Privacy Policy
Ensuring the confidentiality of Your (“Customer”, “You”, “Your”) Non-Public Personal Information (“NPPI”) is paramount to Us. This privacy policy pertains to Norman & Company, Inc. and Classic Administration Systems, LLC, along with our website www.classictrak.com (“We”, “Us”, “Our”). It outlines our practices concerning the collection, utilization, disclosure, and safeguard of Your information. Your engagement with our products, services, or website implies Your acknowledgment and consent to this policy.
This Privacy Policy also describes our obligations under applicable U.S. state privacy laws and, where applicable, our role as a “service provider” or “processor” under such laws. Terms such as “Personal Information,” “sell,” “share,” and “processing” have the meanings provided under applicable privacy laws. Certain Non-Public Personal Information we collect may be subject to the Gramm-Leach-Bliley Act (“GLBA”), which provides federal privacy protections for such information.
Kindly note that alterations to this policy will not be individually communicated. We recommend revisiting this Privacy Policy periodically. If You disagree with these terms and conditions, We advise refraining from accessing our website or utilizing our product(s) and service(s).
Nothing in this Policy limits any rights provided under applicable law.
Norman & Company, Inc./Classic reserves the right to modify this Privacy Policy at our discretion.
When We collect information
Throughout the process of acquiring or utilizing our product(s) and service(s), We gather pertinent information regarding Your identity and the product(s) or service(s) procured by You. The data collected is voluntarily furnished by You whether through our website, affiliated dealers, agents, repair facilities, lenders, or other entities involved in the provision of our product(s) and service(s). Additionally, We may obtain information from You as part of our obligations or in the course of fulfilling our responsibilities to You, which may occur through phone conversations, email correspondence, electronic document uploads or postal communication.
We collect Personal Information only as reasonably necessary and proportionate for the purposes described in this Privacy Policy.
Why We collect information
Our data collection procedures are aimed at evaluating the suitability of our product(s), administering Your contract(s)/waivers(s), managing claims, cancellations, and transfer requests, as well as fulfilling the obligations defined within our programs and services, in addition to complying with legal mandates. The information gathered enables us to enhance our services, engage in correspondence with You – pertaining to general inquiries about our product(s) and service(s), as well as providing information regarding Your claims or agreements with us. Furthermore, We may gather data to authenticate Your identity and mitigate the risk of fraudulent activities from these sources.
What information We collect
In accordance with applicable privacy laws, We may collect the following categories of Personal Information, including but not limited to:
- Identifiers (such as name, address, phone number)
• Commercial information (such as purchased products or warranties)
• Financial information (such as loan or payment-related details)
• Vehicle and asset-related information
• Auto Insurance-related information
• Communications (such as emails, phone calls, or submitted forms)
• Personal Signature
Categories of Sources of Personal Information
We collect Personal Information from the categories of sources listed below:
• Directly from You
• Product contracts/waivers, repair orders, and vehicle purchase contracts
• Dealers, independent agents, lenders, and service providers
• Repair facilities and claims administrators
• Insurance companies/policies and third-party partners
• Our websites and online portals
Additionally, We may collect certain technical information related to Your interaction with our website, including Your IP address, browser type, domain name, access times, and referring website addresses. This information is used to support the operation of our website, improve service quality, and better understand how users interact with our services.
Certain information we collect, such as financial, insurance, or transaction-related information, may be considered sensitive under applicable privacy laws. We use such information only as reasonably necessary to provide our products and services, verify identity, prevent fraud, and comply with legal obligations. We do not use or disclose sensitive Personal Information for purposes beyond those permitted by applicable law.
How We Share Personal Information
We may disclose Personal Information for business purposes to the following categories of third parties:
• Service providers, service facilities, and vendors
• Insurance companies and administrators
• Roadside assistance providers
• Inspection companies
• Affiliates and subsidiaries
• Regulatory authorities or legal bodies as required by law
We require such parties to use Personal Information only as necessary to perform services on our behalf and in accordance with applicable privacy laws, and not for their own independent purposes except as required by law.
We do not sell or share Your Personal Information, including Non-Public Personal Information (“NPPI”), as those terms are defined under applicable privacy laws, including the California Consumer Privacy Act, and We do not use Personal Information for targeted advertising purposes.
How long We keep Your information
We retain Personal Information only for as long as reasonably necessary to provide our products and services, fulfill contractual obligations, comply with legal and regulatory requirements, and resolve disputes. Any information that is no longer required is securely disposed of using industry best practices appropriate to the nature and format of the information, whether physical or digital. For example, physical or paper-based records undergo specific disposal procedures, wherein they are placed into secure, locked shredder bins. An external company conducts on-site shredding of these documents and furnishes a certificate of destruction following each visit, ensuring complete confidentiality and compliance with data protection standards.
Ways We protect Your information
We maintain reasonable administrative, technical, and physical safeguards designed to protect Your Personal Information, including Non-Public Personal Information (“NPPI”), from unauthorized access, use, or disclosure. Access to Your information is restricted solely to employees, agents, and entities requiring such access to fulfill their job responsibilities or obligations related to Your agreement with Us.
