Celebrate Earth Month with $3,000 in additional savings when you order select vehicles by April 30.*

Legal

Privacy

Last Updated: April 28, 2026

This Lucid Motors Privacy Notice (“Notice”) describes how Lucid Group, Inc. and its affiliates and subsidiaries (collectively, “Lucid,” “we,” “our,” or “us”) collect, process, and use your Personal Data, as defined below, when you visit lucidmotors.com, including its webpages and subdomains (the “Website”); download and use a Lucid mobile application (each, an “App”) (together with the Website, the “Online Properties”); or otherwise interact with us offline, such as at one of our studios or service centers or when you contact us directly by email, phone, or other methods (together with the Online Properties, the “Services”).

We provide additional information and choices for residents of certain jurisdictions:

  • U.S. Residents from an Applicable State: Please see the “Additional Privacy Disclosures for Applicable State Residents” section for more information.

  • California Residents: Please see our section on “Additional Privacy Disclosures of California Residents” for additional information, including your rights under California law.

  • Individuals Outside the U.S.: Please see the “Additional Privacy Disclosures for Individuals Outside the U.S.” section for more information.

We may also provide additional privacy notices that apply to specific services and supplement this Notice, including the following:

  • The Lucid Motors Vehicle Data Privacy Notice, which covers data handling practices related to Lucid vehicles, how they are operated, connected and interactive features (including AI‑supported functionality), and their interoperability with the App.

  • The Lucid GLBA Notice (US Only), which covers how we handle consumers’ and customers’ nonpublic personal information.

This Notice excludes the practices of importers, agents, and authorized repairers (in some countries called workshops) (collectively, “Lucid Independent Partners”). Additionally, this Notice does not apply to the Personal Data that we collect about (a) job applicants and candidates (please see our Candidate Privacy Notice, or (b) employees, independent contractors and other workers of Lucid or Lucid’s Independent Partners.

    1. Personal Data We Collect

    2. Our Sources of Personal Data

    3. Our Uses of Personal Data

    4. Disclosure of Your Personal Data

    5. Cookies and Other Similar Tracking Technologies

    6. Data Transfers

    7. Retention

    8. Safeguarding Personal Data

    9. External Links and Interactive Features

    10. Your Choices With Respect to Your Personal Data

    11. Additional Privacy Disclosures for Applicable State Residents

    12. Additional Privacy Disclosures for California Residents

    13. Additional Privacy Disclosures for Individuals Outside the U.S.

    14. Changes to this Notice

    15. Contact Us

1. Personal Data We Collect

When we use the term “Personal Data” in this Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you. Personal Data includes “Sensitive Data.” Personal Data also includes the term “personal information” as used in data privacy laws, including the California Consumer Privacy Act. Personal Data does not include information that is publicly available (unless otherwise provided by law), or information that is de-identified or aggregated so that it does not allow an individual to be identified directly or indirectly.

We treat any data that identifies you, or reasonably can be linked to you, as “Personal Data.” Data that has been de-identified so that it cannot reasonably be linked to you is not Personal Data, and we may use that data for any purpose. When we maintain and use de-identified data, we do not attempt to re-identify the data unless expressly permitted or required by law.

Although the Personal Data we collect about you may vary depending on the nature of your interactions with us and may not include all of the examples below, generally, Personal Data may include:

  • Identifiers, such as name, email address, home address, telephone number, signatures, vehicle identification number, and government-issued IDs (e.g., driver’s license number, passport information, social security number).

  • Business-to-business information, such as employer name, title, business transaction information, and other employment-related information.

  • Account registration information, such as login credentials.

  • Commercial information, such as information related to your purchases and services or purchases considered, including vehicle ownership, service history, and vehicle registration information.

  • Financial information such as bank account and routing/transit number to process refunds or reimbursements.

  • Preferences, such as preferred communication method, language, time zone, and studio, as well as browsing and searches related to vehicles, features, and options you may be interested in when you use the vehicle shopping tools on our Website.

  • Internet and other electronic network activity, such as browsing history, search history, IP address, location data inferred from your device IP address, and information regarding your interactions with our Online Services.

  • Audiovisual information, such as close-circuit images when you visit our studio or service centers, photographs at events, and audio recordings (e.g., when you call our customer care team).

  • Content of communications, such as when you communicate with us via email, customer service requests, Website chats, or social media posts, likes, or messages.

  • Inferences drawn from other Personal Data, such as information reflecting your preferences, characteristics, predispositions, or behavior.

2. Our Sources of Personal Data

We collect the Personal Data described above from various sources, including directly from you, and from publicly-available sources, such as open government databases or information publicly available online. In addition, we may also collect Personal Data through our vendors and other parties that support our business, such as our vendors or professional advisors working on our behalf for the purposes described in this Notice; our marketing and advertising partners, and joint marketing partners; and Lucid IndependentPartners. We may also collect Personal Data about you when you use our Services or when you visit our studio or service centers. Additionally, we also collect Personal Data that we generate, such as inferred preferences and unique identifiers.

3. Our Uses of Personal Data

We may use the Personal Data we collect:

  • To provide and maintain our Services, including for vehicle delivery and related services, to provide credit and financing services, facilitate vehicle access programs such as test drives and temporary use of our vehicles by our partners, perform technical operations (such as updating software) and other customer service and support purposes;

  • To communicate with you, including to provide you with updates and other information relating to our products or Services, provide information that you request, respond to comments and questions, and otherwise provide customer support and maintain customer relationships;

  • To provide and coordinate vehicle sales and post‑sales support through Lucid Independent Partners (e.g., delivery, importation, registration facilitation, servicing, or repairs), where applicable;

  • For safety, recall, and warranty purposes, including to effectuate a product recall, provide warranty administration and validation, as well as to perform service and/or make repairs to your vehicle, and respond to trust and safety issues including accident investigations;

  • To personalize your experience with us, including to provide tailored content and recommendations on our Website as well as other locations across the internet which are relevant to your interests, as well as personalized App interactions, such as to identify nearby charging stations;

  • To understand and analyze how you use our Services and conduct internal research to develop new products, services, features, and functionalities;

  • For marketing and promotional purposes, including to develop and provide you with promotional and advertising materials that we consider relevant, valuable, or otherwise of interest to you, including without limitation targeted advertising;

  • To protect the safety, property or rights of Lucid, owners, registered users, drivers, passengers or others; To secure and protect our rights, including to investigate, establish, exercise, prepare for, or defend legal claims; protect our rights and to prevent, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities or any illegal activity; and otherwise preserve the integrity or security of our systems;

  • To support our general business operations, including for accounting, record keeping and legal functions (such as analyzing operational and business results and risks); to collect outstanding amounts owed; and to maintain business records;

  • For compliance purposes, including enforcing our Terms of Use or other agreements with you, or as required by applicable laws and regulations or requested by any judicial process or governmental agency;

  • To evaluate and undertake certain business transactions (such as an actual or contemplated merger, acquisition, financing, sale, bankruptcy or restructuring) which may result in the transfer of all or some of our assets, or the assets of another business;

  • For other purposes for which we provide specific notice at the time the information is collected; and

  • For any other purpose you consent to.

In limited circumstances, we may collect, use, and disclose vehicle location data even if location data settings are turned off to protect Lucid’s rights or property (for example, during repossession due to missed payments), comply with laws, respond to valid legal requests from authorities, or, in urgent cases, help prevent death, serious harm, or ensure the safety of Lucid staff, vehicle users, visitors, or the public.

4. Disclosure of Your Personal Data

Subject to applicable law, we may disclose Personal Data in the following circumstances:

Within Our Lucid Group of Companies

Because we have global operations, we may transfer your Personal Data from one affiliated legal entity to another or from one location to another to accomplish purposes listed in this Notice (including those for which we retain service providers as described below). We will transfer your Personal Data in a manner that is consistent with applicable legal requirements.

With Other Parties

We may disclose your Personal Data to:

  • Service providers who perform certain tasks on our behalf in connection with delivering you our products and Services (including processing and storing Personal Data. For example, the underlying technology for our customer relationship management system or developing and hosting our website;

  • Lucid Independent Partners that help provide our Services (including the purchase, delivery, importation, lease, servicing, repair, or support of your vehicle, or to provide other offerings requested by you) and our distribution partners where necessary to fulfill your request or support your vehicle ownership experience;

  • Business partners with whom we work to offer services to our customers, or reach potential customers with our marketing, including advertising and digital analytics companies, including social media platforms (see the “Cookies and Other Similar Tracking Technologies” section for more information), and joint marketing partners;

  • Vehicle verification and valuation partners;

  • To law enforcement agencies, courts, regulatory agencies, and others (a) to respond to legally binding warrant, subpoenas, court orders, or other legal process or otherwise as required or allowed by law or the competent governmental or judicial authorities, including to report your vehicle purchase to certain government authorities for titling, tax, and other regulatory purposes; (b) to cooperate with law enforcement, government or regulatory entities, and safety or investigation authorities; (c) when we believe in good faith that disclosure is necessary to protect our rights or property, protect your safety or the safety of others, investigate fraud or to establish or preserve a legal claim or defense; or

  • Business partners in connection with an actual or contemplated business transaction; and

  • With your consent.

When we disclose Personal Data obtained through our Apps to the parties described in the Disclosure of Personal Data section above, we require that they provide the same level of Personal Data protection as required by this Notice.

5. Cookies and Other Similar Tracking Technologies

Types of Cookies We Use

We and our vendors use cookies, web beacons, pixels, tags, and other similar technologies (collectively, “Cookies”) to collect information when you interact with our Online Services. We categorize Cookies according to their general purpose and to illustrate the different functions they serve, as seen in our Cookie preference manager available through the “Cookie Settings” link located in the footer of our Website. We also use SDKs and similar technologies in our App.

What Data We Collect Through Cookies and How We Use It

These Cookies may collect information about your usage and activities (such as your IP address and device identifier, the browser you are using, length and time of visit, and pages visited), location inferred from your device IP address (to deliver content based on your location), and details about how you interact with our Online Services (including clicks, taps, cursor movement, scrolls, and keystroke activity).

We and our vendors use this data for various purposes, including to operate, enable and improve our Online Services; verify account credentials and enable logins; track sessions; analyze usage and performance; personalize and improve your experiences; improve and measure our advertising campaigns; provide you with more relevant content, ads, and offers within our Online Services and on other websites and services; track bugs and errors; and prevent fraud and protect and secure our Online Services.

