BASS PRO SHOPS FINANCIAL SERVICES

Revised: May 8, 2025

Toyota Motor Credit Corporation and its affiliates and subsidiaries, including but not limited to Toyota Motor Insurance Services, Inc., Toyota Lease Trust, and Toyota Credit de Puerto Rico Corp., and/or their respective subsidiaries and assignees (collectively, “TMCC”) respect your concerns about privacy. This Privacy Policy describes the types of personal information we may obtain about you through any website operated by TMCC and any interactive feature, mobile device application, or other service that posts a link to this Privacy Policy, as well as any offline activities through which we obtain information about you (each, a “Service,” and together, the “Services”); how we may use the information; with whom we may share it; and the choices available to you regarding our use of the information. We also describe measures we take to protect the security of the information and how you can contact us about our privacy practices

Click on one of the links below to jump to the listed section:

• Information We Obtain
• How We Use the Information We Obtain
• Third-Party Analytics Services
• Universal Opt-Out Mechanisms
• Information We Share
• Your Privacy Rights and Additional Disclosures
• How We Protect Personal Information
• Children’s Privacy
• Links to Third-Party Services and Features
• Updates to Our Privacy Policy
• How to Contact Us
• California Privacy Statement

Information We Obtain

The types of personal information we may obtain through your use of the Services include:

• Contact information, such as name, mailing address, zip code, email address, and telephone number;
• Information required to register for and log in to your Online Account, such as Online Account number, password, vehicle identification number, Social Security number, telephone number,  username, and email address;
• Information we receive from you on applications for credit or other forms, such as your assets and income;
• Information we receive from you about your transactions with us, or from our affiliates or others (as permitted by law), such as your account balance, account activity, purchase and payment history;
• Geolocation data, including from your mobile device(s) or vehicle(s), with your permission;
• Information about your use of the Services; and
• Other information you choose to provide to us.

When you use our Services, we may obtain certain information by automated means, such as cookies, web beacons, web server logs, embedded scripts, browser fingerprinting, recognition technologies, and other similar technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon,” also known as an internet tag, pixel tag or clear GIF, links web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server. The information we collect in this manner may include your device IP address, Internet Service Provider, unique device identifier, web browser characteristics (including type and version), system font, device characteristics (including device platform, version, and settings (e.g., Wi-Fi, Bluetooth, GPS)), operating system, plug-ins, system fonts, language preferences, referring/exit page URLs, clickstream data, page visits, and dates, times and durations of website visits.

We may use these automated technologies to collect information about your equipment, browsing actions, and usage patterns. These technologies help us to (1) remember your information so you do not have to re-enter it; (2) track and understand how you use and interact with our Services; (3) tailor the Services around your preferences; (4) measure the usability of our Services and the effectiveness of our communications; and (5) otherwise manage and enhance our Services.

Your browser may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. Please note, however, that without these technologies, you may not be able to use all of the features of our Services. For mobile devices, you may be able to manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device.

How We Use the Information We Obtain

We may use the personal information we obtain through your use of the Services to:

• Process customer applications and credit approvals, including by performing customer and credit risk modeling;
• Manage and administer customer accounts, including by linking customer accounts with other online accounts with which we have a business relationship;
• Personalize your experience with our Services and offerings;
• Communicate with you, including by responding to your information requests and inquiries;
• Manage our communications with you (including your email notification preferences);
• Advertise and market our products and services, and the products and services of others (both affiliates and non-affiliates);
• Provide, operate and maintain our business, products and services (including the Services and their interactive features);
• Provide customer and dealer support and relationship management;
• Analyze, evaluate and improve our business (including developing new products and services; assessing third-party vendors and service providers; optimizing, maintaining, enhancing and monitoring the usage of our Services; performing data analytics, categorization, decision-making, and market research; and performing billing, payment, fulfillment, financial reporting, accounting, auditing and other internal functions);
• Maintain and enhance the safety and security of our Services, users, business, products and services, including by detecting, preventing and addressing technical issues relating to our Services, and preventing the misuse of our Services;
• Exercise our rights and remedies, protect and defend our rights or property, conduct collection activities, and defend against legal claims;
• Protect against, identify, investigate and prevent fraud and other criminal activity, wrongdoing, claims and other liabilities; and
• Comply with, audit and enforce applicable legal and compliance requirements and obligations, relevant industry standards and TMCC policies and procedures, including this Privacy Policy, our Online Account Services Agreement, and Online Terms of Use.

We also may use the information in other ways for which we provide specific notice at the time of collection.

Third-Party Analytics Services

We may use third-party analytics services through our Services, such as Google Analytics and Adobe Analytics. The information we obtain through the Services may be disclosed to or collected directly by these services. To learn more about Google Analytics, please visit https://www.google.com/policies/privacy/partners/. To learn more about Adobe Analytics, please visit https://www.adobe.com/privacy.html.

