Polaris Privacy Notice

1. PERSONAL INFORMATION WE COLLECT

We collect the following categories of personal information:

• Contact and identification information, such as name, address, email address, telephone number, account login information (including, if applicable, social media account information for login purposes), signature, driver’s license information or other government ID information, social security number, or insurance policy number.

• Demographic information, such as gender, age or date of birth, marital status, military or veteran status, race or national origin, household composition, professional, education, or employment-related information, and information about your interests.

• Financial information, such as payment card information (e.g. credit or debit card number, CVV or CID code, expiration date), financial account information, payment history, and information related to your creditworthiness, assets, income, or liabilities.

• Information about your use of our Services, vehicles, or products, and your relationship with us, such as vehicle license plate number, VIN, make, model, and year; selling and servicing dealers; date of purchase, rental, or lease; financing, rental, or lease term; serial number or other unique product identifiers (e.g. part number, UPC); service history; mileage, oil/battery status, fuel or charging history, electrical system function, gear status, and diagnostic trouble codes; purchase information and history; loyalty program information; and information about how you interact with us, including how you interact with our vehicles, products and Services.

• Internet or other network or device activity, such as information about the browsers and devices you use to access our Services, including our emails and advertisements (e.g. device type, browser type and language, hardware model, operating system version, unique device identifiers, and IP address) and how you interact with our Services, emails, and advertisements (e.g. features used, content viewed, addresses of referring websites, and the dates and times of your interactions).

• Location information, which we may collect and process when you use certain of our Services, as described below.

• Audio, electronic, visual or similar information, such as your communications with us; photos, videos or other content you submit to us or post on our Services, for example, in connection with a sweepstakes or contest; footage, collected as described below, from cameras in our facilities, cameras at events, and cameras that record footage inside and/or near certain vehicles used in Polaris Adventures or similar rental experiences.

• Professional or Employment-Related Information, such as occupation, job title, employment history, or professional association membership information.

• Inferences Drawn from Personal Information, such as information about your preferences or likelihood to purchase or use our Services, vehicles, or products.

• Sensitive Personal Information, including:

  • Personal information that reveals your:

  • Driver'rs license or state identification card number;

  • Account log-in in combination with any required security or access code, password, or credentials for allowing access to an account;

  • Precise geolocation that is used or intended to be used to locate you within a small geographic area (less than a radius of 1,850 feet);

  • Personal information of consumers we know are less than 16 years old.

2. SOURCES OF PERSONAL INFORMATION

We generally collect personal information in three ways: (1) when you provide it to us; (2) when we collect it automatically; and (3) and when we receive it from other sources.

• Personal Information You Provide to Us. We collect personal information about you when you provide it to us. For example, we collect personal information when you submit information to use our Services; participate in an event, sweepstakes, contest, or other promotion; purchase vehicles, products, or services via our Services; and communicate with us. Some examples of the types of personal information you may provide us include: contact and identification information; demographic information; financial information; information about your vehicles and products; and audio, electronic, or visual information.

• Personal Information We Collect Automatically.

  • Cookies & Other Tracking Technologies. We collect personal information automatically via cookies and other tracking technologies (collectively, “Cookies”). Cookies allow us to collect information such as browser type, time spent using our Services, pages visited, and language preferences. We, and our vendors and third parties, use the information for security purposes, to facilitate navigation, to display information more effectively, to personalize your online experience and our marketing and advertising efforts, to determine whether you have opened and acted upon our emails, and to assess the effectiveness of our marketing. In addition, we use Cookies to gather statistical information about usage of our Services to improve their design and functionality, understand how they are used, and assist us with resolving questions about them. For example, we use Google Analytics, a web analytics tool that helps us understand how visitors engage with our Services. Please visit https://policies.google.com/technologies/partner-sites for more information about how Google collects and uses data when you use its partners’ websites or mobile applications.

