS messages sent by JDMBUYSELL are transactional in nature — they notify participants in active conversations about new messages — and are not used for marketing or promotional purposes.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the data-sharing categories described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or affiliates. This applies notwithstanding any other provision of this policy, including the advertising and analytics practices described in the Mediavine Programmatic Advertising section, which concern cookie and device identifiers only and never mobile telephone numbers or SMS consent data.

What SMS messages we send

We send a single type of SMS: a brief notification that a new message has been posted in an active buyer–seller conversation on the platform. No marketing, promotional, or advertising content is included. Message frequency depends on conversation activity; a user with one active conversation will receive at most one SMS per message the other participant sends. Users with multiple active conversations may receive correspondingly more notifications. We estimate a typical user receives no more than a few SMS notifications per active conversation per week, though this may vary.

How we obtain consent to send SMS

We obtain SMS opt-in consent through two surfaces:

  1. Account Preferences page (/account/preferences/). After verifying a mobile phone number, users see a "SMS notifications — New messages" checkbox. The disclosure text displayed next to that checkbox at the time of opt-in reads verbatim: "By checking this box and saving, I agree to receive recurring transactional SMS notifications from JDMBUYSELL when a buyer or seller sends me a message. Message frequency varies with conversation activity, up to one SMS per new message. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help." Checking the box and saving constitutes express written consent. The consent event, including the verbatim disclosure text, the timestamp, the user's IP address, and the user agent string, is recorded in an append-only consent log retained for the period described in the "Consent record retention" section below.
  2. Inquiry modal on listing pages. When a prospective buyer submits an inquiry by selecting "Continue with phone," they are asked to provide and verify a mobile phone number. The page displays: "We'll text you a 6-digit code to verify it's you. SMS rates may apply." Phone verification through this flow associates a verified phone number with the user's account. Subsequent SMS notification consent requires an explicit opt-in action on the Account Preferences page; phone verification alone does not constitute opt-in to ongoing SMS notifications.

SMS notifications are off by default. A user's sms_new_message preference defaults to false and is only set to true through an affirmative opt-in action as described above.

Full program terms, including delivery and liability disclaimers, are set out in the SMS Notifications section of our Terms of Service.

Carrier fees

Standard message and data rates may apply depending on the recipient's mobile carrier plan. CRG Media Ltd. does not charge any fee for SMS notifications; any fees are those charged by the recipient's carrier.

How to opt out

You may opt out of JDMBUYSELL SMS notifications at any time. The method available to you depends on how your messages are sent:

  • Where a message is sent from a phone number (the United States and Canada), reply STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT) to any SMS message sent by JDMBUYSELL. We will send one confirmation message and no further SMS will be sent. Reply START or YES at any time to re-enable notifications.
  • Where a message is sent from a sender name instead of a phone number, a reply cannot reach us, so every message includes a Manage SMS alerts link. Selecting it opens your notification settings at /dashboard/notifications, where you can manage SMS notifications. You can also uncheck the "SMS notifications — New messages" option on your Account Preferences page and save.

Every opt-out method is reflected immediately in our systems. Where a message is sent from a phone number, you can reply HELP to any SMS from JDMBUYSELL for help.

SMS keyword responses

Where a message is sent from a phone number (the United States and Canada), our SMS system recognises the following standard carrier keywords and responds automatically:

  • STOP (and STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT): You will receive the response "You've been unsubscribed from JDMBUYSELL SMS notifications. Reply START to re-enable. No further messages will be sent."
  • HELP (and INFO): You will receive the response "JDMBUYSELL: transactional SMS for buyer/seller messages. Reply STOP to opt out, START to re-enable. Support: info@jdmbuysell.com"
  • START (and YES, UNSTOP): You will receive the response "You're re-subscribed to JDMBUYSELL SMS notifications for new messages. Reply STOP at any time to opt out."

Where a message is sent from a sender name instead of a phone number, reply keywords cannot be delivered; use the Manage SMS alerts link described above instead.

Third-party SMS processor

While we move SMS providers, SMS messages are transmitted through Telnyx LLC (telnyx.com), and sign-in verification codes are sent through either Telnyx LLC or Twilio Inc. (twilio.com), both third-party messaging platforms. To deliver messages, the provider that sends a message processes the recipient's phone number, the message body, and delivery status timestamps on our behalf. Telnyx's privacy practices are described at telnyx.com/privacy-policy and Twilio's at twilio.com/legal/privacy. CRG Media Ltd. has a data processing agreement in place with each provider governing this processing. We do not authorise either provider to use your data for any purpose other than delivering messages on our behalf. Telnyx and Twilio are service providers acting solely on our instructions; sharing your mobile number with them for message delivery is not a sale, transfer, or disclosure of mobile information to a third party or affiliate for marketing or promotional purposes.

Data shared with our SMS provider for SMS delivery

The following data elements are transmitted to our messaging provider for each outbound SMS:

  • Recipient's mobile phone number (E.164 format)
  • Message body text
  • Messaging service identifier (internal reference)

For sign-in verification codes, we keep a log of each send and check: the time, the outcome (for example sent, delivered, undelivered, accepted, rejected or expired), the country, the provider's message reference, and one-way hashes of the phone number and IP address rather than the number itself. We delete these log entries after 90 days.

