Privacy Policy
Privacy Statement
1. About this Privacy Policy
Street Fleet Pty Ltd trading as Streetfleet (Streetfleet, we, us or our) is committed to protecting personal information and handling it in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and other applicable privacy laws.
This Privacy Policy explains the kinds of personal information we collect and hold, how we collect, use and disclose it, how we protect it, and how you may access or correct your information or make a privacy complaint.
This policy applies to personal information handled through our fleet management, vehicle leasing, novated leasing and related services, websites, mobile applications, digital platforms, portals, forms and interactions with our team.
2. What is personal information?
Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true and whether or not it is recorded in a material form.
Sensitive information is a category of personal information and includes information such as health information, biometric information used for certain purposes, racial or ethnic origin, political or religious beliefs, trade union membership, sexual orientation or practices, and criminal record information.
We only collect sensitive information where it is reasonably necessary for our functions or activities and we have consent or another legal basis permits the collection.
3. The personal information we collect and hold
The personal information we collect depends on your relationship with us and the products or services you use. It may include:
- identity information, such as your name, date of birth, signature and details contained in identification documents, including a driver licence or passport;
- contact information, such as your residential or postal address, email address and telephone number;
- employment and salary information relevant to a novated lease or salary packaging arrangement;
- financial and transaction information, such as bank account details, payment information, financial position, vehicle expenses and transaction history;
- credit-related information where relevant to an application or service, including information obtained from financiers, credit providers or credit reporting bodies;
- vehicle, leasing and fleet information, including vehicle details, usage, odometer readings, fuel, toll, maintenance, service, registration, insurance, accident and disposal information;
- business and professional information, including your employer or organisation, role, business contact details and information relevant to a fleet or supplier relationship;
- account, portal and customer relationship management information, including enquiries, preferences, support requests, service history and records of our communications with you;
- information you submit through an application, quote request, calculator, form, survey, promotion, competition, feedback process or communication with us;
- images, audio or video recordings, including photographs taken at events and call recordings where notice is provided or otherwise permitted by law;
- digital and technical information, such as IP address, browser and device information, operating system, referring website or campaign, pages viewed, interaction data, approximate location, cookie or advertising identifiers and conversion events; and
- any other personal information you provide to us or that we are authorised or required by law to collect.
4. How we collect personal information
Where practicable, we collect personal information directly from you. We may collect information when you:
- apply for, enquire about or use our fleet management, leasing, novated leasing or related services;
- request a quote, use an online calculator, complete a form or create or use an account, portal or mobile application;
- contact or communicate with us in person, by telephone, email, online chat, social media or another channel;
- attend an event, participate in a survey or promotion, provide feedback or make a complaint; or
- visit or interact with our websites, advertisements or digital services.
We may also collect personal information from third parties where permitted by law, including:
- your employer, salary packaging provider or an organisation through which services are provided;
- financiers, credit providers, credit reporting bodies, insurers, brokers and professional advisers;
- vehicle dealers, manufacturers, repairers, maintenance providers, accident management providers, registration authorities, fuel and toll providers, roadside assistance providers and other suppliers involved in providing or administering services;
- identity verification, fraud prevention, information technology, analytics, marketing and data service providers;
- our clients, contractors, suppliers, related entities and business partners; and
- publicly available sources and government or regulatory bodies.
If we receive unsolicited personal information, we will determine whether we could have collected it under the APPs. If not, and where lawful and reasonable to do so, we will destroy or de-identify it.
5. Collection notices and information about other people
We may provide a collection notice at or before the time we collect personal information, or as soon as practicable afterwards. A collection notice may provide more specific information about a particular product, service, form or interaction and should be read together with this policy.
If you provide us with personal information about another person, you must be authorised to do so. You should make that person aware of this Privacy Policy and any relevant collection notice.
6. Why we collect, hold, use and disclose personal information
We collect, hold, use and disclose personal information where reasonably necessary for our functions and activities, including to:
- verify your identity and communicate with you;
- assess enquiries and applications and arrange, provide, administer and manage fleet, vehicle, leasing, novated leasing and related services;
- obtain quotes, arrange finance, procure and deliver vehicles, manage agreements, payments, deductions, running costs and end-of-lease or disposal activities;
- provide customer service, account management, roadside, maintenance, insurance, accident or other support;
- create and administer accounts and records in our customer relationship management systems, portals, applications and other business systems;
- manage relationships with employers, clients, suppliers, finance providers and business partners;
- analyse, improve and develop our services, systems, digital experiences, customer journeys and business operations;
- conduct research, segmentation, reporting and analytics;
- prevent, detect and investigate fraud, misuse, security incidents and unlawful activity;
- manage risk, quality, compliance, complaints, disputes and legal claims;
- comply with legal, regulatory, contractual, audit and reporting obligations;
- send service communications and, where permitted, marketing communications; and
- carry out another purpose disclosed at the time of collection, with your consent, or as authorised or required by law.
