T11 | Privacy Policy

CIRCUIT OF THE AMERICAS PRIVACY POLICY

Last Updated: [August 19, 2026]

Download Privacy Policy

Thank you for visiting a Site owned and operated by Circuitof The Americas or an App published by Circuit of The Americas (from which youhave linked to this Privacy Policy). "Sites" refers to Internet websites and "Apps" refers to apps for use on mobile communication devicessuch as smartphones and tablets. "Platforms" refers to Sites and Apps collectively that are owned and operated by Circuit of The Americas LLC and itsaffiliates and subsidiaries (which we also refer to as "COTA," "we," "us," or "our").

This Privacy Policy explains the types of information we may collect from you or that you may provide when you visit or use the Platforms, as well as information provided to us or collected by us offline at our events and physical properties, and when you otherwise communicate with us, including during sales and support calls, and our practices for collecting, using, maintaining, protecting, and disclosing that information. This Privacy Policy does not apply to information collected through any other means, including on any other Sites or Apps or through products and services operated by third parties.

Please read this Privacy Policy carefully. If anyterm in this Privacy Policy is unacceptable to you, please do not use ourPlatforms, visit any of our physical properties or attend our events, orprovide us with any personal information. By accessing any of our Platformswhere this Privacy Policy is posted or otherwise engaging with services thatdirect to this Privacy Policy, you acknowledge that you have read andunderstood this Privacy Policy.

Throughout this Privacy Policy, we refer to personalinformation, which refers to information that lets us know the specifics of whoyou are. It includes information that directly or indirectly identifies,relates to, describes, is reasonably capable of being associated with, or couldreasonably be linked to, you as an individual or to your household, or asotherwise defined by applicable law (“Personal Information”).

We reserve the right to update this Privacy Policy from timeto time by posting the updated Privacy Policy online. When we do, the “Last Updated” line above will be revised, indicating the effective date, and any additional notification will be provided in accordance with applicable law. Your access of the Platforms or use of other services after such change will bedeemed acceptance of the new Privacy Policy.

YOUR PRIVACY RIGHTS

The following sub-sections outline your privacy rights, whichmay vary depending on where you are located.

Residents of the European Economic Area (“EEA”)/European Union (“EU”) and United Kingdom (“UK”)

When you access our Platforms, visit our physicalproperties, attend our events, or otherwise communicate with us, we function asa “data controller” under the General Data Protection Regulation (“GDPR”) andthe UK General Data Protection Regulation (“UK GDPR”). In some cases, we willask for your consent so that we may process your Personal Information. In othercircumstances, we may rely on a different lawful basis, as explained in thesection, “How We May Use and Disclose Your PersonalInformation

Be Informed. It’s your right to be informed of how we process your Personal Information. We inform you through this Privacy Policy, through information provided to you through the Platforms, and by answering your questions about our Privacy Policy when you contact us.
Access. It’s your right to request access to the Personal Information that we process about you.
Rectification. It’s your right to request that we amend or update your Personal Information where it may be inaccurate or incomplete.
Erasure. It’s your right to request that we erase your Personal Information, under certain conditions.
Restriction. It’s your right to request that we restrict the processing of your Personal Information, under certain conditions.
Object. It’s your right to object to our processing of your Personal Information, under certain conditions.
Data Portability. It’s your right to request a machine-readable copy of your Personal Information, or that we transfer the Personal Information that we have collected to another organization, under certain conditions.
Not be Subject to Automated Decision-Making. It’s your right not to be subject to a decision based solely on autonomous decision-making (that is, a decision made without human involvement), including profiling, where the decision would have a legal effect on you or produce a similarly significant effect. Please note that we do not currently engage in any such practices.
Withdrawal of consent. It’s your right to withdraw your consent to us for our processing of your Personal Information, under certain conditions. The withdrawal of your consent does not affect the lawfulness of the processing based on your consent before such withdrawal.
Right to lodge a complaint. Data subjects located in the EU/EEA or the UK have the right to lodge a complaint with the competent supervisory authority.

Residents of California

When you access our Platforms, visit our physical properties, attend our events, or otherwise communicate with us, we function as a “business” under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “California Law”). Subject to certain exceptions, California Law provides consumers with specific rights regarding their Personal Information, including the following:

Right to Know. You have the right to request that we disclose the Personal Information we collected about you, including the categories of Personal Information, the categories of sources from which Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information we have collected about you. We inform you through this Privacy Policy, through information provided to you through the Platforms, and by answering your questions about our Privacy Policy and practices when you contact us and/or submit a request to know.

