zimozodealer
Start free trial
DRAFT — not yet legal advice. This is a starting template for the owner's lawyer to review against the Privacy Act 1988 (Cth) and the Australian Privacy Principles before launch. Text in [square brackets] must be filled in.

Privacy policy

Last updated: [date] · [Legal entity name] ABN [ABN]

Who this covers

This policy explains how we handle personal information about (a) people who visit this website or sign up for Zimozo Dealer, and (b) dealership staff who use the Service. Dealers' own customer records are held by us on the dealer's behalf; the dealer's privacy policy applies to those customers, and we only use that information to provide the Service to the dealer.

What we collect

  • Sign-up details: business name, your name, email, mobile number and your chosen web address.
  • Billing details: handled by our payment provider, Stripe. We don't store full card numbers.
  • Usage information: log-in times, device and browser details, and how features are used, to keep the Service secure and improve it.
  • Support conversations and any feedback you give us.

How we use it

  • To create and run your account, bill you and provide support.
  • To send service messages (for example trial reminders, invoices and security notices).
  • To send product news if you agree. Every marketing email or SMS identifies us and has an unsubscribe option, as the Spam Act 2003 (Cth) requires.

Where it is stored

Each dealership's data is kept in its own separate database. Our servers are located in [location]. Some providers we use may process information overseas, including [Stripe — USA; Twilio — USA/Australia; email provider — ...]. [Lawyer: APP 8 cross-border disclosure wording.]

Who we share it with

Only with providers that help us run the Service (hosting, payments, messaging, email), under confidentiality obligations, or where the law requires. We don't sell personal information.

Security

We use encryption in transit, separate databases per dealership, access controls and regular backups. If a data breach is likely to cause serious harm, we will notify affected people and the OAIC under the Notifiable Data Breaches scheme.

Access and correction

You can ask to see or correct the personal information we hold about you by emailing [privacy email]. We'll respond within 30 days.

Complaints

Contact our privacy officer at [privacy email]. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Cookies

This website uses a session cookie for sign-up and billing forms. [List any analytics cookies once added.]