Duration of Cookies

Cookies vary in how long they are kept on your device. We use both Session Cookies and Persistent Cookies on the Website.

  • Session Cookies are temporary Cookies that last for only a single browsing session. The information they collect is stored in temporary memory and erased shortly after you leave our Website or close your browser.

  • Persistent Cookies are stored on your device until you take steps to remove the Cookies or until a particular Cookie’s expiration date (often several months after the Cookie is placed on your device). Persistent Cookies can record information from each visit you make to our Website as long as they remain on your device.

Our Cookie Vendors

Our Cookie vendors can be viewed in our Cookie preference manager available through the “Cookie Settings” link located in the footer of our Website.

Some of these vendors provide the following tools to allow you to manage your Cookie preferences:

  • Facebook Custom Audiences: You may opt out of Facebook Custom Audiences by logging into your Facebook account and changing your privacy or advertising settings.

  • Google (Ads, Analytics): We may use Google tools like Google Analytics to analyze visitor interactions, enhance the Online Services quality, and serve ads online. We have implemented Google Analytics Advertising Features, such as remarketing with analytics, interest-based advertising, and impression reporting. For more information on how Google Analytics uses data, visit support.google.com/analytics/answer/6004245. To opt out of aggregation and analysis of data collected by Google Analytics, please visit tools.google.com/dlpage/gaoptout. To adjust your Google advertising settings, visit myadcenter.google.com.

  • Microsoft Advertising: We may use Microsoft Advertising tools to assess how visitors interact with our Online Services, enhance the performance of our Online Services, and deliver tailored online ads. For information on how Microsoft collects or receives Personal Data to provide service through Microsoft Advertising, visit

    microsoft.com/en-us/privacy/privacystatement.

  • Snap: For more information on how Snapchat collects or receives Personal Data through Cookies and other similar technologies, visit values.snap.com/privacy/privacy-policy.

  • TikTok: For more information on how TikTok collects or receives Personal Data through Cookies, visit

    tiktok.com/legal/page/us/privacy-policy/en.

  • YouTube: YouTube API Services may collect, store, use, process and disclose Personal Data, including from your devices, as described in this Notice and to serve content. You can revoke access to your Personal Data collected and processed through the YouTube API Services using Google’s security settings at security.google.com/settings/security/permissions⁠.

We are not responsible for the effectiveness of, or compliance with, external-parties’ opt out options or programs or the accuracy of their statements regarding their programs.

Consent

Depending on your jurisdiction, a pop-up banner may appear when you first visit our Website where your consent is required for certain non-essential Cookies. This banner provides options to accept all Cookies, reject non-essential Cookies, or adjust your Cookie settings/preferences. By accepting all Cookies, you consent to our use of Cookies, and all Cookies on the Website will be enabled unless you have independently disabled them through your browser settings.

You may withdraw your consent or change your Cookie preferences at any time by accessing our Cookie preference manager available through the “Cookie Settings” link located in the footer of our Website. These settings are specific to each website and browser; as such, if you access our Website from a different device or browser, you will need to set your preferences accordingly.

Interest-Based Advertising

In addition to our Cookie preference manager and our Cookie vendors’ opt out tools, many advertising and analytics providers are part of industry groups that allow you to opt out of targeted ads, which you may access at:

Your web browser may also have adjustable settings for accepting Cookies, including deleting and rejecting Cookies. For mobile users, mobile devices create advertising IDs for mobile application tracking, similar to Cookies on websites, that users can limit tracking or reset these IDs via their device settings. Please note that deleting or rejecting Cookies may impact certain features or services available on our Online Services. Additionally, removing Cookies may result in the loss of any preestablished settings and preferences, including advertising preferences, which may need to be reestablished.

Additionally, certain web browsers have “Do Not Track” features, which allow users to send signals to websites indicating their preference not to be tracked. Our Sites do not support Do Not Track at this time. For more information about Do Not Track, visit donottrack.us⁠⁠⁠.

6. Data Transfers

Lucid operates a global business and may transfer the Personal Data that Lucid processes about you to countries or regions outside of your location. We take steps designed to ensure that the data we collect under this Notice is processed according to this Notice and applicable law wherever Personal Data is located. For example, if you are located in the UK or the EEA, we may transfer Personal Data to jurisdictions outside the UK or EEA that have not been determined by the European Commission or other authorities to provide an adequate data protection regime, such as the United States. Data protection laws in the United States or other countries may differ from the laws of your country of residence; as such, different standards may apply to how your Personal Data is used and protected. Lucid uses valid data transfer mechanisms (such as the UK or European Commission’s Standard Contractual Clauses) to ensure such adequate level of data protection, at its sole discretion in accordance with applicable data protection and privacy laws. Under the applicable data protection laws, you may be entitled to request a copy of any redacted contractual documentation, where applicable, showing that appropriate safeguards have been taken to protect your Personal Data. See the “Contact Us” section of this Notice to request a copy.

Where your consent is required to transfer Personal Data to a recipient outside of your relevant jurisdiction, we will transfer your Personal Data with your consent. You can withdraw your consent by contacting us using the information in the “Contact Us” section of this Notice.

If you are located in Canada and have any questions or wish to obtain further written information about the transfer of your Personal Data to service providers or affiliates outside of Canada, you may contact our Privacy Officer at privacy@lucidmotors.com.

7. Retention

We keep the other categories of Personal Data described above for as long as is necessary for the purposes described in this Notice or otherwise authorized by law.

Generally, Personal Data will be kept in accordance with Lucid policy, for as long as reasonably necessary for us to manage our operations or your relationship with us; satisfy another purpose for which we collected the information; or carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Data was collected. We may also maintain your Personal Data where it is reasonably required to comply with applicable laws and regulations, defend or prosecute legal claims, protect your vital interests or those of another person, or where we are otherwise permitted to keep your Personal Data by applicable laws or regulations.

Where Personal Data is used for more than one purpose, we may retain it until the purpose with the latest period expires.

8. Safeguarding Personal Data

We use commercially reasonable administrative, technical, and physical safeguards to protect Personal Data, considering the nature of the Personal Data and the threats posed. However, there is security risk inherent in all information technologies, and we cannot 100% guarantee the security of your Personal Data.

9. External Links and Interactive Features

Our Online Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties, and this Notice does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

Additionally, we may engage vendors to provide certain interactive features on our Online Services. Your use of these interactive features is voluntary, and we may retain information that you submit through these features. For example, we may offer an interactive chat feature on our Online Services to answer questions and for other customer service purposes. When you participate in the interactive chat, either with a virtual or live agent, the contents of the chat may be captured and kept as a transcript. By using these features, you understand that our vendors may process the information obtained through the feature to provide the service on our behalf.

10. Your Choices With Respect to Your Personal Data

You may have certain privacy rights that allow you to make certain choices related to your Personal Data.

Account Information

If you have registered for an account to use our Online Services, you can access and update certain information we have relating to your account within your account settings.

Communication Preferences

If you want to unsubscribe from our promotional emails, please use the “Unsubscribe” or similar link provided at the bottom of our emails. We will remove you from the relevant mailing list(s) or campaign(s) as soon as reasonably possible. Please note that even if you opt out of receiving promotional emails from us, you may continue to receive transactional emails from us. If you get text messages from us, you can opt out of future messages by either following the provided instructions or replying with “STOP.” You will then receive a single message confirming your choice. These choices do not apply to mandatory service communications that are part of certain products (e.g., recall notices).

Cookies

You can manage your Cookie preferences by clicking the “Cookie Preferences” link in the footer of the Website.

App Choices

If you no longer wish to provide your Personal Data through our App, you may uninstall our App from your device. Note that this action will not delete your user account or any information we previously collected via the App, nor does it affect our Personal Data collection through our other Services.

Privacy Rights

Subject to applicable data protection laws, you may have certain rights related to your Personal Data. This includes the right to:

  • Request access to or a copy of the Personal Data we collect, use, disclose, and/or store about you, or right to be informed;

  • Request to correct or rectify Personal Data about you that is inaccurate;

  • Request to delete, erase, or anonymize your Personal Data that we have collected, used, disclosed, or otherwise processed about you;

  • Object to or restrict collection, use, disclosure, or other processing of your Personal Data under certain circumstances;

  • Data portability, including obtaining your Personal Data in an electronic format, and transmitting such Personal Data to another data controller; and

  • Withdraw your consent to process your Personal Data in circumstances where our collection, use, disclosure, or other processing is based on your consent.

These rights may be subject to legal restrictions as provided by applicable law. To make a request, please visit the Lucid Privacy Request Portal (English only), or if you are located in the United States or Canada, you may also call us at (888)-995-8243.

Under applicable law and depending on the sensitivity of the Personal Data, we may need to verify your identity, such as by contacting you through contact information in Lucid’s possession.

The above rights are subject to legal restrictions, as provided by the applicable privacy laws. We may lawfully refuse your request in certain circumstances, such as if legal obligations or a court order prevent us from complying. If we refuse to comply with your request, then we will provide you with an explanation as required by law.

We will not discriminate against you for exercising any of your privacy rights under applicable law.

International Users: If you are located outside the United States and require assistance in another language or cannot access the Portal, you may contact us at privacy@lucidmotors.com. We will acknowledge your request and guide you through the available process in your region.

If you wish to exercise any of your rights regarding your Personal Data, ask questions about this Notice, or file a complaint, please contact our Data Protection Office through the contact details set out in the “Contact Us” section of this Notice. You may also have the right to file a complaint directly to the relevant data protection authority. For more information, please contact your local data protection authority.

11. Additional Privacy Disclosures for Applicable State Residents

This section supplements the Notice above and applies to residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia (“Applicable States”).

California residents should review our section titled “Additional Privacy Disclosures for California Residents”

Capitalized terms in this section have the same meaning as the matching terms as defined under applicable law, to the extent the law applies to you. If there is a conflict between this section and any other Lucid policy, statement, or notice, this section will take precedence regarding Applicable States’ residents’ rights under law.

Sensitive Data

We collect Personal Data as described in the “Personal Data We Collect” section. Some of the Personal Data we collect is considered “sensitive” under Applicable State law, such as precise geolocation data if you have enabled certain Connected Services in your vehicle. We collect this Personal Data with your consent, if required, for the limited purpose of providing Services you request.

