Privacy and Data Policy

1. Introduction

Tyrepower respects your privacy. We handle personal information under the Privacy Act 1988, the Australian Privacy Principles and other Australian privacy laws that apply to us.

This policy explains what personal information we collect, why we collect it, who we may share it with, how we protect it, and how you can access or correct your information or make a privacy complaint.

In this policy, "Tyrepower", "we", "us" and "our" means Tyrepower Limited, the licensed Tyrepower Marketing companies and, where relevant, participating Tyrepower stores that use Tyrepower systems or handle personal information for Tyrepower services.

2. What Personal Information Do We Collect?

We collect the personal information we need to respond to you, provide products and services, run our stores and website, and meet our legal obligations. This may include:

• Contact details, such as your name, email address, phone number, postal address, postcode and preferred store.
• Enquiry, quote and booking details, including your message, appointment details, customer service records, feedback and complaint information.
• Vehicle and product details, such as vehicle make, model, year, series, tyre size, wheel size, service needs, warranty details, registration or licence plate information and, where relevant, VIN.
• Transaction and account details, such as products or services requested or purchased, quote records, invoices, payment status, warranty claims and fleet, leasing, trade or business account information.
• Fleet, leasing and third-party approval details, such as account status, service limits, approval status, payment responsibility, vehicle eligibility and other information needed to confirm whether a product or service can proceed.
• Marketing details, such as your communication preferences, opt-in or opt-out status, promotion entries and campaign interactions.
• Online and technical details, such as IP address, device type, browser, operating system, pages visited, referring pages, approximate location, cookies, analytics identifiers and form security data.
• Business contact details, such as your name, role, employer and business contact information when you deal with us about fleet, trade, dealer, supplier or commercial matters.
• Store, staff and system user information, such as user names, business contact details, login details, account access information, device and endpoint information, authentication records, access logs, system logs and security event information.

We do not usually need sensitive information for ordinary retail services. If we need to collect sensitive information, we will only do so where the law allows, such as where you consent or where collection is required or authorised by law.

3. How We Collect Personal Information

We collect personal information directly from you when you use our website, request a quote, make an enquiry, book a service, contact a store, call or email us, complete a form, enter a promotion, opt in to marketing, or purchase or enquire about products or services.

We may also collect information from participating Tyrepower stores, service providers, payment providers, product and warranty suppliers, business or fleet customers, leasing companies, insurers, employers, corporate account holders, public sources, social media platforms and other third parties where you have consented or where the law allows us to do so.

When you use our website, some technical information is collected automatically through cookies, analytics tools, server logs and security tools such as reCAPTCHA.

4. How We Use Your Personal Information

We use personal information for the reason it was collected, for related purposes you would reasonably expect, with your consent, or where the law allows. This may include:

• Answering enquiries, quote requests and customer service requests.
• Identifying your preferred or nearest Tyrepower store and sending your enquiry or booking to that store.
• Matching your vehicle, tyre, wheel or battery needs to available products and services.
• Arranging bookings, services, product supply, fitting, warranty support and follow-up communications.
• Processing purchases, invoices, payment-related matters, account administration and fleet, leasing, trade or business account services.
• Confirming fleet, leasing, insurer, employer, corporate account or third-party approval requirements before products or services are supplied.
• Managing warranties, recalls, product support, complaints, disputes and claims.
• Sending service updates, booking confirmations and other operational messages.
• Sending marketing communications where you have consented or where the law allows us to do so.
• Managing competitions, promotions, customer campaigns and marketing preferences.
• Improving our website, products, services, store network and customer experience.
• Preparing analytics, reports, quality checks, business plans and network planning.
• Protecting our website, systems, stores, customers and business from misuse, spam, fraud, cyber incidents and unlawful activity.
• Meeting legal, regulatory, tax, accounting, insurance and record-keeping obligations.

