Privacy Policy
IAA Privacy Policy Highlights
Impact Auto Actions, Ltd., whether branded as “IAA”, “Impact Auto Auctions”, or otherwise, and including our subsidiaries and affiliates (“IAA,” “we,” or, “us”), understands that your time is valuable. Therefore, we have set out below some important highlights of the Privacy Policy applicable to our website https://www.ca.iaai.com as accessed through your browser or the AuctionNow mobile app (the “Site”) and your communications with us. You can obtain more information about how we collect, use, disclose and safeguard your personal information by reviewing our full Privacy Policy below.
What personal information do we collect?
We collect your personal information directly when you:














In some circumstances, we collect the above information on behalf of third parties that engage our services to sell vehicles on their behalf (including, without limitation, salvage providers and insurers) and/or that are authorized to use our Site to sell vehicles that are owned, possessed or controlled by them (collectively “Clients” and individually a “Client”).
We also collect information from your use of our Site automatically using cookies and other similar technologies. The information we collect can include IP address, domain name, referring web page, browser type, mobile device information, information about the way you use your device or the Site and your push notification settings. If you reside in Québec, we will provide you with an opportunity to activate and agree to our use of cookies and other tracking technologies before we collect any personal information.
Why do we collect personal information and how is it used?
We collect the information described above for a variety of reasons, including:










Is personal information shared or disclosed?
In connection with the purposes set forth herein, we may share your personal information with:







Information that is collected, stored or otherwise processed by or on behalf of our public sector Clients may also be disclosed in response to an “access to information” request, pursuant to applicable legislation.
How do we protect personal information?




What are the risks?



What are your choices?



Who should you contact?


Ann Brooks, VP Legal, IAA, Two Westbrook Corporate Center, Suite 1000, Westchester, IL 60154
IAA Ltd. Privacy Policy
Effective: September 18, 2020
Last Updated: January 18, 2022
Last Updated: January 18, 2022
Your privacy is important to us, whether we are branded as “IAA”, “Impact Auto Auctions”, or otherwise, and including our subsidiaries and affiliates (“IAA,” “we,” or, “us”). We developed this Privacy Policy to provide you with information on how we process your personal information when you communicate with us or visit and use our website at https://www.ca.iaai.com as accessed through your browser or the AuctionNow mobile app (the “Site”), including when you complete forms, and when you utilize our other offerings (e.g., newsletters, discussion lists, and announcement lists). This Privacy Policy applies only to the Site, and not to any other websites, mobile applications, platforms or activities.
“Personal information” is information relating to an identified or identifiable natural person.
By using the Site and/or voluntarily providing your personal information to us, you are consenting to this Privacy Policy.
CONTENTS
We may update this Privacy Policy from time to time as we add new products, services, and apps; as we improve our current offerings and technologies; as our business and relationships evolve; and as laws change. It is our policy to post any changes we make to our Privacy Policy on the Site. Any changes will become effective upon our posting of the revised Privacy Policy on the Site. If we make material changes to how we treat the personal information that falls within the scope of this Privacy Policy, we will notify you by email (to the email address specified in your account) or through a notice on the Site. The date this Privacy Policy became effective is identified at the top of the first page.
This Privacy Policy applies to how we process your personal information when you visit or use our Site, whether through a desktop, laptop, tablet, mobile device (including through the AuctionNow mobile app) or otherwise, or when you communicate with us.
We may reference or provide links to third party websites or services and we are not responsible for and do not control the content, security, or privacy practices employed by such third party websites or services. This Privacy Policy does not apply to any such third party websites or services; please refer to the privacy statements or policies for such third party websites or services for information about how they collect, use, disclose and protect personal information.
As a resource to our visitors, our Site contains offerings from other companies that you can link to through our Site (such as Automotive Finance Vendors, Licensed Brokers, Transportation/Shipping Vendors, and Inspection Vendors). When you click on such a link on our Site, you will be taken to the website of the other company, and its privacy practices will govern your use of that website and your interactions with that company.
We are not responsible for and do not control the content, security, or privacy practices employed by such third party websites or services. This Privacy Policy does not apply to any such third party websites or services; please refer to the privacy statements or policies for such third party websites or services for information about how they collect, use, disclose and protect personal information.
We collect the following personal information from you when you visit our Site and use our products and services:
We offer various types of IAA accounts, including Free Accounts (no transaction privileges), Public Buyer Accounts, and Licensed Business Buyer Accounts.
When you create and use any type of account, you will be asked to enter your name, email address or Login ID and password.
IAA uses your email address or Login ID and password for the purpose of enabling you to securely log in to your IAA account. The legal ground for using this information for this purpose is our legitimate interest in protecting the security of your IAA account, or consent (express or implied, as appropriate) where required by applicable law.
We may also use your email address, name, and mailing address for market research purposes, or for sending you information about your IAA account, which may include material changes to this Privacy Policy. The legal ground for using this information for these purposes is our legitimate interest in conducting market research to improve our products and services and IAA’s legitimate interest in providing you with information about your IAA account, or consent (express or implied, as appropriate) where required by applicable law.
When you register for any account, we collect the following categories of personal information:

