Privacy Policy

1. Introduction

Western Sydney Lift Kits ("we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website at www.westernsydneyliftkits.com.au or engage with our services.

We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). This policy applies to personal information collected by Western Sydney Lift Kits.

2. Information We Collect

Personal Information We Collect:

• Name, email address, and phone number (from contact forms and quote requests)
• Vehicle details including make, model, year, variant, and usage type
• Location information such as suburb and state (to match you with the nearest workshop)
• IP address and browser information (automatically collected)
• Chat conversation history with our TD chatbot
• Order history and purchase information

How We Collect It:

• Quote request forms on our "Build Your Setup" page
• Contact forms and general enquiry submissions
• TD chatbot conversations on our website
• Email correspondence with our team
• Cookies and analytics tools (Google Analytics)
• Customer account registration and login

Information We DON'T Collect:

• Credit card details (these are handled securely by Stripe and we never see or store them)
• Sensitive personal information such as health records, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation
• Information from children under 13 years of age

3. How We Use Your Information

We use your information to:

• Provide accurate quotes for Tough Dog suspension products and services
• Match you with suitable authorized installation workshops in your area
• Process orders and arrange installation bookings
• Send transactional emails such as order confirmations, booking details, and quote updates
• Improve our website functionality and user experience
• Respond to your inquiries and provide customer support
• Comply with our legal obligations under Australian law
• Prevent fraud and maintain the security of our services

We do NOT:

• Sell your personal information to third parties
• Send marketing emails without your explicit consent
• Share your information with third parties except as described in this policy
• Use your information for purposes other than those disclosed

4. Who We Share Your Information With

Service Providers:

We use trusted third-party service providers to help us operate our business. These providers have access to your information only to perform specific tasks on our behalf:

• Supabase (database hosting - USA) - Stores your contact details and order information
• Stripe (payment processing - USA) - Processes credit card payments securely
• Resend (email delivery - USA) - Sends transactional emails on our behalf
• Google Analytics - Analyzes website traffic and user behavior
• Vercel (website hosting) - Hosts our website infrastructure

Workshop Partners:

We share your contact details and vehicle information with our authorized workshop partners to arrange installation services. These workshops are independent businesses and operate under their own privacy policies. We carefully select our workshop partners and ensure they maintain professional standards.

Legal Requirements:

We may disclose your information if required by Australian law, court order, or to protect our legal rights, prevent fraud, or ensure the safety of our users.

5. Data Security

We protect your information by:

• Using encrypted connections (HTTPS/SSL) for all data transmission
• Storing data in secure, encrypted databases (Supabase with row-level security)
• Limiting access to personal information to authorized personnel only
• Implementing regular security updates and monitoring systems
• Using secure authentication methods for customer accounts
• Conducting regular security assessments

Important Security Notice:

While we take reasonable steps to protect your information, no internet transmission or electronic storage method is 100% secure. You acknowledge that you provide your information at your own risk, and we cannot guarantee absolute security against unauthorized access or data breaches.

6. Your Rights (Under Australian Privacy Law)

Under the Australian Privacy Principles, you have the following rights regarding your personal information:

Access Your Information:

You can request a copy of the personal information we hold about you. We will provide this information within 30 days of your request.

Correct Your Information:

If you believe the information we hold about you is inaccurate, incomplete, or out of date, you can request that we correct it.

Delete Your Information:

You can request deletion of your personal information, subject to legal obligations that may require us to retain certain records (such as tax and accounting requirements).

Opt-Out of Marketing:

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

Lodge a Complaint:

If you have concerns about how we handle your personal information, you can lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC).

7. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our website.

We use cookies for:

• Essential functionality: Cookies required for the website to function properly (e.g., shopping cart, user sessions)
• Analytics: Google Analytics to understand how visitors use our site and improve user experience

Managing Cookies:

You can control and delete cookies through your browser settings. However, disabling cookies may affect the functionality of our website and limit your ability to use certain features.

8. Data Retention

We retain your personal information for different periods depending on the type of information and purpose:

• Active quotes: Until the quote expires or is completed (typically 30 days)
• Completed orders: 7 years (to comply with Australian taxation law requirements)
• Chat conversations: 12 months from the date of conversation
• Marketing data: Until you unsubscribe or request deletion
• Customer accounts: Until you request account deletion

9. International Data Transfers

Some of our service providers are based overseas, primarily in the United States (Supabase, Stripe, Resend). This means your personal information may be processed and stored outside Australia.

These providers maintain robust security measures and comply with international data protection standards. By using our services, you consent to your information being transferred to and processed in these countries.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

Any changes will be posted on this page with an updated "Last Updated" date at the top. We encourage you to review this policy periodically. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us: