Privacy Policy

1. Information We Collect

We collect information you provide directly when you use our services:

• Account information — name, email address, phone number, state, and role (customer or wrecker).
• Parts request details — vehicle make, model, year, part descriptions, and uploaded photos.
• Wrecker business details — business name, ABN/ACN, address, operating hours, and warranty conditions.
• Messages and communications — chat messages between customers and wreckers.
• Usage data — IP address, browser type, pages visited, and timestamps. This data is collected automatically.

2. How We Use Your Information

• To match your parts requests with relevant wreckers based on vehicle make.
• To send email notifications about new quotes, messages, and request updates.
• To enable communication between customers and wreckers.
• To process payments (when available via Stripe).
• To improve our platform, fix issues, and develop new features.
• To comply with legal obligations.

3. How We Share Your Information

We share your information only when necessary to provide our services:

• With matched wreckers — when you submit a parts request, relevant wreckers receive your request details (vehicle info, part description, and contact information) so they can send you a quote.
• With service providers — we use third-party services to operate our platform, including Supabase (database and authentication), Resend (email notifications), and Stripe (payments, coming soon).
• Legal requirements — we may disclose information if required by law or to protect our rights.

We never sell your personal information to third parties.

4. Data Storage & Security

• Your data is stored on Supabase, which runs on AWS infrastructure in secure data centres.
• All data is encrypted in transit (HTTPS/TLS) and at rest.
• Row-level security (RLS) policies ensure users can only access data they are authorised to see.
• Uploaded photos are stored in private Supabase Storage buckets with signed URLs.

While we take reasonable steps to protect your data, no system is 100% secure. We encourage you to use a strong, unique password for your account.

5. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access your personal data via your account profile page.
• Correct inaccurate information by updating your profile.
• Request deletion of your account and associated data by contacting us.
• Opt out of marketing emails at any time.

To exercise any of these rights, email us at privacy@partsclub.com.au.

6. Cookies

PartsClub uses essential cookies for authentication and session management (provided by Supabase). We do not currently use analytics or tracking cookies.

7. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last updated" date. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.

8. Contact Us

If you have questions about this privacy policy or how we handle your data, contact us at privacy@partsclub.com.au.