Yamaha Motor Corporation, U.S.A. Privacy Notice
Last Updated [January 1, 2023]
Yamaha Motor Corporation U.S.A. ("Yamaha") values your personal information and respects your privacy. The purpose of this Notice is to keep you informed of:
- 1. Information We May Collect From or About You
- 2. How We May Share or Use Your Personal Information
- 3. Choices & Resources With Respect to Your Personal Information
- 4. Collection, Use & Sharing of Passive & Other Information Beyond the Scope of Personal Information
- 5. Additional Information about the Yamaha Website and Yamaha's Privacy Practices
- 6. Privacy Statement for California Residents
- 7. Privacy Statements for Virginia, Colorado, and Connecticut Residents
- 8. Changes to Our Privacy Notice
- 9. Contact Information
Our primary purpose in the collection and use of this information is to further our efforts to interact and build relationships with you, our potential or existing customers, in order to provide a diverse array of innovative and reliable products.
This Notice applies to the Yamaha website located at https://www.yamaha-motor.com and other related websites owned and operated by Yamaha that may link to this Notice (the "Yamaha Website" or "Website"). This policy also applies to information we collect, protect, share and use as part of other technology platforms, web pages, interactive features, special events, forms, social media, and mobile applications. The Website and this Notice are intended for U.S. residents only. If you are a resident of another country, please use the following link to find the appropriate Yamaha affiliate that corresponds to your geographic region. https://global.yamaha-motor.com/link/index.html
By using the Website, or providing us with any information, you consent to the collection, processing, maintenance and transfer of such information in and to the United States and other applicable territories in which the privacy laws may not be as comprehensive as or equivalent to those in the country where you reside or are a citizen.
1. Information We May Collect From or About You
Passive Information. When you visit the Yamaha Website, we may collect passive information about your visit. Passive information is any form of aggregate data, navigational data, tracking data, click-stream data, or historical data, which does not on its own personally identify you. Passive Information includes information collected through cookies and web beacons (see 4 below https://www.yamahapubs.com)
Personal Information. When you register a product, purchase products through our ecommerce programs via the Website, send us an email, subscribe to one of our newsletters, or submit other data through the Yamaha Website, we may obtain and collect personal information. Personal information is information collected that personally identifies you, such as by name, email address, mailing address, phone number. This personal information may be combined with Passive Information or additional information we receive from third parties, as well.
2. How We May Share or Use Your Personal Information
Sharing. Personal information may be shared by Yamaha on an international basis with its parent entity, subsidiaries and affiliates, and such information may be further shared between internal product groups in order to enhance the Yamaha customer experience and offer additional products and/or services that may be of interest to you. We may also share your personal information with third parties either at your express direction, such as when you request that we have a dealer contact you or you authorize sharing of your personal information with a third party business partner. Yamaha is not responsible for the handling of such information by these third parties who are responsible for their own privacy policies that would govern such collection, use and handling of this information. Yamaha may also appoint third party agents in connection with its marketing and survey efforts, subject to a confidentiality agreement concerning the information. In any case, Yamaha will not, without your consent, disclose any such personal information for use in connection with an unrelated third party's marketing efforts.
Use. Yamaha does not send unsolicited bulk emails or marketing-related communications to anyone who has requested that we not contact them. We send promotional information and communications only to those who have taken affirmative steps to subscribe to these communications or our existing registered customers, who have not unsubscribed or opted out of such communications. You may "opt-out" of our promotional use of your personal information (see 3 below https://www.yamahapubs.com). If you have opted out of our promotional use of such personal information (see 3 below https://www.yamahapubs.com), Yamaha will not use or disclose such information except as follows:
- to communicate directly with you in connection with your Yamaha products, purchases or specific requests;
- to validate credit card numbers;
- to permit our website designers to develop features and services that meet your needs (see 4 below, including Cookies https://www.yamahapubs.com);
- to tailor your experience on our Website, showing you individually tailored content (see 4 below, including Cookies https://www.yamahapubs.com);
- to comply with a lawful subpoena or court order;
- to remedy any violation or breach of an agreement between you and Yamaha; and
- to prevent harm to the property or rights of Yamaha or its customers.