Right to Delete. You have the right to request that we delete any of your Personal Information we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our Service Providers to delete) your Personal Information from our records, unless an exception applies.

Right to Correct Inaccurate Personal Information. You have the right to request that we correct any of your Personal Information we maintain about you that is inaccurate.
Right to Opt Out of Sales or Sharing of Personal Information. We do not sell your Personal Information for monetary profit. However, we may engage in certain information disclosure activities that may be considered “sales” or “sharing” under California Law. If we sell your Personal Information to or share such information with third parties, you have the right to opt out of the sale or sharing of such information. To exercise the right to opt out, you (or your authorized representative) may submit a request to us by visiting the Your Privacy Choices link on the homepage.

Ifyou have an opt-out preference signal enabled, you will automatically be optedout of the sale or sharing of your information, but we may ask you to confirmyour preference if you have previously consented to the sale or sharing of yourPersonal Information. For additional information regarding how an opt-outpreference signal will be processed and how you can use an opt-out preferencesignal, please see the “Third-Party Cookies and Tracking ”sub-section, below.

Right to Limit the Use and Disclosure of Sensitive Personal Information. You have the right to limit how we use and disclose your sensitive Personal Information. To exercise the right to limit, you (or your authorized representative) may submit a request to us by visiting the Your Privacy Choices link on the homepage.

If a transaction requires the use or disclosure of your sensitivePersonal Information in order to complete the transaction, we will notify youand provide instructions on how you can reauthorize such use or disclosure.

Right to Non-Discrimination. We will not discriminate against you for choosing to exercise any of your rights. If you exercise certain rights, understand that you may be unable to use or access certain features of the Platforms or other COTA services and offerings.

In addition to your rights underCalifornia Law, California Civil Code Section 1798.83 permits Californiaresidents to request information regarding our disclosure, if any, of theirPersonal Information to third parties for their direct marketing purposes. Ifthis applies, you may obtain the categories of Personal Information disclosedand the names and addresses of all third parties that received PersonalInformation for their direct marketing purposes during the immediately priorcalendar year (e.g., requests made in 2026 will receive information about 2025sharing activities). To make such a request, please provide sufficientinformation for us to determine if this applies to you, attest to the fact thatyou are a California resident, and provide a current California address for ourresponse. You may make this request in writing by contacting us via the methods described in the “How to Contact Us” section, below.

Residents of Other U.S. States

When you access our Platforms, visit our physicalproperties, attend our events, or otherwise communicate with us, we function asa “controller” under comprehensive state privacy laws. Subject to certainexceptions, if you are an eligible resident of a state in which there is acomprehensive privacy law in effect, including Alabama, Colorado, Connecticut,Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana,Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee,Texas, Utah, Vermont, and Virginia, you have rights with respect to thePersonal Information, also known as personal data, that we collect about you,including the following:

Right to Know or Access. You have the right to confirm whether we process your Personal Information and the categories of Personal Information processed, and to access such Personal Information. You also have the right to obtain your Personal Information in a portable, and to the extent reasonably feasible, readily usable format that you can transmit without hindrance. In addition, Delaware and Maryland residents have the right to obtain a list of the categories of third parties to which we have disclosed their Personal Information, Connecticut, Minnesota, and Oregon residents have the right to receive a list of specific third parties to which we have disclosed any Personal Information, and Vermont residents have the right to receive a list of all third parties to which we have sold Personal Information.
Right to Delete. You have the right to request that we delete the Personal Information you have provided to us or that we have otherwise obtained about you.
Right to Correct. You have the right to request that we correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of your Personal Information.
Right to Opt Out. You have the right to opt out of the processing of your Personal Information for the purposes of (i) targeted advertising, (ii) the sale of your Personal Information, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects.

Pleasenote that we do not engage in such profiling as defined under applicable law,but we may sell or use your Personal Information for targeted advertisingpurposes. If you have an opt-out preference signal enabled, you willautomatically be opted out of the sale or use of your information for targetedadvertising, but we may ask you to confirm your preference if you havepreviously consented to such processing activities. For additional informationregarding how an opt-out preference signal will be processed and how you canuse an opt-out preference signal, please see the “Third-Party Cookies and Tracking ”sub-section, below.