State-Specific Privacy Rights

Depending on your state of residency and applicable law, in addition to the rights outlined in the “Privacy Rights” section, you may also have the following rights:

  • For residents of Connecticut, Oregon, and Minnesota, request a list of Third Parties to which we have disclosed Personal Data.

  • For residents of Maryland, request a list of the categories of Third Parties to which we disclose Personal Data.

  • For Delaware residents, request a list of the categories of Third Parties to which we disclose your Personal Data.

  • Right to opt out of the Sale of your Personal Data, and to request that we do not disclose your Personal Data for Targeted Advertising. To opt out of Cookie-based Sales and Targeted Advertising, please visit our Cookie preference center located in the footer link titled “Cookie Settings.” If you choose to use the Global Privacy Control (“GPC”) browser signal, you will only be opted out of online Sales or Targeted Advertising of Personal Data, and will need to turn it on for each browser you use. To opt out of non-Cookie-based Sales and Targeted Advertising, please refer to the instructions below.

We do not engage in Profiling in furtherance of decisions that produce legal or similarly significant effects. We also do not collect, use or sell Personal Data for the purpose of training large language models as defined by Applicable States.

You can exercise any of the rights above by accessing the Lucid Privacy Request Portal (English only). If you are located in the United States or Canada, you may also call us at (888)-995-8243. If you require assistance in another language or cannot access the portal, you may contact us at privacy@lucidmotors.com. Subject to applicable law, you may be able to designate an agent to submit privacy rights requests on your behalf. If you would like to designate an agent, please have your agent contact us using the above mechanisms. We may require the authorized agent to provide proof that you gave the agent signed permission to submit the request, as well as require you to verify your identity or directly confirm with us that you provided the authorized agent permission to submit the request.

Should we decline any of your requests, depending on applicable law, you may have the right to appeal our decision by contacting us at privacy@lucidmotors.com. In your appeal, please explain to us your desire to appeal our decision and why you believe the declining of your request is not proper. We will then escalate your request for an appeal to the appropriate member of our privacy team who will respond to you with additional information related to your appeal.

12. Additional Privacy Disclosures for California Residents

This section supplements the Notice above and is provided pursuant to the California Consumer Privacy Act, as amended (“CCPA”). This section describes our processing of “Personal Information” (as defined under the CCPA, to the extent the law applies to you). References to “Personal Data” in the Notice above also describe our practices regarding Personal Information in this section. Other capitalized terms in this section have the same meaning as the matching terms as defined under the CCPA, to the extent the law applies to you.

Unless otherwise noted, the disclosures in this section (including the disclosures made in the Notice that are incorporated into this section) describe how and why we collect, use, and disclose Personal Information also describe how we have collected, used, and disclosed Personal Information in the preceding 12 months.

Collection, Use, and Disclosure of Personal Information

We collect the following categories of Personal Information from California Consumers from the sources described in the “Our Services of Personal Data” section, for the purposes described in the “Our Uses of Personal Data” and “Disclosure of Your Personal Data” sections in the Notice. The Personal Information we collect depends on how you interact with us.

  • Identifiers, including real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, or other similar identifiers.

  • Personal Records described in Cal. Civ. Code § 1798.80(e), including your signature, telephone number, driver’s license or state identification card number, or employment.

  • Characteristics of protected classifications under California or federal law, including age, date of birth, and gender.

  • Commercial information, such as records of property, products or services purchased, obtained, or considered, vehicle ownership reports, or other purchasing or use histories.

  • Internet or others electronic network activity information, including browsing history, search history, and information regarding your interactions with our Online Services.

  • Geolocation data, including location data inferred from your device IP address.

  • Audio, electronic, visual, or similar sensory information, including closed-circuit images, photographs and video, or audio recordings of you (such as customer service calls).

  • Business-to-business information, such as employer, business contact information, and title.

  • Inferences used to create a profile reflecting your preferences, characteristics, abilities, and aptitudes.

Sensitive Personal Information

We collect Personal Information as described in the “Personal Data We Collect” section. Some of the Personal Information we collect is considered “Sensitive Personal Information” under the CCPA, such as social security, driver’s license, state identification card, or passport number; financial information; and precise geolocation data. We do not use or disclose “Sensitive Personal Information” for purposes other than those specified in Section 7027 of regulations promulgated under CCPA.

Personal Data Sales and Targeted Advertising

This section describes the categories of Personal Information Sold to Third Parties (other than for Cross-Context Behavioral Advertising) or disclosed to Third Parties for Cross-Context Behavioral Advertising. For more information on how to opt out, please see the “California Privacy Rights” section or use the “Cookie Preferences” link in the footer of the Website.

We may Sell and/or disclose for Cross-Context Behavioral Advertising the following categories of Personal Information: Identifiers, Personal Records, Commercial Information, Internet or Other Electronic Network Usage Data, Geolocation Data, and Inferences. We may Sell and/or disclose for Cross-Context Behavioral Advertising these categories of Personal Information to or with advertising and digital analytics companies (see the “Cookies and Other Similar Tracking Technologies” section for more information), social media platforms (such as Facebook for creation of and advertising custom audiences), and joint marketing partners.

California Privacy Rights

If you are a resident of California, you have the right to submit certain requests relating to your Personal Information as described below:

  • Right to know what Personal Information we have collected about you, including:

  • The categories of Personal Information we have collected about you, including:

  • The categories of sources from which the Personal Information was collected.

  • Our Business Purposes for collecting Personal Information.

  • The categories of recipients to which we disclose Personal Information.

  • The categories of Personal Information that we disclosed for a Business Purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information.

  • The specific pieces of Personal Information we have collected about you.

  • Right to request that we delete Personal Information we collected from you, subject to certain exceptions.

  • Right to request that we correct that information if you believe that Personal Information we maintain about you is inaccurate.

  • Right to opt out of the Sale of your Personal Information, and to request that we do not Share your Personal Information for Cross-Context Behavioral Advertising. To opt out of Cookie-based Sales and Cross-Context Behavioral Advertising using your Personal Information, please visit our Cookie preference center located in the footer link titled “Cookie Settings.” If you choose to use the Global Privacy Control (“GPC”) browser signal, you will only be opted out of online Sales or Sharing of Personal Information, and will need to turn it on for each browser you use. To opt out of non-Cookie-based Sales and Cross-Context Behavioral Advertising using your Personal Information, please refer to the instructions below.

To make a request, please visit the Lucid Privacy Request Portal (English only) or call us at (888)-995-8243. California law permits California residents to designate an agent to submit privacy rights requests on their behalf. If you would like to designate an agent, please have your agent contact us using the above mechanisms. We may require the authorized agent to provide proof that you gave the agent signed permission to submit the request, as well as require you to verify your identity or directly confirm with us that you provided the authorized agent permission to submit the request.

Shine the Light

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits California residents to opt out of our disclosure of your Personal Data to third parties for their direct marketing purposes. If you are a California resident, you may instruct us not to disclose your Personal Data to third parties for their direct marketing by submitting a request to opt out of sales through the Lucid Privacy Request Portal (English only).

13. Additional Privacy Disclosures for Individuals Outside the U.S.

This section supplements the Notice above and applies to individuals outside of the United States that access or otherwise use our Services. We recognize the privacy rights of persons in any country with an active data protection law applicable to Lucid, such as the European Union’s General Data Protection Regulation.

If you are using our Services from a country with an active data protection law, and you want to ask for additional information about your rights, you may contact our Data Protection Officer at privacy@lucidmotors.com.

Lawful Basis

If applicable law requires a lawful basis for processing, we process your Personal Data based on the following bases:

  • Your consent. You have consented to the use of your Personal Data, for which you may withdraw consent at any time;

  • Your contract with us. We need your Personal Data to perform a contract or provide you with our Services, including to respond to your inquiries;

  • Our legal obligations. We have a legal obligation to use your Personal Data; and

  • Our legitimate interest. We have a legitimate interest to use your Personal Data to conduct business analytics, and otherwise improve the safety, security, and performance of our Services (such as securing and protecting against cyberattack, fraud, spam, and abuse); maintain and improve our Online Services; and anonymize Personal Data so that it is no longer Personal Data.

Controllers

For individuals located in the European Union or European Economic Area, the controller responsible for processing your Personal Data depends on your place of residence and the Lucid Services you use. Lucid determines the controller based on the Lucid entity that determines the purposes and means of the relevant processing in your country or across the region.

Lucid Europe B.V. acts as the regional headquarters for Europe and may serve as the controller for certain centralized EU processing activities, such as regional customer operations, compliance, marketing, service coordination, or other cross‑EU functions.

In addition, the Lucid affiliate operating in your country will act as your controller where it manages local sales activities, customer interactions, studio visits, test drives, vehicle delivery, post‑sales support, or other in‑market activities.

In some countries, you may interact with Lucid Independent Partners under our indirect distribution model. Where a Lucid Independent Partner independently determines the purposes and means of processing (for example, for importation, local sales, servicing, or repairs), they act as a separate controller under their own privacy notice. Where a Lucid Independent Partner processes Personal Data on our behalf to help provide Services you request, the Lucid Independent Partner act as our processor.

14. Changes to this Notice

We may update this Notice at any time. We will post changes to this Notice on this page and update the “Last Updated” date at the top of this page.

15. Contact Us

Lucid Group, Inc. and/or your local Lucid affiliate are responsible for the processing of your Personal Data, as described in this Notice. If you have any questions, comments, or concerns about our processing activities, please email our Privacy Officer at privacy@lucidmotors.com, call us at (888)-995-8243, or write to our Legal Department, Attn: Privacy Officer, at 7373 Gateway Boulevard, Newark, CA 94560 USA. If you are located in Europe and feel your concerns have not been effectively addressed after contacting us, you may also contact the Dutch Autoriteit Persoonsgegevens at https://autoriteitpersoonsgegevens.nl.

Last updated: June 5, 2024

Lucid Group, Inc., (“Lucid,” “we,” “our,” or “us,” as used here, will refer to Lucid Group, Inc. and its subsidiaries and affiliates) respects the privacy of you and your household (“you”).

