Welcome to Hyundai Capital America

Hyundai Capital America ("HCA") Non-Consumer Privacy Policy


Effective Date: December 29, 2022


Your privacy and trust are very important to Hyundai Capital America. This Non-Consumer Privacy Policy (“Privacy Policy”) addresses our online and offline privacy practices such as what personal information we collect and how it is handled. This Privacy Policy applies to Hyundai Capital America and includes this Website, internal systems used and interacted with by HCA’s Workforce, and our “Careers” and “Investor Relations” websites (collectively, the “Sites”), which are owned or controlled by Hyundai Capital America (a California corporation using the trade names of Genesis Finance, Hyundai Motor Finance, and Kia Finance America), although software, hosting and other functions and content on the Sites may be provided by third parties.

Hyundai Capital America Full Privacy Policy

  1. GENERAL PRIVACY STATEMENT
  2. COLLECTION OF PERSONAL INFORMATION
  3. USE AND DISCLOSURE OF PERSONAL INFORMATION
  4. NORMAL WEBSITE USAGE AND COOKIES
  5. CLEAR GIFS (WEB BEACONS/WEB BUGS)
  6. LOG FILES
  7. DO NOT TRACK SIGNALS
  8. ACCURACY OF YOUR INFORMATION
  9. CONFIDENTIALITY, SECURITY, AND DATA RETENTION
  10. CHILDREN'S PRIVACY
  11. CALIFORNIA PRIVACY NOTICE
  12. CHANGES TO OUR PRIVACY POLICY
  13. HOW TO CONTACT US

1. General Privacy Statement

Throughout this Privacy Policy, the terms “we,” “us” and “our” refer to Hyundai Capital America. This Privacy Policy describes the types of information that we collect from you online and offline from the Sites and by any other means, what we do with this information, with whom we share this information, and how you can update the information we have about you.

Your personal information that we collect depends on the transactions you request, and we use the personal information we collected to complete transactions you request. Through any of our Sites, we collect information that is required for you to register and log in to the Sites and information we receive from you to provide correspondence such as your name, address, and email address. This information is collected and stored in a manner appropriate to the nature of the data and used to fulfill your request.

If you choose to not provide your information, you may not be eligible to participate in certain optional benefits and programs that may be made available. Providing data to HCA is voluntary on your part, except:

  • When the data is collected without your consent or notice, in accordance with applicable law;
  • As necessary in connection with your working relationship with HCA; or
  • As required by law.

This Privacy Policy does not apply to your customer relationship with us. If you are a current or former customer of us through one or more of our brands, Genesis Finance, Hyundai Motor Finance, or Kia Finance America (formerly known as Kia Motors Finance), please visit that respective brand’s privacy policy by using the links below.

  1. Genesis Finance
  2. Hyundai Motor Finance
  3. Kia Finance America

2. Collection of Personal Information

If you are a current or former HCA employee, job applicant, owner of, director of, or contractor of HCA (collectively, “HCA’s Workforce”), we collect information that identifies, relates to, describes, is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, to a member of HCA’s Workforce or their household (“Workforce Personal Information”).

Workforce Personal Information does not include HCA’s Workforce information that is deidentified, aggregate HCA Workforce information, publicly available information, lawfully obtained information, or truthful information that is a matter of public concern.

In the last twelve months, we may have collected, used, or shared, for business purposes, the following categories of Workforce Personal Information:

Category of Personal Information`

Examples

Business Purpose for Collection and Use

Unique Identifiers

A real name, postal address, alias, unique personal identifier, device identifier, online identifier, Internet Protocol address, cookies, beacons, pixel tags, unique pseudonym, user alias email address, account name, social security number, driver’s license number state identification card number, passport number, signature, physical address, telephone number, insurance policy number, education, employment, employment history, bank account number, medical information, health insurance information, or other similar identifiers that can be used to identify a particular person or household.