If you do not provide requested personal information, we may be unable to process an application, provide some products or services, administer an arrangement, respond to an enquiry or provide the full functionality of a website, portal or application.
7. Credit-related information
Where relevant to an application or service, we may collect and disclose credit-related information. This may include identification information, consumer or commercial credit liability information, repayment history, default information, payment information, financial hardship information, court or insolvency information, publicly available information, credit scores or assessments, and information derived from credit reporting information.
We may exchange credit-related information with finance providers, credit providers, credit reporting bodies, insurers, service providers and other parties involved in assessing, arranging, administering or enforcing finance or related services, where permitted by law.
A finance provider or credit provider may give you a separate privacy and credit reporting statement. That statement explains its own handling of personal and credit-related information, including the credit reporting bodies it uses and your rights in relation to that information.
8. Who we disclose personal information to
We may disclose personal information to recipients where reasonably necessary for the purposes described in this policy, where you have consented, or where disclosure is authorised or required by law. Recipients may include:
- our employees, contractors, authorised representatives and related bodies corporate;
- your employer, salary packaging provider, client organisation or another party involved in a novated lease or fleet arrangement;
- financiers, credit providers, credit reporting bodies, insurers, brokers, underwriters and payment service providers;
- vehicle dealers, manufacturers, suppliers, repairers, maintenance providers, accident management providers, roadside assistance providers, registration authorities, fuel and toll providers and disposal providers;
- identity verification, fraud prevention, information technology, hosting, cloud, communications, document management, customer support and cybersecurity providers;
- analytics, research, marketing, advertising and social media providers;
- professional advisers, auditors, consultants, debt recovery providers and dispute resolution providers;
- government agencies, courts, tribunals, regulators, law enforcement bodies and other persons where authorised or required by law; and
- a prospective or actual purchaser, investor or successor where our business, assets or operations are reorganised, sold, transferred or merged, subject to appropriate confidentiality and privacy safeguards.
We take reasonable steps appropriate to the circumstances to require service providers to handle personal information securely and only for authorised purposes.
9. Direct marketing
Where permitted by law, we may use personal information to tell you about Streetfleet products, services, offers and information that may be relevant to you. We may communicate by email, SMS, telephone, mail, social media, online advertising or other channels.
You may opt out of direct marketing from us at any time by using the unsubscribe or preference option in the communication or by contacting us using the details in section 20. We will action opt-out requests in accordance with applicable law. Opting out of marketing will not prevent us from sending service-related communications that are necessary to administer a product, service or relationship.
You may also ask us, where applicable, to identify the source of the personal information we use for direct marketing, unless it is impracticable or unreasonable to provide that information.
10. Digital advertising and audience matching
We may use personal information for digital advertising, audience matching and measurement activities. This may include sharing certain identifiers, such as an email address or phone number, in a hashed or otherwise protected form with advertising and media platforms such as Meta, Google,Microsoft Bing, Reddit, Tiktok, Apple and LinkedIn.
These platforms may use the information to help match you with an existing account, deliver advertising to relevant audiences, create or measure advertising audiences, and help us understand the effectiveness of our advertising. We take reasonable steps to limit the personal information used or disclosed for these purposes to what is reasonably necessary.
Hashing is a security measure and does not necessarily mean that information is anonymous or de-identified. We continue to handle identifiers used for audience matching as personal information where the Privacy Act applies.
We do not intend to provide sensitive information, financial or credit information, bank account details, identification document details, salary information, health information or detailed lease information to advertising platforms for audience matching.
You may be able to manage advertising preferences through the privacy and advertising settings of the relevant platform. You may also contact us to opt out of direct marketing by Streetfleet.
11. Websites, cookies, pixels and analytics
When you use our websites or digital services, we may collect technical and usage information such as your IP or server address, browser and device type, operating system, referring website or campaign, pages visited, interactions, date and time of access, approximate location, cookie or advertising identifiers and conversion events.