5. Disclosure of Your Personal Information

We do not sell personal information. We may share personal information where needed for the purposes in this policy, where you have consented, or where the law allows. This may include disclosure to:

• Participating Tyrepower stores and related Tyrepower organisations.
• Vehicle, tyre, wheel, battery, product, warranty and service suppliers.
• Website, hosting, CRM, booking, customer service, analytics, cybersecurity, cloud and IT service providers.
• Email, SMS, marketing, advertising and campaign service providers.
• Payment processors, buy-now-pay-later providers and financial administration providers, if you choose to use those services.
• Fleet, leasing, insurer, employer, trade, corporate and commercial account partners where needed to confirm authority, eligibility, payment responsibility, approval status or account requirements.
• Couriers, logistics and delivery providers.
• Insurers, auditors, accountants, lawyers and other professional advisers.
• Regulators, law enforcement bodies, courts, tribunals and government agencies.
• Other parties where you have consented or where the law allows or requires disclosure.

6. Fleet, Leasing and Third-Party Approval Processes

Where a vehicle is supplied, managed, leased, financed, insured or operated through a fleet, leasing, employer, insurer, corporate account or other third-party arrangement, we may need to exchange personal information and vehicle information with that third party, or with a system used by that third party.

This may occur to confirm authority, eligibility, account status, payment responsibility, service approval, warranty position, service limits or other requirements before products or services are supplied.

The information exchanged may include customer contact details, vehicle details, registration details, service requirements, quote information, booking details, transaction records, account details and approval status.

The way these approvals are handled may vary depending on the relevant approval system, third-party provider or account arrangement. Some approvals may be handled manually. Others may involve rules-based systems, automated workflows, system-generated recommendations or automated approval and rejection processes.

Where Tyrepower uses, arranges or relies on automated tools that use personal information to make, or substantially assist in making, decisions that could significantly affect an individual’s rights or interests, we describe those uses in this policy.

7. Marketing Communications

We may send you marketing about Tyrepower products, services, promotions, offers and news where you have consented or where the law allows us to do so.

You can opt out of marketing at any time by using the unsubscribe option in our messages or by contacting us. We may still send operational messages, such as quote responses, booking confirmations, warranty updates, safety notices and service communications, where the law allows.

8. Cookies, Analytics and reCAPTCHA

We use cookies and similar technologies to operate our website, improve performance, understand how the website is used, support security, remember preferences and assist with analytics or marketing.

Cookies and analytics tools may collect technical details such as your IP address, device type, browser, pages viewed, time spent on pages and referring websites. You can adjust your browser settings to block or delete cookies, but some website functions may not work properly if you do.

Our website uses reCAPTCHA or similar security tools to help protect forms and systems from spam, misuse and automated activity. These tools may collect technical and device information and are subject to the relevant third-party provider’s privacy terms.

9. Automated Decision-Making

We use computer programs and automated tools to help run our website, quote forms, bookings, store routing, customer service, marketing preferences, fraud prevention, cybersecurity, analytics and some fleet, leasing or account approval processes.

These tools may use the kinds of personal information listed in this policy, including contact details, postcode and preferred store, enquiry and booking details, vehicle details, online and technical details, marketing preferences, account details, transaction records, approval status and service requirements.

Some decisions may be made solely by computer programs. Examples include online form security and spam checks, applying marketing opt-in or opt-out preferences, routing a website enquiry to a store based on postcode or preferred store, and applying system rules in some booking, account or approval workflows.

Some tools may also help our staff make decisions. This means the system does work that is substantially and directly related to the decision, even though a person may still review the matter before action is taken. Examples may include system alerts, quote or booking checks, fleet or account approval status, cybersecurity alerts, analytics outputs, service recommendations or exception messages.

We may use AI-assisted or automated tools to help our staff prepare, review or manage customer service responses, support requests, system alerts or operational tasks. These tools are used to support staff, not to make final decisions about a customer without human involvement.

If an automated tool is used for a decision that could reasonably be expected to significantly affect your rights or interests, we take reasonable steps to provide meaningful information about the kinds of personal information used and the kinds of decisions involved. We also take reasonable steps to keep appropriate human review, oversight or support where it is needed.

10. Overseas Disclosure

Some of our technology, analytics, security, marketing, payment, support and cloud providers may store, process or access personal information outside Australia. This may also vary where a participating store uses a store-level system, hosted server or approved service provider.

