PRIVACY POLICY

The Automotive Cartel PTY LTD

Last updated: 15 October 2026

1. INTRODUCTION

The Automotive Cartel PTY LTD (“The Automotive Cartel”, “we”, “us” or “our”) operates this online store and website, including the information, content, features, tools, products and services made available through it (collectively, the “Services”).

We are based in Sydney, New South Wales, Australia, and sell automotive performance parts, aftermarket products, merchandise, apparel and related accessories to customers within Australia.

Our store is powered by Shopify, which provides the e-commerce platform that enables us to offer our products and Services.

This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal information when you visit our website, browse products, make a purchase, create an account, contact us or otherwise interact with our Services.

This Privacy Policy should be read alongside our Terms and Conditions. If there is a conflict between our Terms and Conditions and this Privacy Policy concerning the collection, use, storage or disclosure of personal information, this Privacy Policy will apply to that subject to the extent of the inconsistency.

We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to our business.

Please read this Privacy Policy carefully to understand our privacy practices.

2. WHAT IS PERSONAL INFORMATION?

In this Privacy Policy, “personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, as defined under applicable Australian privacy law.

Personal information does not include information that has been genuinely de-identified so that an individual is no longer reasonably identifiable.

The types of personal information we collect depend on how you interact with our Services, the information you choose to provide and the technologies used by our store.

3. PERSONAL INFORMATION WE COLLECT

3.1 Contact Information

When you place an order, contact us or otherwise interact with our store, we may collect:

• Your name.
• Email address.
• Telephone number.
• Billing address.
• Shipping or delivery address.
• Other contact details you voluntarily provide.

3.2 Payment and Financial Information

When you purchase products from our store, payment-related information may be collected or processed, including:

• Payment method.
• Transaction details and purchase amounts.
• Payment confirmations and transaction identifiers.
• Billing information.
• Relevant payment verification information.

Payments are processed through the payment methods and providers available at checkout. Depending on the payment method, the relevant provider may collect and process your payment card or financial account details.

We do not intend to store complete payment card details directly unless this is specifically required by a service we use and handled in accordance with applicable security requirements.

Payment providers may handle your information under their own privacy policies and security arrangements.

3.3 Account Information

If you create an account with our store, we may collect information such as your username, account credentials, preferences, settings and other information required to manage your account.

You are responsible for maintaining the confidentiality of your login credentials and should not share them with others.

3.4 Transaction and Shopping Information

We may collect information relating to your interactions with our store, including:

• Products you view or search for.
• Products added to your shopping cart or wishlist, where that functionality is available.
• Products purchased, returned, exchanged or cancelled.
• Order history and transaction records.
• Product preferences and interactions with our website.
• Delivery and fulfilment information.

This information helps us process orders, provide customer support and improve the shopping experience.

3.5 Communications and Enquiries

When you contact us, we may collect the information you provide in your communications, including enquiries about products, vehicle compatibility, orders, shipping, returns, refunds or complaints.

If you voluntarily provide vehicle information, such as your vehicle's make, model, year, engine or modifications, we may use that information to help respond to your product compatibility enquiries.

3.6 Device and Usage Information

When you visit our website, certain information may be collected automatically by Shopify and other technologies used to operate our store, including:

• IP address.
• Browser type and version.
• Device type and operating system.
• Network information and technical identifiers.
• Pages and products viewed.
• Referring websites.
• Website interactions and browsing activity.
• Dates, times and duration of visits.
• Cookie identifiers and similar technical information.

The information collected depends on your device, browser settings, privacy preferences and the services enabled on our store.

4. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information from the following sources.

Directly from you: When you place an order, create an account, complete a checkout, contact us, submit a review or voluntarily provide information through our website.

Automatically through our Services: Through cookies, server logs, website functionality and similar technologies when you browse or interact with our store.

From service providers: From Shopify and other service providers that help us operate our store, process payments, manage transactions, provide delivery services or support website functionality.

From third parties: Where relevant and lawful, we may receive information from payment providers, fraud prevention services, delivery providers or other third parties involved in providing our Services.

We take reasonable steps, where required by applicable law, to ensure that you are informed about the collection of personal information, including relevant collection purposes and other required matters.

5. HOW WE USE PERSONAL INFORMATION

We may collect, use and process personal information for the following purposes.

5.1 Providing and Improving Our Services

We use personal information to:

• Process and fulfil orders.
• Arrange shipping and delivery.
• Process payments and refunds.
• Manage customer accounts.
• Provide order confirmations and delivery updates.
• Respond to customer enquiries.
• Assist with product compatibility questions.
• Manage returns, complaints and product-related issues.
• Remember relevant shopping preferences and settings.
• Improve our website, product listings and customer experience.
• Understand how customers interact with our store.

5.2 Marketing and Advertising

Where permitted by applicable law, we may use personal information to send promotional communications, provide information about our products, measure marketing effectiveness and display advertising.

Depending on the services enabled on our store and your privacy choices, information about your browsing activity or previous purchases may be used to personalise product recommendations or advertising.