We use this information to operate and secure our websites and digital services, remember preferences, understand usage, improve the customer experience, measure marketing performance and, where permitted, support relevant advertising.
We may use cookies, pixels, tags, software development kits and similar technologies. Some are set by us and others are provided by third parties, including analytics, advertising and social media providers. These technologies may collect or receive information about your interactions with our websites or advertisements.
We may use services such as Google Analytics and advertising technologies offered by Meta, Google, Salesforce, Bing and LinkedIn. Third-party providers handle information under their own terms and privacy policies as well as any contractual arrangements with us.
You can usually manage or block cookies through your browser or device settings and may be able to manage advertising preferences through the relevant provider. Blocking some technologies may affect the functionality or personalisation of our websites or digital services.
We periodically review tracking technologies and take reasonable steps to configure them so that collection and disclosure are limited to what is reasonably necessary. We seek to prevent sensitive or unnecessary form data from being transmitted to advertising platforms.
12. Automated systems and AI-enabled tools
We may use automation, analytics and AI-enabled tools to support service delivery, workflow prioritisation, customer support, fraud and risk identification, reporting, insights and recommendations. These tools may process personal information where reasonably necessary for an authorised purpose.
Where we arrange for a computer program to use personal information to make, or do something substantially and directly related to making, a decision that could reasonably be expected to significantly affect an individual's rights or interests, we will provide the information required by applicable privacy law, including the kinds of decisions involved and the kinds of personal information used, where required.
We take reasonable steps to apply appropriate governance, access controls, testing and human oversight having regard to the nature and risk of the use.
13. Security and retention
We take reasonable technical and organisational steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Depending on the nature of the information and the circumstances, measures may include access controls, authentication, network and system security, encryption, monitoring, staff and contractor confidentiality obligations, policies, training and supplier controls.
No method of transmission or storage is completely secure. We regularly review our safeguards and respond to identified risks, but we cannot guarantee absolute security.
We retain personal information only for as long as reasonably necessary for the purposes for which it may be used or disclosed, and to meet legal, regulatory, contractual, accounting, audit and dispute-resolution requirements. When information is no longer required, we take reasonable steps to destroy it or ensure it is de-identified, unless retention is required by law or a court or tribunal order.
14. Data breaches
We maintain processes to identify, assess, contain and respond to suspected or actual data breaches. Where a breach is likely to result in serious harm and the Notifiable Data Breaches scheme applies, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law. Notifications may include recommendations about steps affected individuals should take in response.
15. Data quality
We take reasonable steps to ensure that personal information we collect is accurate, up to date and complete, and that information we use or disclose is accurate, up to date, complete and relevant having regard to the purpose of the use or disclosure. You can help by telling us when your information changes or if you believe it is inaccurate.
16. Access to personal information
You may request access to personal information we hold about you by contacting us. We may need to verify your identity before providing access.
We will respond within a reasonable period and generally within 30 days. Access will usually be provided in the manner requested if it is reasonable and practicable. We may refuse access where an exception under the Privacy Act applies. If we refuse access, we will provide written reasons where required and information about available complaint mechanisms.
We do not charge for making an access request. We may charge reasonable costs associated with providing access, such as locating, retrieving or reproducing archived information, where permitted. We will discuss any proposed charge with you first.
17. Correction of personal information
You may ask us to correct personal information we hold if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading. We will take reasonable steps to correct the information where appropriate and will respond within a reasonable period.
If we refuse to make a requested correction, we will provide written reasons where required and information about available complaint mechanisms. You may ask us to associate a statement with the information noting that you consider it inaccurate, out of date, incomplete, irrelevant or misleading.
18. Privacy complaints
If you have a concern or complaint about how we have handled personal information, please contact us using the details below and provide enough information for us to understand and investigate the matter.
We will acknowledge and investigate the complaint and aim to provide a response within 30 days. If we need more time, we will explain why and provide an updated timeframe.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. Information about making a privacy complaint is available at www.oaic.gov.au.
19. Contact us
For privacy enquiries, access or correction requests, direct marketing opt-outs or complaints, contact:
Streetfleet Privacy Contact
Street Fleet Pty Ltd trading as Streetfleet
Attention: Privacy Officer
Email: info@streetfleet.com.au
Telephone: 1300 273 359
Post: Level 2, 111 Gawler Place, Adelaide SA 5000
Website: www.streetfleet.com.au
20. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be published on our website with a revised effective date. If changes are material, we may take additional steps to notify affected individuals where appropriate.