Internally, our infrastructure relies on multiple servers safeguarded behind robust firewall protection. When Personal Information is transmitted to other websites, it is protected through the use of encryption, such as the Secure Sockets Layer protocol. Employee workstations are secured through password protection, supplemented by the implementation of multi-factor authentication protocols for accessing our software platforms. Moreover, We conduct regular training sessions for our personnel, focusing on reinforcing our privacy and security protocols to ensure ongoing compliance and awareness. We also perform periodic testing of current safeguards and protocols and apply updates or maintenance as may be required.
We strive to take appropriate security measures to protect against unauthorized access to or alteration of Your Personal Information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, You acknowledge that: (a) there are security and privacy limitations inherent to the Internet which are beyond our control; and (b) security, integrity, and privacy of any and all information and data exchanged between You and us through our website cannot be guaranteed.
In the event of a data security incident involving Your Personal Information, We will investigate the matter and provide any required notifications in accordance with applicable law.
Children Under Thirteen
Norman & Company, Inc./Classic adheres to a policy of not knowingly collecting personally identifiable information from individuals under the age of thirteen. If You are under the age of thirteen, it is imperative that You seek permission from Your parent or legal guardian before accessing and using this website.
Your right to access stored information
We are dedicated to upholding the accuracy of Your information. Therefore, You may request in writing to access, correct, amend or delete any of Your information that We have collected, subject to certain exceptions. Upon receipt and verification of Your request, We will proceed to correct, amend, delete, or provide access to Your Non-Public Personal Information (“NPPI”) in our records, unless exceptional circumstances apply. If We are unable to confirm or validate Your request, We will promptly notify You of the reasons for our inability to do so. We will respond to verifiable requests within the timeframes required by applicable law.
It is important to note that We reserve the right to reject Your request if retaining the information is deemed necessary for us or our service provider(s) to fulfill our contractual obligations outlined in our agreement or to comply with legal requirements. Requests for accessing or modifying Your information may be submitted in writing directly to us or to the company from which You purchased our products or services. Please be advised that verification of Your request may require providing details of Your agreement purchase and vehicle information. For your convenience, all requests may be directed to the contact information provided in Section “Contact Information”.
Appeal Rights (Connecticut, Texas, Virginia)
If We deny Your request, You may have the right to appeal Our decision, depending on Your state of residence. To submit an appeal, please contact Us using the information provided in the “Contact Information” section. We will review and respond to Your appeal in accordance with applicable law.
California Privacy Rights
If You are a resident of California, You may have certain rights regarding Your Personal Information under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), subject to certain exceptions.
These rights may include:
- The right to request access to the Personal Information We have collected about You
- The right to request deletion of Your Personal Information
- The right to request correction of inaccurate Personal Information
- The right to obtain a copy of Your Personal Information in a portable format
- The right to non-discrimination for exercising Your privacy rights
- Right to limit sensitive Personal Information
We do not sell or share Personal Information as those terms are defined under California law, and We do not use Personal Information for targeted advertising.
To exercise Your rights, please refer to the “Contact Information” section of this Privacy Policy.
We will verify Your request before processing and respond in accordance with applicable law.
Authorized Agents (California Residents)
You may designate an authorized agent to submit a request on Your behalf. We may require the authorized agent to provide proof of authorization and may also require You to verify Your identity directly with Us.
Use of Cookies and Tracking Technology
We use Google Analytics 4 (“GA4”), a web analytics service provided by Google LLC, to understand how visitors interact with our website, evaluate website performance, and measure the effectiveness of our marketing campaigns.
GA4 may collect information about website activity, including page views, navigation between pages, scrolling, outbound link clicks, site searches, form interactions, video engagement, and file downloads. This information may include technical and usage data, such as page URLs, referring pages, browser and device information, and identifiers associated with website sessions.
We also use campaign URL parameters to identify the source, medium, and campaign associated with website visits. This information helps us evaluate campaign traffic and marketing performance.
GA4 may use cookies and similar technologies to distinguish users and sessions and measure interactions with our website. Google processes information collected through GA4 in accordance with its applicable policies and terms.
We use Constant Contact to distribute email communications. Our Constant Contact account may use tracking technologies, such as tracking pixels and tracked links, to measure email delivery, opens, link clicks, bounce rates, unsubscribes, and other email engagement metrics. We may also receive information regarding which links are clicked and whether emails are accessed from a desktop or mobile device. This information may be used to understand how recipients interact with our communications and improve our email outreach.
You may control or disable cookies through your browser settings. Disabling cookies may affect certain features or functionality of our website.
Contact Information
Norman & Company, Inc/Classic welcomes your questions or comments regarding this Privacy Policy.
Additionally, You may request a printed copy of Our current Privacy Policy by contacting us.
Our Mailing address:
Norman and Company, Inc./Classic
13401 McCormick Drive
Tampa, FL 33626
Attention: Compliance Department
Email address: Compliance@classictrak.com
Telephone Number: 800-930-4633
Fax Number: 813-855-4554
This Privacy Policy is effective as of October 2026