PEUGEOT North Shore Privacy Policy

Your privacy is our Policy

This policy applies to Trivett Automotive Retail Pty Ltd (ABN 94 000 806 904) (‘Trivett’, ‘we’, ‘us’ or ‘our’) and outlines our practices in managing Personal Information we hold about customers, potential customers, contractors and others who come into contact with us and our related companies. This policy also outlines the data breach notification requirements. We want your experience with us in both our online and offline environments to be enjoyable and we take care to respect your privacy.

We are committed to protecting your Personal Information in accordance with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth) (the ‘Privacy Act’) which requires us to handle your Personal Information responsibly, securely, and transparently. ‘Personal Information’ is defined within the Privacy Act as information or an opinion about an identified individual, or an individual who is reasonably identifiable: (a) whether the information or opinion is true or not; and (b) whether the information or opinion is recorded in a material form or not.

This policy (‘Policy’) explains how we collect, use, disclose, and manage your Personal Information, and your rights in relation to that information.

Why does Trivett collect Personal Information?

The primary purposes for which we collect your Personal Information include:

• to respond to enquiries regarding the products and services that we and/or our related companies offer;
• to inform you of special offers and events and to facilitate and process your acceptance or order of any special offers, products and services;
• to help us manage, develop and enhance the products and services that we and/or our related companies offer;
• to create a better, more personalised experience for you;
• for warranty and recall purposes;
• to consider any application submitted to us for vacancies across our businesses; and
• to meet our legal obligations.

Generally, we use the information we collect about you for the primary purpose for which it is collected and for secondary purposes, as permitted under the Privacy Act. 

‘Sensitive Information’ is defined in the Privacy Act and may include details such as racial or ethnic origin, political opinions, religious or philosophical beliefs, sexual orientation, trade union membership, health information, genetic or biometric data, or criminal record information. We only collect Sensitive Information where it is reasonably necessary for our business activities and only with your explicit consent or as otherwise permitted or required by law. We apply enhanced security measures to protect Sensitive Information, including access restrictions, encryption, and secure storage systems to prevent unauthorised access, disclosure, or misuse.

If you do not wish to provide us with Personal Information, this may result in us being unable to provide you with our products and services or carry out any other purpose for which it was requested.  For example, if you do not provide us with your Personal Information, we may be unable to register vehicles, arrange test drives and loan vehicles, or contact you for matters relating to vehicle safety and recalls (among other things).

If you have a concern with the collection or use of your Personal Information you can notify us of your complaint by simply contacting the Privacy Officer using the details set out below.

What kinds of Personal Information does Trivett collect?

In general, the type of Personal Information we collect and hold includes but is not limited to: names, addresses, contact details (including email addresses and telephone numbers), occupations, drivers licence details and other information that you provide to us or will assist us in providing our products and services.

For some services you use, we may collect biometric information (such as facial images, fingerprints, or voice patterns) where necessary for identity verification, security, or customer service purposes. Any biometric data we collect is handled in accordance with applicable Privacy laws. We securely store and protect this information, and only use it for the specific purpose for which it was collected or as otherwise permitted by law.

Collection

When we collect your Personal Information we endeavour to:

• tell you who we are and what we intend to do with your information when we receive it.
• take steps to ensure that your Personal Information is accurate, complete and up-to-date when we use or collect it.
• collect Personal Information only by lawful and fair means generally by forms filled out by you (whether on-line or in hard copy), face-to-face meetings, interviews, business cards and third parties (e.g. companies we contract to collect data on our behalf). From time to time, we may also collect non-personal information e.g., information specific to a vehicle or model. This helps us in our ongoing efforts to improve our products and services.

 
As much as reasonably possible, we will collect Personal Information directly from you, although we may from time to time also use external sources that are legally entitled to disclose and use your Personal Information.