We may use or disclose the Personal Information we collect for one or more of the following purposes:

  • To fulfill or meet the reason you provided the information.
  • Information we receive from you to provide correspondence such as your name, address, and email address.
  • To comply with state or federal labor or tax regulations, such as I-9 requirements.
  • For security purposes to detect security incidents and to protect against malicious activity.
  • To provide you with support and to respond to your requests, including investigating and addressing your concerns.
  • As Required by law for compliance with our legal obligations and other internal legal compliance purposes.
  • As required by law, such as to comply with a subpoena or similar legal process.
  • Detection or preventing theft or fraud, or attempted theft or fraud.
  • Facilitation of communication with you and your designated contacts in an emergency situation.
  • Operation and management of our IT Communication systems and facilities.
  • For the protection of the health and safety of our workforce.
  • Information that is required for you to register and log in to your online accounts managed through HCA.
  • Information required to administer your benefits and provide notifications.
  • To administer benefits as part of your working relationship with us.
  • To verify your education and employment history part of the application process for your working relationship with us.
  • To perform background checks as a part of the application process for your working relationship with us.
  • To administer drug tests as a part of the application process for your working relationship with us.
  • For purposes required under immigration laws.
  • As required to manage or monitor work activities.
  • To review and evaluate work performance.
  • For the reimbursement of expenses.
  • Assurance of business continuity.
  • For the investigation of suspected misconduct or non-performance of duties.
  • To allow for the fulfillment or evaluation of your duties in the course of your working relationship with us.
  • For other purpose consistent with the context of the collection of your personal information, or as otherwise disclosed to you prior to the use of your personal information.

Protected classification characteristics under California or federal law

Race, color, sex/gender, religion, creed, gender identity, marital status, medical condition, military or veteran status, national origin, citizenship, ancestry, disability, request for family care leave, request for leave for an employee’s own serious health condition, request for pregnancy disability leave, and age.

Internet or other similar network activity

Internet or other electronic network activity information, including, but not limited to, browsing history, search history, information regarding a member of HCA’s Workforce interaction with an internet website application, system logs, or application logs.

Sensory data

Audio (customer service calls), visual information, or similar information.

Professional or employment-related information

Current or past job history or performance evaluations. inferences drawn regarding preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.

Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))

Education records directly related to a student maintained by an educational institution or party acting on its behalf.

Biometric information

Multi-factor authentication facial recognition.

Sensitive personal information

Social security number, driver’s license, state identification card, passport number, account log-in, financial account, in combination with any required security or access code, password, or credentials allowing access to an account. Precise geolocation. Racial or ethnic origin. The contents of mail, email, and text messages unless the business is the intended recipient of the communication. The processing of biometric information for the purpose of uniquely identifying a consumer. Personal information collected and analyzed concerning a consumer’s health.

Geolocation data

Internet Protocol address, or similar data determining the location of a device.

Sources We Collect Your Personal Information From

We collect your Workforce Personal Information for a business purpose from the following categories of sources:

  • We collect Workforce Personal Information you provide to us directly in person or through our Sites when you to register and log in to the Sites, from your applications for working relationship with us, during your working relationship with us, and after your working relationship with us.
  • We collect Workforce Personal Information from affiliated or non- affiliated third parties during the course of your application for your working relationship with us, during your working relationship with us, and after your working relationship with us.
  • During the course of your working relationship with us, we collect Workforce Personal Information through the various external systems and vendors you interact with, and that we use for purposes related to your working relationship with us.

3. Use and Disclosure of Personal Information

Third Parties HCA May Disclose Your Personal Information With

In the last twelve months, we may have disclosed the categories of HCA’s Workforce personal information listed above in Section 2 with third parties for business purposes. Below are the categories of third parties to whom the personal information listed above in Section 2 was disclosed.

Category of Personal Information

Categories of Third Parties with Whom We Share

Unique Identifiers

  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of your working relationship with us.
  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of assessing an application for your working relationship with us.
  • Affiliated or non- affiliated third parties as required in order for HCA to administer benefits to you.
  • Affiliated or non- affiliated third parties as required to assist with our legal and compliance activities.
  • Affiliated or non- affiliated third parties as required to assist with the protection of our legal rights and interests.

Protected classification characteristics under California or federal law

  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of assessing an application for your working relationship with us.
  • Affiliated or non- affiliated third parties as required in order for HCA to administer benefits to you.
  • Affiliated or non- affiliated third parties as required to assist with our legal and compliance activities.
  • Affiliated or non- affiliated third parties as required to assist with the protection of our legal rights and interests.

Internet or other similar network activity

  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of your working relationship with us.
  • Affiliated or non- affiliated third parties as required to assist with our legal and compliance activities.
  • Affiliated or non- affiliated third parties as required to assist with the protection of our legal rights and interests.

Sensory data

  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of your working relationship with us.
  • Affiliated or non- affiliated third parties as required to assist with our legal and compliance activities.
  • Affiliated or non- affiliated third parties as required to assist with the protection of our legal rights and interests.

