Privacy Policy

Last updated: November 18, 2024

1. Introduction

Car Verify ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PPSR vehicle checking service.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you use our service:

  • Email address (for sending your PPSR certificate)
  • Name (optional, for personalization)
  • Payment information (processed securely via Stripe - we do not store credit card details)

2.2 Vehicle Information

To process your PPSR check, we collect:

  • Vehicle Registration Number (Rego)
  • State/Territory of registration
  • Vehicle Identification Number (VIN) - if provided

2.3 Automatically Collected Information

We automatically collect certain information when you visit our website:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on our site
  • Referral source (how you found our website)

3. How We Use Your Information

We use your information for the following purposes:

  • To process your PPSR check requests
  • To deliver your PPSR certificate via email
  • To process payments securely
  • To send order confirmations and service updates
  • To improve our website and services
  • To comply with legal obligations
  • To detect and prevent fraud

4. How We Share Your Information

4.1 Third-Party Service Providers

We share your information with trusted third parties who help us operate our business:

  • Stripe: Payment processing (PCI DSS compliant)
  • PPSR/AFSA: To conduct official vehicle checks
  • Email service providers: To deliver your PPSR certificates
  • Google Analytics: Website analytics (anonymized data)
  • Supabase: Secure database hosting

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request.

4.3 Business Transfers

If Car Verify is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

5. Data Security

We implement industry-standard security measures to protect your information:

  • SSL/TLS encryption for data transmission
  • Secure database storage with encryption at rest
  • Regular security audits and updates
  • Access controls and authentication
  • PCI DSS compliant payment processing via Stripe

6. Data Retention

We retain your information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations (tax records, financial records)
  • Resolve disputes and enforce our agreements

Typically, we retain order information for 7 years to comply with Australian tax law.

7. Your Rights (Australian Privacy Principles)

Under the Australian Privacy Act 1988, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal obligations)
  • Opt-out: Unsubscribe from marketing communications (if any)
  • Complaint: Lodge a complaint about our handling of your information

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

  • Remember your preferences
  • Analyze website traffic and usage patterns
  • Improve website functionality
  • Track advertising performance (Google Ads conversion tracking)

You can disable cookies in your browser settings, but this may affect website functionality.

9. Third-Party Links

Our website may contain links to third-party websites (e.g., ppsr.gov.au, payment processors). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. International Data Transfers

Your information may be transferred to and processed in countries outside Australia (e.g., USA for cloud hosting services). We ensure these transfers comply with Australian privacy laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

14. Office of the Australian Information Commissioner (OAIC)

If you believe we have breached the Australian Privacy Principles, you can lodge a complaint with the OAIC:

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992

Your Privacy Matters

We are committed to protecting your privacy and handling your personal information responsibly in accordance with the Australian Privacy Act 1988.