Dealership Data-Sharing Agreement

This Dealership Data-Sharing Agreement ("Agreement") governs the sharing of consumer pre-qualification data between Affordrive ("Discloser") and participating dealerships ("Recipient"). By accepting a lead from Affordrive, the Recipient agrees to the terms set out below.

1. Data shared

Affordrive shares the following consumer data with the Recipient when a lead is assigned:

• Consumer name, email address, and phone number
• City and province of residence
• Employment status, monthly income, and employer name
• Housing status and monthly housing payment
• Self-reported credit score and credit tier
• Vehicle preferences, budget range, and trade-in details
• Pre-qualification estimate (approval amount, monthly payment, rate)

2. Permitted uses

The Recipient may use the shared data solely to:

• Contact the consumer regarding their pre-qualification and vehicle financing
• Assist the consumer with securing financing through the Recipient's lending partners
• Maintain records of the consumer interaction as required by applicable law

3. Prohibited uses

The Recipient shall not:

• Sell, rent, lease, or otherwise distribute consumer data to any third party
• Use consumer data for marketing unrelated to the consumer's pre-qualification
• Share consumer data with other dealerships or competitors
• Use consumer data to perform a hard credit check without the consumer's explicit, separate consent
• Retain consumer data beyond the period specified in our Data Retention Policy

4. Data security obligations

The Recipient agrees to:

• Implement reasonable administrative, technical, and physical safeguards to protect consumer data
• Restrict access to consumer data to authorized dealership personnel on a need-to-know basis
• Use the Affordrive dealer portal credentials securely and not share them with unauthorized individuals
• Comply with PIPEDA and applicable provincial privacy legislation in handling consumer data

5. Breach notification

The Recipient must notify Affordrive within 24 hours of becoming aware of any actual or suspected unauthorized access, use, disclosure, or loss of consumer data. The Recipient must cooperate with Affordrive in investigating and remediating the breach in accordance with our Breach Response Procedure.

6. Data retention and deletion

The Recipient shall retain consumer data only for as long as necessary to fulfill the permitted uses and legal obligations, and in accordance with our Data Retention Policy. Upon termination of this Agreement, or upon Affordrive's request, the Recipient shall permanently delete all consumer data received through the platform and confirm deletion in writing.

7. Consumer rights

The Recipient shall honor consumer requests to access, correct, or delete their personal information, and shall forward any such request to Affordrive at info@affordrive.ca within 5 business days of receipt.

8. Term and termination

This Agreement is effective from the date the Recipient is activated on the Affordrive platform and remains in effect until terminated. Affordrive may terminate this Agreement at any time, for any reason, with written notice. Upon termination, the Recipient's access to the dealer portal will be revoked and all consumer data must be deleted as described in Section 6.

9. Compliance audit

Affordrive reserves the right to audit the Recipient's compliance with this Agreement upon reasonable notice. The Recipient agrees to cooperate with such audits and provide reasonable access to relevant records.

10. Governing law

This Agreement is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein.

Questions about this Agreement can be directed to info@affordrive.ca.