    Our use of Cookies may include use of third-party advertising services to provide advertisements for Polaris vehicles, products, or services that may be of interest to you when you visit websites or other online services. This includes sale and sharing of personal information, and processing of personal information for targeted advertising purposes. For more details about how Polaris sells, shares, and processes personal information for targeted advertising purposes, please see our Supplemental Privacy Notice for Residents of Certain U.S. States.

    If you would like to modify your Cookie choices, you may do so by clicking the “Your Privacy Choices” link in the footer of websites and then setting your preferences.

    Please note that you will not be able to reject Cookies that are strictly necessary for the operation of our Services. Please also note that, if you reject certain types of Cookies, you may be unable to use all of the functionality of our Services.

  • Location Information. We may collect personal information about the location of your device, including precise geolocation information from your device and imprecise location from, for example, your IP address. When you participate in one of our demo rides, or a Polaris Adventures or similar rental experience, the vehicle that you use may be equipped with (i) GPS-tracking and other technology that may collect information related to the state of the vehicle, including, for example, the vehicle’s location, speed, and rate of braking or acceleration; and (ii) cameras that record footage inside and/or near the vehicle while you are operating and/or located near it. Polaris may use this information and footage to provide roadside assistance, to locate lost or stolen vehicles, and as otherwise described in this Notice. The outfitter for the Polaris Adventures or similar rental experience, which is an independent third party, may use this information and footage in accordance with its privacy practices. When you participate in one of our demo rides, or a Polaris Adventures or similar rental experience, you direct us to disclose your personal information to the relevant outfitter. For questions about the privacy practices of an outfitter, please contact the outfitter directly.

  • Facility and Event Cameras. We may use cameras in and around our facilities and event spaces for security purposes and operational purposes, such as measuring traffic patterns, tracking in-stock levels, and helping us to better design our facilities and event spaces and serve our customers.

  • Purchase Information and History. We may collect information about your transactions using our Services, including, for example: the vehicles, products, and services you purchase, and how frequently you purchase them; the price and any promotions or rewards associated with a purchase; and the items you have placed on your “wishlist” or saved for future purchases.

• Information We Receive from Other Sources. We may receive personal information about you from our dealers, distributors, the business partners we work with to make certain products and services available to you (as described below), consumer data resellers, and other third-party sources. For example, we receive personal information from our dealers, distributors, and business partners, such as contact and identification information; financial information; and information about vehicles, products, and website content or services that you have viewed, inquired about, or purchased. Our independent dealers, third-party distributors, and business partners are separate legal entities with their own privacy practices. For questions about the privacy practices of a dealer, distributor, or business partner you interact with, please contact them directly. We may also obtain demographic and other personal information about you from consumer data resellers and other third-party sources. This information allows us to enhance our existing information for accuracy, security, and other purposes, such as increasing the relevance of our marketing, improving our communications with you, personalizing your experience with our Services, and detecting fraud. Some personal information we collect from third-party sources is publicly available. For example, we may collect information that you or others submit in a public forum, such as a blog, social network, or chat room. We may combine personal information that we collect about you, as described above, with information that we collect in other contexts, such as personal information we collect through our RIDE COMMAND services, which are subject to a separate privacy notice.

3. HOW WE USE PERSONAL INFORMATION

We use the personal information we collect for the following purposes:

• Providing Products and Services. This may include, for example, customizing them to your preferences or interests, making them more compatible with your technology, or otherwise making them easier to use; analyzing how they are used; and evaluating, maintaining, and improving their performance, effectiveness, security, and safety.

• Developing New Offerings. This may include, for example, researching customer needs and market trends; designing, testing, and refining prototypes and concepts; incorporating feedback from users; and utilizing technology to produce new offerings to better serve you and enhance your experience.

• Processing Payments and Transactions. This may include, for example, facilitating purchases and sales of vehicles or products; verifying payment information and authorizations; managing billing, invoicing, refunds, and credits; ensuring secure payment processing; and maintaining records of financial transactions for regulatory and accounting purposes.

