Ultimate Auto Lease (“we,” “us,” or “our”) provides auto consulting and vehicle brokerage services. This policy covers ultimateautolease.com, including our representatives’ pages, inquiry forms, and email and text messaging programs.
Information we collect
When you submit an inquiry, we collect the contact information and vehicle preferences you provide, such as your name, phone number, email, vehicle interest, payment target, and trade-in details. When you join the email list, we collect your email and any optional preferences you provide. Do not enter Social Security numbers, payment card information, or credit application documents in these forms.
We also collect site activity, referring pages, campaign parameters, device and browser information, IP address, approximate location, and submission timestamps. Session storage keeps your in-progress answers on your device and helps us understand navigation. SMS consent records include the choices you submit and the disclosure shown with those choices.
How we use information
We use information to respond to requests, locate vehicles, prepare requested quotes, coordinate appointments and deliveries, operate our customer records, prevent abuse, and measure and improve our website. We send promotional email to subscribers and other eligible recipients subject to their preferences. SMS messages depend on the separate consent choices you make; requesting a quote or joining the email list does not itself subscribe you to marketing texts.
Service providers and requested transactions
We use hosting, database, analytics, CRM, and communication providers to operate these services. Where necessary to fulfill a transaction you request, we may provide relevant transaction details to a dealership, lender, delivery provider, or service provider. We may disclose information when legally required or necessary to protect people, our services, or legal rights. The SMS restrictions below apply to these disclosures.
We do not sell personal information: we do not exchange it for money. We do share it in one narrow way, and the word matters, so here it is plainly. California and several other states treat disclosing identifiers to an advertising platform for cross-context behavioral advertising as “sharing,” and the advertising described in the next section is that kind of disclosure: for a representative who has ad measurement turned on, a hashed email address, your IP address and user agent, and Meta’s own click and browser identifiers are disclosed to Meta so it can tell which of its ads produced an inquiry, along with the number of the questionnaire step you reached — never your answers. Your phone number is never part of that, in any form. To opt out of that sharing, use the controls described in the next section, or email or call us using the details below and ask us to stop using your information for advertising — we treat a request to opt out of sale and a request to opt out of sharing as the same request, and honor both.
Advertising and analytics
Some of our representatives advertise on Meta (Facebook and Instagram). When you reach our inquiry form through the link or ad of a representative who has ad measurement turned on, we load the Meta pixel — Meta’s own script — on that inquiry form, and only there. It reports a page view when the form opens; each time you press Next in our inquiry questionnaire, how far into the questionnaire you got — a step number and nothing else, reported once per step, never your answers; and a “Lead” event when you successfully submit the inquiry form. It also sets Meta’s cookies in your browser so a visit and a submission can be recognized as the same one. Every other page, including our main page and each representative’s own page, loads nothing from Meta at all, and neither does the inquiry form when you reach it any other way.
We also send that same “Lead” event to Meta from our own server, so one submission is counted once whether or not the script loaded in your browser. With it we send your email address, if you gave one, hashed with SHA-256 — a one-way scramble Meta can compare against its own records but cannot read back. We do not send it to Meta in readable form. We never send your phone number to Meta or to any other advertising partner — not in readable form, and not hashed. Alongside the hashed email we send your IP address, your browser’s user agent, the address of the page you submitted from, the identifier that ties the two copies of the event together, and the Meta click and browser identifiers from Meta’s cookies, or the click identifier from the ad link you followed when those cookies are not set. The IP address and user agent are sent as they are; they are not hashed.
Nothing else you tell us goes to Meta. The questionnaire step number is a count of screens, not a copy of your answers: it never names the option you picked or anything you typed, though a count past the shorter paths does show you took the longer one. Your name, your phone number, the vehicle you asked about, your payment target, your trade-in, your timing, your notes, and your SMS choices are not part of these events. The page address reported to Meta with these events, from your browser and from our server, is trimmed to the page itself and its campaign and referral tags, without the questionnaire’s step or any of your answers. Meta offers an optional setting, “automatic advanced matching,” that lets its script read contact details out of a form in your browser without a site sending them; it is turned off for our pixel and is to stay off. If that ever changes, we will update this policy first. We use what is sent to see which ads produce inquiries and to let Meta’s system find more people like the ones who inquire — measuring and improving our own advertising, not building a profile for anyone else.
Opting out works differently for the two halves, so we will be exact about it. Your browser’s tracking protection, or a content blocker that blocks connect.facebook.net, stops the browser half outright: Meta’s script never loads, so nothing is reported from your browser — no page view, no questionnaire step, no “Lead” — and Meta’s cookies are not set or read. Turning JavaScript off has the same effect, with one exception: that inquiry form also carries a one-pixel image meant for browsers without JavaScript, which reports the page view on its own unless facebook.com is blocked too. Blocking or clearing cookies alone does less than people expect — Meta’s script still loads and still reports the page view, the questionnaire steps, and the “Lead,” it simply reports them without Meta’s cookie identifiers attached. That removes the identifiers, not the event. None of it stops the server half. If you submit the inquiry form after reaching it through a representative who has ad measurement turned on, we send the “Lead” event from our own server whatever your cookie settings are — with your hashed email if you gave one, your IP address, your user agent, and, if you reached us from an ad, the click identifier carried in that ad’s own link. Clearing cookies does not remove that last one: it rides in the link, not in a cookie. No browser setting prevents that one. What you can do about it is on Meta’s side and ours: in Meta’s Ad Preferences and, in Accounts Center, “Your Information and Permissions,” you can review, disconnect, or clear the activity businesses have sent about you; and you can email or call us using the details below and ask us to stop using your information for advertising. That one is handled by a person, not by a switch: we record your request, stop using your details for ad matching in the audiences we control, and use Meta’s own deletion request tool to ask Meta to delete the activity already sent about you. Because it is manual, allow a few business days — and if you send us a new inquiry afterwards through a representative who has ad measurement turned on, that submission is a new event, so tell us and we will handle it the same way. Opting out does not change whether or how we help you with a car.
Mobile information and SMS consent
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Your choices
Each SMS choice is optional and unchecked by default. You can request service without agreeing to texts. Reply STOP to a message to stop that SMS program, or HELP for assistance. Use the unsubscribe link in a marketing email to leave that mailing list. Email and SMS choices are separate. Advertising is separate again — the opt-outs for it are in the advertising and analytics section above.
To request access, correction, or deletion of your information, or help with an opt-out, email pedro@ultimateautolease.com or call 305-833-9777. We may verify your identity before completing a request. We retain information as needed for requested services, business records, consent and opt-out evidence, and legal obligations. We may retain a suppression record to honor your request to stop marketing.
Security, external sites, and children
We use access controls and other safeguards to protect information, but no system can guarantee absolute security. Links to third-party sites are governed by their own policies. Our services are intended for adults; we do not knowingly collect personal information from children under 13.
Updates and contact
We will post policy changes here with an updated effective date. For questions, contact Ultimate Auto Lease at pedro@ultimateautolease.com or 305-833-9777. See our Terms & Conditions for the messaging program terms.