We use the above-noted information for the purpose of permitting you to have a Free Account, which allows you to browse and search our nationwide inventory, add vehicles to your Watch List, attend auctions online as a non-bidding guest, manage email alerts and preferences, and for our internal recordkeeping purposes. The legal ground for using this information for this purpose is our legitimate interest in offering and providing services to guests who are interested in reviewing our inventory and attending auctions as non-bidding guests, or consent (express or implied, as appropriate) where required by applicable law.

We use the above-noted information for the purposes of verifying that you meet the requirements to upgrade to a Public Buyer Account, which provides you with a Buyer Number and permits you to browse and search our nationwide inventory, add vehicles to your Watch List, attend auctions online, bid online, manage email alerts and preferences, access public auctions, on site.
We also may use your name, date of birth, and address for purposes of meeting our regulatory obligations. The legal ground for using this information for these purposes is our legitimate interests in offering and providing services to Public Buyers; permitting Public Buyers to bid and make purchases; and complying with applicable legal requirements. Notwithstanding the above, we will obtain consent (express or implied, as appropriate) where required by applicable law.

We use the above-noted information for the purpose of verifying that you meet the requirements to upgrade to a Licensed Business Buyer Account, which provides you with a Buyer Number and permits you to browse and search our nationwide inventory, add vehicles to your Watch List, attend auctions online, manage email alerts and preferences, access all auctions where your license permits you to bid, bid online, on site, and via proxy at IAA branches where your license permits you to bid, buy instantly via Buy Now, add bidders to your account, and for our internal recordkeeping purposes.
We also may use your name, date of birth, and address for purposes of meeting our regulatory obligations. The legal ground for processing this information for these purposes is our legitimate interests in offering and providing services to Licensed Business Buyers; permitting Licensed Business Buyers to bid and make purchases; and complying with applicable legal requirements. Notwithstanding the above, we will obtain consent (express or implied, as appropriate) where required by applicable law.