Universal Opt-Out Mechanisms

We do not engage in “sales,” or “shares,” or “targeted advertising” as those terms are defined under applicable laws and, therefore, the websites operated by TMCC do not recognize the Global Privacy Control (“GPC”) signal. For more information and to download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the websites operated by TMCC do not currently interpret, respond to or alter their/its practices when they receive/it receives “Do Not Track” signals. 

Information We Share

We may share the information we obtain about you with our affiliates, such as our parent, subsidiaries, and other affiliated companies in the Toyota corporate group. These companies may include other financial service companies (e.g., Toyota Financial Savings Bank, Toyota Motor Insurance Services, Inc.) and non-financial services companies (e.g., Toyota Motor Sales U.S.A., Inc., authorized Toyota and Lexus dealerships and other dealerships with which we have a business relationship, including Bass Pro Shops corporate stores and independent dealerships, White River Marine Group and its affiliates, independent Toyota and Lexus dealership marketing associations, private Toyota distributors, and nonaffiliate third parties that request information about your account.

We also may share your personal information with companies (including other financial services companies) offering similar products and services to us, and with financial institutions with whom we have joint marketing agreements. Further, we may share your personal information with social media and technology companies. We also may share the information we obtain about you with service providers who perform services on our behalf, such as website hosting, data analytics, account management, payment processing, debt collection, marketing, advertising and other services. We do not authorize our service providers to use or disclose the information except as necessary to perform services on our behalf or to comply with legal requirements.

We also may disclose personal information (1) if we are required to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government agencies, such as law enforcement authorities; (3) to establish, exercise or defend our legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; or (6) otherwise with your consent.

We do not process personal information for targeted advertising. 

We do not sell or share personal information in exchange for monetary consideration.

We reserve the right to transfer any personal information we have about you in the event we sell or transfer (or contemplate the sale or transfer of) all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution, or liquidation).

Your Privacy Rights and Additional Disclosures

We offer you certain choices in connection with the personal information we collect from or about you. To learn more about the privacy choices that may be available to you, you may refer to the customer Privacy Policy mailed to you, review the My Privacy tab under the My Profile section of our website, or call us at 1-800-422-7220.

If you wish to unsubscribe from any promotional email or text message that we may send to you, please follow the unsubscribe instructions included in each such communication.

Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. Please note that personal information we collect in connection with certain of the Services you obtain for personal, family or household use, including your personal account with TMCC, is not subject to the requirements of these privacy laws because such data is already protected under existing federal privacy laws, including the Gramm-Leach-Bliley Act. Please see TMCC's GLBA Privacy Policy for more information about our privacy practices with respect to such data.

If you are a California resident, for more information about your privacy rights, please see the California Privacy Statement of this Privacy Policy. For other state residents, your privacy rights may include (if applicable):

• The right to confirm whether or not we are processing your personal data and to access such personal data and the categories of personal data we are processing or have processed;
• The right to obtain a copy of your personal data that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;
• The right, at our option, to obtain a list of specific third parties, other than natural persons, to which we have disclosed your personal data or any personal data;
• The right to obtain a list of categories of third parties to which we have disclosed your personal data;
• The right to delete personal data that we collected from and/or about you, subject to certain exceptions;
• The right to correct inaccurate personal data that we maintain about you, subject to certain exceptions;
• The right, if applicable, to opt out of the processing of your personal data for purposes of (1) targeted advertising; (2) the “sale” of your personal data (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• If we are required by applicable law to obtain your consent to process sensitive personal data, the right to withdraw your consent; and
• The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

To exercise your rights, You or your authorized agent may (1) request access to, or correction or deletion of, your personal information, or (2) appeal our decision with respect to a request you have submitted, in the following ways:

• For Toyota Motor Insurance Services:

By visiting www.BassProFinancial.com , or calling 1-866-422-7220.

How We Protect Personal Information

We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized access, destruction, loss, alteration, disclosure, or use.

Children’s Privacy

Our Services are designed for a general audience and are not directed to children. In connection with our online Services, we do not knowingly solicit or collect personal information online from children under the age of 13. If you believe that a child under age 13 may have provided us with personal information, please contact us as specified in the How to Contact Us section of the Privacy Policy.

Links to Third-Party Services and Features

For your convenience and information, our Services may provide links to other online services, and may include third-party features such as apps, tools, widgets and plug-ins. These online services and third-party features may operate independently from us. The privacy practices of the relevant third parties, including details on the information they may collect about you, are subject to the privacy statements of these parties, which we strongly suggest you review. To the extent any linked online services or third-party features are not owned or controlled by TMCC, we are not responsible for these third parties’ information practices.

