Privacy Policy

Car Concierge Pro (“we”, “our”, “us”) is a buyer-paid car buying, leasing and selling concierge. This policy explains what this website collects about you, which outside companies get to see it, how long it stays, and what you can do about any of it.

It is written to be read. Where something on this site does more than a visitor would expect, this policy says so in plain words instead of hiding it inside a category.

Last updated: September 23, 2026. This is a complete rewrite of the version published before that date, which named none of the tools listed below.

The short version

• Every form here asks for three things: your name, your email and your phone number. Everything else is optional.
• If you give us your phone number, we will call or text you about your request. That is the point of the form.
• This site runs Google Analytics and Google Ads measurement, Microsoft Clarity session recording, HubSpot, RB2B visitor identification, cal.com, PayPal and Cloudflare. Every one of them is named below, with what it actually does.
• One of them, RB2B, tries to work out who a business visitor is without them filling anything in. You should know that in a sentence rather than find it in a paragraph about “third party partners”.
• There is no cookie banner on this site today. The tracking tools load the first time you move the mouse, tap, scroll or type on a page. The opt-outs further down are how you stop them.
• We do not sell your personal information for money.

Who we are, and what this covers

Car Concierge Pro, 1475 N Scottsdale Rd, Ste 200, Scottsdale, AZ 85257. Email Neel@carconciergepro.com. Phone +1 (480) 418-6390.

This policy covers carconciergepro.com and its subdomains. It does not cover the dealer, lender, insurer, inspector or shipping company you deal with after we introduce you. Each of those is a separate business with its own policy, and what you tell them directly is between you and them.

What we collect, and why

When you fill in a form

The form itself asks for a full name, an email address and a phone number. Depending on which form it is, it also records which service you picked, the wording of the button you came in on, and the page you were reading. We use all of it to call you back about the thing you asked for.

Our server adds a few things the form did not ask you for: the IP address the submission arrived from, the two-letter country Cloudflare reports for that address, your browser's user agent string, and whether our customer system accepted the submission. That last copy exists for a blunt reason. In August 2026, six days of real form submissions silently failed to reach our customer system and nobody could prove it had happened. Keeping our own record is how we would catch it now.

The optional “How did you hear about us?” question stores whichever of the seven listed answers you picked. There is no free-text box, so it cannot carry anything you did not mean to send.

Calculators: the out-the-door, payment, loan, lease and depreciation calculators run entirely inside your browser. Nothing you type into one is sent to us, unless you then submit a form on the same page, in which case the summary that form carries is sent with it.

When you book a call

Booking runs on cal.com. Choosing a time sends your name, your email and the slot you picked to cal.com, which creates the calendar invitation and emails both of us. Anything you type into their booking form is held by them as well as by us.

When you pay a deposit

Payments are taken through PayPal. Your card or PayPal account details are entered on PayPal's own surface and never reach this website or our servers. What comes back to us is the order identifier, the amount, the currency, whether it was approved, and the name and email PayPal reports for the payer.

When you use the Ask CCP chat

The chat sends your messages to Anthropic, which runs the model that writes the reply. We do not keep a copy of the conversation: it lives in your browser for as long as the tab is open, and each reply is generated from the messages you can see on screen. Your IP address is used to count requests, so that one visitor cannot run up the bill, and for nothing else.

Do not type payment details, government identification numbers or full financial account numbers into the chat. The assistant is instructed to refuse them, but the simpler protection is not to send them.

When you are only reading

Before you interact with a page, nothing third party has loaded. The moment you move the mouse, tap, scroll, press a key, or switch away from the tab, the measurement tools below load and begin recording the visit: pages viewed, how you got here, roughly where you are, what kind of device and browser you are on, and how you move through the page.

The tools we run, one by one

This list is the whole list. If a tool is not named here, it is not running on this site, and when we add one, it is named here in the same change that adds it.

Google Tag Manager and Google Analytics 4

Google Tag Manager (container GTM-5SDBMW94) is the loader that brings in the Google tags below. Google Analytics 4 (property G-XHM6279J57) counts page views, where visitors came from, which buttons are clicked and which forms are submitted, and sets its own cookies to tell one visit from another. We use it to understand which pages do their job. Google's privacy policy is at policies.google.com/privacy, and their account of how they use data from sites that run their tools is at policies.google.com/technologies/partner-sites.