• For Our Internal Business Operations. This may include, for example, use of your personal information for our internal Polaris business operations, as permitted by applicable law, and other uses consistent with the context in which the information was collected.

• Marketing. This may include, for example, developing and providing promotional and advertising materials about the Polaris family of brands that may be of interest to you; analyzing the effectiveness of those materials; and customizing and improving them. This may also include sale and sharing of certain personal information, and processing of personal information for targeted advertising purposes, as described in more detail in our Supplemental Privacy Notice for Residents of Certain U.S. States.

• Facilitating Communication. This may include, for example, providing you information about our Services, vehicles, and products, and your transactions with us; responding to questions, inquiries, and service requests that you make; customizing and improving our communications with you and analyzing their effectiveness; communicating with you about, and administering your participation in, sweepstakes, contests, surveys, promotions, events, and similar activities. Communications with you may be via different methods, such as mail, telephone, email, text message, social media, or other electronic messages, or via our Services, with your consent to the extent required by law.

• Warranty & Support Purposes. This may include, for example, investigating, validating, responding to, and administering warranty claims; providing vehicle and other product service and maintenance information and support; and providing recall and safety bulletin information.

• Legal Reasons. This may include, for example, obtaining legal advice and establishing, exercising, or defending legal claims; complying with laws, regulatory requirements, contractual obligations, court orders, other legal process or obligations, or lawful requests from public and government authorities; detecting, preventing, and responding to fraud, intellectual property infringement, security issues, violations of our agreements, violations of law, or other misuse of our Services, vehicles, and products; and protecting the safety, rights, welfare, or property of Polaris, you, or others.

• Other Purposes with Notice or Consent. We may use personal information for other purposes for which we provide specific notice when the information is collected. Further, in some contexts, we may obtain consent for collection of your personal information and may use your personal information for the purposes described in your consent.

We may de-identify or aggregate any of the personal information we collect and use it for any lawful purpose, including for research and product-development purposes. When we do so, we take reasonable measures to ensure that the information cannot be associated with a consumer or household, and we maintain and use the information in deidentified form. We will not attempt to reidentify the information, except that we may attempt to reidentify the information solely for the purpose of determining whether our deidentification processes satisfy applicable legal requirements. Such information will not identify you individually.

4. HOW WE DISCLOSE PERSONAL INFORMATION

We disclose personal information for the purposes listed above in the following contexts:

• Polaris Brands and Companies. We disclose personal information among the Polaris family of brands and companies, including Polaris Industries Inc. subsidiaries and affiliates, which may be located in other countries.

• Vendors. We disclose personal information to vendors who provide services to us, such as site hosting; data analysis; IT services; payment processing; fraud monitoring; services related to product development and maintenance; and communications, marketing, and online and offline advertising services. We impose contractual limitations on our vendors’ use of personal information they collect in conjunction with providing services to us.

• Third Party Marketing & Analytics Providers. We disclose personal information to third party marketing and analytics providers for marketing and analytics purposes. This may include personal information we collect about you via Cookies, and it also may include personal information we collect about you in other contexts, such as contact information, including your email address. Disclosures of personal information to third party marketing and analytics providers may constitute “sale,” “sharing,” and “targeted advertising,” as those terms are defined by U.S. Privacy Laws. For details about how to opt out of these disclosures, please see our Supplemental Privacy Notice for Residents of Certain U.S. States.

• Dealers and Distributors. We disclose personal information to our dealers and distributors for various purposes, including, for example, to provide you information about vehicles, products, services, or promotions that may be of interest to you; to help our dealers and distributors serve you better; and to provide you with warranty, recall, and service information. Our independent dealers and third-party distributors are separate legal entities with their own privacy practices. When you use our services to find or interact with one of our dealers or distributors, you direct us to disclose your personal information to the relevant dealer/distributor. For questions about the privacy practices of any of our dealers or distributors, including how to opt out of marketing communications from them, please contact them directly.