3. Choices & Resources With Respect to Your Personal Information
Response Opt-Out. In response to any Yamaha promotional or marketing communication, such as a newsletter or other circulation, if you wish to no longer receive such communications, please follow the "unsubscribe" instructions contained in such communication. The entity or business group sending such communication will mark your personal information with this request to cease further marketing communications. However, you may receive future communications from other entities or business groups within Yamaha that have received your personal information, unless you have already unsubscribed from such communications from those other entities or business groups or you have communicated a request to opt-out of such communications from all Yamaha business groups.
Opt-Out, Amend or Delete Contact. If you wish to opt-out of our use and disclosure of your personal information for marketing and survey purposes (other than through use of the unsubscribe/opt-out provided in a marketing communication you may have received), or if you wish to amend or delete certain information that you have previously provided, please email your request to https://yamaha-motor.com/data-privacy-request-form. With respect to amendment or deletion of certain information, we will endeavor to provide a simple way to review, correct, update or remove personal information, as applicable. In some limited circumstances, such as to resolve disputes, comply with retention obligations, troubleshoot problems and enforce our Terms and Conditions, we may retain in our files information you have requested us to remove, but such information is not actively used.
4. Collection, Use & Sharing of Passive & Other Information Beyond the Scope of Personal Information
Aggregate Information. Yamaha may share aggregate statistical information with business partners, sponsors or other third parties without sharing your personal information. For example, we may tell an advertiser that X number of visitors visited a certain area on a website, or that Y number of men and Z number of women applied for extended service, but we would not disclose anything that uniquely identifies those individuals.
IP Addresses. An Internet Protocol ("IP") address is a number assigned to your computer whenever you access the Internet. An Internet Service Provider ("ISP") typically assigns a random dynamic IP address at the time of your dial-up. For local area network ("LAN"), DSL, or cable modem users, a static IP address may be permanently assigned to a particular computer. Yamaha may record IP addresses of visitors to its Website. While an IP address may reveal your ISP or geographic area, we cannot determine your identity solely based upon your IP address. Other websites you visit have IP addresses, and we may collect the IP addresses of those websites and their pages, but these IP addresses are never associated with Internet users.
Web Beacons. The Website may contain web beacons, which are electronic images (sometimes called "single-pixel gifs") that allow us to count page views, or to access cookies. We may also include web beacons in HTML-formatted newsletters containing graphics that we may send to opt-in subscribers, to count the number of newsletters that have been opened and read. Our web beacons do not collect, gather, monitor, or share any personal information about our website visitors. They are used only to compile our anonymous, aggregate statistics about website usage.
Geolocation. Yamaha products and connected device applications may collect, use, and share precise location data, including the real-time geographic location of your Yamaha product or connected device using a Yamaha application in order to provide location-based services and features. Where available, geolocation features may use GPS, Bluetooth, and your IP Address, along with crowd-sourced Wi-Fi hotspot and cell tower locations, and other technologies to determine the approximate location of your device and/or Yamaha product. Unless you provide consent, this location data (if collected at all) is collected anonymously in a form that does not personally identify you and is used by Yamaha, its affiliates and servicers generally to provide and improve location-based products and services. For example, your Yamaha application may share the geographic location of your connected device or Yamaha product with Yamaha, its affiliates and servicers when you opt in to geolocation features within applications or Yamaha products. Some geolocation features require combination with personal information in order to function. For example, some Yamaha products with geolocation features are combined with product identification numbers that are tied to Personal Information.