Google Ads

Two things run under this heading. Conversion measurement tells the ads account that an ad click ended in a form submission or a phone call, so we can tell which ads are worth paying for. Remarketing lets us show ads to people who have visited this site before, on other sites in Google's network. Google's tag on this site is also configured to pick up an email address or phone number entered on a page and send it to Google in hashed form, which is how ad platforms match a conversion back to a click. You can turn off ad personalisation for your own Google account at adssettings.google.com.

Microsoft Clarity

Clarity (project jbjckqa473) records sessions. It replays how a visitor moved, scrolled, clicked and typed through a page, and builds heat maps out of many visits. It is configured to mask the contents of input fields, so what you type into a form is not part of the recording, but the rest of the page as you saw it is. We use it to find the places where a page confuses people. Microsoft's privacy statement is at privacy.microsoft.com/privacystatement.

HubSpot

HubSpot (portal 242128860) is the customer system our team works in, so every lead ends up there: your name, email, phone, what you asked about and which page you came from. It also runs a tracking script on this site that sets a cookie identifying your browser to HubSpot, a chat widget, and its own banner script. Forms here post to our own server first, which forwards them to HubSpot, so your submission is not sent from your browser to HubSpot directly. HubSpot's privacy policy is at legal.hubspot.com/privacy-policy.

RB2B

RB2B (workspace 46DJ4HMDX761) is visitor identification. It takes the fact that a browser has visited this site and tries to match it against a commercial database of business people, largely through their professional profiles, in order to tell us who was here. It is built to produce a name for someone who never filled anything in, and it works on business visitors rather than on private ones.

We keep it because knowing which companies are reading a corporate or fleet page is genuinely useful to a business this size. We are also not going to describe it as anything other than what it is. If you would rather not be matched, RB2B publishes an opt-out at rb2b.com/opt-out, and the browser controls further down stop the script loading at all.

cal.com

cal.com runs the scheduling for the 30 minute consultation. It receives what you enter on the booking form and holds the resulting appointment. Their privacy policy is at cal.com/privacy.

PayPal

PayPal processes the deposit and the balance. They receive your payment details directly and tell us only whether the payment succeeded and who made it. Their policy is at paypal.com/privacy.

Cloudflare

This site is hosted on Cloudflare. Every request passes through them, so they see the IP address, the time, the page requested and the user agent, as any host would. Cloudflare also injects its own lightweight analytics beacon into our pages, which we did not add and which measures page performance rather than people. Our own lead records are stored in a Cloudflare database in the United States. Their privacy policy is at cloudflare.com/privacypolicy.

Anthropic

Anthropic runs the model behind the Ask CCP chat. The messages in a conversation are sent to them to generate each reply. Their privacy policy is at anthropic.com/legal/privacy.

Resend

Resend sends the internal email that tells our team a new lead has arrived. It carries the same details you submitted. It goes to us, not to you, and nobody else receives it.

JustCall

Calls and text messages to leads are made through JustCall, so the phone number you gave us is loaded into it, along with the record of calls and messages. Our business texting is registered under the A2P 10DLC programme that United States carriers require. JustCall's privacy policy is at justcall.io/privacy-policy.

Our own first-touch record

Separately from any vendor, this site keeps a small record in your browser's local storage, under the key ccp_ft_v1, of how you first arrived. It holds five things: the path of the first page you landed on, the website that referred you, any utm_source, utm_medium, utm_campaign, utm_term or utm_content tags on that first link, any advertising click identifier on it (gclid, gbraid, wbraid, msclkid or fbclid), and the time of that first visit.

Three things about it are worth knowing. It records your FIRST visit only, and later visits do not overwrite it until it is 90 days old. It stores the path of that first page without its query string, so whatever else happened to be in the address bar, an email address someone pasted into a link for instance, is not kept. And nothing except this site reads it: it is attached to a form when you submit one, so that the lead record says which channel you came from, and it is sent nowhere else.

Clearing your browser's site data for carconciergepro.com removes it.

Cookies and browser storage

We set two cookies of our own. Both last 30 days, both hold nothing but a flag saying a form on this site has been submitted from this browser, and their only use is to give a visitor who has already been in touch a longer conversation with the chat assistant instead of asking again for details they have already given.

The tools listed above set their own: Google Analytics and Google Ads for counting visits and attributing conversions, HubSpot to identify your browser to HubSpot, Clarity to tie a session recording together, and RB2B for its matching. The site also uses the local storage entry described above, and small local storage entries that remember interface state such as which tab you had open.

There is no cookie consent banner on this site at present. That is a gap we would rather name than paper over: today the way to refuse these tools is your browser's own controls and the opt-outs below.