Your rights

Subject to certain exemptions set out in the Privacy Act, you: 

• may request access the Personal Information we hold about you by contacting the Privacy Officer via the details set out below (Note: We will require you to verify your identity and to specify the information that you require. A small fee may be charged for providing access. We will advise the likely cost in advance.)
• have the right under the Privacy Act to request changes to your Personal Information. We encourage you to contact us in order to update any Personal Information we hold about you using the Privacy Officer contact details set out below.

In certain circumstances, request the erasure or deletion of your Personal Information, for example, where it is no longer required for the purpose for which it was collected, or where you withdraw consent (subject to legal and contractual obligations).

You may request the transfer (portability) of your Personal Information to another organisation or service provider, where technically feasible.

You may object to certain types of processing, including direct marketing or profiling activities, where you believe your privacy rights outweigh our legitimate business interests.

You may request further information about automated decision-making processes that may have a legal or significant impact on you, including how such decisions are made and how your information is used. 

Analytics, session and cookie tools

We may also monitor your usage of our web site to make improvements and provide other information you might want to know about. We may also use third parties to analyse traffic on our website, which may involve the use of cookies. 

We use a range of tools provided by third parties, including Google, Bing and Campaign Monitor, to collect or view website traffic information. These third parties may have their own privacy policies explaining how they will treat the information they collect. We also use cookies and session tools to improve your experience when accessing our websites. The information collected by these may include the IP address of the device you are using and information about sites that IP address has come from, the pages accessed on our website and the next website visited. We use that information to maintain, secure and improve our websites and to enhance your experience when using them.

Third parties may use cookies to collect information about the content you view on our website. They’ll do this to serve you advertising on their websites that’s more relevant to you. If you wish to opt out, most Internet browsers allow you to change your settings to manage or block these cookies. Please note that this may limit your ability to use personalised features that we offer on our websites.

Social Networking Services

We use social networking services such as Twitter, Facebook and YouTube to communicate with the public about our products and services. When you communicate with us using these services we may collect your Personal Information to help us to communicate with you. These social networking services have their own privacy policies, which you should check for more information. We are not liable for these third parties and cannot make any guarantee regarding their privacy practices. 

Personal Information Disclosure

We may disclose your Personal Information to:

• our related companies and dealers;
• the manufacturers of vehicles that we sell;
• insurance companies;
• credit providers and credit reporting bodies who may use or disclose your Personal Information to determine your credit worthiness;
• state government entities responsible for motor vehicle registrations and driving infringements;
• other companies or individuals providing services to us or who perform functions on our behalf (such as service providers and mailing houses) who are generally contract bound to protect your privacy;
• law enforcement bodies such as the police, who seek access to your Personal Information for law enforcement purposes; and
• anyone else to whom you have authorised us to disclose it.

We may also collect your Personal Information from these organisations and individuals, in which case we will deal with this information in accordance with this Policy.

Unless otherwise required or permitted by law, if we disclose your Personal Information to others we will only do so with your consent (implied or express), and we will also take reasonable steps to ensure the party to whom we have disclosed your information agrees to protect the privacy of your Personal Information.

Sending Personal Information Overseas

Sometimes we might disclose your Personal Information to entities located outside Australia. When this happens, we’ll always take steps to ensure the recipients respect the privacy of your Personal Information by abiding by the APPs (or equivalent privacy laws). 

These entities may include the overseas manufacturers of brands that we sell (including but not limited to the United Kingdom, Japan, Singapore, the United States of America, the European Union & China), our related companies (including in the United Kingdom), our live chat service providers (located in the USA), our Customer Relations Management providers (located in the USA, UK & Singapore), Inchcape’s Digital Delivery Centres (Philippines & Colombia), and our accounts processing provider (India). Your information may be stored securely in “cloud-based” servers that are located globally in various locations beyond the countries named.