NOTICE TO LOUISIANAAND TEXAS CONSUMERS: We may sell your sensitive personal data.

Right to Appeal. You have the right to appeal our decision with regard to your request to exercise any rights described herein.

The exact scope of these rights may vary by state. You donot need to create an account with us to exercise your state privacy lawrights.

Email Opt Out

We always allow individuals to opt out of a specificmarketing newsletter or other email communication by clicking the “unsubscribe”button that appears in each such email, or by contacting us at privacy@thecircuit.com. Please notethat if you unsubscribe from receiving these newsletters/emails, we may stillsend you non-promotional emails, such as those about your account or ourongoing business relations.

Exercising Your Rights and Identity Verification

If you would like to exercise any of the above-mentionedrights that apply to you, please contact us at privacy@thecircuit.com.You may also call us at 512-655-6585 or submit a request via our interactiveform, available at our Do NotSell Request Form. We will respond within the time frame required underapplicable law.

In addition, to the extent you have provided consent for ourcollection and/or processing of your Personal Information and wish to revokethat consent, please contact us by email (privacy@thecircuit.com)or phone (512-655-6585).

Please be aware that your exercise of these rights issubject to certain exceptions, such as to safeguard the public interest as wellas our interests (for example, our ability to maintain legal privilege).

Please also note that we may require you to prove youridentity to exercise certain rights. Depending on your request, we may ask forinformation such as your name, telephone number, email address, and/or date oflast communication with us. We may also ask you to provide a signed declarationconfirming your identity. We will only use Personal Information provided inyour privacy rights request to verify your identity or authority to make therequest.

Only you, your parent or guardian (if you are under 13 yearsof age), conservator, a person to whom you have given power of attorney, or anauthorized agent may make a verifiable privacy rights request related to yourPersonal Information. You may, however, make a verifiable privacy rights requeston behalf of your minor child if necessary. Your verifiable consumer requestmust provide sufficient information that allows us to reasonably verify thatyou are the person about whom we collected Personal Information or anauthorized representative. We cannot respond to your request if we cannotverify your identity or authority to make the request.

TYPES OF PERSONAL INFORMATION WE COLLECT

In the preceding twelve (12) months, we have collected thefollowing categories of Personal Information from the sources discussed below.

Personal Information You Provide

You may be asked to provide us with certain PersonalInformation when you sign up for an account or a newsletter on one of ourPlatforms, when you contact us for information about COTA or one of ourprograms, when you use some of our Apps, when you register for and/or attend COTAevents, or when you participate in COTA programs. The Personal Informationwe request, and that you provide directly to us and/or allow us to obtaindirectly from your device, may include:

Identifiers, including your name, postal address (shipping and billing address), telephone number, or email address;
Payment information, such as your name, last four digits of a credit card number and expiration date (credit card payments are processed and stored by a third-party Service Provider), telephone number, and billing address, when you make a purchase with COTA;
Precise geolocation information, including precise geolocation information collected from use of the Apps in connection with your visits to our physical properties;
Visual information, including photos that are uploaded to Apps for identity verification purposes;
Biometric information, including in relation to facial recognition technology;
Commercial information, including information regarding your purchase history; and
Communications, including chat messages and phone calls, which may be monitored and recorded, including by Service Providers that incorporate or rely upon artificial intelligence (AI) technology.

It is always your choice whether to provide us your PersonalInformation. However, depending upon the activity, some Personal Informationwill be mandatory for participation, and we will indicate it as such. If you donot provide the mandatory Personal Information with respect to an activity, youwill not be able to engage in that activity.

If we learn that we have inadvertently collected PersonalInformation from a child on any of our Platforms that are not intended for ordirected to children, we will take steps to promptly delete that information.

Information We Collect in Connection with Your Attendanceat Events or Visits to Physical Properties

When you purchase tickets for and visit any of our physicalproperties or attend our events we may collect certain Personal Information.This may include:

· Identifiers, including your name, emailaddress, and driver’s license;

· Biometric information, including throughour use of facial recognition technology; and

· Visual and audio information, includingCCTV footage from cameras deployed throughout our physical properties and atevents and photos taken on rides or amusements.

Please note that this information may be collected inaddition to information collected via the Apps that are used to support orenhance your visits to our physical properties or attendance at events.

