Privacy Policy

1. What Information We Collect

1.1 The kinds of personal information we may collect and hold include:

(a) identity and contact details — your name, email address, phone number, and residential or installation address;

(b) vehicle details — make, model, registration, and VIN;

(c) account information — your login credentials and account settings;

(d) installation information — installation preferences, appointment details, and vehicle condition or modification details you provide;

(e) GPS and device data — vehicle location, trip history, ignition status, geo-fence alerts, and command logs for immobilisation and door lock/unlock features (on applicable devices); and

(f) payment information — billing details processed through our payment provider (we do not store full card details ourselves).

1.2 We generally collect personal information directly from you. In some cases, we may also collect it from third parties, such as authorised installers, or from a business, fleet manager, or other account holder who arranges tracking of a vehicle that you drive or use.

1.3 You do not have to provide the personal information we request, but if you do not, we may be unable to provide the services, complete installation, or manage your account effectively.

2. How We Collect Information

2.1 We collect personal information in a number of ways, including when you:

(a) submit an enquiry or sign-up form through our website;

(b) communicate with us by phone, email, or message;

(c) complete installation, consent, or authorisation forms;

(d) purchase a device or subscription; and

(e) use the GPS tracking services and devices, which transmit location and device data to our platform.

2.2 We may also collect information automatically when you visit our website, through cookies and similar technologies (see clause 9).

2.3 As noted in clause 1.2, we may also receive personal information from third parties such as installers, or from an account holder who arranges tracking of a vehicle you use.

3. Why We Collect, Hold, Use and Disclose Your Information

3.1 We collect, hold, use, and disclose personal information for purposes connected with providing our services, including to:

(a) provide GPS tracking, monitoring, and related device features;

(b) arrange and complete device installation;

(c) create and manage your account and verify your identity;

(d) process payments and manage billing and subscriptions;

(e) provide customer support and respond to enquiries;

(f) maintain, troubleshoot, and improve the platform and devices;

(g) detect, investigate, and prevent fraud, misuse, or unlawful activity;

(h) comply with our legal and regulatory obligations; and

(i) manage and resolve disputes.

3.2 We will only use or disclose your personal information for a purpose set out in this Policy, for a related purpose you would reasonably expect, or as otherwise permitted or required by law.

3.3 We do not sell your personal information.

4. Payment Processing

4.1 Payments are processed by our third-party payment provider. We do not collect or store your full card details ourselves; these are handled directly by the payment provider under its own security standards.

4.2 Our payment provider processes payment information in the United States. This involves an overseas disclosure of personal information, which is described further in clause 7.

4.3 We retain billing and transaction records as described in clause 11.

5. GPS and Device Data

5.1 When a device is active, it transmits data such as vehicle location, trip history, ignition status, and (on applicable devices) immobilisation and door lock/unlock command logs to our platform, so that we can provide the tracking and monitoring services.

5.2 This data is processed and stored by our third-party GPS platform provider, whose servers are located in Hong Kong. This involves an overseas disclosure of personal information, which is described further in clause 7.

5.3 Location and trip data can reveal information about the movements and patterns of the driver of a vehicle. If you arrange tracking of a vehicle used by another person, you are responsible for ensuring that person is aware the vehicle is being tracked, as set out in our Terms & Conditions.

5.4 GPS and trip data is retained on a rolling basis as described in clause 11.

6. Third-Party Service Providers

6.1 We disclose personal information to third parties who help us provide our services. We only disclose the information reasonably necessary for them to perform their function, and we take reasonable steps to require them to handle it securely and consistently with this Policy and the Australian Privacy Principles.

6.2 The categories of third parties we use include:

(a) hosting and infrastructure providers — who host our platform and customer and account data;

(b) our payment provider — who processes payments and billing (see clause 4);

(c) our GPS platform provider — who processes and stores GPS and device data (see clause 5);

(d) mobile network providers — who provide the connectivity that devices use to transmit data;

(e) authorised installers — who install and service devices and may receive your contact and vehicle details for that purpose;

(f) email and communications providers — who help us send service-related communications; and

(g) professional advisers — such as legal, accounting, and insurance advisers, where reasonably required.

6.3 We may also disclose personal information where required or authorised by law, to a law enforcement or government agency where permitted, or where necessary to protect the safety of any person or to investigate suspected unlawful activity or misuse of the services.

6.4 Some of these providers are located, or store data, overseas. Overseas disclosures are described in clause 7.

7. Overseas Disclosure of Personal Information

7.1 To provide our services, we disclose some personal information to recipients located outside Australia. The overseas locations are:

(a) the United States — where our payment provider processes payment information; and

(b) Hong Kong — where our GPS platform provider processes and stores GPS and device data.

7.2 Customer and account information is hosted in Australia. Only the categories of information described above are disclosed to, processed by, stored with, or accessible by recipients overseas.