We will obtain consent where required by applicable law and provide appropriate ways to opt out of direct marketing.

5.3 Security and Fraud Prevention

We may use personal information to:

• Verify transactions and payment activity.
• Detect and investigate suspected fraud.
• Prevent unauthorised access to accounts.
• Protect customers and our business against unlawful or harmful activity.
• Maintain the security and integrity of our website.
• Investigate suspected misuse of our Services.

5.4 Customer Communications

We use personal information to respond to enquiries, provide customer support, resolve order issues and communicate with you about our business relationship.

We may also send essential transactional communications relating to purchases, payments, deliveries, account security or other matters associated with the Services.

5.5 Legal and Regulatory Requirements

We may collect, use or disclose personal information where reasonably necessary to comply with applicable laws, tax and accounting obligations, lawful requests from government authorities, legal proceedings or other legal requirements.

We may also use relevant information to establish, exercise or defend legal claims, enforce our Terms and Conditions or protect our legal rights.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website and Shopify may use cookies, pixels, tags and similar technologies to operate the store and understand how visitors use it.

These technologies may be used to:

• Maintain shopping cart and checkout functionality.
• Remember certain preferences.
• Support website security.
• Measure website traffic and performance.
• Understand customer interactions.
• Support product recommendations.
• Measure advertising effectiveness.
• Provide personalised advertising where enabled and permitted.

Some cookies are necessary for the operation of our store. Others may support analytics, personalisation or advertising.

You may be able to manage cookies through your browser settings and any privacy controls made available on our website. Blocking certain cookies may affect website functionality.

The specific cookies and tracking technologies used depend on the Shopify features, applications and integrations enabled on our store.

7. MARKETING AND COMMUNICATION PREFERENCES

We may send promotional emails or other commercial electronic messages where permitted by applicable law.

Where required, we will obtain your consent before sending marketing communications. Australian commercial electronic messages must comply with applicable requirements, including consent, sender identification and unsubscribe rules.

You can unsubscribe from promotional emails using the unsubscribe facility included in the message or by contacting us at automotive.cartel.group@gmail.com.

We will process unsubscribe requests within the timeframe required by applicable law.

Unsubscribing from marketing communications will not necessarily prevent us from sending essential, non-promotional communications concerning existing orders, payments, deliveries, account security or customer support.

We will handle your marketing preferences in accordance with applicable privacy and spam laws.

8. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to third parties where reasonably necessary for the purposes described in this Privacy Policy, subject to applicable law.

These third parties may include:

8.1 Shopify

Shopify hosts our online store and provides services that support checkout, order management, website functionality, security and other e-commerce operations.

Information submitted through our store may be transmitted to Shopify and processed by Shopify and its relevant service providers.

8.2 Payment Providers

Payment providers may receive the information required to process transactions, verify payments, prevent fraud and provide payment-related services.

8.3 Shipping and Delivery Providers

We may provide relevant information, such as your name, delivery address and contact details, to couriers and logistics providers to fulfil your orders.

8.4 Technical and Business Service Providers

We may disclose relevant information to providers that support website hosting, information technology, security, analytics, customer support, cloud storage, accounting or other business functions.

8.5 Marketing and Advertising Partners

Where marketing or advertising services are enabled, we may share or permit the collection of relevant information through Shopify or third-party technologies to measure advertising performance, provide product recommendations or deliver targeted advertising.

Depending on your location, the services involved and applicable law, you may have choices concerning certain advertising-related uses or disclosures of your information.

We do not assume that every advertising or analytics service is enabled on our store. The specific services involved depend on our actual store configuration.

8.6 Legal Requirements and Business Transactions

We may disclose personal information where required or authorised by law, in response to valid legal requests, to protect our rights or the rights of others, or in connection with a proposed or completed business sale, merger, restructuring or similar transaction.

We may also disclose information where you direct us to do so or where you have otherwise provided the required consent.

We do not sell personal information to third parties in exchange for payment. Any sharing of information for advertising or other purposes will be handled in accordance with applicable law and the circumstances of the disclosure.

9. OUR RELATIONSHIP WITH SHOPIFY

Our Services are hosted by Shopify, which collects and processes personal information relating to your access to and use of our store to provide and improve its services.

Information you submit through our store may be transmitted to Shopify and its relevant service providers. Those providers may operate in countries other than Australia.

Shopify also offers enhanced features and services that may use information about interactions with our store, other merchants and Shopify's platform to support business insights, personalisation, advertising or other platform functionality.

Where these features are enabled, Shopify may process personal information for its own purposes and in accordance with its applicable privacy policies. Shopify may be responsible for responding to certain requests relating to information it processes independently of our instructions.

For more information about how Shopify handles consumer personal information, please review the Shopify Consumer Privacy Policy.

You can also visit the Shopify Privacy Portal to learn more about Shopify's privacy practices and available privacy choices.

Our handling of customer information remains subject to the privacy obligations applicable to our business.