Vehicle Health, Performance and Use of Your Yamaha Product. Yamaha products and connected device applications may collect, use, and share data related to health of your Yamaha Product, your use of and the performance of your Yamaha Product. This data (if collected at all) is collected either through your use of connected device applications or through diagnostic tools. Additionally or alternatively, if your Yamaha product is equipped with a data communication module, such module when power is supplied may automatically transmit said data pertaining to vehicle health, performance and use of your Yamaha Product to us in a form that does not personally identify you unless such module is paired or synchronized with you by way of matching it with your active account with us. The collected data may be used by Yamaha, its affiliates and servicers generally to provide more effective service and maintenance of your Yamaha product, as well as to continue to provide and improve quality products, features and services.
5. Additional Information about the Yamaha Website and Yamaha's Privacy Practices
Information Communicated via Social Media & Other Similar Third Party Platforms. Any information disclosed via third party communication platforms are outside of the Yamaha Website and subject to the privacy policies of those applicable third parties. Exercise caution before disclosing your personal information via these public venues (whether through public post or via direct messages) all of which you do at your own risk. If you do so, you may receive unsolicited emails or "spam." Yamaha cannot safeguard the privacy of personal information that is disclosed and can be viewed or accessed online in this manner. Personal information you provide to Yamaha via third party communication platforms may be combined with any of your personal information Yamaha may already have subject to this Notice.
Security. We take safeguarding your data seriously. We seek to use reasonable information security measures to help protect your personal information. Unfortunately, even though we take measures to protect your personal information, no data transmission or storage system can be guaranteed to be 100% secure. As a result, we cannot ensure or warrant the security of any information you transmit, and you do at your own risk.
Children's Online Privacy Protection. The Yamaha Website complies with the Children's Online Privacy Protection Act of 1998 (COPPA). COPPA and its accompanying FTC regulation protects the privacy of children using the Internet. Yamaha does not knowingly collect contact or personally identifiable information from children under 13. The Yamaha Website is not intended to solicit information of any kind from children under 13, and is designed to block our knowing acceptance of any such information, wherever age related information is requested. It is possible that by fraud or deception we may receive information pertaining to children under 13. If we are notified of this, as soon as we verify the information, we will immediately obtain parental consent or otherwise delete the information from our servers. If you want to notify us of our receipt of information by children under 13, please do so by emailing us at email@example.com.
6. Privacy Statement for California Residents
This Privacy Statement/Notice at Collection for California Residents supplements the information contained in the Yamaha Privacy Statement and applies solely to consumers who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA”) and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this section.
Categories of Personal Information We Collect We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:
|Category||Examples||Categories of Third Parties to Whom Personal Information is Disclosed|
|Identifiers.||A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.||
|Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).||A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit/debit card number, or any other financial information, medical information, or health insurance information.|
|Protected classification characteristics under California or federal law.||Age (40 years or older), race, color, ancestry, national origin, citizenship, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), veteran or military status.||
|Commercial information.||Records of personal property, products or services purchased, or considered, or other purchasing histories or tendencies.||
|Biometric information.||Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, or other physical patterns, and sleep, health, or exercise data.||
|Internet or other similar network activity.||Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.||
|Geolocation data.||Physical location or movements.||
|Sensory data.||Audio, electronic, visual, thermal, olfactory, or similar information.||
|Professional or employment-related information.||Current or past job history or performance evaluations.||
|Inferences drawn from other personal information.||Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.||
* “Service providers and contractors” include but not limited to: analytics companies, third-party advertisers, payment processors, and cloud service providers.
Sources of Personal Information. We collect personal information from various sources:
- Directly or indirectly from you through interactions with our products or services including our websites, applications, form submissions, or interactions with our advertisers
- Social network information
- Publicly available data bases
- Third party business partners such as marketing partners
Personal information does not include:
- Publicly available information from government records.
- De-identified or aggregated consumer information.
- Information excluded from the CCPA's scope, like:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.
Purposes of Processing Personal Information. We may use or disclose the personal information we collect for one or more of the following business purposes:
- To fulfill or meet the reason for which the information is provided. For example, using email addresses, physical addresses, or phone numbers to process and verify warranty information.
- To provide you with information, products or services that you request from us.
- To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
- To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
- To improve our website and present its contents to you.
- For testing, research, analysis and product development.