Professional or employment-related information

  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of assessing an application for your working relationship with us.
  • Affiliated or non- affiliated third parties as required to assist with our legal and compliance activities.
  • Affiliated or non- affiliated third parties as required to assist with the protection of our legal rights and interests.

Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))

  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of assessing an application for your working relationship with us.
  • Affiliated or non- affiliated third parties as required to assist with our legal and compliance activities.
  • Affiliated or non- affiliated third parties as required to assist with the protection of our legal rights and interests.

Biometric information

  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of your working relationship with us.

Sensitive personal information

  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of your working relationship with us.
  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of assessing an application for your working relationship with us.
  • Affiliated or non- affiliated third parties as required in order for HCA to administer benefits to you.
  • Affiliated or non- affiliated third parties as required to assist with our legal and compliance activities.
  • Affiliated or non- affiliated third parties as required to assist with the protection of our legal rights and interests.

Geolocation data

  • Affiliated or non- affiliated third parties as required in order for HCA to perform necessary activities in the course of your working relationship with us.
  • Affiliated or non- affiliated third parties as required to assist with our legal and compliance activities.
  • Affiliated or non- affiliated third parties as required to assist with the protection of our legal rights and interests.

Third Parties to Whom HCA May Sell Your Personal Information

We do not sell the data we collect from you on this Website, our “Careers,” or “Investor Relations” websites.

Under the CCPA, a sale is defined as, “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration.”

In the last 12 months, we have disclosed, made available, transferred, or otherwise communicated some of HCA’s Workforce personal information with third parties who provide employees within HCA’s Workforce discounts on a variety of goods, services, and amenities. The categories of personal information we have disclosed, made available, transferred, or otherwise communicated with these third parties are Unique Identifiers and Professional or employment-related information so these third parties can provide you discounts. This sharing constitutes as a “sale” under the CCPA.

Your Sensitive Personal Information

We do not use or disclose your sensitive personal information other than for the business purposes identified in Section 2.

4. Normal Website Usage and Cookies

We use cookies and other technologies to keep track of your interactions with our Sites and services to offer a personalized experience.

You can visit the Sites to read about product, investment, and company information without telling us who you are and without revealing any personal information. During these types of visits, we collect and store statistical information on an anonymous basis, such as the information about the time and length of your visit, the website you last visited, the pages you request, and the date and time of those requests. We may also collect and store the name of your Internet Service Provider. We use cookies and other technologies to keep track of your interactions with our Sites and services to offer a personalized experience.

We use cookies when you enter our Sites to help us gather this type of statistical information that does not include personal information. Cookies are pieces of information that a website transfers to an individual's hard drive or device for record keeping purposes so that we can track our Sites and user activity. The use of cookies is an industry standard, and you will find them at most websites. Most browsers are initially set up to accept cookies. If you would prefer, you can set your browser to refuse cookies or to alert you when cookies are being sent. However, if you do so, some parts of the Sites may not work properly for you.

5. Clear Gifs (Web Beacons/Web Bugs)

Clear gifs (a.k.a. Web Beacons/Web Bugs) help us better manage content on the Sites by informing us what content is effective. Clear gifs are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of Web users. In contrast to cookies, which are stored on a user's computer hard drive, clear gifs are embedded invisibly on Web pages and are about the size of the period at the end of this sentence.

We may also use clear gifs in our HTML-based emails to let us know which emails have been opened by recipients. This allows us to gauge the effectiveness of certain communications and the effectiveness of our marketing campaigns.

6. Log Files

As is true of most websites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp and clickstream data.

We use this information, which does not identify individual users, to analyze trends, to administer the Sites, to track user’s movements around the Sites and to improve our Sites usability.

We do not link this automatically collected data to personal information.

7. Do Not Track Signals

Our Sites do not currently actively respond to “Do Not Track” browser signals or mechanisms. We currently do not sell the data we collect from you on this Website, our “Careers” and “Investor Relations” websites.

8. Accuracy of Your Information

Your information may be updated by logging into the applicable Sites. From there, select the option to edit your profile and make updates as necessary.

9. Confidentiality, Security, and Data Retention

We restrict access to personal information about you, including but not limited to your contact information, to those employees and other persons hired or third party provided contracted by us who need to know the information to provide products and services to you and to otherwise service your account(s) with us. We maintain physical, electronic and procedural safeguards that comply with applicable federal standards to guard your personal information.

We will retain your information as long as necessary to meet our legal obligations and fulfill the purpose your information was collected.