• Business Partners. To make certain products and services—such as Polaris Adventures, Polaris Xchange, online prequalification for vehicle or product financing, and financing for vehicle or product purchases—available to you, we work closely with independent business partners, including, for example, Polaris Adventures outfitters, dealers who list vehicles on Polaris Xchange, and business partners who provide prequalification and financing services. When you schedule and use services provided by these independent business partners, you direct us to disclose your personal information to the relevant independent business partner, and you may also provide personal information to them directly. Further, when you sign up for sweepstakes, contests, events, or other promotions that we sponsor, you direct us to disclose your personal information to the relevant independent business partner. This Notice does not address, and we are not responsible for, the privacy, information, or other practices of these business partners. We encourage you to review the privacy notices of any independent business partners whose services you reserve or obtain through our Services.

• As directed by you, or with your consent. We may disclose your personal information to third parties as directed by you or when we have your consent to do so.

We also may disclose personal information in the following contexts:

• Legal Reasons. We may disclose your personal information to third parties when we have a good faith belief that disclosure is necessary to obtain legal advice or establish, exercise, or defend legal claims; comply with laws, regulatory requirements, contractual obligations, court orders, other legal process or obligations, or lawful requests from public and government authorities; detect, prevent, or respond to fraud, intellectual property infringement, security issues, violations of our agreements or law, or other misuse of our Services, vehicles, and products; and protect the safety, rights, welfare, or property of Polaris, you, or others, as required or permitted by applicable law.

• Business Transfers. We may disclose personal information to third parties in connection with any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). If we do so, we will seek assurances that the third party will treat the personal information we disclose to it in accordance with this Notice.

• When You Post Information on our Services. When you post or disclose personal information on our Services, the information you post or disclose, including information that may identify you, may be seen by other visitors to our Services, including the public when those Services are publicly available.

We may disclose de-identified or aggregated information internally and to our vendors and third parties for any lawful purpose. Such information will not identify you individually.

5. THIRD PARTY SITES AND PLUGINS

Our Services may contain links to external websites, mobile applications, or third-party services that are not operated by Polaris, and plugins from social media platforms and other third parties. We provide these links and plugins as a service and do not imply any endorsement of the related websites, mobile applications, third-party services, or social media platforms (“Third Party Sites”), nor any association with their operators, and we are not responsible for the privacy or other policies or practices of those Third Party Sites. To learn about the information collected by Third Party Sites, please visit their privacy notices.

6. INFORMATION SECURITY

We maintain technical and organizational security measures designed to help protect your personal information from unauthorized access, disclosure, alteration, or destruction. Unfortunately, no data transmission or storage system is 100% secure or error free, and we cannot fully guarantee the security of the information we collect.

7. DATA RETENTION

We retain your personal information as long as necessary to fulfill the purposes outlined in this Notice unless a longer retention period is required or allowed by law.

To determine the period for which your personal information will be retained, Polaris considers criteria such as: (i) the nature of our relationship with you and the types of Services, vehicles, or products we have provided to you, or that you have requested; (ii) the sensitivity of the information and the purposes for which it was collected; (iii) the nature and timing of your interactions with us (including with our Services, communications, etc.); (iv) any applicable legal or contractual requirements to retain information for a certain period of time, including any retention obligations related to actual or potential litigation or government investigations; and (v) the impact on the Services, vehicles, and products we provide if the relevant information were deleted.

8. CHOICES AND RIGHTS

Your Choices

You have certain choices about the personal information you provide and how it is used and disclosed. For example, you can:

• Choose not to provide certain personal information to us. Please note that not providing such personal information may limit the functionality or benefits of some of our Services.

• Review and control certain types of personal information tied to your account(s) with us.

• Choose to opt out of marketing communications from us. Depending on applicable law where you live and your relationship with us, you may be automatically subscribed to marketing emails or need to sign up for them to receive them. You may opt out of receiving marketing emails by using the unsubscribe information in the marketing emails you receive. You may also opt out of receiving marketing communications by submitting an unsubscribe request using this request form. Please note that you may not opt out of receiving non-marketing communications. Some examples of non-marketing communications include: communications about an order or transaction; customer service communications; and service or recall information.