We take reasonable steps to ensure that any overseas recipient of your Personal Information handles it in accordance the APPs or under equivalent privacy protections recognised as providing an adequate level of protection. Where such adequacy decisions or equivalent safeguards do not exist, we implement appropriate contractual and technical safeguards, such as:

• Data protection agreements incorporating approved standard contractual clauses;
• Access controls and encryption for data in transit and at rest; and
• Periodic reviews of third-party compliance.

You have the right to:

• Request further information about the safeguards applied to your Personal Information when it is transferred overseas;
• Withdraw your consent to overseas disclosure (where consent is the basis for transfer), noting that this may affect our ability to provide certain services to you; and
• Request details of the countries to which your Personal Information has been disclosed.

Other than as stated above, we will not send your Personal Information to recipients outside Australia without:

• obtaining your consent (which may, in some cases, be implied); or
• otherwise complying with the APPs.

Automated Decision Making

We may use automated systems or technologies, including artificial intelligence (AI) and machine learning tools, to assist in processing Personal Information for purposes such as improving customer experience, personalising marketing, fraud detection, or operational efficiency.

Where we use automated decision-making that has a legal or significant effect on you — for example, decisions relating to credit assessment, eligibility for offers, or risk profiling — we will ensure that:

• You are informed when such automated processing is taking place;
• You have the right to request information about the logic involved and the factors considered in the decision; and
• You have the right to request human review of the decision, to express your point of view, and to contest the outcome.

We apply appropriate safeguards and oversight to ensure that automated decision-making processes are fair, transparent, and compliant with privacy and anti-discrimination laws. We do not use solely automated systems to make decisions that would have a material impact on an individual without meaningful human involvement.

Electronic Communications

The Spam Act 2003 (Cth) and Spam Regulations 2021 (Cth) regulate the sending of commercial electronic messages. These laws prohibit the sending of commercial electronic communications without the consent of the person to whom the communication is being sent. In line with our commitment to technology (but within the parameters of the law) we like to accommodate customers who wish to be contacted by way of electronic communications. These communications may be sent for any of the purposes mentioned above. At the point of collection of Personal Information we may request the mobile phone number or the email address of our customers. Whenever such messages are sent to a customer we will always provide the customer with the option of opting out of receiving similar communications in the future.

When we seek your consent to receive electronic communications, we endeavour to:

• Use clear, plain language to explain what you are consenting to;
• Ensure consent is freely given, specific, and informed;
• Separate consent requests from other terms and conditions;
• Make it easy to withdraw consent at any time, without penalty; and
• Keep appropriate records of consent as required under the Spam Regulations.

Whenever we send a commercial electronic message, we will:

• Clearly identify ourselves as the sender;
• Include a simple and functional unsubscribe facility that is free and easy to use; and
• Honour all unsubscribe requests within the timeframes required by law.

Do Not Call Register

The Do Not Call Register Act 2006 together with the Do Not Call Register Regulations 2017 (Cth) and the Telecommunications (Telemarketing and Research Calls) Industry Standard 2017 (Cth) (collectively, Do Not Call Legislation) regulate the making of telemarketing and research calls to Australian telephone numbers. These laws prohibit calling numbers listed on the Do Not Call Register unless an exemption applies or the caller has obtained the recipient’s express or inferred consent.

In line with our commitment to corporate compliance, we will only make telemarketing calls in accordance with these requirements. We will:

• Contact numbers listed on the Do Not Call Register only in the limited circumstances permitted by law, such as where you have provided valid consent;
• Ensure all calls are made within permitted calling hours and identify the caller and the organisation at the beginning of each call;
• Maintain accurate records of consent and provide an easy way for you to withdraw consent or opt out of future calls at any time; and
• Train our representatives to comply with the Do Not Call Legislation, including the handling of opt-outs and record-keeping obligations.

Where you give us express consent to contact you by telephone, we will deem that consent to continue indefinitely for the purposes of the Do Not Call Register Act 2006, unless and until you withdraw it.

