Privacy Policy.

Scope and privacy framework

This policy applies to personal information handled through our website, vehicle portal, telephone calls, email, forms, vehicle inspections, purchases, sales and other dealings with Roos Car Buy & Sell.

Australian private-sector privacy obligations are primarily governed by the Privacy Act 1988 (Cth). The Victorian Privacy and Data Protection Act 2014 generally applies to Victorian public-sector organisations and certain contracted service providers. We follow the practices described in this policy as our operational privacy standard.

Personal information we may collect

Depending on your interaction with us, we may collect:

• your name, telephone number, email and postal address;
• contact preferences and the content of your enquiries;
• vehicle interests, inspection requests and test-drive details;
• vehicle make, model, year, registration, VIN, kilometres, condition, service history and photographs when you offer a vehicle for sale or trade-in;
• identity, licence or transaction information reasonably required to complete a vehicle purchase or sale and meet legal obligations;
• records of communications and customer-service interactions;
• website information such as IP address, browser type, device data, referring pages and interaction data; and
• any other information you choose to provide.

We do not intentionally collect sensitive information unless it is reasonably necessary, permitted by law and, where required, collected with your consent.

How we collect information

We generally collect information directly from you when you:

• submit a general, vehicle or Sell My Car enquiry;
• telephone, email or visit us;
• request an inspection or test drive;
• buy, sell or discuss trading a vehicle;
• upload vehicle photographs or documents; or
• use our website or communicate through connected services.

We may also receive relevant information from authorised representatives, service providers, vehicle-history or verification services, regulators and publicly available sources where lawful and reasonably necessary.

How we use personal information

We may use personal information to:

• respond to enquiries and provide customer support;
• show, sell, purchase, value or discuss vehicles;
• arrange inspections, appointments and test drives;
• manage vehicle listings, enquiries and leads in our private portal;
• verify transaction details and prepare business records;
• communicate about a vehicle or service you requested;
• operate, secure, analyse and improve our website and services;
• prevent fraud, misuse and security incidents;
• meet accounting, taxation, registration, regulatory and other legal obligations; and
• send marketing where we have the required consent or another lawful basis.

When information may be disclosed

We do not sell personal information. We may disclose relevant information to trusted parties where reasonably necessary, including:

• website hosting, email, IT, security, analytics and customer-management providers;
• professional advisers, accountants, insurers and contractors;
• vehicle inspection, transport, registration, verification or history service providers;
• payment service providers where a transaction requires them;
• government authorities, regulators, courts or law-enforcement bodies where required or authorised by law; and
• another party with your consent or at your direction.

Service providers are expected to handle information only for the relevant service and to apply appropriate safeguards.

Website data, cookies and external links

Our website may use cookies or similar technologies needed for website functionality, security, preferences, performance measurement and analytics. You can manage cookies through your browser, although disabling them may affect some features.

Our website may contain links, maps, embedded content or tools operated by third parties. Their privacy practices are governed by their own policies, and we encourage you to review them.

Direct marketing communications

We may send relevant marketing by email or SMS where you have consented or where otherwise permitted by law. Commercial electronic messages will identify the sender and provide a clear way to unsubscribe.

You can withdraw marketing consent at any time using the unsubscribe facility in a message or by contacting us. Transactional or service messages about an active enquiry or transaction may still be sent where required.

Storage and security

Information may be stored electronically in our website, private portal, email accounts, business systems and service provider platforms, and in physical records where necessary.

We use reasonable administrative, technical and physical safeguards designed to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. No internet or storage system can be guaranteed completely secure.

Where an eligible data breach is subject to the Notifiable Data Breaches scheme, we will assess and respond to it in accordance with applicable requirements.

Overseas service providers

Some technology, hosting, analytics, email or cloud providers may store or process information outside Australia. The countries involved can change depending on the provider's infrastructure. Where applicable, we take reasonable steps regarding the handling of information by overseas recipients.

Accessing or correcting your information

You may contact us to request access to personal information we hold about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before actioning a request. In limited circumstances permitted by law, access may be refused. If that occurs, we will generally explain the reason and available complaint options.

Privacy questions and complaints

Please contact Roos Car Buy & Sell first if you have a privacy question, request or complaint. Include enough detail for us to understand the issue. We will acknowledge and investigate the matter and aim to respond within a reasonable period.

If you are not satisfied and the Privacy Act applies, you may be able to contact the Office of the Australian Information Commissioner. Information about privacy rights and complaints is available at oaic.gov.au.

Retention and policy updates

We retain personal information only for as long as reasonably required for the purpose it was collected, our business needs, dispute management and applicable legal, accounting or regulatory obligations. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it.

We may update this policy when our practices, technology or legal obligations change. The current version will be published on this page with its latest revision date.