Privacy Policy

Name: Castle Hill Volkswagen
Address: 2 Packard Avenue, Castle Hill, NSW, 2154, AU
Telephone: (02) 8841 5888

1. About this Privacy Policy

This Privacy Policy explains how Castle Hill Volkswagen (and, where applicable, Autosports Group) (we, us or our) collects, holds, uses and discloses personal information and how you can access and correct your personal information or make a privacy complaint.

We are committed to handling personal information in an open and transparent way and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What is personal information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. This can include contact details and information about your interactions with us (including online).

Some personal information is “sensitive information” (for example, health information). We generally only collect sensitive information with your consent, unless an exception applies under Australian privacy law.

3. The kinds of personal information we collect and hold

The kinds of personal information we collect and hold will depend on how you interact with us (for example, whether you purchase, enquire, book a service, apply for finance, enter a promotion, or use our website). It may include:

Identity and contact details (such as name, address, email address, telephone number and date of birth)
Vehicle-related information (such as vehicle details, ownership or service information and preferences)
Transaction details (such as products and services purchased, invoices, payments and communications)
Finance and insurance-related information (such as employment and financial details) where you request finance, insurance or related products or services
Verification information (such as driver licence or other identification details) where required for a transaction or by law
Online and device information (such as IP address, device identifiers, browser type, pages viewed and interaction data)
Records of your preferences and marketing consents, including your opt-out status.

4. How we collect personal information

We may collect personal information:

(a) Directly from you, including when you:

visit or use our website
submit an online enquiry, request a test drive, request a quote, book a service, enter a promotion or apply for a product or service
communicate with us (in person, by phone, email, SMS, online chat or social media)
purchase a vehicle, parts, accessories or other products or services from us.

(b) From third parties, where reasonable and permitted, including:

manufacturers, distributors and warranty providers
financiers, insurers and related intermediaries (where you request finance, insurance or related products)
service providers that help us operate our business and website (such as IT, hosting, analytics, marketing, customer support and payment providers)
government, regulatory or law enforcement bodies, where required or authorised by law
publicly available sources.

If you do not provide personal information we request, we may not be able to provide you with certain products or services or respond to your enquiry.

5. Why we collect, hold and use personal information

We collect, hold and use personal information to:

provide and administer our products and services (including sales, servicing, parts and accessories)
respond to enquiries and manage bookings and requests
verify your identity and eligibility (including where required to process a transaction)
arrange, administer or support finance, insurance and related services where requested
manage warranties, recalls and product safety matters
communicate with you about your transaction and provide customer support
improve our products, services, website, customer experience and internal processes
conduct analytics, research, and reporting
market our products and services (subject to section 7)
protect our customers, staff and business (including security, fraud prevention and risk management)
comply with legal and regulatory obligations and assist regulators or law enforcement where required or authorised.

6. How we disclose personal information

We may disclose personal information for the purposes described above to:

our related entities and businesses within Autosports Group (where applicable)
service providers that perform services for us (such as IT and hosting, website and software providers, analytics and marketing providers, customer support providers, payment processors and professional advisers)
manufacturers, distributors and warranty providers (for example, for warranty administration, product support or safety matters)
financiers and insurers (and their service providers) where you request finance, insurance or related services
government agencies, regulators and law enforcement bodies where required or authorised by law
any person or entity you authorise, or where disclosure is otherwise permitted or required by law.

Where we disclose personal information to service providers, we take reasonable steps to require those providers to handle personal information securely and only for authorised purposes.

7. Direct marketing

We may use your personal information to contact you about products, services, offers, events or opportunities that may be of interest to you. We will do this in accordance with Australian privacy law and applicable marketing laws.

You can opt out of receiving direct marketing at any time by:

using the unsubscribe or opt-out option in our communications, or
contacting us using the details in section 12.

If you opt out, we will respect your request.

8. Cookies, analytics and online advertising

When you use our website, we may use cookies and similar technologies (including third-party tags/pixels) to:

enable website functionality
remember preferences
understand how visitors use our website (analytics)
measure the effectiveness of our advertising
deliver more relevant advertising on third-party sites and platforms (where permitted).

You can manage cookies through your browser settings. If you disable cookies, parts of our website may not function as intended.

9. Overseas disclosures

Some of our service providers (for example, cloud hosting, analytics or communications providers) may be located overseas or may store information on servers outside Australia.

Where we disclose personal information overseas, we will take reasonable steps to ensure the recipient handles the information in a way that is consistent with Australian privacy law, or we will rely on another permitted basis under the Privacy Act.

Because our service providers and their infrastructure can change over time, it may not be practicable to specify in advance all locations where personal information may be stored or accessed. Where practicable, we will make available further information on request.

10. Security and retention

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Security measures may include access controls, staff training, secure storage, and technical and organisational safeguards.

We retain personal information only for as long as required for the purposes described in this Privacy Policy (and as required or authorised by law). When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

11. Data breaches

We have processes to identify, assess and respond to suspected data breaches. Where required under the Notifiable Data Breaches scheme, we will notify affected individuals and the Office of the Australian Information Commissioner as soon as practicable after becoming aware that an eligible data breach has occurred.

12. Accessing and correcting your personal information

You can request access to, or correction of, the personal information we hold about you by contacting us via https://castlehillvolkswagen.com.au/contact/.

We may need to verify your identity before giving access or making a correction. We will respond within a reasonable period and, if we refuse access or correction as permitted by law, we will provide reasons (unless it would be unreasonable to do so).

13. Making a complaint

If you believe we have mishandled your personal information or breached the Australian Privacy Principles, you can make a complaint by contacting us via https://castlehillvolkswagen.com.au/contact/ and marking your enquiry "Privacy Complaint" (attention: Privacy Officer).

We will acknowledge your complaint and aim to respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) via their website (www.oaic.gov.au) or by calling 1300 363 992.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on our website.