10. Children's Privacy

Our Sites are not directed to children under the age of thirteen (13), nor do we market products or services to such children. We request that children do not provide personal information through our Sites. We do not knowingly collect information from children under thirteen (13) without parental consent. For more information about the Children's Online Privacy Protection Act (COPPA), visit the Federal Trade Commission (FTC) website.

We do not have actual knowledge of selling personal information of consumers under sixteen (16) years of age.

11. California Privacy Notice

THIS SECTION APPLIES SOLELY TO MEMBERS OF HCA’S WORKFORCE WHO RESIDE IN THE STATE OF CALIFORNIA. WE ARE PROVIDING THIS NOTICE TO COMPLY WITH THE CALIFORNIA CONSUMER PRIVACY ACT OF 2018, AS AMENDED AS AMENDED BY THE CALIFORNIA PRIVACY RIGHTS ACT OF 2020 (“CCPA”).

Your Privacy Rights

You have the following rights under the CCPA, to the extent your personal information is not already protected by privacy and security measures required under federal law, for example, for financial services and products. If your Personal Information is subject to the CCPA, you are entitled to the following rights:

  • Request to know. You have a right to request access and to know what personal information we have collected about you in the preceding 12 months, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information we have collected about you. You may exercise this right up to two times within a 12-month period.
  • Request to delete. You have a right to request the delete personal information that we have collected on you, or maintained by us, so long as your request does not conflict with federal or state law, an exception to the CCPA, or if fulfillment of your request would be impossible or involve disproportionate effort to fulfill.
  • Request to correct. You have a right to request we correct inaccurate personal information that we have maintained about you.
  • Request to opt-out. You have the right to opt-out of the “Sale” or sharing of your personal information for cross-contextual behavioral advertising by us.
  • Non-discrimination. Right not to receive discriminatory or retaliatory treatment by us for the exercise of your rights under the CCPA.

How to Exercise Your Privacy Rights Under the CCPA

You can exercise your rights to request to know, request to delete, and request to correct by clicking here or calling toll-free at (855) 889-4117. Clicking the link will take you to an interactive webform that you can fill out and submit your request. If you choose to call the telephone number to exercise your rights, you will be instructed on how to submit your request.

For us to be able to fulfill a request to know, request to delete, and request to correct submitted by you, we need to reasonably verify your identity to ensure you have the proper authority to make these requests. To verify your identity, we will ask you to provide two (2) or three (3) pieces of personal information that we must be able to match within our records.

We shall respond to your request no later than 45 days after you submitted it. If necessary, we may provide you notice and a reason why we need to take an additional 45 days to respond to your request, for a maximum of 90 days.

You may use an authorized agent to submit a request to know, request to delete, or request to correct if your authorized agent provides written permission signed by you. We may deny a request from an agent if the agent cannot does not provide to us your signed permission demonstrating that they have been authorized by you to act on your behalf. We may also require you to do either of the following: (1) Verify your own identity directly with the us. (2) Directly confirm with us that you provided the authorized agent permission to submit the request.

You can exercise your right to request to opt-out by clicking here or calling toll-free at (855) 889-4117. Clicking the link will take you to an interactive webform that you can fill out and submit your request. If you choose to call the telephone number to exercise your rights, you will be instructed on how to submit your request.

California’s “Shine the Light” Privacy Rights

Under California’s “Shine the Light” Law, Cal.Civ.Code section 1798.83, California residents who provide certain personal information are entitled to request and obtain a list of the categories of personal information disclosed to third parties, and a list of the third parties we have shared your personal information with for their own direct marketing purposes during the immediately preceding calendar year. As a California resident, you may make such request once during the course of a calendar year. If you would like to make such request, please submit your request in writing to Privacy2@hcs.com.

12. Changes to Our Privacy Policy

As permitted by law, we may change this Privacy Policy. If there are material changes to this Privacy Policy in the future, we will notify you through these Sites. We encourage you to periodically review our Privacy Policy for information on our privacy practices.

13. How to Contact Us

We continuously strive to comply with all applicable federal and state privacy laws. You can contact our privacy office for any questions or concerns about the business’s privacy policies and practices through the following:

  • Email: Privacy2@hcs.com
  • Toll-Free Telephone: (855) 889-4117
  • Privacy Right Webform: Click here
  • Do Not Sell or Share My Personal Information Webform: Click here
  • Postal Mail: Hyundai Capital America, c/o Director of Privacy, 4000 MacArthur Blvd., Newport Beach, CA 92660