- As necessary or appropriate to protect the rights, property or safety of us, our clients or others.
- To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
- As described to you when collecting your personal information or as otherwise set forth in the CCPA.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without obtaining your consent.
Disclosure and Sale or Sharing of Personal Information. In the preceding twelve (12) months, we have disclosed the categories of personal information to the categories of the third parties as listed in the chart above for our business purposes. When we disclose (including sell or share if applicable) personal information for our business purposes, we enter a contract that describes, among other statutory required conditions, the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we did not disclose your personal information for monetary consideration or for cross-context behavioral advertisement to third parties unless we specifically obtained your consent. If our disclosure is construed as “sale” or “share” under the CCPA, we might have sold or shared the categories of personal information to the categories of the third parties as listed in the chart above for our business purposes.
Sensitive Personal Information. Although personal information we collect might include “sensitive personal information” (e.g. Social Security number, precise geolocation, citizenship), we process such sensitive personal information solely for the purposes permitted by the CCPA and other relevant laws and regulations unless we specifically obtain your consent.
Human Resource (HR) Data Processing. Taking the unique employer-employee relationship into consideration, we provide a separate privacy notice/notice at collection that notifies our HR data processing for (i) the existing Yamaha employees, and (ii) the job candidates or applicants, respectively. This Statement still applies to the matters to which said HR data specific privacy statement does not cover.
Business Related (B2B) Data Processing. This Statement applies to B2B data processing other than those items specified as follows:
- Categories of Personal Information We Collect: We collect personal information in B2B context about Identifies and Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, business address, email address, phone number, job title, qualifications, education.
- Purposes of Processing Personal Information: We process personal information we collect in B2B context for maintaining business relationship, pursuing business objectives, fulfilling or meeting the reason for which the information is provided, carrying out our obligations and enforcing our rights arising from any contracts entered into between you (or your employer) and us, as necessary or appropriate to protect the rights, property or safety of us, our clients or others, responding to law enforcement requests and as required by applicable law, court order, or governmental regulations, and as described to you when collecting your personal information or as otherwise set forth in the CCPA.
- Disclosure, and Sale or Sharing of Personal Information: In the preceding twelve (12) months, we did not sell or share your personal information collected in the B2B context to third parties.
Consumer Rights under the CCPA. The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (or the periods specified by the applicable laws). Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting, selling, or sharing that personal information.
- The categories of third parties with whom we disclose that personal information.
- The specific pieces of personal information we collected about you (also called a data portability request).
- If we sold, shared or disclosed your personal information for a business purpose, two separate lists disclosing:
- the categories of personal information sold or shared and each category of recipient to whom we sold or shared; and
- the categories of personal information disclosed and each category of recipient to whom we disclosed.
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless any of the following exception applies:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
- Comply with Yamaha's ability to make repairs covered under warranty or communicate recalls to consumers.
You have the right to request that we correct inaccurate personal information about you. Once we receive and confirm your verifiable consumer request, we will use commercially reasonable efforts to correct as directed, unless we determine that the contested information is more likely than not accurate based on the totality of the circumstances.
You have the right to request that we do not “sell” or “share” (disclosure for cross-context behavioral advertisement) any of your personal information that we collected and retained, or that we limit the use or disclosure of your sensitive personal information to those uses permitted by the CCPA. Once we confirm your identity, we will cease to sell and/or share your personal information with third parties, or cease to use or disclose your sensitive personal information for purposes other than those permitted by the CCPA.
Exercising Access, Data Portability, Deletion, Correction, and Opt-Out Rights
To exercise the right to access, data portability, deletion, correction, and request not to “sell” or “share” personal information, request to “limit use of sensitive personal information” described above, please submit a verifiable consumer request to us by either:
- Calling us at 800-962-7926
- Submit this form: https://yamaha-motor.com/data-privacy-request-form
Only you or a person that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
You may only make a verifiable consumer request for access, correction, opt-out, deletion, or data portability twice within a 12-month period. The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
Do Not Track “DNT” Signals. We have not implemented the necessary program changes to honor “Do Not Track” or “DNT” browser signals.