Vehicle connectivity is a core feature of Lucid vehicles and allows us to deliver many of the amazing features in your car. This Vehicle Data Privacy Notice describes the types of data that we may collect when you use our connected products or services when operating a Lucid vehicle (“Vehicle Data”), including the Lucid mobile app’s interoperatiblity with the vehicle. We treat any Vehicle Data that identifies you, or reasonably can be linked to you, as “Personal Data.” This Notice will help you understand how we may use and disclose your Personal Data, your privacy choices, and how to contact us if you have any questions or concerns regarding the use of your Personal Data.

This Notice also applies to any other vehicle operators you permit to operate your vehicle. Please inform them of the contents of this Notice so that they may be informed about its contents.

Vehicle Data also includes data that has been aggregated or de-identified so that it cannot reasonably be linked to you. This data is not Personal Data, and we may use it for any purpose. When we maintain and use aggregated or de-identified data, we do not attempt to re-identify the data unless expressly permitted or required by law. This Notice does not apply to Lucid’s use of aggregated or de-identified data or to the collection of your Personal Data outside of the scope of Lucid’s vehicle, products, and services. For information regarding the Personal Data we may collect from you when you use a Lucid website or app, or in relation to your ordering, financing or taking delivery of a Lucid vehicle, please visit our Lucid Privacy Policy or other applicable notices.

Lucid processes Personal Information on the legal basis of its legitimate interest of providing services to Its vehicle owners and managing its own business, compliance with laws and regulations to which Lucid is subject, as well as necessity to perform contractual obligations related to the Lucid vehicle owned or operated by you. At times Lucid may process Personal Information on the legal basis of consent. You will be provided an opportunity to consent to such processing prior to the time such processing starts; for example, if we are using specific geo-location data to provide you marketing services via the Lucid vehicle infotainment system.

CATEGORIES AND SOURCES OF INFORMATION WE COLLECT

We collect a variety of different types of data from your use of Lucid products and services when you operate a Lucid vehicle and have data sharing enabled. Much of this Vehicle Data is information that tells us about the vehicle’s operation, performance, or status. Some of this Vehicle Data includes information that is personal to you and tells us about how you use the vehicle, what your preferences are, and helps us understand how we might improve the vehicle experience for you and others.

Personal Data Lucid Collects Directly from You and the Vehicle

  • Identifiers, such as name, email address, profile/account name, VIN, vehicle modem information, or other similar information collected from you during enrollment or profile creation and/or vehicle login.

  • Biometric Information, such as facial template used when you enable and register a Face Login to access your vehicle. This data is collected on-board the vehicle and is not shared with Lucid.

  • Internet and other Electronic Network Activity Information, including the data generated when you operate your Lucid vehicle, connected and remote service interactions, and other connectivity data, such as Wi-Fi status, paired Bluetooth devices, etc.

  • Geolocation Data for your vehicle, including the use of navigation and emergency services.

  • Audio, Electronic, and Visual Data, including diagnostic and vehicle performance data, driving and vehicle behavioral data, safety data including airbag deployment, seatbelt status, accident information and any other data captured by an Event Data Recorder or other similar technology, charging data (including location, history, and other charging information), and any other onboard device interactions and settings connected to you or your VIN.

This category of data includes DreamDrive Data generated by your vehicle and connected to your VIN, including video clips from external cameras and sensor data through our Advanced Driver-Assistance System (“ADAS”) called DreamDrive. We collect this data in response to certain events, such as a collision; swerving; emergency braking; rapid acceleration or deceleration; activating, deactivating or overriding DreamDrive; or system-initiated mid-sequence disengagement of Auto Park. However, where our collection includes video clips, and identification to a vehicle is not necessary, we take steps to disassociate such data from your vehicle’s identification number (“VIN”).

  • Inferences resulting from the analytics of your use of the vehicle for the purposes of quality, safety, and product improvement.

Personal Data Collected by Third Parties

We partner with certain third-party vendors and service providers who collect information directly or for their own purposes when you operate a Lucid Vehicle and who may share that information with us and others. These partners include, but are not limited to:

  • HERE. Lucid will receive information from, and transmit information to, HERE in connection with HERE’s provision of vehicle navigation services, including Location and Navigation Data, and OTA update services. HERE uses Location and Navigation Data from your vehicle to update and improve its services, and as otherwise described in its privacy policy. As such, by using our navigation application, you agree to HERE’s collection, use, and sharing of your Location and Navigation Data as described in the HERE End User Terms and the HERE Privacy Policy

  • SiriusXM. Lucid vehicles include applications and connectivity for SiriusXM's in-vehicle streaming services. Lucid will receive information from, and disclose information to, SiriusXM's provision of infotainment and content broadcast services, including directly from the vehicle. SiriusXM uses personal information as described in the SiriusXM policies.

  • Electrify America. We may receive information from Electrify America in connection with its provision of vehicle charging services, including vehicle Charging Information. More information can be found in the Electrify America privacy policy.

  • Electrify Canada. We may receive information from Electrify Canada in connection with its provision of vehicle charging services, including vehicle Charging Information. More information can be found in the Electrify Canada privacy policy.

  • Amazon. We may receive certain usage activity from Amazon in connection with its provision of Alexa voice command services, including Audio Recordings Information. Details are included in Amazon’s privacy policy and Amazon’s Alexa privacy FAQ.

  • Other Global Charging Network Partners. We may receive information similar to the above from our other global charging partners as described in the materials you receive when you engage with those partners.

  • Global Connectivity Partners. We may receive certain information, such as data usage statistics and other connectivity information from cellular data providers utilized to provide vehicle connectivity around the world, including AT&T, Orange, etc.

  • Other Integrated App Partners. Certain connected apps in your Lucid Vehicle are provided by our third-party partners, including media streaming services like SiriusXM, Spotify, TuneIn, iHeartRadio, and Pocket Casts, as well as smartphone integration services such as Android Auto and Apple CarPlay. Any personal information or Vehicle data collected by these apps is governed by their privacy policies, not Lucid’s Privacy Policy or this Vehicle Data Privacy Notice.

Please refer to the privacy policies of our partners listed above for more information about how they process and/or control your personal information and Vehicle Data when using features related to their services.

HOW WE USE THE INFORMATION WE COLLECT

We use the Vehicle Data we collect:

  • To deliver connected services related to your Lucid vehicle. For example:

  • We use Vehicle Data to deliver various connected services in your vehicle, including remote service requests.

  • We use Driver Profile Settings, User Vehicle Interactions, Location and Navigation Data, Infotainment and Connectivity Data, and Charging Information to enable you to save certain preferences to your Lucid account.

  • We use certain Vehicle Health and Status Data and Location and Navigation Data to enable you to remotely locate and access information about your vehicle.

  • We use Audio Recordings to enable voice command services in your vehicle.

  • To improve existing products and services and develop new ones. For example:

  • We use Vehicle Data to enhance our current product offerings and to develop new products and features.

  • We use Vehicle Data to help develop and deploy software updates to your vehicle.

  • We may use Charging Information to help assist with the deployment of additional charging stations and in connection with government alternative fuel programs.

  • To enhance safety and support vehicle maintenance or repairs. For example:

  • We use Vehicle Data to diagnose issues and assist with repairs to your vehicle.

  • We use Vehicle Data for safety research or incident investigations.

  • We use certain Vehicle Health and Status Data to alert you to maintenance or repairs that your vehicle might require.

  • For legal, emergency, or other compliance obligations. For example:

  • We may use certain Vehicle Data to comply with court orders and other legal process.

  • We may use certain Vehicle Data to comply with regulatory reporting obligations.

  • We may use Location and Navigation Data to help recover a lost or stolen vehicle or in other emergency situations.

  • For other routine business purposes.

    For example:

  • We may use Vehicle Data for data analysis, auditing, data security, and preventing fraud and other abuse on our systems.

We do not use or disclose “sensitive personal information,” as defined by relevant privacy laws (including, without limitation, the California Consumer Privacy Act, for purposes other than those specified in Section 7027 of regulations promulgated under the California Privacy Rights Act) without express consent.

Lucid does not intend to, nor does it knowingly collect, sell, or share Personal Information of children under sixteen (16) years of age. If we learn that we possess such information, we will delete it. If you are under 16, or a parent or guardian of a person under 16 and believe that we have collected the Personal Information of that person, please contact us at privacy@lucidmotors.com so that we can delete that Personal Information.

Lucid also does not intend to or knowingly collect Personal Health Information as that term is defined by relevant privacy laws.

HOW WE SHARE THE INFORMATION WE COLLECT

To provide the best services and develop the best products, we engage with select third parties and share discrete subsets of Vehicle Data with them. It is our goal to only share Vehicle Data relevant to the relationship between Lucid and a given third party; to require that the third party use that information only for the purposes we have agreed to; and to implement appropriate confidentiality and data protection safeguards necessary to meet or exceed legal obligations to protect your personal data. We may share Vehicle Data with the following categories of third parties:

Vendors and Service Providers. We may share Vehicle Data with vendors and service providers retained in connection with the provision of our vehicles and related services, including real-time navigation and traffic, certain DreamDrive technologies and services, roadside assistance services, and third-party infotainment apps that you choose to use (subject to their privacy policy). The purposes for such disclosure are limited to those purposes described in this Notice, or in a privacy notice presented to you when specific data is collected from you.

Auto Repair or Vehicle Servicing Facilities. We may share Vehicle Data with auto repair or vehicle servicing facilities so that they may provide you with vehicle maintenance and repairs.

Other Third Parties as Required by Law or Similar Disclosures. We may access, preserve, and disclose Vehicle Data if we believe doing so is required or appropriate to: (a) comply with valid court orders or responding to law enforcement exigent circumstances requests; (b) respond to your requests; (c) protect your, our, or others’ rights, property, or safety; or (d) facilitate our participation in various government programs to promote carbon emission reduction.

Merger, Sale, or Other Asset Transfers. We may transfer Vehicle Data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of Vehicle Data following any of these events will be governed by the provisions of this Vehicle Data Privacy Notice in effect at the time the applicable information was collected.

With Your Consent. Where not otherwise described in this Notice, we may disclose Vehicle Data collected from your vehicle with your permission or if you choose to connect or integrate a third party service to enable that integration.

DATA TRANSFERS

If you choose to use connected vehicle services, Lucid may transfer and process your vehicle data in data centers in the United States. By using these services, you agree that your data may be transferred to the United States for storage and processing, which may not have the same data protection laws as your jurisdiction. Also, we may then transfer your vehicle data from the United States to other countries or regions for storage and processing of data, fulfilling your requests, and performing the agreed upon services described in this Notice.