Inbound SMS

Where a message is sent from a phone number (see "How to opt out" above), replying to an SMS from JDMBUYSELL causes our messaging provider to forward your reply to our servers. The content of your reply, your phone number, and the provider-assigned message identifier are processed. If your phone number is associated with a verified account on our platform, your reply may be recorded as a message in the relevant conversation. If your phone number is not associated with a verified account, the message is not stored.

Consent record retention

Every opt-in and opt-out event — including the verbatim disclosure text shown at the time of consent, the method of opt-in or opt-out, the timestamp, and (where technically available) the IP address and user agent — is recorded in an append-only consent log. JDMBUYSELL retains consent records for the period it considers necessary for its legitimate business purposes, including documenting that consent was given and demonstrating compliance with Canada's Anti-Spam Legislation (CASL) and other applicable requirements. This retention period applies even if your account is deleted.

International scope

JDMBUYSELL serves users in many countries. SMS notifications are limited to mobile numbers in the countries listed below, grouped by our market tiers:

  • Tier A: United States, Canada, Japan, Australia, New Zealand, United Kingdom, Ireland.
  • Tier B: Germany, France, Netherlands, Belgium, Luxembourg, Spain, Italy, Portugal, Austria, Switzerland, Sweden, Norway, Denmark, Finland, Poland.
  • Tier C: South Africa, Thailand, United Arab Emirates, Hong Kong, Singapore.

Numbers outside these countries cannot receive JDMBUYSELL SMS notifications. Availability within these countries depends on mobile carrier and provider support. Users outside Canada and the United States should be aware that SMS regulations vary by jurisdiction; by opting in to SMS notifications you acknowledge that JDMBUYSELL's practices are designed to comply with Canadian (CASL) and US (TCPA/CTIA) requirements, which may or may not fully align with the regulations of your country of residence.

Relationship to data deletion rights

Section 10 of this policy describes your right to request deletion of personal information. Because JDMBUYSELL retains SMS consent records as part of its legitimate business-records practices (see "Consent record retention" above), a deletion request will not remove those consent records, which are retained to document that consent was given and to demonstrate compliance with applicable law. If you submit a data deletion request, we will delete all other personal data associated with your account within the 30-day window described in Section 10. We will describe this limitation in the deletion confirmation we send you.

Identity Verification for Dealer Applications

When you apply for a dealer account on JDMBUYSELL, the person applying is asked to complete a one-time identity check before we approve the account. We use this check only to prevent fraud, such as someone applying under another dealer's name or address. It is not used for marketing, advertising or credit decisions.

Who performs the check

The check is performed by Didit (didit.me), a third-party identity verification provider acting on our behalf. The check starts only after you tick a consent box on the dealer application page. We do not give Didit your email address or phone number, so Didit does not email or text you.

What Didit collects

During the check, Didit asks for a photo of a government-issued ID document and a selfie, checks that the selfie is a live person who matches the ID photo, and looks at the network location of the device you use. Didit uses this information to return a result to us.

What we keep

We keep only a limited record of the result:

  • the result status (for example, approved, declined or in review) and Didit's reference for the check;
  • the first and last name shown on your ID, and the country that issued it;
  • fraud warning codes, such as a face that matches another check or an ID country that differs from your business country or network location;
  • the dates and times of your consent and of the check.

We do not store images of your ID document, your selfie, your document number or your date of birth.

Retention

Didit keeps the verification data it collects for 6 months and then deletes it. We keep the limited record listed above while your account exists, or until you ask us to delete your personal information as described in Section 10 above.

Showing an "ID verified" badge

The result of your dealer-application check is never shown publicly on its own. If you choose to, you can tick a separate consent box in Settings and we will use that same result to show an "ID verified" badge on your public profile, your listings and your message threads. No new check is made. The badge shows only that your ID was checked, never your name, ID details or photos. We may remove the badge at any time.

Your choices

The identity check is voluntary, but we generally cannot approve a new dealer account without it. If you have questions about the check or want your record deleted, contact us through our contact form.

Telephone Calls

Voice calls to our reception line at +1 (760) 334-4416 are handled using Telnyx LLC (telnyx.com) as our voice provider. Calls to our Canadian line at +1 (236) 304-4299 are carried by Twilio Inc. (twilio.com) and forwarded to the same reception line. If you leave a message, it is recorded and transcribed, and the transcript is emailed to our team. Telnyx's privacy practices are described at telnyx.com/privacy-policy and Twilio's at twilio.com/legal/privacy. This section applies to voice calls only; SMS messages are transmitted through Telnyx as described in the SMS Communications section above.

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a "device") by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, "Tags") may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser's cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser's cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

  • IP Address
  • Operating System type
  • Operating System version
  • Device Type
  • Language of the website
  • Web browser type
  • Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor's referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance's AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

Cookies & Measurement

For details on the specific measurement services loaded on this site (Google Analytics 4, Meta Pixel, Microsoft Clarity), what each collects, and how to change your consent decision, see the Cookies & measurement page.