7.3 When we disclose personal information overseas, we take reasonable steps to ensure that the overseas recipient handles it in a manner consistent with the Australian Privacy Principles, including through the contractual terms on which we engage them. However, you acknowledge that overseas recipients are subject to the laws of the countries in which they operate, which may differ from Australian privacy laws, and that we may not be able to control or ensure their compliance to the same extent as an Australian provider.

7.4 When you acknowledge this Policy and proceed with our services, you consent to the overseas disclosures described in this clause. This consent supports, but does not replace, the steps we take to protect your information and the disclosures we make in this Policy.

8. Security of Your Information

8.1 We take reasonable steps to protect personal information from misuse, interference, and loss, and from unauthorised access, modification, or disclosure. These steps include access controls, encryption of data in transit, secure hosting, and restricting access to personal information to those who need it to perform their role.

8.2 We retain audit logs of certain administrative actions and of immobilisation and door lock/unlock commands, which help us monitor for and investigate unauthorised or unsafe use.

8.3 While we take reasonable steps to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8.4 If a data breach occurs that is likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth), including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

9. Cookies, Analytics & Advertising

9.1 When you visit our website, we use, or may use, cookies and similar technologies to help the site function, to understand how visitors use it, and to support our advertising.

9.2 We use, or may use, these technologies for two main purposes:

(a) analytics — to understand website traffic and how visitors find and use our site, including through tools such as Google Analytics and Google Search Console; and

(b) advertising and remarketing — to measure the effectiveness of our advertising and to show Track It GPS ads to you on third-party platforms, including search engines and social media, which may be based on your previous visits to our website or your online activity. This may involve tools provided by Google, Meta, and TikTok.

9.3 These third-party providers may collect information about your online activity over time and across different websites. Their handling of your information is governed by their own privacy policies.

9.4 You can manage or disable cookies through your browser settings, and you can opt out of many advertising cookies through the settings offered by the relevant advertising platforms. Disabling cookies may affect how the website functions.

10. Communications & Direct Marketing

10.1 We will send you communications relating to your account and services, such as booking confirmations, installation and service notices, billing and payment notices, and other operational or safety-related messages. These are a necessary part of providing the services and are not marketing.

10.2 We do not currently send marketing communications. If we introduce marketing communications in the future, we will only send them where permitted under the Spam Act 2003 (Cth) and the Australian Privacy Principles, and we will give you a simple way to opt out at any time.

10.3 You can contact us at any time using the details in clause 14 if you have questions about the communications you receive from us.

11. Data Retention & Destruction

11.1 We keep personal information only for as long as it is needed for the purposes set out in this Policy, or for as long as we are required to keep it by law. The periods we apply include:

(a) GPS and trip data — retained on a rolling basis and routinely deleted after approximately 90 days;

(b) billing and transaction records — retained for at least 5 years, as required under taxation law;

(c) account information — retained for the life of your account and for up to 7 years after your account is cancelled;

(d) immobilisation and door lock/unlock command logs — retained for up to 7 years after your account is cancelled; and

(e) enquiry and marketing-related information — retained for up to 12 months where you have made an enquiry but not become a customer.

11.2 When personal information is no longer needed for any purpose for which it may be used or disclosed, and we are not required by law to retain it, we will take reasonable steps to destroy it or to de-identify it.

11.3 Some information may be retained for longer where it is contained in secure backups, or where we are required to retain it to comply with a legal obligation, resolve a dispute, or enforce our agreements. Information held in backups is deleted or overwritten in the ordinary cycle of our backup processes.

12. Accessing & Correcting Your Information

12.1 You may request access to the personal information we hold about you, and you may ask us to correct it if you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading.

12.2 To make a request, contact us using the details in clause 14. We may need to verify your identity before processing your request.

12.3 We will respond to your request within a reasonable time. In most cases we provide access free of charge, although we may charge a reasonable fee for access in limited circumstances, such as where a request requires substantial effort.

12.4 There may be circumstances where we are unable to give you access to, or correct, your information — for example, where the law permits or requires us to refuse, or where doing so would unreasonably affect the privacy of another person. If we refuse, we will tell you why in writing, except where it would be unreasonable to do so.

13. Privacy Complaints

13.1 If you have a concern or complaint about how we have handled your personal information, please contact us first using the details in clause 14, so that we have the opportunity to address it. Please include enough detail for us to investigate.

13.2 We will acknowledge your complaint, investigate it, and respond to you within a reasonable time, usually within 30 days.

13.3 If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC):

14. Contact Us

If you have any questions about this Privacy Policy, or you wish to access or correct your information or make a privacy complaint, you can contact us:

15. Changes to This Policy

15.1 We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The current version will always be available on the Track It GPS website, with the version and effective date shown.

15.2 Where a change is significant, we will take reasonable steps to notify you, for example through our website or by contacting you directly.