Information We Collect Automatically

We, and our Service Providers, automatically collect certaininformation when you visit or interact with the Platforms. Such information mayinclude, among other things:

· Identifiers, including your InternetProtocol address and mobile device identifier;

· Internet or other electronic network activityinformation, including the Uniform Resource Locator (“URL”) fromwhich you arrived, the URL to which you next go, browser information, type ofoperating system, and information about your use of the Platforms such as thepages or sections you visit most frequently, the time you spend there, and howyou move through the Platforms. We refer to this type of information as “UsageInformation,” which we collect from your device(s) through the use ofcookies, web beacons, third-party analytics providers, or other similar trackingtechnologies. For more information about cookies and Usage Information, see the“Third-PartyCookies and Tracking[”sub-section, below; and

· Geolocation data, such as a city or zipcode and/or tied to your IP address and cookies on your device.

Third-Party Cookies and Tracking

As indicated above, we and our Service Providers collectUsage Information via cookies, web beacons, and other similar trackingtechnologies. A “cookie” is a small data file that a web site transfers to auser’s device and is stored on the user’s browser. As a user moves from onepage or one screen to another, a cookie is used to tell us that it is the samedevice and to remember your preferences. A “web beacon” (also referred to as a“clear gif” or “pixel tag”) is a one-pixel image (which may be visible ortransparent), which may be embedded on a web page or in an email message, andwhich may also provide us with information about usage of that page or emailmessage, including if and when you have opened it.

We use Usage Information to help us administer thePlatforms, remember your preferences, deliver content that may be of interestto you, diagnose technical problems, and to support our security efforts. Wealso analyze the information to understand aggregate trends about how ourPlatforms are used, to help us better understand the makeup of our Platformusers, and to help us improve our Platforms. In addition, we and our Service Providerscollect and use Usage Information to support our marketing efforts.

A list of companies that host cookies on our Platforms, theservices they provide, and information on how you may block or delete certaincookies is included in our Cookie Notice.Most browsers can be set to detect and provide the option to block or delete browsercookies, but doing so may affect certain features of the Platforms. If you do not or if you no longer want to have cookies placed on your browser by thirdparties, many of them also offer ways to opt out. To learn more about browsercookies, including how to manage or delete them, refer to the “Tools,” “Help,”or similar section of your web browser.

We do not serve targeted advertising on our Platforms.However, when you use the Internet, third parties that we are not affiliatedwith may use tracking technologies, including cookies and pixels, to collectinformation about your online activities over time and across our Platforms andother websites. They may use this information to measure the effectiveness ofour marketing and to serve you advertisements that may be of interest to youelsewhere on the Internet. Currently, our websites do not respond to “do nottrack” signals transmitted by web browsers. “Do Not Track” is different fromthe Global Privacy Control (“GPC”), which we do respond to, inaccordance with applicable law. The GPC is currently the only opt-outpreference signal we can recognize. To find out more about GPC, pleasevisit https://globalprivacycontrol.org/.

For more information about third-party advertisers and howto prevent them from using your information, visit the NAI’s consumer websiteat https://thenai.org/how-to-opt-out/ or https://optout.aboutads.info/,or http://www.youronlinechoices.com/uk/. If you do want to opt out using these tools, including the GPC, you need to optout separately and/or configure your settings for each of your devices and foreach web browser that you use on each device, and after you erase cookies onyour browser. Please note that you still may receive generalized ads afteropting out and the GPC does not impact essential cookies used on the Platforms.

Personal Information Received from Third Parties

We may receive Personal Information about you from othersources, including our data broker services, data enhancement companies, listrental services, third-party analytics providers, and social media-owneddatabases, including via your interactions with our social media pages (thisincludes aggregate data on our social media followers (e.g., age, gender,and location), engagement data (e.g., “likes,” comments, shares, reposts,and clicks), awareness data (e.g., number of impressions andreach) and individual users’ public profiles).

In addition, we may obtain certain information from ourlicensees, including identifiers (e.g., name and address) and paymentinformation, to generate a profile of users who interact with ourlicensees.

Personal Information Inferences

We may also infer certain Personal Information from anycombination of the information that we collect directly or that we receive fromthird parties, including using automated means to generate information aboutyour likely preferences or other characteristics.