10. THIRD-PARTY WEBSITES AND LINKS

Our website may contain links to websites, platforms or services operated by third parties.

If you follow a link to a website we do not control, you should review that website's privacy policy, security information and terms of use.

We are not responsible for the independent privacy or security practices of third-party websites, except to the extent required by applicable law.

Information you post publicly or on third-party social media platforms may be visible to other users and may be used by those platforms in accordance with their own policies.

The inclusion of a third-party link does not necessarily constitute an endorsement of that website or its operator.

11. CHILDREN'S PRIVACY

Our Services are not intended to encourage children to provide personal information unnecessarily.

We do not knowingly collect personal information from children where doing so would be unlawful.

If you are a parent or legal guardian and believe a child has provided personal information to us in circumstances where it should not have been collected, please contact us using the details in this Privacy Policy.

We will assess the matter and take appropriate action where required by applicable law.

12. INTERNATIONAL DATA TRANSFERS

Although we operate in Australia and currently sell our products only within Australia, Shopify and other service providers may store, access or process personal information outside Australia.

The countries involved depend on the providers, services and infrastructure used to operate our store.

Where the Australian Privacy Principles apply to our business, we will take the steps required by applicable law in relation to overseas disclosures of personal information.

We do not represent that all personal information is stored exclusively in Australia.

13. SECURITY OF PERSONAL INFORMATION

We take reasonable steps, appropriate to the circumstances, to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.

These steps may include using reputable service providers, restricting access to information where appropriate and relying on security measures provided by Shopify and other relevant services.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of information transmitted over the internet or stored electronically.

You should take reasonable precautions when using our Services, including protecting your account credentials and avoiding the transmission of sensitive information through unsecured channels.

If we become aware of a data breach involving personal information, we will respond in accordance with applicable legal obligations, including any applicable requirements under the Notifiable Data Breaches scheme.

14. RETENTION OF PERSONAL INFORMATION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including:

• Processing and fulfilling orders.
• Maintaining relevant transaction and accounting records.
• Providing customer support.
• Managing returns, refunds and disputes.
• Maintaining account functionality.
• Meeting applicable legal and regulatory obligations.
• Preventing fraud and protecting our legal rights.

The retention period depends on the nature of the information, the reason it was collected and any applicable legal requirements.

When personal information is no longer required and there is no lawful reason to retain it, we will take reasonable steps to destroy it or ensure it is de-identified, where required and practicable.

Some information may remain in backups or records maintained by our service providers in accordance with their retention practices and applicable requirements.

15. ACCESS TO AND CORRECTION OF PERSONAL INFORMATION

Depending on the applicable law and circumstances, you may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

Where the Australian Privacy Principles apply, we will handle access and correction requests in accordance with our applicable obligations.

To make a request, contact us at automotive.cartel.group@gmail.com and describe the information you wish to access or correct.

We may need to verify your identity before processing your request to protect against unauthorised access or disclosure.

We will assess your request and respond within the timeframe required by applicable law. If we are legally permitted to refuse a request, we will provide an explanation where required.

We will not charge you simply for making an access or correction request where prohibited by applicable law.

16. DELETION AND OTHER PRIVACY REQUESTS

You may contact us to ask about the personal information we hold about you or to request deletion of information where available under applicable law.

Deletion is not available in every circumstance. We may need to retain certain information to complete transactions, comply with legal obligations, maintain required business records, prevent fraud or establish, exercise or defend legal claims.

Where a deletion request relates to information processed independently by Shopify, you may also need to contact Shopify or use its Privacy Portal.

We will consider requests in accordance with applicable law and explain any relevant limitations where required.

17. PRIVACY COMPLAINTS

If you have a concern or complaint about how we have collected, used, stored or disclosed your personal information, please contact us using the details below.

Please include a description of your concern and sufficient information for us to investigate the matter.

We will review your complaint, make reasonable enquiries and respond within a reasonable timeframe.

Where the Privacy Act 1988 (Cth) applies to our business, we will handle privacy complaints in accordance with our applicable obligations.

If you are dissatisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner (OAIC), subject to its requirements.

Further information is available at the Office of the Australian Information Commissioner.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business practices, website functionality, service providers or applicable legal requirements.

The updated version will be published on this page, and the “Last updated” date will be amended accordingly.

Where required by law, we will provide notice of material changes.

We encourage you to review this Privacy Policy periodically to remain informed about how we handle personal information.

19. CONTACT INFORMATION

If you have any questions about this Privacy Policy, our privacy practices or the handling of your personal information, or if you wish to make a privacy request or complaint, please contact us using the details below.

Business name: The Automotive Cartel PTY LTD

Email: automotive.cartel.group@gmail.com

Telephone: +61 438 278 576

Business address: 17–23 Chadderton Street, Cabramatta NSW 2166, Australia

We will make reasonable efforts to respond to enquiries within an appropriate timeframe.

This Privacy Policy is intended to explain our privacy practices and should be read consistently with applicable Australian privacy laws and any other mandatory legal requirements.