How long we keep it

Our own lead record is kept until we delete it. We have not set a fixed deletion schedule, and rather than print a number this policy could not stand behind, here is the plain version: ask us, and we will delete it. Email Neel@carconciergepro.com and we will remove your record from our database and ask HubSpot to delete its copy.

The first-touch record in your browser expires by itself after 90 days.

Chat conversations are not stored by us at all.

Anything held by Google, Microsoft, HubSpot, RB2B, cal.com, PayPal, Cloudflare, Anthropic, Resend or JustCall is kept on their schedule, not ours. Each of their policies is named above, and a deletion request to us includes asking them, wherever we are able to.

Who it is shared with

The companies named above, each doing the job described. Nobody else routinely receives any of it.

A dealer, lender, inspector or shipping company receives your details only when you have asked us to act for you and doing so is how the job gets done. That is the service, not a disclosure.

We disclose information where a law, a subpoena or a court order requires it. If the business is ever sold or merged, records pass to the buyer, who is bound by this policy until they publish their own.

We do not sell your personal information for money. Some United States state laws use a wider definition, under which running a tool that identifies visitors, or that advertises to them elsewhere, counts as sharing for cross-context behavioural advertising. Under that wider definition RB2B and Google Ads on this site would qualify. The opt-outs below are how you stop both.

Calls and texts

This is the sentence printed under every form on this site, and it is what you agree to when you submit one:

By submitting, you agree Car Concierge Pro may call or text you about your request, including by automated means. Consent is not a condition of purchase. Msg & data rates may apply; reply STOP to opt out.

In practice it means a person calls or texts the number you gave us, about the request you made. Reply STOP to any text to stop them, or HELP for help. Asking to be taken off the list does not affect anything else we are doing for you.

How to opt out

• Stop the tracking tools loading at all: block third party scripts in your browser, or use a content blocker. Everything on this site that matters, the forms, the calculators, the pages, works with them blocked.
• Google Analytics: install Google's own opt-out add-on from tools.google.com/dlpage/gaoptout.
• Google Ads personalisation: turn it off at adssettings.google.com.
• Industry-wide advertising opt-outs: optout.aboutads.info and youradchoices.ca.
• RB2B: their opt-out is at rb2b.com/opt-out.
• Clarity and HubSpot: clearing site data for carconciergepro.com removes their cookies, and blocking their scripts stops them being set again.
• Texts: reply STOP. Calls: tell whoever calls, or email us.
• All of it at once: email Neel@carconciergepro.com and ask us to delete your record and stop contacting you. We will.

Global Privacy Control: this site does not yet detect the GPC browser signal automatically. Until it does, an email to us counts as the same request and we will act on it.

Your rights

California residents have the right to know what personal information we have collected about them, to have it deleted, to correct it, to opt out of its sale or its sharing for cross-context behavioural advertising, and not to be treated differently for exercising any of those rights. The opt-outs above cover the sharing case; email us for the rest.

Residents of other United States states with privacy laws, Colorado, Connecticut, Virginia, Utah and Texas among them, have broadly the same rights and the same route to them.

If you are in the United Kingdom, the European Economic Area or Switzerland, you have the rights the GDPR gives you: access, correction, erasure, restriction, portability and objection, including objection to profiling. Our lawful basis is your consent where you submitted a form or asked to be contacted, and our legitimate interest in running and measuring a website otherwise. Your data is processed in the United States.

Whichever of those applies to you, the route is the same and there is no form to fill in: email Neel@carconciergepro.com. We will confirm we have your request, and answer it.

Children

This site is not for children. We do not knowingly collect information from anyone under 13, and if we learn that we have, we delete it. Buying a car is an adult transaction and there is no reason for a child's details to reach us.

How we protect it

The site is served over HTTPS only. Forms post to our own server rather than straight to a third party, and the keys that talk to our vendors are held server side and never sent to your browser. Access to the customer system is limited to the people who work the leads. Payment details never touch our servers at all.

No site can promise that nothing will ever go wrong. What we can say is that the amount we hold is deliberately small: a name, an email address, a phone number, and what you told us you wanted.

Changes to this policy

When this changes, the date at the top changes with it, and the previous version is kept in our repository so that a change can be pointed at rather than argued about. A change that materially affects people we are already speaking to will be emailed to them.

Contact us

Email Neel@carconciergepro.com about anything in this policy, including a request to see, correct or delete what we hold. Post: Car Concierge Pro, 1475 N Scottsdale Rd, Ste 200, Scottsdale, AZ 85257. Phone +1 (480) 418-6390.