In all cases, we will only use your Personal Information consistentwith this Privacy Policy, or as disclosed at the time of collection.

HOW WE MAY USE AND DISCLOSE YOUR INFORMATION

Legal Bases for Using Your Personal Information

If you are in the EEA/EU or the UK, we will collect, use,access, or preserve your Personal Information under the applicable legal basesfor doing so under the GDPR or the UK GDPR. The legal bases depend on yourinteractions with us and our Platforms.

How We Use Personal Information

The below table summarizes the business or commercial purposesfor which COTA may collect and use your personal information and, if you are inthe EEA/EU or UK, our legal bases for doing so:

Purpose

Legal Basis, Where Applicable

^{To administer and provide our Platforms (and their contents), events, and physical properties, including to provide support to you when you request it, services, and security in partnership with our third-party Service Providers; to fulfill or meet the reason you provided the information; and to help us understand and monitor the usage of our Platforms, improve our online and offline offerings, and customize and improve the performance of the Platforms, events, and physical properties.}

^{Our legitimate interest to conduct and develop our business}

^{To perform our contractual obligations; to send you transactional or relationship messages, such as receipts, account notifications, customer service responses, and other administrative messages; and to provide required information regarding purchases (e.g. shipping information, event logistics, entry tickets, or post-event summary communications).}

^{Performance of contractual obligations with you}

^{To transfer your Personal Information to a new or reorganized entity in the event of a reorganization,} ^{merger, sale, assignment, bankruptcy, or similar change, for the new entity to use consistent with this Privacy Policy.}

^{Our legitimate interest to conduct and reorganize our business}

^{To operate our organization, including by sharing with our subsidiaries, affiliates, and other related entities; with our advisors, including lawyers, consultants, and accountants; and with others (including Service Providers) for our lawful business purposes.}

^{Our legitimate interests to conduct and develop our business}

^{To resolve disputes, and to prevent, investigate, and defend our interests or the interests of our customers and users of the Platforms, including by sharing Personal Information with entities that assist us in those endeavors.}

^{Our legitimate interest to establish, exercise or defend legal claims}

^{To comply with legal obligations to which we are subject, including as may be required by a court order, regulatory inquiry, or other lawful request.}

^{To fulfill our legal obligations}

^{To help maintain the safety, security, and integrity of our Platforms, events, physical properties, products and services, databases, other technology assets, and business, and for system administration.}

^{Our legitimate interest to maintain the security of our Platforms, events, physical properties, products and services, databases, other technology assets, and business, and to conduct system administration}

^{To deliver information to you that you have expressly chosen to receive and to enable your participation in special events or programs that we may offer (if you choose to participate in such events or programs).}

^{Your consent}

^{To communicate with you about our Platforms and provide you with marketing materials, including updates and offers and through our use of targeted advertising. You may unsubscribe or opt out of such electronic communications via the link labeled “unsubscribe” that appears on such communications, or by contacting us at}^{privacy@thecircuit.com}^.

^{Your consent}

^{To create a profile of you in order to provide you with marketing materials that we believe would be likely to interest you.}

^{Your consent}

^{Any other purpose disclosed by us when you provide the information or with your consent.}

^{Your consent}

Please note that we do not collect, use, or sell PersonalInformation for the purpose of training large language models.

To Whom We Disclose Your Personal Information

In the preceding twelve (12) months, we may have disclosed PersonalInformation about you to the following categories of third parties and asotherwise described in this Privacy Policy or at the time of collection, forthe purposes described in the preceding sub-section:

· With third parties that provide certain servicesand help facilitate the operations of our Platforms and other services andofferings (our “Service Providers”), including data hosting andcollection providers, email and text messaging providers, content deliveryproviders, analytics providers, advertising and marketing partners, paymentprocessors (whose privacy policies may apply instead of and/or in addition tothis Privacy Policy), and fraud prevention and identity verification vendors. ServiceProviders may require access to, or collect on our behalf, certain PersonalInformation in order to provide their services, including vendors that providecall recording services to us (for quality and training purposes) and thosethat support identity verification processes;

· With business partners, including eventpromoters, co-organizers, and sponsors;

· To our accountants, auditors, lawyers, and otheroutside professional advisors, subject to appropriate contractual obligationsof confidentiality;

· Where required by law, court order, or subpoenaif we believe disclosure is in accordance with, or required by, applicable lawor legal process or where necessary to prevent, detect, or prosecute criminaloffenses, or to protect our rights, property, and safety or the rights,property, and safety of others;

· In connection with any merger, sale of companyassets, financing, or acquisition of all or a portion of our business byanother company;

· Between and among our company and our currentand future parents, affiliates, subsidiaries, and other companies under commoncontrol and ownership; and

· With your consent or at your direction,including in relation to your use of third-party Apps or services that youchoose to use.