When we transfer Personal Information across regional boundaries we will comply with applicable data protection laws. We will transfer your Personal Information (a) to countries which have been found to provide adequate protection by the European Commission (e.g. Switzerland and Canada), (b) by using contractual protections for the transfer of Personal Information, or (c) rely on a legal derogation. You may contact us as specified below to obtain a copy of the safeguards we use to transfer Personal Information outside of your region.

YOUR PRIVACY RIGHTS AND CHOICES

Opting out of Vehicle Data collection. You may choose not to enroll in or, once enrolled, to opt out of your vehicle’s transmission of Vehicle Data to us through your vehicle settings. To do so, navigate to your “Connectivity” settings, select “Data Sharing Permissions,” toggle the “Data Sharing” setting to off, and confirm your choice. You may also delete the Vehicle Data stored within your infotainment system by performing a factory reset inside the vehicle, or as otherwise described in your Owner’s Manual.

Note that the Data Sharing setting affects only data sharing from your vehicle to Lucid and not other connected services. When Data Sharing is turned off, connected apps provided by our third-party partners will still receive and transmit data in accordance with the terms of use and privacy policies provided by those third parties. Lucid may also still receive certain Vehicle Data from Electrify America, Amazon, and other third parties to facilitate the services provided by those companies. Even if you turn off Data Sharing, your vehicle will also still share certain limited Vehicle Health and Status Data with Lucid as necessary to send over-the-air software and firmware updates to your vehicle.

Please also note that turning off Data Sharing will necessarily disable some connected features in your vehicle that require communication with Lucid’s services, including signing in and out of your user profile, saving and restoring user profiles and preferences, resetting user PINs, and Lucid mobile app interactions. Turning off Data Sharing may also impact our ability to perform remote diagnostic services for your vehicle. If you want to turn Data Sharing back on, you can do so at any time to re-enable these features and resume transmitting Vehicle Data to Lucid.

SPECIFIC PRIVACY RIGHTS

Lucid processes Personal Information on the legal basis of its legitimate interest of providing services to its vehicle operators and managing its own business, compliance with laws and regulations to which Lucid is subject, as well as necessity to perform contractual obligations related to the Lucid vehicle owned or operated by you. At times Lucid may process Personal Information on the legal basis of consent. You will be provided an opportunity to consent to such processing prior to the time such processing starts; for example, if we are using specific geolocation data to provide you marketing services via the Lucid vehicle infotainment system.

Pursuant to certain state or foreign laws (for example, California Civil Code Section 1798.100 et. seq, the EU General Data Protection Regulation, etc.) if you live in a jurisdiction with a relevant privacy law, you may request certain information about the type of your Personal Information we share with third parties for direct marketing purposes and the identity of any such third party. At least once per calendar year, residents of certain states or countries may request this information by contacting us as set forth below.

Additionally, these jurisdictions may provide their residents certain rights as they relate to Personal Information, possibly including the following:

Right to Know. You may request that Lucid provide you the specific pieces of Personal Information Lucid has about you; categories of Personal Information we have collected about you; categories of sources from which the Personal Information is collected; categories of Personal Information that Lucid sold or disclosed for a business purpose about you; categories of third parties to whom the Personal Information was sold or disclosed for a business purpose; and the business or commercial purpose for collecting or selling Personal Information. Please note that much of the information you can make a request for is already contained in this Notice. Should you wish to exercise this right, please see the section below which explains how to do so. If you do not have an account with Lucid, we may ask for some Personal Information in order to verify your identity and your rights to the data subject to your request.

Right to Delete. Some jurisdiction's law gives their residents a limited right to request deletion of their Personal Information. However, this right is limited by a number of exceptions. Fundamentally, if Lucid has a permissible need to retain Personal Information, we are not under an obligation to delete such information, even when requested. Generally, we retain Personal Information so we may complete the transaction for which the Personal Information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between us and you; detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity; debug to identify and repair errors that impair existing intended functionality of our online properties; enable solely internal uses that are reasonably aligned with your expectations based on your relationship with Lucid; comply with a legal obligation; or otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which your provided the information. As such, we generally do not accept requests to delete Vehicle Data. However, we will respond to requests to remove Personal Information from some of our systems as a part of a request to close or otherwise disable a membership account. If you would like to request deletion of Personal Information, please see the section below which explains how to do so. If you do not have an account with Lucid, we may ask for some Personal Information in order to verify your identity and your rights to the data subject to your request.

Right to Correct. You may request that Lucid correct specific pieces of incorrect Personal Information Lucid has about you, provided it is technically feasible and demonstrable. Please note that Personal Information that is objectively correct is not subject to this right. Additionally, any opinion data about you is also not subject to this right. Should you wish to exercise this right, please see the section below which explains how to do so. If you do not have an account with Lucid, we may ask for some Personal Information in order to verify your identity and your rights to the data which is subject to your request.

Right to Object to Processing or Restrict Processing. You may object to Lucid's processing of data or request restriction of processing of your Personal Information. When you make this request, which is evaluated on a case-by-case basis, we may ask for additional information to assess the request and determine whether we have a reasonable basis to reject the request pursuant to local laws, such as the establishment, exercise, or defense of legal claims.

Designating an Authorized Agent. California law permits California residents to designate an agent to manage their rights under California law. If you would like to designate an agent to manage your privacy preferences, you may do so using the mechanisms noted below under “Exercising Privacy Rights”. Note that if you do not have an account with Lucid, we may ask for some Personal Information in order to verify your identity and your rights to the data subject to your request. We will also need sufficient Personal Information about your authorized agent to be able to identify them. As part of this process, you must have permission from your authorized agent to disclose their Personal Information to us for the purpose of acting as your agent.

Non-discrimination. Lucid will not discriminate against you because you exercised any your rights under this title, including, but not limited to: denying you access to goods or services; charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; providing a different level or quality of goods or services; suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Exercising Your Privacy Rights. If you are a resident of a jurisdiction with specific privacy rights and would like to exercise any of your rights you may do so by submitting a request in our Privacy Rights Portal (English only) or emailing us at privacy@lucidmotors.com. If you are located in the United States or Canada, you may also call us at (888)-995-8243. Please provide us with sufficient information that enables us to verify your identity and the rights you have in the data you are requesting. We will use the information you provide to verify your identity. Agents acting on behalf of others may use the same channels and may be required to provide proof of their authorization.

Should we decline any of your requests, the law in some locations may permit you to appeal our decision. Should you have such a right under applicable state law, you may appeal any declined request by contacting us at privacy@lucidmotors.com and explaining to us your desire to appeal our decision and why your believe the declining of your request is not proper. We will then escalate your request for an appeal to the appropriate member of our privacy team who will respond to you with additional information related to your appeal.

COMPLAINTS OR DISPUTES

If you believe this Notice has been violated and need to make a complaint, you can do so by contacting us at privacy@lucidmotors.com or via the contact information noted below. Alternatively, you can contact the data protection authority in the jurisdiction of your residence for further information about your rights and how to make a formal complaint.

CHANGES TO THIS VEHICLE DATA PRIVACY NOTICE

We will post any adjustments to our Vehicle Data Privacy Notice on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share Vehicle Data previously collected from your Lucid vehicle, we will notify you through our services, by email, or via another method of communication.

CONTACT INFORMATION

If you have any questions, comments, or concerns about our Vehicle Data processing activities, please email our Privacy Officer at privacy@lucidmotors.com or write to us at 7373 Gateway Boulevard Newark, CA 94560 USA.

Data processing in connection with Lucid test vehicles in the European Union (EU)

The confidentiality and integrity of your personal data is of particular concern to Lucid Europe B.V. (“us” or “we” or “Lucid”). We want to improve road safety through the use and further development of driver assistance systems. Our aim is to reduce the number of road accidents, in particular road fatalities, by incorporating and improving driver assistance systems.

For this purpose, we are currently operating a fleet of Lucid vehicles on the road in the European Union for testing purposes, identified by a logo (see below), and which record data from various sensors, including video and audio recordings of the vehicle environment. This privacy statement describes the nature and use of personal data that may be recorded of the surroundings of the car by driver assistance systems for these testing purposes.

This privacy statement does not apply to vehicle data collected during the operation of a vehicle outside of the testing environment. For information regarding the collection of vehicle data such as Vehicle Health, User Vehicle Interactions or Status Data, please visit our Lucid Motors Vehicle Data Privacy Policy for additional information.

This privacy statement also does not apply to the collection of data when you use a Lucid website or app, or in relation to your ordering, financing or taking delivery of a Lucid vehicle. For further information regarding the collection of such data, visit one of our stores or service centers, or contact us directly by email or by phone. Please visit our Privacy Policy for additional information.

How do I recognize the Lucid test vehicles?

The Lucid test vehicles are identified by this logo.

Who is the data controller responsible for the data processing?

We are the controller within the meaning of the EU General Data Protection Regulation (“GDPR”) for the processing of personal data related to video and audio recordings collected by the Lucid test vehicles.

What data do we process from you and for what purpose?

The personal data collected through the use of Lucid test vehicles on public roads are processed as follows:

Lucid vehicles are equipped with various sensors (such as radar, ultrasonic, GPS/location sensors), interior microphones and video cameras. Public road traffic (environment of the Lucid vehicle) is recorded on data, video and audio files, and stored and processed for further analysis, and combined with other sensor data if necessary.

The video recordings are used to create static and dynamic traffic objects. These can be road markings, cars, motorbikes, bicycles, etc. with their individual position and movement in relation to the Lucid vehicle as well as the position and movement of pedestrians. To calculate the possible movement of a pedestrian - e.g. whether a person intends to cross a road - their line of sight can also be analysed.

The video and sensor data are used while driving to recognize road users and basic traffic scenarios and act accordingly. In a further evaluation of the recordings, the video and sensor data are used to develop and improve the driver assistance systems.

We are not interested in identifying a person and our systems are not configured for such purposes, as this is not necessary for the use and further development of the driver assistance systems. All traffic objects are only categorised as cars, motorbikes, pedestrians, etc. Nevertheless, the video recordings may include recordings of individuals in traffic, car registration numbers or other personal data.

What is the legal basis for this data processing?

The legal basis for collecting and processing the video recordings of the surroundings of the Lucid vehicle (including the recordings of personal data of pedestrians and drivers) is based on the legitimate interests pursued by the controller according to Sec. 6 (1) lit. f GDPR.

