1. Introduction

1.1 This Privacy Policy explains how WheelWork Customs (“we”, “our”, “us”) collects, uses, discloses, and protects your personal information.
1.2 It applies to information collected in Victoria, Australia, and covers interactions through our website, checkout, email, phone, social media (e.g. Facebook, Instagram, Messenger), online marketplaces, and in-person events.
1.3 By using our services or providing us with your information, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Identity & Contact Information: Name, email address, phone number, billing and shipping addresses.
2.2 Order & Transaction Data: Items purchased, order history, invoices, payment status.
2.3 Payment Information: Processed securely by third-party providers (e.g. PayPal, bank transfer). We do not store full card details.
2.4 Technical Data: IP address, device/browser information, cookies, and analytics identifiers.
2.5 Communication Data: Support tickets, emails, messages via social media or direct message.
2.6 Vehicle/Fitment Data (if provided): Information you provide to help confirm product compatibility.
2.7 Health or Accessibility Information (if provided): Any health-related data you voluntarily share — handled in accordance with relevant Health Privacy Principles (HPPs).

3. Why We Collect Your Information

3.1 To fulfil orders, arrange shipping, and manage returns or warranty claims.
3.2 To provide customer support and respond to your enquiries.
3.3 To authenticate accounts and send transactional updates (e.g. order confirmation, shipping status, safety/warranty notices).
3.4 To improve website performance, security, and prevent fraud.
3.5 To comply with legal, regulatory, and tax obligations.
3.6 To send marketing communications (with your consent or as permitted by law — see Section 8).

4. Legal Grounds for Collection

4.1 We collect and process only the information that is reasonably necessary for our business functions, in line with the Australian Privacy Principles (APPs).
4.2 If the GDPR or UK GDPR applies to you, we process your data under one or more of the following legal grounds:

• Your consent

• Performance of a contract

• Legal obligation

• Our legitimate interests

5. Disclosure of Personal Information

5.1 We do not sell your personal information.
5.2 We may share limited data with trusted third parties to operate our services, including:

• Payment processors: PayPal, bank institutions

• Logistics providers: Australia Post, StarTrack, CouriersPlease, DHL

• IT, hosting, and analytics: Secure hosting/CDN providers, email services, analytics platforms

• Professional advisers: Legal, tax, or audit services

• Regulatory authorities: Where required by law
  5.3 All third-party providers are required to protect your information and use it only for the purposes for which it was shared.

6. Overseas Processing

6.1 Some service providers may process or store data outside Australia.
6.2 Where applicable (e.g. for EEA or UK users), we use appropriate safeguards such as Standard Contractual Clauses to protect your data.

7. Data Retention

7.1 We retain personal information only as long as necessary to fulfil the purposes outlined in this policy or to comply with legal and accounting obligations.
7.2 When no longer required, your data will be securely destroyed or de-identified.

8. Marketing & Your Choices

8.1 We comply with the Spam Act 2003 (Cth).
8.2 We send marketing communications only with your consent or as otherwise permitted by law.
8.3 You can opt out of marketing emails at any time by clicking the unsubscribe link in the email or contacting us directly.
8.4 Transactional messages (e.g. order confirmations, safety updates, warranty notices) are not considered marketing and cannot be unsubscribed from.

9. Cookies & Analytics

9.1 We use cookies and similar technologies to run our website, remember your preferences, and measure site performance.
9.2 You can manage or block cookies through your browser settings, though some site functionality may be affected.
9.3 For more information, please refer to our Cookie Policy or contact us for a copy.

10. Access & Correction

10.1 You have the right to request access to the personal information we hold about you and to request corrections if it is inaccurate or incomplete.
10.2 We may require identity verification before processing such requests.
10.3 To make a request, please contact us using the details below.

11. Security of Your Information

11.1 We apply reasonable administrative, technical, and physical safeguards to protect your personal data, including:

• Role-based access controls

• Encryption of data in transit

• Secure, hardened hosting environments
  11.2 While no method is 100% secure, we take all reasonable steps to prevent unauthorised access, alteration, disclosure, or loss.

12. Contact Us

12.1 For privacy enquiries, access or correction requests, or complaints, please contact us at:

WheelWork Customs
📧 Email: wheelworkcustoms@gmail.com
📍 Victoria, Australia

12.2 We will respond to all privacy-related enquiries promptly and in accordance with applicable laws.