Your Personal Information may also be transferred to LeMans Endurance Management, co-organizer of the Lone Star Le Mans, part ofthe FIA World Endurance Championship, a company registered in France under theSIREN number 451 336 184, VAT No FR 17 451 336 184, with its registered addressat Circuit des 24 Heures, 72019 Le Mans Cedex 2, France, (hereinafter referredto as “LMEM“). LMEM will act as an independent controller, solely forthe purposes detailed below, and in accordance with applicable legislative andregulatory provisions:

Legal Grounds

Purposes

^{Execution of the agreement}

^{Co-organization of the Lone Star Le Mans event part of the FIA World Endurance Championship.}

^Consent

^{Personalized offers sent via electronic communication (email, SMS, etc.) including for (i) upcoming events of the same nature (FIA WEC Races) and any related services, and (ii) services related to its video platform broadcasting motor racing events.}

^{Creation and management of events related to races and circuits.}

^{Legitimate interest}

^{Development of commercial and user statistics.}

The Personal Information transmitted to LMEM is processed inaccordance with its privacy policy, including the retention period, which canbe consulted here: https://www.fiawec.com/fr/page/politique-de-confidentialite.

LMEM may be contacted through the following address:

Email: dpo@lmem.com
Postal: CIRCUIT DES 24 HEURES F-72019 LE MANS CEDEX 2

Please note that, in the last twelve (12) months and asindicated above in the “How We Use Personal Information [KS1] ”section, we also may have disclosed certain categories of Personal Information,including identifiers, commercial information, and internet or other similarnetwork activity, to advertisers and advertising networks to show you targetedadvertisements on third-party properties and to expand the reach andeffectiveness of our own marketing campaigns. These activities may beconsidered “sales,” “sharing,” or “targeted advertising” under certain statelaws. We do not, however, knowingly sell or share the Personal Information ofconsumers under 16 years of age.

We may also process and disclose information to thirdparties if the information has been de-identified or aggregated in a way so itcannot be used to identify you.

TEXT/SMS COMMUNICATIONS

‍

If you consent to receive communications via text message,we will send marketing and/or non-marketing communications to the phone numberyou provide, which may utilize or be sent using automated telephone dialingequipment and may include artificial intelligence (“AI”)-generated content. Wedo not share SMS consent or your mobile telephone number or otheropt-in data with third parties for their marketing purposes. However,as indicated above, we may disclose this information to Service Providers thatsupport our messaging services, including but not limited to platformproviders, phone companies, and any other vendors who assist us in the deliveryof text messages. If related to an event, we may also share certain informationwith the event promoter who may then contact you about the event.

Message frequency may vary. Message and data rates mayapply. You are not required to consent to such communications as a condition ofpurchasing products or services. To opt out at any time, text STOP.Please note that you may be subscribed across different short codes used by us,and therefore you must separately submit an opt-out request to each short codefrom which you wish to unsubscribe. After revoking consent, you may receive aconfirmation text that you have been opted out. For assistance, text HELP orvisit our website at https://circuitoftheamericas.com/.

For additional information, please review the section titled“COTA Text Message Program Terms” in the COTA Website Terms of Use.

PUSH NOTIFICATIONS

With your consent, we may send promotional and other pushnotifications to your mobile device. You can deactivate these messages at anytime by changing the notification settings on your mobile device.

‍

HOW WE STORE AND PROCESS YOUR INFORMATION

Storage

COTA stores your information on our servers in the UnitedStates. Our Service Providers’ servers may be located in the United States orelsewhere.

Cross-Border Transfers

We may transfer and store information that we collect aboutyou, including Personal Information, across borders from your country orjurisdiction to other countries or jurisdictions around the world, including toentities located outside of the EEA. We will implement reasonable measuresdesigned to ensure that your legal rights and protections travel with anytransfer of Personal Information, as required by applicable law. Whererequired, such as in the EU, UK, or EEA, we will implement Standard ContractualClauses with our third parties, or we will rely on another lawful transfermechanism. You may request details of the transfer mechanism we rely on totransfer Personal Information by sending such request to us at privacy@thecircuit.com.