Lucid has a legitimate interest in the further development of driver assistance systems. The data collected by the Lucid vehicles will be used to improve and develop algorithms for various functions of the driver assistance systems. This can also serve the public interest. Video recording of the surroundings of Lucid vehicles is necessary to improve the road safety of these vehicles.

The processing and storage of the collected data is furthermore particularly important for protection in the event of legal proceedings or to comply with legal obligations, in particular the requirements of the supervisory authorities.

How long do we store your data?

We exclusively store your personal data for as long as the respective purpose of processing requires. If data is processed for more than one purpose, the data will be deleted or will only continue to be stored in a form that cannot be directly traced back to you as soon as the last stated purpose of processing has been fulfilled.

How is your data secured?

We secure your data according to the state of the art. Access to personal data is restricted to a limited number of authorised persons for the stated purposes. The following security measures are used as examples to protect your personal data from misuse or other unauthorised processing:

  • Collected data is only transmitted in encrypted form.

  • The IT systems used to process the data are technically isolated from other systems to prevent unauthorised access, e.g. through hacking.

  • In addition, access to these IT systems is permanently monitored in order to detect and prevent misuse at an early stage.

Who do we share data with and how do we protect you in the process?

We share the data with other affiliated companies, in particular with Lucid Group, Inc.

When data is processed in countries outside the European Union (EU), Lucid uses EU standard contractual clauses to ensure that your personal data is processed in accordance with European data protection standards. If you would like to view the specific safeguards for transferring data to other countries, please contact us through one of the communication channels listed below.

B. Contact details, your data subject rights and your right to complain to a supervisory authority

If you have any questions regarding the use of your personal data, we recommend that you contact Lucid Privacy by sending a message to the following e-mail address: Privacy@Lucidmotors.com

You can also contact the responsible data protection officer:

Joke Bodewits joke.bodewits@​hoganlovells.com Atrium - North Tower Strawinskylaan 4129 Amsterdam 1077 ZX The Netherlands

C. Data subject rights

As a data subject affected by the processing of your data, you can assert certain rights with us under the GDPR as well as under other relevant data protection provisions.

In certain situations, we may not be able to provide you with information on all collected data due to legal requirements or the information available to us. In such cases, we cannot retrieve the recorded person’s data without additional information. If the recorded persons cannot be identified without additional information and because such recognition is not necessary for the processing purpose pursued at Lucid, we are not allowed by law to carry out any additional data processing for identification purposes; in such cases, your rights under Sec.15 to 20 GDPR might be excluded. Your data subject rights are only applicable if you provide us with additional information that allows us to uniquely identify you. Even with this additional information, we might not be able to verify your right to access or erase the data because we do not identify individuals on the video and audio recordings and therefore do not know who the data subjects on the recordings are. Your data subject rights are limited by the rights of others or by the need to retain the data for other legal reasons.

According to the GDPR, you as a data subject are in particular entitled to the following rights against Lucid:

Right of Access (Sec. 15 GDPR):

You can request information from us at any time about the data we hold about you. This information concerns, among other things, the categories of data we process, the purposes for which we process them, the origin of the data if we have not collected it directly from you and, if applicable, the recipients to whom we have transmitted your data. You can obtain a copy of your data from us free of charge. Should you be interested in further copies, we reserve the right to charge you for the further copies.

Right to rectification (Sec. 16 GDPR):

You can ask us to rectify your data. We will take reasonable steps to keep the data we hold about you and process on an ongoing basis accurate, complete and up to date based on the most recent information available to us.

Right to erasure (Sec. 17 GDPR):

You can demand that we delete your data if the legal requirements for this are met. According to Sec. 17 GDPR, this may be the case if:

  • the data is no longer necessary for the purposes for which it was collected or otherwise processed;

  • you withdraw your consent, which is the basis for the data processing, and there is no other legal basis for the processing;

  • you object to the processing of your data and there are no overriding legitimate grounds for the processing, or you object to the processing of data for direct marketing purposes;

  • the data has been processed unlawfully unless the processing is necessary to ensure compliance with a legal obligation requiring us to process your data;

  • in particular with regard to legal retention periods;

  • to assert, exercise or defend legal claims.

Right to restriction of processing (Sec. 18 GDPR):

You can ask us to restrict the processing of your data if:

  • you dispute the accuracy of the data for the period of time we need to verify the accuracy of the data;

  • the processing is unlawful and you object to the erasure of your data and request the restriction of its use instead;

  • we no longer need your data but you need it to assert, exercise or defend legal claims;

  • you have objected to the processing as long as it has not yet been determined whether our legitimate grounds outweigh yours.

Right to data portability (Sec. 20 GDPR):

At your request, we will transfer your data - insofar as this is technically possible - to another controller. However, you only have this right if the data processing is based on your consent or is necessary to perform a contract. Instead of receiving a copy of your data, you can also ask us to transfer the data directly to another controller specified by you.

Right to object (Sec. 21 GDPR):

You may object to the processing of your data at any time for reasons arising from your particular situation, provided that the data processing is based on your consent or on our legitimate interests or those of a third party. In this case, we will no longer process your data. The latter does not apply if we can demonstrate compelling legitimate grounds for the processing that override your interests or we need your data to assert, exercise or defend legal claims.

D. Deadlines for the fulfilment of data subject rights

We generally aim to comply with all requests within 30 days. However, this period may be extended for reasons relating to the specific data subject right or the complexity of your request.

E. Complaint to supervisory authorities

Lucid takes your concerns and rights very seriously. However, if you feel that we have not adequately addressed your complaints or concerns, you have the right to lodge a complaint with a competent data protection authority.

The competent data protection authority for us is the Dutch supervisory authority Autoriteit Persoonsgegevens, PO Box 93374, 2509 AJ DEN HAAG.

Website and Mobile App

Last update: July 2024

Welcome to our website. As we use them here, “Lucid,” “we,” or “us” will refer to Lucid USA, Inc., Lucid Motors Canada ULC., and their parents, subsidiaries, and affiliates. We designed our website to allow you or your household (“you”) to learn about how Lucid is developing technology that will reshape the future of the automobile.

The following terms govern your access to and use of the Lucid website, including any content offered via our website. By using our website, you agree you have read, fully understand and agree to be legally bound by these terms. IF YOU DO NOT ACCEPT AND AGREE TO BE LEGALLY BOUND BY AND COMPLY WITH THESE TERMS OF USE, YOU ARE NOT PERMITTED TO ACCESS OR USE THE WEBSITE.

We may revise or modify and update all, or any portion of these terms from time to time in our sole and absolute discretion. All changes are effective immediately when we post them. Your continued use of our website after we post revised terms means that you accept and agree to the changes.

Privacy

We value your privacy, and your use of this site is subject to our Privacy Policy. Please read it to understand our privacy practices. All information you provide to us via this website or otherwise is governed by our Privacy Policy, which you consent to by visiting this website, or providing us with information.

United States Telemarketing Consents

Lucid collects United States telephone numbers on this website. The consent Lucid collects for United States telephone numbers applies to marketing calls or texts by, or on behalf, of Lucid. No telephone information will be shared with third parties for their own marketing/promotional purposes without prior consent to such sharing. Lucid or its service providers may send SMS or MMS messages to telephone numbers with an existing Lucid business relationship as allowed by applicable law.

Interactive Services (Chatbot, Managed Chat, Etc.) Consent and Disclaimers

This website may provide interactive services, including chatbot, and managed chat functionality with an option to chat. You agree that we may record and retain a transcript of all communications with you via these interactive tools in order to provide the tool and for quality and verification purposes. Your use or access of any of these tools or of our website is governed by these Terms of Use and our Privacy Policy.

Trademarks

Lucid, Lucid (stylized) logo, Air, Air (stylized) logo, Dream Edition, Dreamdrive, Wunderbox, and Pure Spec are trademarks of Lucid USA, Inc.’s subsidiaries and/or its affiliates. You must not use these trademarks without our prior written permission. All other names, logos, product and service names, designs, and slogans that may appear on this website are the trademarks of their respective owners. All trademarks are and shall remain the sole and exclusive property of their respective owner(s). Any use of such trademarks, except as expressly provided for herein, without the express written consent of the applicable owner is strictly prohibited. Nothing contained herein or on this website may be construed as granting, by implication, estoppel, or otherwise, any license to use any trademark(s). You agree that you will not take any actions inconsistent with Lucid ownership of, or any third party’s ownership of, the trademarks.

Other Intellectual Property Rights

This website and its entire contents, features, and functionality (including but not limited to all information, software, text, displays, images, video, and audio, and the design, selection, and arrangement thereof), (together the “Content”) are owned by Lucid, its licensors, or other providers of such material, and are protected by U.S., Canadian, and international copyright, trademark, patent, trade secret, and other intellectual property or proprietary rights laws.

You hereby acknowledge that the Content is protected by all copyright, trademark, and other applicable intellectual property laws. Your use of the website does not grant or transfer to you any ownership or other rights in the Content, and except as expressly provided, nothing herein or within the website shall be construed as conferring on you or any other person any license under any of Lucid’s or any third party’s intellectual property rights, including, without limitation, any right to download, display, reproduce, distribute, modify, edit, alter or enhance any of the Content in any manner whatsoever other than as expressly set out herein. Any rights not expressly granted to you in these Terms of Use are expressly reserved by Lucid. For greater certainty, you agree that you will not take any action that is inconsistent with Lucid ownership of the website and/or Lucid ownership of, or any third party’s ownership of, any Content.

Your Permission to use the Website

These terms permit you to use our website for your personal, non-commercial use only. You must not reproduce, distribute, modify, create derivative works of, publicly display, publicly perform, republish, download, store, or transmit any of the material on our website or any Content, except as follows:

  • Your computer may temporarily store copies of such materials in RAM incidental to your accessing and viewing those materials.

  • You may store files that are automatically cached by your web browser for display enhancement purposes.

  • You may print or download one copy of a reasonable number of pages of our website for your own personal, non-commercial use and not for further reproduction, publication, or distribution.

Permitted and Prohibited Uses

You may use our website only for lawful purposes and in accordance with these terms. You agree not to use our website in any way that violates any applicable federal, state, provincial/territorial, local, or international law or regulation (including, without limitation, any laws regarding the export of data or software to and from the U.S., Canada, or other countries).