We use the above-noted information for purposes of verifying that the new bidder meets the requirements to act as an authorized bidder on a Licensed Business Buyer Account and for our internal recordkeeping purposes.
We also may use the names, dates of birth, and addresses of the Licensed Business Buyer Account owner and the new bidder for purposes of meeting our regulatory obligations.
The legal ground for using this information for these purposes is our legitimate interests in permitting multiple bidders to make purchases on a Licensed Business Buyer Account at the IAA branch where your license permits you to bid; protecting the security of Licensed Business Buyer Accounts; and complying with applicable legal requirements.Notwithstanding the above, we will obtain consent (express or implied, as appropriate) where required by applicable law.
When you interact with our representatives via email, telephone, online, on social media, or in person, we may collect personal information, including your name, email address, phone number, branch, stock number, and service category. We also may create event logs that are useful in diagnosing server and app performance-related issues, and capturing information relating to support or service issues.
Note, however, that if you contact us on one of our social media platforms, your interactions with us are governed by this Privacy Policy, as well as the Privacy Policy of the social media platform you use.
We may also record and review conversations with customer support representatives in order to improve customer service, subject to applicable laws, and analyze any feedback provided through voluntary surveys.
With your consent, which we obtain from you verbally when you contact us by telephone, our customer support representatives may log in to your IAA account, if appropriate, to reproduce an issue and help troubleshoot and resolve your issue. As a security precaution, our customer support representatives will issue you a password reset after being asked to log in to your customer account
We use this information to respond to your comments and questions, provide you with customer service, and to monitor and enhance the quality and types of customer service we provide to our customers. The legal ground for using this information for these purposes is our legitimate interest in providing quality support and customer service, or consent (express or implied, as appropriate) where required by applicable law. The legal ground for logging in to your IAA account, if necessary is to help troubleshoot and resolve your issue, is your consent, which you may withdraw at any time.
When you register for and attend one of our tradeshows or an industry tradeshow, Buyer Forums, or Buyer Seminars, we may collect your name, telephone number, email address, Buyer Number, and the topics upon which you would like to receive additional information.
We use this information for the purpose of planning for and hosting our tradeshows and industry tradeshows, Buyer Forums, and Buyer Seminars, and marketing IAA’s goods and services.
The legal ground for using this information for these purposes is our legitimate interest in effectively marketing our goods and services, or consent (express or implied, as appropriate) where required by applicable law. We also use this information for the purposes of sending you marketing communications and allowing our Marketing Alliance Partners (also known as Authorized Representatives and Licensed Brokers) to follow up with you (via email or telephone) to assist you with purchasing vehicles from IAA and making necessary transportation and shipping arrangements. The general legal ground for using this information for this purpose is our legitimate interest in providing our customers and our potential customers with marketing materials to effectively promote IAA’s products and services, and to follow up with potential customers who may need assistance purchasing vehicles from IAA and arranging for transportation and shipping services, or consent (express or implied, as appropriate) where required by applicable law.
If you provide your consent to receive marketing communications and allow our Marketing Alliance Partners (also known as Authorized Representatives and Licensed Brokers) to follow up with you (via email or telephone), the legal ground for processing your personal information for this purpose is your consent, which you may withdraw at any time.
When you purchase a product from IAA or pay your annual account fee, we may collect your name, email address or Login ID, password, and/or Buyer Number.
For purchases, you will have the option to use your AFC Financing Account, if applicable, or INTERAC payment portal for purchasing products, or Moneris Solutions only for credit card payment of inaugural fees. Please click here for the AFC Privacy Policy, here for the INTERAC Privacy Policy, and here for the Moneris Solutions Privacy Policy. In the event that you use your AFC Financing Account we use a shopping cart feature that safeguards your order information using industry standard SSL (Secure Socket Layer) encrypted connections, which encodes the information transferred between you and the server, rendering it unreadable to anyone trying to intercept the information.
We use your name, email address or Login ID, password, and Buyer Number for the purposes of enabling you to securely log in to your IAA account to make a payment and allowing us to process your transaction and notify you of your purchase status. If you decide to transport a vehicle using IAA Transport, we also collect your shipping address. The legal grounds for using this information for these purposes are: (1) our legitimate interest in protecting the security of payments made to your account; (2) our legitimate interest in communicating with you about your purchase status; and (3) that the use of the information in this manner is necessary to carry out the contract between IAA and you. Notwithstanding the above, we will obtain consent (express or implied, as appropriate) where required by applicable law.
If you choose to transport a vehicle using IAA Transport, we use your shipping address for the purpose of obtaining a quote for transportation services, scheduling transportation, and tracking shipment of your vehicle. The legal ground for using this information for these purposes is our legitimate interest in providing customers with convenient and reliable vehicle transportation services, or consent (express or implied, as appropriate) where required by applicable law.
When you consign or sell a vehicle, we may collect your name, business name, mailing address, email address, phone number, designation as a licensed dealer, other business license, vehicle owner, as well as information concerning your vehicle (e.g., VIN number, mileage, value of your vehicle, and vehicle zip code/postal code).
We use the above-noted information for the purpose of permitting you to consign or sell your vehicle. The legal grounds for using this information is that it is necessary for the performance of a contract between IAA and you, and our legitimate interest in complying with applicable legal requirements. Notwithstanding the above, we will obtain consent (express or implied, as appropriate) where required by applicable law.
