Privacy Policy
Last updated: September 26, 2026
Best Deal Auto ("Best Deal Auto", "we", "us", or "our") respects your privacy. This Privacy Policy explains what information this website collects, what happens to it, who handles it on our behalf, and the choices you have. You can browse every listing on this site without giving us any personal information.
Contact form
When you send us a message through the contact page, we collect your name, phone number, email address and the message you write. If you opened the form from a vehicle listing, the message also records which vehicle you were asking about.
The message is saved in our database and emailed to the dealership, with your email address set as the reply address so staff can answer you directly. We use it to answer your question and to follow up about the vehicle you asked about. Dealership staff can delete a message from their admin at any time.
Financing application
The finance application collects more than any other part of this site:
- your full name, date of birth, Social Insurance Number, phone number, email address, driver's licence class and marital status;
- your employment status and, where it applies, your employer, occupation, gross monthly salary and hours per week;
- your home address, how long you have lived there, whether you rent or own, and either your monthly rent or your property value, mortgage balance and mortgage holder;
- your bank and the date your account was opened;
- whether you have ever declared bankruptcy and, if so, the details;
- your acceptance of the acknowledgement and consent shown on the last step.
We use the application to arrange vehicle financing for you. It is saved in our database, and a copy is emailed to the dealership as a PDF with all but the last three digits of your Social Insurance Number hidden. Dealership staff can open the full application, including the complete number, in their admin. The dealership arranges financing with the financing company and lenders described in the consent you accept when you apply, and that consent sets out what they may do with your information, including checking your credit. We do not use the application for anything else. You are never required to complete a financing application to browse this site or to contact us.
Nothing removes an application automatically. It stays in our database until the dealership deletes it from their admin or until you ask us to delete it.
Spam protection on our forms
The contact form and the finance application both use Cloudflare Turnstile to tell people from automated scripts. Turnstile runs a check in your browser when you submit and hands our server a token, which we verify with Cloudflare along with your IP address. Cloudflare's privacy policy applies to that check.
Test drive bookings
Test drives are booked through Cal.com, a scheduling service whose booking widget is embedded on this site. Cal.com's script loads on any page that shows a "Book a test drive" button. When you book, your name, email address, phone number, the vehicle you chose, the time you picked and any notes you add go to Cal.com, which runs the scheduling under its own privacy policy.
Cal.com then sends the booking to us, and we keep a copy in our database so the dealership can see it beside the vehicle: your name, email address, phone number, time zone, the vehicle, the time, your notes and the booking's status. The appointment appears on the dealership's Google Calendar, and Cal.com emails you a confirmation and reminders. Dealership staff can see, cancel and reschedule the booking from their admin, and you can cancel or reschedule it using the links in your confirmation email.
Usage statistics
We measure how this website is used so we can improve it. Our own measurement script records the pages you view, including any search filters in the page address, which vehicles you look at, how long you stay on a page and how many of a listing's photos you open, the searches you run on the inventory page, the price and term you try in the payment calculator, clicks on the call, email, directions, booking, message, financing, social media and report buttons, and whether you started or finished the contact or finance form. It does not record anything you type into a form.
Alongside each of these it records a random session id, the website you came from if there was one, any campaign tags in the address, your device type (phone, tablet or desktop), your operating system and browser family, whether you are inside an app's built-in browser, and the country the request came from. The session id is generated in your browser, kept only in session storage and discarded when you close the tab. No cookie is set, and nothing links one visit to the next. Your IP address is converted on the server into a hash that includes the date, so the address itself is never stored and the hash cannot be matched from one day to the next.
If your browser sends a Global Privacy Control signal, nothing is recorded at all. Requests from known bots and crawlers are dropped. Recorded events are deleted after 13 months.
Google Maps and reviews
The contact page embeds a Google Map of our location, and its "Get directions" button opens Google Maps. The map is loaded from Google when you open the contact page, and Google's privacy policy applies to whatever it collects through that embed. The Google rating and review count shown on this site are fetched by our server from Google's Places API using our own business listing, and no information about you is involved in that.
Cookies and browser storage
This site sets no cookies of its own. It keeps three small values in your browser's storage: the grid or list view you chose on the inventory page and the random session id described above, both in session storage that is cleared when you close the tab, and a flag in local storage that switches usage measurement off when you arrive through the dealership's own admin link. Components embedded from other services, namely the Cal.com booking widget, the Google Map and the Turnstile check, may set their own cookies under their own policies. You can control cookies and site storage through your browser settings.
Who handles your information for us
This website runs on Cloudflare, which also provides the Turnstile check on our forms. Our database and file storage, including the records described above, are provided by Supabase. Emails from the site are sent through Resend. Test drive scheduling is handled by Cal.com. Each of these providers processes information only to provide its service to us. Financing applications are also shared with the financing company and lenders described in the consent you accept when you apply. We do not sell your personal information.
How long we keep it
Contact messages and financing applications stay in our database until the dealership deletes them from its admin or you ask us to delete them; nothing removes them on a schedule. Test drive bookings, including cancelled ones, stay in our database until you ask us to delete them, and Cal.com keeps its own record under its own policy. Usage statistics are deleted after 13 months.
Business transfers
If Best Deal Auto is ever sold, merged, or transfers substantially all of its assets, your information may be transferred to the new owner as part of that transaction, subject to the same commitments described in this policy.
Your choices
You may contact us at any time to ask what information we hold about you, to request a correction, or to request deletion, subject to any legal or contractual obligations that require us to keep certain records. To stop usage measurement, turn on Global Privacy Control in a browser that supports it; this site honours the signal.
Security
Form submissions travel over an encrypted connection to our own server before they are stored; your browser never talks to the database directly. The emailed copy of a finance application masks your Social Insurance Number, and the full number is shown only to signed-in dealership staff. Access to stored records is limited to dealership staff and to the people who operate the website for us. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Privacy officer
Questions, corrections, or concerns about how we handle your personal information can be directed to our privacy officer atbestdealas@gmail.comor (905) 746-6219.
Children's privacy
This website is not directed at children, and we do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. Changes take effect as soon as they are posted on this page.
Contact us
Questions about this Privacy Policy or your information can be sent tobestdealas@gmail.comor by visiting us at 415 Concession St, Hamilton, ON L9A 1B8.