You also agree not to:

  • Alter or modify any part of our website.

  • Use our website in any manner that could disable, overburden, damage, or impair the site or interfere with any other party’s use of our website.

  • Use any robot, spider, or other automatic device, process, or means to access our website for any purpose, including monitoring or copying any of the material on our website. This does not prohibit search engines from creating publicly searchable indices, but it does prohibit them from caching or archiving the content of our website.

  • Use any device, software, or routine that interferes with the proper working of our website.

  • Introduce any viruses, trojan horses, worms, logic bombs, or other material that could be malicious or technologically harmful.

  • Attempt to gain unauthorized access to, interfere with, damage, or disrupt any parts of our website, the server on which our website is stored, or any server, computer, or database connected to our website.

  • Attack our website via a denial-of-service attack or a distributed denial-of-service attack.

  • Use our website or network as an instrumentality for attacking our data systems or those of other people or companies.

  • Use our website for commercial purposes, such as selling access to our website from another website, using our website for selling advertisements or subscriptions, or any use of our website that in our reasonable judgment interferes with or inhibits our web content or commercial activities.

  • Otherwise attempt to interfere with the proper working of our website, as determined by us in our sole and absolute discretion.

Reliance on Website Information

The information presented on our website is preliminary and made available solely for general information purposes. We do not warrant the accuracy, completeness, or usefulness of this information. Vehicle specifications are subject to continuous change, and any reliance you place on such information derived from our website is strictly at your own risk. To the fullest extent permitted by applicable law, we disclaim all liability and responsibility arising from any reliance placed on such materials by you or any other visitor to our website, or by anyone who may be informed of any of its contents.

Changes to this Website

We may update, modify or remove the content on our website or any portion of the content from time to time, but its content is not necessarily complete or up to date. You acknowledge and agree that we reserve the right at any time to modify or discontinue the whole, or any part of, the website, without notice, and that we will not be responsible or liable, directly or indirectly, to you or any other person or entity for any loss or damage of any kind incurred as a result of any such modifications or discontinuance.

Linking to this Website

You may link to our homepage provided you do so in a way that is fair and legal, and does not damage our reputation or take advantage of it, but you may not establish a link in such a way as to suggest any form of association, approval, or endorsement on our part without our express written consent. We may revoke this permission to link to our website at any time and in our sole and absolute discretion. If we do, you will delete any such links you have made.

Links from this Website

Any links from this website to other sites and resources provided by third parties are provided for your convenience only. We have no control over the contents of those sites or resources and accept no responsibility for them or for any loss or damage that may arise from your use of them. If you decide to access any of the third-party websites linked to our website, you do so entirely at your own risk and subject to the terms and conditions of use for such websites. Other websites may collect and treat information collected differently, so we encourage you to carefully read and review the privacy policy for each website you visit. Any links from this website to other websites, or references to products, services or publications other than those of Lucid, do not imply the endorsement or approval of such websites, products, services or publications by Lucid.

Territorial Restrictions

Our website offers tailored content and services based on your geographic location to ensure compliance with local laws and to provide the most relevant information and services. You are required to access and use the website corresponding to your country of residence.

Disclaimer of Warranties

To the maximum extent permitted by the applicable law, you understand that we cannot and do not guarantee or warrant that content available from the internet or this website will be free of viruses or other destructive code. You are responsible for implementing sufficient procedures and checkpoints to satisfy your particular requirements for anti-virus protection and accuracy of data input and output, and for maintaining a means external to our website for any reconstruction of any lost data. WE WILL NOT BE LIABLE FOR ANY LOSS OR DAMAGE CAUSED BY A DISTRIBUTED DENIAL-OF-SERVICE ATTACK, VIRUSES, OR OTHER TECHNOLOGICALLY HARMFUL MATERIAL THAT MAY INFECT YOUR COMPUTER EQUIPMENT, COMPUTER PROGRAMS, DATA, OR OTHER PROPRIETARY MATERIAL DUE TO YOUR USE OF OUR WEBSITE OR TO YOUR DOWNLOADING OF ANY MATERIAL POSTED ON IT OR ON ANY WEBSITE LINKED TO IT.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, YOUR USE OF OUR WEBSITE AND ITS CONTENT IS AT YOUR OWN RISK. OUR WEBSITE AND ITS CONTENT ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT ANY WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. NEITHER LUCID NOR ANY PERSON ASSOCIATED WITH LUCID MAKES ANY WARRANTY OR REPRESENTATION WITH RESPECT TO THE COMPLETENESS, SECURITY, RELIABILITY, QUALITY, ACCURACY, OR AVAILABILITY OF OUR WEBSITE. WITHOUT LIMITING THE FOREGOING, NEITHER LUCID NOR ANYONE ASSOCIATED WITH LUCID REPRESENTS OR WARRANTS THAT OUR WEBSITE OR ITS CONTENT WILL BE ACCURATE, RELIABLE, ERROR-FREE, OR UNINTERRUPTED; THAT DEFECTS WILL BE CORRECTED; THAT OUR WEBSITE OR THE SERVER THAT MAKES IT AVAILABLE IS FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS; OR THAT OUR WEBSITE OR ANY CONTENT WILL OTHERWISE MEET YOUR NEEDS OR EXPECTATIONS.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE HEREBY DISCLAIM ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, AND FITNESS FOR PARTICULAR PURPOSE.

ANY PRODUCTS AND/OR SERVICES DESCRIBED ON THE WEBSITE ARE OFFERED IN JURISDICTIONS WHERE THEY MAY BE LEGALLY OFFERED. THE INFORMATION ON THE WEBSITE IS NOT AN OFFER OR SOLICITATION BY ANYONE TO ANYONE IN ANY JURISDICTION IN WHICH AN OFFER OR SOLICITATION CANNOT LEGALLY BE MADE, OR TO ANY PERSON TO WHOM IT IS UNLAWFUL TO MAKE A SOLICITATION.

Limitation on Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL LUCID, ITS LICENSORS, SERVICE PROVIDERS, EMPLOYEES, AGENTS, OFFICERS, OR DIRECTORS BE LIABLE FOR DAMAGES OF ANY KIND, UNDER ANY LEGAL THEORY, ARISING OUT OF OR IN CONNECTION WITH YOUR USE, OR INABILITY TO USE, OUR WEBSITE, ANY WEBSITES LINKED TO IT, ANY CONTENT ON OUR WEBSITE OR SUCH OTHER WEBSITES, INCLUDING ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO, PERSONAL INJURY, PAIN, AND SUFFERING, EMOTIONAL DISTRESS, LOSS OF REVENUE, LOSS OF PROFITS, LOSS OF BUSINESS OR ANTICIPATED SAVINGS, LOSS OF USE, LOSS OF GOODWILL, LOSS OF DATA, AND WHETHER CAUSED BY TORT (INCLUDING NEGLIGENCE), BREACH OF CONTRACT OR OTHERWISE, EVEN IF FORESEEABLE.

Indemnification

You agree to defend, indemnify, and hold harmless Lucid, its licensors and service providers, and its and their respective officers, directors, employees, contractors, agents, licensors, suppliers, successors, and assigns from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys’ fees) arising out of or relating to your violation of these terms or your use of our website, including, but not limited to, any use of our website’s content, other than as expressly authorized in these terms or your use of any information obtained from our website.

Unsolicited Submissions, Ideas, and Business Policies

Lucid does not accept or consider unsolicited product proposals, ideas, suggestions, materials, or business opportunities. In connection with anything you submit to us, unless solicited in writing by us, you agree that product proposals, ideas, suggestions, materials, or business opportunities you submit (“Submissions”) are not being made in confidence or trust and that no confidential or fiduciary relationship is intended or created between you and us in any way, and that you have no expectation of review, compensation, or consideration of any type. By providing us with a Submission, you hereby: (i) grant to Lucid a world-wide, perpetual, irrevocable, transferable, sub-licensable, royalty-free, non-exclusive, and unrestricted license to copy, reproduce, adapt, transmit, edit, modify, or otherwise use, publicly display, distribute, translate and create compilations and derivative works from, any and all Submissions (in any format or media) that you post on, upload or otherwise submit to or through, the website; and (ii) waive all moral rights in and to all Submissions that you post on, upload or otherwise submit to or through, the website in favor of Lucid. For greater certainty, this means that, among other things, Lucid has the right to use any and all ideas you submit (including ideas about our products, services, publications or advertising campaigns) in any manner that we choose, without any notice or obligation to you whatsoever.

By providing a Submission, you hereby acknowledge, agree, warrant and represent to Lucid that any and all Submissions (in any format or media) you post on, upload to or otherwise submit to or through, the website:

    1. is original to you and that you have obtained all necessary rights in and to the Submission and all of its components (if applicable) to post, upload, or otherwise submit it to or through the website; and

    2. does not violate any law or regulation; and

    3. complies with these Terms of Use.

Governing Law and Jurisdiction

For users who are not individuals resident in the Province of Quebec, all matters relating to our website and these terms and any dispute or claim arising therefrom or related thereto (in each case, including non-contractual disputes or claims) will be governed by and construed in accordance with the laws of California, without giving effect to any choice or conflict of law provision.

For users who are an individual resident in the Province of Quebec, all matters relating to our website and these terms and any dispute or claim arising therefrom or related thereto (in each case, including non-contractual disputes or claims) will be governed by and construed in accordance with the laws of Quebec, without giving effect to any choice or conflict of law provision.

Disputes, Arbitration, Waiver of Jury Demand

This section, referred to as the “Website Terms Arbitration Agreement,” mandates the resolution of disputes through binding arbitration, rather than in a court of law. However, either party may bring claims in small claims court if they meet the necessary criteria. Arbitration does not involve a judge or jury, and the court’s review of arbitration awards is limited. Nevertheless, an arbitrator may award the same damages and relief as a court on an individual basis, including injunctive, declaratory relief, or statutory damages.

The term “Disputes” encompasses the following: (1) Any dispute or claim between you and Lucid Entities; (2) Any dispute or claim arising from or related to your use of the website, or any resulting transactions or relationships (including with nonsignatory third parties). “Lucid Entities” include Lucid Group USA, Inc.; Lucid USA, Inc.; Lucid Motors Canada ULC; their parents, subsidiaries, predecessors, successors, assignees, officers, employees, representatives, agents, affiliates, and authorized service and repair facilities.