The countries involved may change depending on the providers we use and the way individual systems are hosted or supported. They may include Australia, New Zealand, the United States, Singapore, the United Kingdom, European Union member states and other locations used by our technology or service providers.

Where we disclose personal information overseas, we take reasonable steps to make sure it is handled in a way that is consistent with Australian privacy requirements.

11. Information Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

These steps include technical and organisational measures such as access controls, user authentication, cybersecurity controls, secure storage, supplier checks, staff training, confidentiality obligations, data handling procedures, incident response processes and periodic review of privacy and security practices.

If we become aware of a data breach involving personal information, we will assess and respond to it under our legal obligations, including the Notifiable Data Breaches scheme where applicable.

12. Information Retention

We keep personal information for as long as we reasonably need it for the purpose it was collected. This may include providing services, managing accounts, administering warranties, responding to enquiries, maintaining business records, meeting legal and tax obligations, resolving disputes and protecting our legal interests.

When we no longer need personal information, we take reasonable steps to destroy it or de-identify it, unless the law requires or allows us to keep it.

13. Accessing and Correcting Your Personal Information

You may ask to access the personal information we hold about you. You may also ask us to correct information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

To make an access or correction request, contact our Privacy Officer by calling 03 9877 2044 or by using the contact details on our website.

We may need to verify your identity before responding. We will respond within a reasonable time. In some cases, the law may allow us to refuse access or correction. If we refuse a request, we will explain why where it is reasonable to do so.

14. Privacy Complaints

If you have a concern or complaint about how we have handled your personal information, contact our Privacy Officer by calling 03 9877 2044 or by using the contact details on our website.

Please include your name, contact details, a summary of your concern and any information that may help us investigate it.

We will acknowledge your complaint within a reasonable time and aim to investigate and respond promptly. If the matter is complex, we may need more time and may ask you for further information.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

15. Anonymity and Pseudonymity

Where lawful and practicable, you may deal with us anonymously or by using a pseudonym. We may need your identity or contact details to provide quotes, bookings, services, warranty support, transactions, fleet services, complaint handling or customer support.

16. Children's Privacy

Our website and services are not directed to children under 18. We do not knowingly collect personal information from children unless it is provided with the involvement of a parent or guardian, or unless collection is otherwise permitted by law.

17. Links to Other Websites

Our website may contain links to third-party websites, platforms, payment services, social media pages or provider terms. We are not responsible for the privacy practices of third parties. You should review the privacy policies of those third parties before providing personal information to them.

18. Artificial Intelligence and third-party management

We have recently sought information and assurances from our suppliers of intellectual property sources such as the computers and programs in use in our offices and those of our Dealers and Marketing companies, and we have been assured that none of these suppliers employs or connects to any AI source which is not subject to final human scrutiny. We, and we are assured by our suppliers that they do not employ AI save to perform certain clerical and security tasks such as customer enquiry triage, document formatting, data analysis, fraud detection, inventory management, marketing support and other approved purposes. We will not represent that an AI System is subject to human review unless that review forms part of our documented operating procedures.

Where an AI System collects, stores, uses, generates, analyses or discloses information relating to an identified or reasonably identifiable individual (“Personal Information”), we will handle that information in accordance with applicable privacy, consumer protection, data security and record-keeping laws, including, where applicable, the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Spam Act 2003 (Cth).

We will remain vigilant as to any information sharing which may involve our contractors or their sub-contractors, and will at all times make the confidentiality of your personal particulars an absolute priority and impose contractual obligations appropriate to the nature and sensitivity of the information concerned. These obligations may include restrictions on use, retention, model training, onward disclosure and overseas processing, together with requirements concerning access controls, security incidents, deletion and return of information.

19. Changes to This Policy

We may update this Privacy & Data Policy from time to time to reflect changes in our business, systems, legal obligations or privacy practices.

The updated version will be published on our website. The "Last updated" date will show when the policy was most recently changed.

20. Contact Us

For privacy enquiries, access requests, correction requests or complaints, contact our Privacy Officer by calling 03 9877 2044 or by using the contact details on our website.