• When our mobile application(s) or our websites use your device’s location information, you can adjust the location settings of your device or browser at any time to control whether your device communicates this information to us. You may also have the option to adjust the location information collection permissions in our mobile application(s). Please note that device location may be derived from your device’s Wi-Fi, Bluetooth, and other device or browser settings. See your device and browser settings for more information.

• When our mobile application(s) allow for the delivery of “push notifications,” you may choose to receive or stop them at any time by adjusting the settings on your mobile device, and you may also have the option to adjust the notification permissions in our mobile application(s).

Your Rights

Depending on where you reside, you may have one or more rights with respect to your personal information, which may apply differently in different circumstances, and which may be limited by applicable law. Examples of such rights include: rights to correct, delete, or access information about the personal information we have processed about you; the right to data portability; rights to withdraw consent for, object to, or restrict certain processing of your personal information; and the rights to opt of the sale, sharing, and processing of your personal information for targeted advertising.

For details about how to exercise your rights, depending on your place of residence, please see the details below:

• For residents of the European Economic Area, Switzerland, and the United Kingdom, please see the “Additional Information for Residents of the European Economic Area, Switzerland, and the United Kingdom” section of this Notice, below.

• For residents of the United States, the rights available to you vary based on your place of residence. For more details, please see our Supplemental Privacy Notice for Residents of Certain U.S. States, accessible here.

9. ADDITIONAL INFORMATION FOR RESIDENTS OF THE EUROPEAN ECONOMIC AREA, SWITZERLAND, AND THE UNITED KINGDOM

This section applies to individuals who reside in the European Economic Area (“EEA”), Switzerland, or the United Kingdom (“UK”), whose personal information is collected and used by Polaris.

For the purpose of applicable data protection laws, including the General Data Protection Regulation (2016/679) (“GDPR”), the controllers for personal information covered by this Notice are Polaris Industries Inc., 2100 Highway 55, Medina, MN 55340, and as applicable, Polaris Sales Europe SARL, Place de l’Industrie 2 1180 Rolle – Switzerland.

The contact information for Polaris’ data protection officer is:

By mail: Polaris Sales Europe SARL, Place de l’Industrie 2 1180 Rolle – Switzerland, Attention: Data Protection Office

By email: [email protected]

Polaris’ Lawful Basis for Processing Your Personal Information

Our lawful basis for processing personal information covered by this Notice will depend on the purposes of the processing. Most commonly, we process personal information in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you;

• Where you consent;

• Where we need to comply with a legal or regulatory obligation;

• Where it is necessary for our legitimate interests (i.e. we have a business or commercial reason for using your information) and your interests and your fundamental rights do not override those interests. Our legitimate interests may include:

  • Providing, improving, developing, and promoting our Services, vehicles, and products;

  • Communicating with and otherwise managing our relationship with you;

  • Enhancing the safety and security of our Services, vehicles, products, employees, and others; and

  • Protecting Polaris and our business partners from wrongful conduct.

We may rely on more than one legal basis for processing your personal information, depending on the specific processing purposes for which we are using your personal information.

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

You are not required to provide your personal information to us. However, in some contexts, we may be unable to provide our Services to you if you decide not to provide your information to us.

Your Rights

In accordance with applicable laws in the EEA, Switzerland, and the UK, you may have certain rights with respect to your personal information, which apply differently in different circumstances, and may be limited by local law.

• Access. You have the right to obtain confirmation as to whether or not we are processing personal information about you, and, if so, to access your personal information and certain information about our processing of it.

• Rectification. You have the right to request that we amend any incomplete or inaccurate personal information that we process about you.

• Deletion. In certain circumstances, you have the right to request that we delete personal information that we process about you.

• Restriction. You have the right to request that we restrict our processing of your personal information where: (a) you believe such information to be inaccurate; (b) our processing is unlawful but you oppose the deletion of your personal information and request restriction instead; (c) we no longer need to process such information for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because we require the information in connection with legal claims; or (d) you have objected to the processing of your personal information.