Disputes concerning the validity, application, scope, enforceability, or interpretation of this Website Terms Arbitration Agreement will be exclusively decided by the arbitrator. The Website Terms Arbitration Agreement and associated proceedings, such as waiver or estoppel before, during, or after arbitration, will be governed by the Federal Arbitration Act, 9 U.S.C § 1 et seq., and federal common law, not by any state laws or procedures regarding arbitration. The arbitrator holds the exclusive authority to address challenges to this Website Terms Arbitration Agreement, including questions of waiver, estoppel, breach, or the validity of any part of this Website Terms Arbitration Agreement.

Before initiating any dispute or claim through arbitration or otherwise, you and we must engage in an informal telephonic dispute resolution conference (“Conference”). If you are a natural person, you must participate in the Conference, while non-natural-person parties must designate a representative.

To initiate a Conference, one party must provide written notice to the other party, including the initiating party’s name, contact information, a description of the dispute, the requested amount for resolution, and the personal signature of any natural-person party (a copy may be submitted via email). The notice can be sent to us at disputes@lucidmotors.com. The Conference should occur within 60 days after the other party receives the notice, and during this process, any statute of limitations or filing deadlines will be suspended. An initiating party’s failure to participate in this process will result in the arbitrator dismissing that party’s arbitration demand.

For certain warranty disputes, you may opt to use the BBB AUTO LINE procedure outlined in your Vehicle’s limited warranty. All unresolved Disputes remain subject to this Website Terms Arbitration Agreement.

The arbitration will be conducted by New Era ADR (www.neweraadr.com) or the American Arbitration Association (“AAA”) (www.adr.org). Unless modified by this Arbitration Agreement, New Era ADR’s arbitration will follow its Virtual Expedited Arbitration Rules and Procedures (www.neweraadr.com/rules-and-procedures/), while AAA’s arbitration will adhere to AAA’s Consumer Arbitration Rules (www.adr.org). A neutral arbitrator must be appointed, and both parties will be responsible for their respective initial filing fees to initiate arbitration. Subsequently, each party will cover their filing, administration, service or case management fees, as well as the arbitrator or hearing fees, up to a maximum of $5,000, unless the law or the rules of the chosen arbitration organization require us to pay more.

You and we may only bring disputes against each other on an individual basis and not as part of a class, collective, consolidated, or representative action. However, both parties may file a court suit to: enjoin intellectual property rights infringement, file for bankruptcy, enforce a security interest in the Vehicle through repossession, enforce the arbitrator’s decision, or request a court review if the arbitrator exceeded their authority.

Discovery procedures as outlined in the New Era ADR or AAA rules should suffice for most claims. If there is a dispute over the scope of discovery, it should include the right for either side to inspect the Vehicle and exchange relevant Vehicle-related documents.

Unless the governing law requires a specific statute of limitations for a particular arbitration claim, any claim related to a Dispute must be filed no later than three (3) years after the claim or cause of action arose, or it will be forever barred.

If any part of this Website Terms Arbitration Agreement is unenforceable, it will be severed, and the remaining portions will be enforced. However, if the class-action waiver is deemed unenforceable in a Dispute involving class allegations, the entire Website Terms Arbitration Agreement will be unenforceable for that Dispute.

In cases where multiple claims or remedies are asserted in one proceeding, and not all of them are subject to arbitration, the non-arbitrable claims or remedies must be stayed until all arbitrable claims or remedies have been resolved. If one party files a court action, the other party may seek to compel arbitration, and all proceedings will be stayed until the full resolution of the proceedings to compel arbitration, including any related appeals.

Opt-Out: You have the option to opt-out of this Website Terms Arbitration Agreement within 30 days from the date of placing your Order. To do so, send an email to Optout@LucidMotors.com from the email associated with your order, with “Website Terms Arbitration Opt-Out” in the subject line and a request to opt-out of this Website Terms Arbitration Agreement in the email’s body. Opting out only applies to this Website Terms Arbitration Agreement and will not affect the validity or enforceability of any other arbitration agreements.

Termination

If you breach any provision of these Terms of Use you may no longer use the website. We may, in our sole discretion, change, suspend or terminate, temporarily or permanently, the Site or any part thereof or any of its features at any time, for any reason, without any notice or liability to you or any other entity. If these Terms of Use or your permission to use the website is terminated by us for any reason, the agreement formed by your acceptance of these Terms of Use will nevertheless continue to apply and be binding upon you in respect of your prior use of the website and anything relating to or arising from such use. If you are dissatisfied with the website or with these Terms of Use, then your sole and exclusive remedy is to discontinue using the website. The Trademarks, Other Intellectual Property Rights, Disclaimer of Warranties, Limitation on Liability, Indemnification, Unsolicited Submissions, Ideas, and Business Policies, Governing Law and Jurisdiction, Waiver and Severability, and Entire Agreement provisions in this Agreement shall survive any termination of this Agreement.

Waiver and Severability

No waiver by Lucid of any term or condition set forth in these terms will be deemed a further or continuing waiver of such term or condition or a waiver of any other term or condition, and any failure of Lucid to assert a right or provision under these terms will not constitute a waiver of such right or provision.

If any provision of these terms is held by a court or other tribunal of competent jurisdiction to be invalid, illegal, or unenforceable for any reason, such provision will be eliminated or limited to the minimum extent such that the remaining provisions of these terms will continue in full force and effect.

Entire Agreement

These terms and our Privacy Policy constitute the sole and entire agreement between you and Lucid with respect to our website and supersede all prior and contemporaneous understandings, agreements, representations, and warranties, both written and oral, with respect to our website.

How to Contact Us

If you have any questions or comments about these terms or this website, you may contact us at 7373 Gateway Boulevard, Newark CA, 94560, Attn: Legal Department or at info@lucidmotors.com.

Updates

These Terms of Use were last updated in July 2024. These terms may be updated from time to time. All updates will be posted on this page.

Vehicle

ESG and Compliance

Open Source Software

Other

Overview

Lucid Motors cares deeply about maintaining the trust and confidence that our customers place in us. As such, the security of our systems, applications, and data is paramount. If you are a security researcher and have discovered a security vulnerability in one of our services, we appreciate your help in disclosing it to us in a responsible manner.

Vulnerability Disclosure Guidelines

We will investigate legitimate reports and make every effort to quickly correct any vulnerability. To encourage responsible reporting, we will not take legal action nor ask law enforcement to investigate you, provided you comply with the following Vulnerability Disclosure Guidelines:

  • Engage in this program in good faith and in compliance with all applicable laws

  • Provide details of the vulnerability, including the methodology and any other information needed to reproduce and validate the vulnerability. Where possible, provide a Proof of Concept (POC).

  • Confirm you are not a on the Specially Designated Nationals List or a resident of a country sanctioned by the United States government

You further agree that by participating in this program, you will not:

  • Publicly disclose any vulnerability identified and reported to Lucid Motors through this program before Lucid Motors completes remediation of the issue

  • Compromise or disclose any confidential or proprietary information belonging to Lucid Motors or related entities

  • Access or disclose any employee, customer, vehicle operator or other individual’s personal information that is not your own

  • Conduct any vulnerability testing or activities that could harm or put at risk of harm Lucid Motors, its employees, its customers, or any other individuals, including denial-of-service, social engineering, phishing, etc.

  • Conduct any vulnerability testing or activities that could compromise or impact any vehicle that you do not own

  • Test the physical security of any Lucid Motors property or the property of any other individual that has not given you express consent

Ratings

For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal and make a case for a higher priority.

Scope

In-Scope

In principle, any Lucid-owned web service that handles reasonably sensitive user data is intended to be in scope. This includes virtually all the content in the following domain - lucidmotors.com. Anything not defined here is out-of-scope of this program.

Qualifying vulnerabilities Any design or implementation issue that substantially affects the confidentiality or integrity of user data or functionalities of Lucid-owned web service is likely to be in scope for the program. Common examples include:

  • Cross-site scripting,

  • Cross-site request forgery,

  • Mixed-content scripts,

  • Authentication or authorization flaws,

  • Server-side code execution bugs.

Non-qualifying vulnerabilities The following issues are outside the scope of our Vulnerability Disclosure Program (either ineligible or false positives):

  • Lucid Motors manufacturing environment

  • Lucid Motors MFA issues

  • WAF bypass

  • Open redirects / Lack of security speedbump when leaving the site

  • Internal IP address disclosure

  • Accessible Non-sensitive files and directories (e.g. README.TXT, CHANGES.TXT, robots.txt, .gitignore, etc.)

  • Social engineering / phishing attacks

  • Self XSS

  • Text injection

  • Email spoofing (including SPF, DKIM, DMARC, From: spoofing, and visually similar, and related issues)

  • Descriptive error messages (e.g., stack traces, application or server errors, path disclosure)

  • Fingerprinting/banner disclosure on common/public services

  • Clickjacking and issues only exploitable through clickjacking

  • CSRF issues that don’t impact the integrity of an account (e.g., log in or out, contact forms and other publicly accessible forms)

  • Lack of Secure and HTTPOnly cookie flags (critical systems may still be in scope)

  • Lack of rate limiting

  • Login or Forgot Password page brute force, account lockout not enforced, or insufficient password strength requirements

  • HTTPS mixed content scripts

  • Username / email enumeration by brute forcing / error messages (e.g., login / signup / forgotten password)

  • Exceptional cases may still be in scope (e.g., ability to enumerate email addresses via incrementing a numeric parameter)

  • Missing HTTP security headers

  • TLS/SSL Issues, including BEAST BREACH, insecure renegotiation, bad cipher suite, expired certificates, etc.

  • Denial of Service attacks

  • Out-of-date software

  • Use of a known-vulnerable component (exceptional cases, such as where you are able to provide proof of exploitation, may still be in scope)

  • Physical attacks against Lucid Motor’s Facilities / Property

  • Relay or RollJam attacks pertaining to the keyfob, NFC card, and/or phone-as-key

If you identify an issue that you believe could be a cybersecurity vulnerability in any Lucid Motors product or service, please submit your report on our partner profile on Bugcrowd by clicking this link BugCrowd Vulnerability Disclosure Program.

We will respond promptly to your report. By submitting a report, you agree that Lucid Motors may use the information in your report in whatever ways we see fit. Please refer to the Bugcrowd BugCrowd Terms and Conditions.