Updates to Our Privacy Policy

We may update this Privacy Policy from time to time and without prior notice to you to reflect changes in our personal information practices. We will indicate at the top of the Notice when it was most recently updated.  If the changes are material, we will provide notice of the changes on our website prior to the changes becoming effective.

How to Contact Us

If you have questions regarding this Privacy Policy or our privacy practices, please call us at 1-800-422-7220 or email us at tfs_office_of_privacy@toyota.com.

CALIFORNIA PRIVACY STATEMENT

This California Privacy Statement (“Statement”) supplements TMCC’s Privacy Policy. The Statement addresses personal information we collect online and offline. This Statement does not apply to TMCC’s personnel, vendor or business-to-business customer representatives, or to customer or consumer data covered by GLBA or FCRA.

This Statement uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and its implementing regulations (collectively, the “CCPA/CPRA”).

1. Collection and Use of Personal Information

We may collect (and may have collected during the 12-month period prior to the effective date of this Statement) the following categories of personal information about you:

• Identifiers: identifiers such as a real name, alias, postal address, telephone number, email address, account name, , Hull Identification Number (HIN), Vehicle Identification Number (VIN), and serial number
• Unique personal identifiers: device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology
• Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications, or advertisements.

We may use (and may have used during the 12-month period prior to the effective date of this Statement) the categories of personal information listed above for the purposes described in the Privacy Policy and for certain business purposes specified in the CCPA/CPRA, such as:

• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing services, providing analytics services, providing storage or providing similar services
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
• Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us
• Helping to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for these purposes
• Debugging to identify and repair errors that impair existing intended functionality
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us
• Providing advertising and marketing services, except for cross-context behavioral advertising (which is addressed in the “Sale or Sharing of Personal Information” section of this Statement)
• Geolocation data, including from your mobile device(s) or vehicle(s) 

2. Collection and Use of Sensitive Personal Information

We do not collect or use personal information for the purpose of inferring characteristics about individuals (and have not collected or used this type of personal information during the 12-month period prior to the effective date of this Statement).

3. Sources of Personal Information

During the 12-month period prior to the effective date of this Statement, we may have obtained personal information about you from the following categories of sources:

• Directly from you
• Through your device
• Data brokers
• Advertising networks
• Social networks
• Data analytics providers
• Government databases

4. Retention of Personal Information

We retain personal information for the period reasonably necessary to achieve the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law, taking into account relevant statutes of limitations and our records retention requirements and policies.

5. Sale or Sharing of Personal Information

We have not sold or shared Personal Information in the twelve (12) months preceding the Last Updated date of this Privacy Policy. We do not knowingly collect, sell, or share the Personal Information of consumers under 16 years of age. We do not collect or process sensitive personal information for the purpose of inferring characteristics about individuals.

6.       Targeted Advertising

We do not process personal information for targeted advertising.

7.       Profiling

We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

8. Disclosures of Personal Information

During the 12-month period prior to the effective date of this Statement, we may have disclosed your personal information to certain categories of third parties, as described below.

We may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties:

9. California Privacy Rights

If you are a California resident, you have the following rights with respect to your Personal Information:

• The right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which we collected Personal Information, the business or commercial purpose for collecting, selling or sharing Personal Information (if applicable), the categories of third parties to whom we disclose Personal Information (if applicable), and the specific pieces of Personal Information we collected about you;
• The right to delete Personal Information that we collected from you, subject to certain exceptions;
• The right to correct inaccurate Personal Information that we maintain about you;
• If we sell or share Personal Information, the right to opt out of the sale or sharing;
• If we use or disclose sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure; and
• The right not to receive discriminatory treatment by us for the exercise of privacy rights the CCPA confers.

How to Submit a Request.

You or your authorized agent may (1) request access to, or correction or deletion of, your personal information, or (2) appeal our decision with respect to a request you have submitted, in the following ways:

• For Toyota Motor Insurance Services:

By visiting www.BassProFinancial.com  or calling 1-866-422-7220.

For authorized agents, we may require the individual’s signed permission demonstrating the agent has been authorized by the individual to act on the individual’s behalf.

For questions or concerns about our privacy policies and practices, please contact us as described in the How To Contact Us section of the Privacy Policy.

Verifying Requests. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request. If you request access to, or correction or deletion of your personal information, we may require that you provide certain information to confirm your identity and/or locate your personal information in our records. In addition, we may require you to sign a declaration under penalty of perjury that you are the individual whose personal information is the subject of the request.

Additional Information. If you choose to exercise any of your rights under the CCPA/CPRA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

To view the Online Privacy Policy in Chinese, click here.

To view the Online Privacy Policy in Spanish (Mexico), click here.

To view the Online Privacy Policy in Spanish (Puerto Rico), click here.

To view the Online Privacy Policy in Korean, click here.

To view the Online Privacy Policy in Vietnamese, click here.

To view the Online Privacy Policy in Tagalog, click here.