Privacy Policy

1. About this policy

Sold Fast ABN 14 169 488 386 ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy sets out how we collect, use, disclose, store, and protect your personal information in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles ("APPs") contained in Schedule 1 of that Act.

By using our website (www.soldfast.com.au) or submitting an enquiry, you acknowledge that you have read and understood this policy and consent to the collection, use, and disclosure of your personal information as described below.

If you do not agree with this policy, please do not use our website or services.

2. Anonymity and pseudonymity

Where practicable, you may interact with us anonymously or using a pseudonym — for example, when making a general enquiry via our contact page. However, to receive a vehicle offer or proceed with a sale, we must collect your real name and contact details so we can fulfil our obligations under the transaction.

3. What personal information we collect

We collect only the personal information that is reasonably necessary for our functions and activities. This may include:

• Full name, email address, and mobile phone number
• Suburb and postcode
• Vehicle details including registration number, make, model, year, colour, and odometer reading
• Vehicle ownership, condition, and financial information (e.g. whether finance is owing)
• Information about your selling intent and how you heard about us
• Technical data collected automatically: IP address, browser type and version, device type, pages visited, and session duration

We collect personal information directly from you when you complete our online form, contact us by phone or email, or interact with our website. In some cases we may collect vehicle data from third-party registration and PPSR lookup services.

4. Sensitive information

We do not intentionally collect sensitive information (as defined under the Privacy Act, such as health, racial, or financial account information) unless you voluntarily provide it and it is directly relevant to your enquiry. If you disclose sensitive information, we will handle it with the additional protections required by the APPs and will only use it for the purpose for which it was provided.

5. How we use your personal information

We use your personal information for the primary purpose of processing your vehicle enquiry and completing a purchase transaction. We may also use it for related secondary purposes that you would reasonably expect, including:

• Contacting you about your enquiry or the sale of your vehicle
• Verifying vehicle details via registration and PPSR lookup services
• Assessing vehicle eligibility and making you a fair market offer
• Processing finance payout on your behalf where applicable
• Improving our website, services, and customer experience
• Complying with our legal, regulatory, and insurance obligations
• Sending you marketing communications about our services — you may opt out at any time (see section 9)

We will not use your personal information for any other purpose without your consent, unless permitted or required by law.

6. Disclosure of your personal information

We do not sell your personal information to third parties. We may disclose your personal information to:

• Our employees and contractors involved in processing your enquiry or completing the transaction
• Third-party service providers who assist us in operating our business — including CRM systems, email delivery, payment processing, and website analytics — each bound by confidentiality obligations
• Vehicle data and registration lookup providers (e.g. PPSR, state registration authorities)
• Finance companies for the purpose of obtaining a payout figure where your vehicle is under finance
• Government agencies, regulators, or law enforcement bodies where required or authorised by law
• Professional advisers such as lawyers or accountants, under confidentiality obligations

7. Cross-border disclosure

Some of the third-party service providers we use may store or process your personal information outside Australia, including in the United States. These providers include Google LLC (Google Analytics) and Meta Platforms, Inc. (Meta Pixel). Before disclosing your information to overseas recipients, we take reasonable steps to ensure they are subject to privacy obligations that are substantially similar to the APPs, or we otherwise comply with APP 8 of the Privacy Act.

Please be aware that, where required by law in an overseas jurisdiction, information held by an overseas recipient may be accessed by foreign governments or agencies. By using our website, you consent to your personal information being transferred to these overseas recipients for the purposes described in this policy.

8. Cookies and tracking technologies

Our website uses cookies and similar tracking technologies (including web beacons and pixels) to improve your experience, analyse site traffic, and serve relevant advertising. Technologies we use include:

• Google Analytics — to understand how visitors interact with our website (data may be stored in the United States)
• Meta Pixel — to measure the effectiveness of our advertising on Facebook and Instagram (data may be stored in the United States)
• Session cookies — to maintain your browsing session

You can disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website.

9. Direct marketing

We may use your contact details to send you information about our services, promotions, or news that may be of interest to you. We will only send you marketing communications where permitted by the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth).

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email we send
• Contacting us by email at hello@soldfast.com.au
• Calling us on 1300 370 380

We will action your opt-out request promptly and no later than 5 business days after receipt. Please note that opting out of marketing does not affect our ability to contact you about your active enquiry or transaction.

10. Data quality and accuracy

We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up to date, complete, and relevant. If you believe any information we hold about you is inaccurate or out of date, please contact us so we can correct it (see section 12).

11. Data security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Our security measures include:

• HTTPS encryption across our website
• Access controls limiting who can view your information
• Regular review of our data handling and security practices

We retain personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Enquiry data is generally retained for up to 7 years to comply with Australian business record-keeping requirements. When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it.

In the event of a data breach that is likely to result in serious harm, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

12. Your rights — access and correction

Under the Privacy Act and the APPs, you have the right to:

• Request access to the personal information we hold about you (APP 12)
• Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading (APP 13)
• Opt out of direct marketing at any time (APP 7)
• Lodge a privacy complaint with us or the OAIC

To request access or correction, please contact us in writing (see section 13). We will respond within 30 days. We do not charge a fee for access requests, though reasonable charges may apply if the request requires significant effort to fulfil. We may decline access in limited circumstances permitted by the Privacy Act, and will explain any refusal in writing.

13. Complaints

If you believe we have breached your privacy or handled your personal information in a manner inconsistent with the APPs, you may lodge a complaint with us by contacting our Privacy Officer (see section 14). We take all complaints seriously and will respond within 30 days of receipt.

If you are not satisfied with our response, or we fail to respond within 30 days, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

14. Contact our Privacy Officer

For all privacy-related enquiries, access or correction requests, or complaints, please contact us:

We aim to respond to all privacy enquiries within 30 days.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The updated policy will be posted on this page with a revised date. We encourage you to review this policy periodically. Where a material change is made, we will take reasonable steps to notify you directly.