CCPA Children Privacy Rights. We do not disclose California Personally Identifiable Information of individuals we know to be under the age of 16 to business or third parties for monetary or other valuable consideration as a “sale” or “share” under the CCPA without affirmative authorization.
Response Timing and Format. We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt, unless otherwise required by the applicable laws. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Retention Period. We intend to retain the personal information we collect for the period necessary to fulfill the purposes for which it was collected, unless the different retention period is specified by the relevant laws. The criteria used to determine our retention periods include (i) for as long as we have an ongoing relationship with you; (ii) as required by a legal obligation to which we are subject to (such as product recall); or (iii) as advisable in light of our legal position (such as litigations, regulatory investigations, or statutes of limitations).
7. Privacy Statements for Virginia, Colorado, and Connecticut Residents.
This Privacy Statement for Virginia, Colorado, and Connecticut Residents supplements the information contained in the Yamaha Privacy Statement and applies solely to consumers who reside in the State of Virginia, Colorado, and Connecticut (“consumers” or “you”). We adopt this notice to comply with the Virginia Consumer Data Protection Act which takes effect on January 1, 2023 (“VCDPA”), the Colorado Privacy Act which takes effect on July 1, 2023 (“CPA”), and the Connecticut Data Privacy Act which takes effect on July 1, 2023 (“CTDPA”), respectively. Any terms defined in the respective privacy laws have the same meaning when used in this section.
Categories of Personal Data We Collect, Categories of Personal Data that We Disclose with Third Parties, and Categories of Third Parties with whom We Disclose Personal Data. Please refer to “Categories of Personal Information We Collect” of Section 6 (Privacy Statement for California Residents) as the descriptions therein similarly apply to you.
Purposes of Processing Personal Data. Please refer to “Purposes of Processing Personal Information” of Section 6 (Privacy Statement for California Residents) as the descriptions therein similarly apply to you.
Sale of Personal Data & Targeted Advertising. We do not disclose your personal data for monetary consideration to third parties unless we specifically obtain your consent. Similarly, we do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. If our disclosure is construed as “sale” under either the VCDPA, the CPA, or the CTDPA, we may sell the categories of personal information to the categories of the third parties as listed in the chart in the Section 6 (Privacy Statement for California Residents) for our business purposes. When we disclose (including sell if applicable) personal data for our business purposes, we enter a contract that describes, among other statutory required conditions, the purpose and requires the recipient to both keep that personal data confidential and not use it for any purpose except performing the contract. We may engage in targeted advertising so that we can conduct more personalized and tailored marketing to our consumers.
Consumer Rights under the VCDPA, the CPA, and the CTDPA. If you are either a Virginia Resident, a Colorado Resident, or a Connecticut Resident, under the VCDPA, the CPA, or the CTDPA respectively, starting from the effective date of the relevant laws, you have the right to (1) request to know what personal data has been collected about you, and to access that data; (2) request to correct inaccuracies in your personal data; (3) request deletion of your personal data, though exceptions under the respective laws may allow us to retain and use certain personal data notwithstanding your deletion request; and (4) obtain a copy of your personal data. In addition, you have the right to opt-out from sale or targeted advertising (if applicable).
To exercise your rights described above, please submit a verifiable consumer request to us by either:
- Calling us at 800-962-7926
- Submit this form: https:yamaha-motor.com/data-privacy-request-form
We process your consumer request substantially in accordance with the manners as described in “Consumer Rights under the CCPA” in Section 6 (Privacy Statement for California Residents). In case we cannot wholly or partially comply with your request, the response we provide will explain the basis for our decision as well as the descriptions of your right to appeal and the manner you can exercise said right.
8. Changes to Our Privacy Notice
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through a notice on our website homepage.
9. Contact Information
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under this notice, please do not hesitate to contact us at:
Attn: Privacy Office
6555 Katella Avenue
Cypress, California 90630-5101