• Portability. You have the right to request that we transmit the personal information we hold in respect of you to you or to another data controller in a structured, commonly used and machine-readable format, where this is (a) personal information which you have provided to us; (b) the processing is by automated means; and (c) we are processing that information on the basis of your consent or in order to perform our obligations under a contract to you.

• Objection. Where the legal justification for our processing of your personal information is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if we need to continue to process the data for the establishment, exercise, or defense of a legal claim.

• Withdrawing Consent. If we rely on your consent to process your personal information, you have the right to withdraw your consent at any time. This includes cases where you wish to opt out from marketing messages that you receive from us. Please note that withdrawal of your consent will not affect the lawfulness of processing based on your consent before its withdrawal.

• Making a Complaint. You may make a complaint at any time with the national data protection authority in the EU country where you are based. We would, however, appreciate the chance to deal with your concerns before you approach your supervisory authority, so please contact us using the contact details provided above.

Most of these rights are not absolute. You may exercise these rights by submitting a request to us using this request form. If you make a request to exercise your rights, we will respond within one month, but we may extend this period by two additional months, where necessary. If we extend the response period, we will let you know within one month from your request. You will generally not have to pay a fee to access your personal information (or to exercise any of the other rights listed above). However, we may charge a reasonable fee if your request is manifestly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. Please note that we may ask for additional information to verify your request, including verification of your email address, before responding to your request.

Cross-Border Data Transfers

We may transfer personal information to other countries, including those outside the EEA, Switzerland, or the UK, which may have different data protection regimes that offer fewer protections for personal information.

When transferring personal information, we take care to comply with applicable law. For the transfer of personal information from the EEA, UK, or Switzerland to any countries not recognized by the European Commission, UK, or Swiss governmental authorities as providing an adequate level of data protection according to EEA, UK, or Swiss standards, we have implemented adequate measures to protect the personal information, such as by ensuring the recipient is bound by standard contractual clauses adopted by the European Commission, UK, and Swiss governmental authorities. You can obtain information concerning such safeguards, including obtaining a copy of the standard contractual clauses, by contacting our data protection officer at [email protected]. We may also rely on other mechanisms available under applicable law to facilitate such transfers of personal information.

10. CHILDREN’S PERSONAL INFORMATION

Except as noted in the RIDE COMMAND Privacy Notice, we do not knowingly collect information from children under the age of 13, or the relevant minimum age under applicable local law (“Minors”). Our Sites are not directed to or intended to be used by Minors, and we request that Minors do not provide personal information through the Sites.

Please note, however, as we explain in the Minors Section of the RIDE COMMAND Privacy Notice, the RIDE COMMAND+ Connected Vehicle Plug-In is available to be purchased by a parent and installed on certain youth vehicles, and the RIDE COMMAND Direct Notice to Parents or Legal Guardians applies to the activation of RIDE COMMAND+ features on a youth vehicle.

11. UPDATES TO THIS NOTICE

We may change this Notice. Please review the “Last Updated” date at the top of this Notice to see when this Notice was last revised. Any changes to this Notice will become effective when we post the revised Notice on this page, and we may provide notice of such changes to you to the extent required by applicable law. We encourage you to look for updates and changes to this Notice by checking this date when you access our Services.

12. CONTACTING US

If you have any questions about this Notice, please contact us using the contact information below:

For residents of the European Economic Area, Switzerland, or the United Kingdom, our contact information is:

By mail: Polaris Sales Europe SARL, Place de l’Industrie 2 1180 Rolle – Switzerland, Attention: EU Data Protection Officer

By email: [email protected]

For all others, our contact information is:

By mail: Polaris Industries Inc., 2100 Hwy 55 Medina, MN 55340, Attention: Legal Department

By email: [email protected]

By phone: 1-800-POLARIS (Monday to Friday, 8 am – 6 pm Central Time)