Security of Your Personal Information

We implement and maintain reasonable technical andorganizational measures to help secure your Personal Information. For example,we host Personal Information in secure, cloud-based environments that usefirewalls, encryption, and other industry-standard technologies in an effort toprevent interference or access from outside intruders.

While we strive to maintain the security of your PersonalInformation, we cannot guarantee that information security measures arefail-safe or guarantee that Personal Information on the Platforms may not beaccessed, disclosed, altered, or destroyed without authorization.

Retention of Your Personal Information

We will retain your Personal Information in accordance withthe time period allowed under applicable law, and with consideration for thesensitivity, volume, and type of Personal Information, as well as the purposefor which we have collected it, after which time we will take steps to deleteit. When determining the retention period, we take into account criteria suchas the type of services requested by or provided to you, the nature and lengthof our relationship with you, use of our Platforms, and the impact on Platform functionalityif we delete your Personal Information.

We may retain deidentified, aggregate data for lawfullyallowed purposes.

COOKIE NOTICE

As noted above, we use cookies and other trackingtechnologies, such as web beacons, to collect and store information when youvisit our Platforms. A “cookie” is a small data file that a web site transfersto a user’s device and is stored on the user’s browser. As a user moves fromone page or one screen to another, a cookie is used to tell us that it is thesame device and to remember your preferences. A “web beacon” (also referred toas a “clear gif” or “pixel tag”) is a one-pixel image (which may be visible ortransparent), which may be embedded on a web page or in an email message, andwhich may also provide us with information about usage of that page or emailmessage, including if and when you have opened it.

Types of Cookies We Use

We might use both session and persistent cookies. Sessioncookies last for as long as you are using your browser, while persistentcookies will last for some time after you close your browser. The time thatpersistent cookies last is dependent on your browser configuration, includingwhether you delete cookies, and the lifespan of each cookie.

These cookies may be “first-party” cookies, which are servedby us, or “third-party” cookies, which are served by a domain other than ours.While we allow third parties to access the Platforms to place cookies on users’devices, the information those cookies supply is controlled by the third partyand subject to their privacy policy.

The Platforms use four types of cookies: necessary,functional, analytics, and marketing cookies.

Necessary Cookies: These are necessary for the Platforms tofunction and cannot be switched off in our systems. They are usually only setin response to actions made by you which amount to requests for services, suchas setting your privacy preferences, logging in, or filling in forms. You maybe able to set your browser to block or alert you about these cookies, but someparts of the Platforms will then not work. Where applicable, the legal basisfor use of essential cookies is our legitimate interest to operate ourPlatforms.

Functional Cookies: These enable the Platforms to provideenhanced functionality and personalization. They help us to store choices andsettings you make, such as your country or account preferences. If you disablethese cookies, the functionality of the Platforms may be affected. Whereapplicable, the legal basis for the collection of information through functionalcookies is your consent.

Analytics Cookies: These allow us to count visits andtraffic sources so we can measure and improve the performance of our Platforms.This includes whether a user has made prior visits to a Platform, usage of thePlatforms, and areas on the Platforms that are most (and least) often visited.This allows us to improve the performance of the Platforms and your experience.These cookies may also be used, together with some marketing cookies, to showmore relevant ads across the web and to measure interactions with the ads weshow. If you do not allow these cookies, we will not know when you have visitedour Platforms and will not be able to monitor performance. Where applicable,the legal basis for the collection of such information by analytics cookies isyour consent.

Marketing Cookies: Marketing cookies provide us with some ofthe same information that we collect from analytics cookies, and also allow usto serve advertising about our organization that we believe may interest youafter you have visited our Platforms, and to measure the effectiveness of ouradvertising. They also may be used by advertising partners to build a profileof your interests. If you disable these cookies, you will not receiveadvertising based on your visits to our Platforms. Where applicable, the legalbasis for the collection of such information by marketing cookies is yourconsent.

