Privacy policy

This policy explains what personal information VerifyCar collects, why, who it is shared with, and what you can do about it. It applies to verifycar.com.au and to the reports we deliver.

1. Who we are

VerifyCar is operated by [[ LEGAL ENTITY NAME ]] (ABN [[ ABN ]]). We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can reach us at info@verifycar.com.au.

2. What we collect

We collect very little, and only what a search or a reply needs.

• When you order a report: the VIN you enter and the email address the report is sent to. There is no account and we do not ask for your name, address or phone number.
• When you pay: your card details are entered into Stripe’s payment form and go directly to Stripe. They do not pass through, and are not stored on, our website. We receive confirmation that a payment succeeded and a reference for it.
• When you contact us: your name, email address, the message you write, and a VIN if you choose to include one. Our contact form emails this to us; it is not stored in a database on the website.
• Automatically: standard server logs, including IP address, browser type and the pages requested. These are used to keep the site running and secure.

A VIN identifies a vehicle rather than a person. Depending on the circumstances it may still be personal information, so we treat it as though it is.

3. Why we collect it

To run the search you asked for, to send you the report and the certificate, to take payment and issue a refund if a search cannot be completed, to answer your questions, and to keep records of transactions as the law requires.

We do not sell your information, and we do not send marketing email to people who have only bought a report.

4. Who we share it with

• The registers. The VIN is submitted to the PPSR, administered by the Australian Financial Security Authority, and to NEVDIS, in order to run the search. A PPSR search is a recorded transaction.
• Stripe, to process the payment and any refund.
• Our hosting and email providers, so the site runs and the report reaches your inbox.
• Anyone we are required by law to share it with, such as a court or a regulator.

Some of these providers, including Stripe, operate infrastructure outside Australia, so your information may be stored or processed overseas [[ CONFIRM: name the countries once the provider list is final ]].

5. Cookies and tracking

This website sets only the cookies WordPress needs to work, and cookies set by Stripe during payment to detect fraud. There is no advertising network, no analytics profiling and no session recording on this site. If that changes, this policy will change with it.

6. How we keep it safe

The site is served over HTTPS and access to our systems is restricted to the people who need it. Card details never reach us, which removes the most sensitive category of data from our systems entirely. No system is perfectly secure, and we do not claim otherwise.

7. How long we keep it

Your report link stays active for 30 days from the search. We keep transaction records for as long as tax and consumer law require, and we do not keep personal information longer than we need it [[ CONFIRM: state the actual retention period once decided ]].

8. Getting at your information

You can ask us what we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email info@verifycar.com.au and we will respond within a reasonable time, usually well inside 30 days.

We cannot change what a register holds about a vehicle. Those records belong to the PPSR and NEVDIS, and a correction has to be raised with them.

9. Complaints

If you think we have mishandled your personal information, email us first and tell us what happened — most things are resolved that way. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10. Changes to this policy

We update this policy when what we do changes. The effective date at the top tells you when it last changed.