Opting Out

We always provide individuals with an opportunity to "opt-out" of receiving direct marketing communications from us, regardless of the channel through which those communications are sent. If you have received a marketing communication from us and do not wish to receive these communications from us in the future, you can opt out at any time by using any of the following options:

• click the “unsubscribe” link on the email or sms sent to you;
• tick the opt out box on postal communications and return the mailed item to us;.
• use the "Contact Us" button on our website; or
• write to or email the Privacy Officer using the details set out below;

and we will take appropriate steps to ensure your details are added to our 'Do Not Mail' list to ensure you will not receive any future marketing communication from us. We do not send marketing communications to customers who have opted out of receiving such information.

Please note that even if you opt out of marketing communications, we may still retain your details and contact you for non-marketing purposes, such as vehicle safety notifications, recalls, warranty matters, or where otherwise required or authorised by law.

The Security of Trivett’s System

We take all reasonable steps to protect the security of Personal Information collected by us. We understand that you require peace of mind when it comes to the security of providing your Personal Information to us. We have internal methods to ensure that your Personal Information is safe and protected against misuse, loss or unauthorised access, modification or disclosure. Where we no longer require your Personal Information for a permitted purpose under the APPs, we will take reasonable steps to destroy or suppress your Personal Information.

Data Breach Notification

We take the protection of Personal Information seriously. In accordance with the Privacy Act 1988 (Cth), we have processes in place to identify, assess, and respond to data breaches.

Where we become aware of a suspected or confirmed data breach that is likely to result in serious harm to individuals whose Personal Information is involved in the breach (an “eligible data breach”), we will:

• Promptly investigate the incident;
• Notify the Office of the Australian Information Commissioner (OAIC) as required by law;
• Notify affected individuals as soon as practicable, providing information about the breach, the potential risks, and steps they can take to mitigate harm; and
• Take remedial action to prevent recurrence.

Complaints

If you have a concern with the collection, disclosure, storage or use of your Personal Information you can notify us of your complaint by contacting the Privacy Officer using the details set out below.

Upon receiving your complaint:

• We will acknowledge receipt within five (5) working days;
• The Privacy Officer will review, investigate, and aim to respond within thirty (30) days of receipt of your complaint; and
• If additional time is required due to the complexity of the matter, we will inform you of the delay and provide an indicative timeframe for resolution.

We take all privacy complaints seriously and will seek to resolve them fairly and promptly. Depending on the nature of the complaint, possible outcomes may include:

• Providing an explanation or further information about our practices;
• Updating or correcting Personal Information;
• Changing how we handle Personal Information; or
• Offering an apology or other appropriate redress.

If you are not satisfied with our response, or you believe we have not resolved your complaint appropriately, you may contact the Office of the Australian Information Commissioner (OAIC) for further assistance.

You can contact the OAIC at:

Office of the Australian Information Commissioner (OAIC)

GPO Box 5218, Sydney NSW 2001

Phone: 1300 363 992

Email: enquiries@oaic.gov.au

Website: www.oaic.gov.au

 

Employee Records

Due to an exemption in the current Privacy Act, this policy does not apply to our handling of employee records, where that handling is directly related to the current or former employment relationship between us and the individual. 

 

Updates to this Policy

This Policy will be reviewed from time to time to take account of new laws and technology, changes to our operations and practices and the changing business environment. We will at all times make available any information regarding our Privacy Policy to anyone who requests it, whether at our offices, or by our website.

 

Trivett’s Contact Details

We welcome your questions and comments about our handling of your Personal Information and this Privacy Policy. If you have any questions, please let us know by using the 'contact us' form on our website. You may also contact our Privacy Officer at:

 

Email: privacy.officer@trivett.com.au

Facsimile: (02) 8892 9120

Postal address: Att: Privacy Officer

Trivett Automotive Retail Pty Ltd

Level 3, 58 Norwest Boulevard

Norwest NSW 2153