How We Use Cookies

We use the information that is automatically collectedthrough cookies and other tracking technologies to support our operations,analysis, and promotion of the Platforms. This includes the following:

to make the Platforms work as expected and enhance user experience;
to monitor metrics such as total number of visitors and traffic;
to understand which activities and services are most popular;
to understand the pages where visitors enter our Sites and the pages viewed;
to understand generally the location of our users (e.g., zip code information);
to deliver targeted advertisements that are more relevant to the user;
to recognize the browsers used to visit our Platforms, so that the content is adapted for the relevant browser;
to diagnose and fix technology problems; and
to reduce the repetition in the promotional messages that users see on our Platforms.

Disabling, Deleting, or Opting Out of Cookies

You may click the “Consent Preferences” cookie icon (foundin the lefthand corner on each page of our Sites) to make choices about cookieswe and our third parties place on our Platforms. If you do not or no longerwant to have cookies placed on your browser by third parties, many of them alsooffer ways to opt out. You should review the third party’s website forinstructions. Most browsers also allow at least some control of most cookiesthrough browser settings, and you may also delete existing cookies through yourbrowser. In addition, you may enable the Global Privacy Control to communicateyour privacy preferences, which will, depending on where you reside, opt youout of certain disclosure practices.

You can find out more information about cookies in generaland how to manage them by visiting the website www.allaboutcookies.org.

List of Specific Cookies

Below is a detailed list of the first- and third-partycookies we use on our Platforms:

FIRST-PARTY COOKIES

Type of Cookie

Name

Duration

Purpose

Categories of Personal Information Processed

Necessary

tbits

6 months

*.thecircuit.com

Necessary

__spdt

1 year

Description is currently not available.

Necessary

wpl_user_preference

1 year

No description available.

Necessary

_zitok

1 year

Description is currently not available.

Necessary

__cf_bm

1 hour

This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.

Necessary

_cfuvid

session

Cloudflare sets this cookie to track users across sessions to optimize user experience.

Necessary

cf_clearance

1 year

Cloudflare sets the cookie to manage and verify CAPTCHA challenges.

Necessary

session_id

Never Expires

This cookie is used to get or set the session id for the current session.

Necessary

cookieyes-*

1 year

CookieYes sets this cookie for consent solution management.

Necessary

rocket-lazyload

Session

lazyload.min.js

Necessary

owl-carousel-js

Session

owl.carousel

Necessary

glide-theme-scripts

Session

bundle.min.js

Necessary

fs-consent,

Persistent (default 120 days)

Store user cookie consent preferences and category choices (Consent Pro / Finsweet). Required for consent management system.

Identifiers; Internet or other similar network activity

THIRD-PARTY COOKIES

Type of Cookie

Name

Duration

Purpose

Categories of Personal Information Processed

Necessary

VISITOR_PRIVACY_METADATA

6 months

YouTube sets this cookie to store the user's cookie consent state.

Necessary

tradablebits-signup

Session

signup.thecircuit.com

Necessary

NID

6 months

Google sets the cookie for advertising purposes.

Necessary

VISITOR_INFO1_LIVE

6 months

A cookie set by YouTube to measure bandwidth.

Necessary

_GRECAPTCHA

6 months

google.com/recaptcha

Necessary

rc::a

Persistent

google.com/recaptcha

Necessary

rc::c

Session

Necessary

__cf_bm, cf_clearance (Cloudflare)

Session

Cloudflare bot management and Turnstile challenge cookies for form protection and security.

Identifiers; Internet or other similar network activity

PRIVACY POLICIES OF OTHER WEBSITES WE LINK TO

Our Platforms may link to other Sites or Apps, includingcontent offered by third parties, that we do not control and whose privacy anddata collection practices may differ from ours (“Third-Party Platforms”).We do not endorse, and are not responsible for the practices employed by anywebsites or services linked to or from our Platforms, including the informationor content contained within them.

When you go via our link to Third-Party Platforms, youbecome subject to their terms of use and privacy policies rather than ours. Youshould review these other website privacy policies regarding any PersonalInformation that they may collect about you.

HOW TO CONTACT US

The Platforms are operated by Circuit of The Americas,located 9201 Circuit of The Americas Blvd., Austin, Texas 78617.

For questions or concerns about the Platforms, this Privacy Policy,the Personal Information we hold about you, or exercising your privacy rights,please write to privacy@thecircuit.com.You may also have the right to lodge a complaint about our privacy practiceswith a supervisory authority.

To report potential security vulnerabilities, please writeto legal.notices@thecircuit.com.

‍