When you request access to our industry reports, submit a form to learn more about our services, or register for our contests, newsletters, clubs, activities, discussion lists, or announcement lists, we may collect your name, company name, email address, city, and province.
We use this information for the purpose of permitting you to access our industry reports, learn more about our services, or register for our contests, newsletters, clubs, activities, discussion lists, or announcement lists. The legal ground for using this information for these purposes is our legitimate interest in permitting you to have access to the information and services that you request, or consent (express or implied, as appropriate) where required by applicable law.
When you complete a customer survey we may collect your name, mailing address, email address, phone number, company name, job title, IP address and information about your customer experiences, preferences, and interests.
The above-noted information that you choose to provide to us will be processed, analyzed, and used in reports and other analyses of consumer experiences and preferences for the purposes of improving and marketing our goods or services, or for any other uses we disclose to you at the time the information is collected. The legal ground for processing your personal information for these purposes is our legitimate interests in obtaining feedback from our customers in order to help us improve and market our products and services for the benefit of our customers and our business, or consent (express or implied, as appropriate) where required by applicable law.
If you upload comments, feedback, or other information to our Site, we will collect any personal information contained in such content. Please keep in mind that whenever you voluntarily disclose personal information online in a forum accessible by others, for example through email, a newsgroup, discussion lists, or elsewhere, that personal information can be collected and used by others. If you post personal information online that is accessible to the public, you may receive unsolicited messages from other parties in return. Please exercise caution whenever you post information online.
We use your videos, comments, feedback, and other information for the purpose of providing our users with the opportunity to share such content with other users. The legal ground for using this information for this purpose is our legitimate interest in enabling our users to provide comments, feedback, and other information they desire to share with us and other viewers of our Site, or consent (express or implied, as appropriate) where required by applicable law.
If you apply to be listed as a resource for buyers in need of transportation and/or shipping services, or as a tower looking for inbound towing opportunities, you will be asked to complete an application, which may collect your name, company name, URL, mailing address, phone number, email address, years in business, and information about your services.
We use the above-noted information for the purpose of determining whether you are eligible to be listed as a resource for buyers looking for transportation/shipping services, or as a tower looking for inbound towing opportunities. The legal ground for using this information for these purposes is our legitimate interest in providing buyers with reliable transportation/shipping resources; identifying reliable vendors for inbound towing opportunities; and complying with applicable legal requirements. Notwithstanding the above, we will obtain consent (express or implied, as appropriate) where required by applicable law.
If you choose to upload a copy of your resume and/or complete an online application for employment, we may collect a variety of personal information, including your name, mailing address, email address, phone number, work experience, education history, references, information about your applicable degrees, licenses, and certifications, veteran status (where applicable), whether you are 18 years of age or older, whether you are legally eligible to work in the country to which you are applying, whether you have a valid driver’s license, whether you or your relatives have ever worked for IAA or one of our affiliates, your pay expectations, and whether you are willing to relocate if required
We use the above-noted information for the purpose of permitting you to be considered for open positions that we are seeking to fill. The legal ground for using this information for this purpose is our legitimate interest in analyzing resume and application information in connection with identifying qualified candidates to fill open positions at IAA. Notwithstanding the above, we will obtain consent (express or implied, as appropriate) where required by applicable law.
When you register for an account, use the Site on your mobile device, search for vehicles, place bids, purchase products, request information, complete a customer survey, or otherwise provide us with personal information, we may process your personal information for marketing purposes if you agree to this use of your information.
The electronic marketing communications you receive from IAA may be based on your location (i.e., based on information provided at the time of registration), and other indicators, such as your bidding behavior and typical purchases (e.g., location, vehicle type, mileage).
We use your email address, mobile device number, location (city, province, postal code), buyer type (public vs. nonpublic), and other contact and demographic data to send you periodic marketing materials, including but not limited to birthday and anniversary cards, mobile notifications of our auctions, and other electronic marketing communications and publications for the purpose of notifying you of IAA’s products and services, product updates, special offers, and other issues.
The general legal ground for using your email address and other contact data for this purpose is our legitimate interest in providing our customers and our potential customers with marketing materials to effectively promote IAA’s products and services, or consent (express or implied, as appropriate) where required by applicable law.
The legal ground for processing your email address and other contact data for this purpose is your consent, which you may withdraw at any time through the Unsubscribe link at the bottom of each electronic marketing communication, by updating your Buyer profile, or by updating your preferences in our Profile Center or Subscription Center. Buyers will also have the opportunity to opt-out of receiving push notifications through IAA.
Personal information that is processed when we use cookies and similar technologies to collect Usage Data:
IAA’s web servers collect personal information pertaining to users of our Site and the mobile devices and programs from which they access our Site (“Usage Data”). Usage Data can include IP address, domain name, referring web page, browser type, mobile device type, device operating system, device settings, and information about the way you use your device or the Site (such as session time, pages visited, links or ads clicked, and whether a user is new or returning). Mobile applications collect device identifiers, and also may request permission to access certain features and display push notifications.
Usage Data is collected and used as follows:



IAA does not track individual user’s online activities over time across third party websites (and thus does not monitor your browser’s Do Not Track indicator).
For more information on the types of cookies we use, to control cookie settings and/or to allow, disallow, delete and otherwise manage cookies, please visit our “Privacy Preference Center” here, which provides additional information about the different types of cookies used and your options for setting controls. You may also send an email to privacy@iaai.com. Additionally, if you reside in the European Union or other jurisdiction that requires us to obtain your consent to use cookies on our Site, then you will have an opportunity to manage your cookie preferences on our Site. Notably, if you reside in Québec, we will provide you with an opportunity to activate and agree to our use of cookies and other tracking technologies. You can activate these functions by visiting our “Privacy Preference Center” here.
We collect Usage Data as set out above for the purpose of helping us manage and administer our Site, improving the content of our Site, measuring the effectiveness of our advertising, Site administration and analytic purposes, providing aggregate or statistical reviews of user Site traffic patterns, personalizing content, providing social media features, and customizing and improving the user experience and functionality of our Site. The legal ground for processing this data for these purposes is our legitimate interest in conducting analytics and understanding how users interact with our Site, so we can enhance the user experience and functionality of our Site, or consent (express or implied, as appropriate) where required by applicable law.
If you do not want Usage Data collected through the use of these technologies, there is a simple procedure in most browsers that allows you to automatically decline many of these technologies, or to be given the choice of declining or accepting them. However, while this may provide you with enhanced anonymity, it may affect the functioning of our website.
IAA also collects, stores and otherwise processes personal information on behalf of third parties that own vehicles sold on our Site and/or that are licensed to use our platform (“Clients”). Such information is used for the purposes of providing our products and services to our Clients. In addition, certain personal information is shared with such Clients, as described below under “Third- Party Recipients of Personal Information”. IAA is not responsible for the actions or omissions of its Clients with respect to their handling of personal information or otherwise.
In connection with the purposes set forth in this Privacy Policy, we may share your personal information with:
Our Clients: When a user accesses or uses our Site for the purposes of purchasing or bidding on a vehicle that is owned, possessed or controlled by a Client, that user’s information will be shared with the Client as follows:






Information disclosed to MPI will cease to be under the control of IAA, and will be handled by MPI in accordance with its own privacy policies and practices. Users that bid on MPI vehicles are encouraged to review MPI’s privacy policy, which can be viewed here, and/or to contact MPI with any questions regarding MPI’s handling of their information. Users should also be aware that information about them that is within the custody or under the control of MPI may be accessible to third parties, including members of the public pursuant to The Freedom of Information and Protection of Privacy Act, CCSM c F175 (Manitoba). Please note that MPI is an independent, third party, and IAA is not responsible or liable for any actions or omissions of MPI.

Access to Information Requests: Information collected by or on behalf of our public sector Clients may also be disclosed to third parties or the public in response to an access request, pursuant to applicable legislation.
Our affiliates: Your personal information may be shared with any member or affiliate of our corporate group located in the United States and the United Kingdom for the same purposes described in this policy.
Other users of our Site: Your personal information may be shared with other users of our Site when you upload videos, comments, feedback and other content onto public areas of our Site.
Your personal information may be shared with our business partners, third-party service providers, contractors and sub-contractors, including:






When we share your personal information with third parties (including affiliates) we enter into contracts with them to ensure that they maintain a comparable level of security over such information.
IAA is responsible for personal information under our control, and has designated an individual who is accountable for our compliance with applicable laws. We have also implemented certain policies and procedures for compliance with applicable laws, including (without limitation): a process for dealing with complaints regarding protection of personal information; a framework for the keeping and destruction of personal information; and policies defining the roles and responsibilities of our personnel throughout the lifecycle of processing personal information.
We will also conduct privacy impact assessments when required by applicable law (e.g., in relation to the acquisition, development and redesign of any information system or electronic service delivery project involving the collection, use, communication, keeping or destruction of personal information).
We store our data on servers in Canada. Your personal information may be transferred to servers in the U.S., except as otherwise required pursuant to our contractual obligations to our Clients. In order to provide protection of your personal information, we have in place contractual arrangements (where appropriate) which cover these transfers and we will use reasonable measures to safeguard your information whenever it is transferred. Nevertheless, information that is transferred to, or stored in, other countries may be accessible to courts, law enforcement and national authorities in other jurisdictions.
Without limiting the above, we will take reasonable steps to ensure that personal information regarding Québec Data Subjects that is processed outside Québec or entrusted to a person outside Québec will not be used for any purpose other than for the purposes that it was collected (or other purposes permitted/required by applicable law), or disclosed to third parties, without the consent of the relevant data subject(s).
You may contact IAA anytime with your privacy questions or concerns: Privacy@iaai.com.
Our Site are not directed to individuals under the age of 18. We do not knowingly collect or use any personal information from users under 18 years of age. No information should be submitted to our Site by visitors under 18 years of age, and visitors under 18 years old are not allowed to register for our contests, newsletter, clubs or activities. You must be 18 years or older to purchase products. If we learn that we have collected personal information from someone under 18, we will take steps to delete the information as soon as possible.
The personal information that we collect from you is stored on our secure servers located in Canada and the U.S. for as long as is reasonably necessary for the purposes for which the personal information is processed and to meet IAA’s legal obligations. The persons who will have access to this personal information include information technology employees, marketing, customer service, branch operations, account management, finance and legal. Such persons will have access to this personal information on a need-to-know basis.
We take steps to protect the information entrusted to us. We have implemented technical, physical and organizational measures designed to assist in maintaining the security and confidentiality of personal information; safeguarding against anticipated threats to the confidentiality, integrity, and availability of personal information; and protecting your personal information against accidental or unlawful destruction, loss, alteration, and unauthorized access or disclosure.
For example, as noted above, if use your AFC Financing Account for purchases, we use a shopping cart feature for such purchases in order to safeguard your order information using industry standard SSL (Secure Socket Layer) encrypted connections.
However, whenever personal information is processed, there is a risk that such data could be lost, misused, modified, hacked, breached, and/or otherwise accessed by an unauthorized third party. No system or online transmission of data is completely secure. In addition to the technical, physical and organizational measures that IAA has in place to protect your personal information, you should use appropriate security measures to protect your personal information. If you believe that your IAA account or any information you provided to us is no longer secure, notify us immediately by contacting our Privacy Officer, Ann Brooks, VP Legal at 708-492-7342 or ann.brooks@iaai.com and also at IAACompliance@iaai.com.
We endeavour to ensure that any personal information that you provide is accurate, current, and complete. However, we necessarily rely upon you to notify us of any changes to your information. We encourage you to update your information or notify us of any potential inaccuracies in the information that we hold about you. You may request access to review, update, correct, or delete your personal information that we hold. Provision of such access will be subject to satisfactory proof of identity. In limited circumstances, access to certain information may be declined where we are required or permitted to do so by applicable law. We also reserve the right not to change any personal information if we do not agree that it is inaccurate or outdated. Where a request for access is declined, we will provide you with written reasons for why your request has not been granted where required by applicable law.
We invite you to contact us at the coordinates below, for any of the following reasons:






In some jurisdictions, you may also have the right to: (1) receive computerized personal information in the form of a written and intelligible transcript; (2) receive computerized personal information in a structured, commonly used technological format; and/or (3) require that personal information be communicated to any person or body authorized by law to collect such information. Such rights may be subject to certain limitations and exclusions.
You can contact us by email at ann.brooks@iaai.com and IAACompliance@iaai.com, or by mail sent to:
Ann Brooks, VP Legal, IAA, Two Westbrook Corporate Center, Suite 1000, Westchester, IL 60154