App Privacy Policy

Last updated: 30 October 2026

1. Introduction

Corporate Cars Australia (“Company”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you use the Corporate Cars Australia passenger mobile application (“Application”), our website at https://corporatecarsaustralia.com.au, and related booking and transport services (collectively, the “Services”).

This Privacy Policy also explains your privacy rights and how applicable privacy laws protect you. By using our Services, you acknowledge that you have read this Privacy Policy. Where consent is required by law, we will seek your consent before collecting or using your personal information for the relevant purpose.

We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where applicable.

2. Interpretation and Definitions

Interpretation

Words with capitalised initial letters have meanings defined below. These definitions apply whether the words appear in singular or plural form.

Definitions

• Account means a unique account created by you to access our Application or Services.
• Application means the Corporate Cars Australia passenger mobile application.
• Company means Corporate Cars Australia, operating from 83 Mount Street, North Sydney, NSW 2060, Australia. The relevant legal entity operating the Services should be identified in the final published policy.
• Cookies means small files stored on your computer or mobile device that help websites remember information about your visit.
• Country refers to Australia.
• Device means any device that can access our Services, including a mobile phone, tablet or computer.
• Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, as defined under applicable privacy laws.
• Service Provider means a third-party company or individual that processes information on our behalf or provides services that support our operations.
• Services means the Application, website, passenger booking platform and related transport services.
• Usage Data means information collected automatically when you use our Services, including technical and diagnostic information.
• You means the individual accessing or using our Services, or an authorised representative acting on behalf of a business or other legal entity.

3. Personal Information We Collect

We may collect personal information that is reasonably necessary to provide our booking and transport services, operate our Application, communicate with you and improve your experience.

3.1 Personal and Contact Information

Depending on how you use our Services, we may collect:

• First and last name
• Email address
• Mobile phone number
• Pickup and destination addresses
• Account and profile information
• Company name, corporate account details or booking reference, where applicable
• Information you provide when contacting our support team

3.2 Booking and Journey Information

When you make or manage a booking, we may collect:

• Pickup and destination locations
• Journey date and time
• Passenger numbers and relevant booking requirements
• Flight number, airline and airport details, where applicable
• Selected vehicle type and service class
• Booking status, quotation, fare and trip history
• Assigned driver and vehicle details relevant to your booking
• Messages and communications relating to your journey

We use this information to arrange, manage and deliver your requested transport service.

3.3 Payment Information

We may collect information relating to payments, invoices, refunds and transaction records.

Payments may be processed through third-party payment providers. Where applicable, your payment card details are handled by the relevant payment provider in accordance with its security and privacy practices.

We do not intend to collect or store full payment card details directly unless our payment processing arrangements specifically require and permit this.

3.4 Location Information

With your permission, our Application may access your device's location to support relevant features, such as identifying your pickup location, assisting with booking arrangements or providing journey-related functionality.

Location access depends on the permissions you grant through your device settings. You can disable location access at any time, although some features may not work correctly without it.

Where location information is collected, we use it only for purposes permitted by applicable law and consistent with this Privacy Policy.

3.5 Device and Usage Information

When you access our Services, we may automatically collect certain technical information, including:

• Internet Protocol (IP) address
• Device type and operating system
• Application version
• Browser type and version, where applicable
• Device identifiers and diagnostic information
• Dates and times of access
• Pages or features used
• Error reports, performance data and usage activity

This information helps us maintain, troubleshoot, secure and improve our Services.

4. How We Collect Personal Information

We may collect personal information:

• Directly from you when you register, update your account, request a quotation or make a booking.
• Automatically when you use our Application or website.
• Through communications with our customer support team.
• From your employer, travel coordinator or authorised booking representative when they arrange transport on your behalf.
• From drivers, transport suppliers and service providers where reasonably necessary to manage a booking or journey.
• From third-party platforms that support our booking, payment or communication services, where permitted by law.

Where we collect personal information from another source, we will take reasonable steps to provide any required privacy notification.

5. How We Use Your Personal Information

We may use your personal information for the following purposes:

5.1 Providing Transport Services

• Creating and managing your account.
• Providing quotations and processing bookings.
• Arranging pickups, destinations and journey schedules.
• Coordinating drivers, vehicles and transport suppliers.
• Sending booking confirmations, updates and receipts.
• Managing cancellations, changes, refunds and customer enquiries.
• Providing journey-related assistance and customer support.

5.2 Communication and Notifications

We may contact you by email, telephone, SMS or in-app push notifications to provide:

• Account verification and security messages.
• Booking confirmations and changes.
• Driver assignment and journey status updates.
• Important service announcements.
• Responses to enquiries and support requests.

You may need to enable notifications through your device settings to receive certain Application notifications.

5.3 Payments and Administration

We may use relevant information to process payments, manage invoices, maintain transaction records, administer corporate accounts and meet applicable accounting and legal obligations.

5.4 Security and Fraud Prevention

We may use personal information to verify accounts, detect suspicious activity, investigate suspected fraud, protect our users and maintain the security of our Services.

5.5 Improving Our Services

We may analyse usage trends, diagnose technical problems, evaluate performance and improve the functionality, reliability and user experience of our Application and website.

5.6 Marketing and Promotions

Where permitted by law, we may send you information about promotions, offers or services that may interest you.

You can opt out of marketing communications at any time by following the unsubscribe instructions in the message or contacting us. You may still receive essential service-related communications.

5.7 Legal and Business Purposes

We may use personal information where reasonably necessary to comply with applicable laws, respond to lawful requests, resolve disputes, establish or exercise legal rights, or manage a business transaction.

6. How We Disclose Personal Information

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.

6.1 Drivers and Transport Suppliers

We may share relevant booking details with the driver or transport supplier responsible for your journey. This may include your name, pickup and destination details, contact information and journey requirements.

This sharing enables the driver or supplier to provide the requested transport service.

6.2 Service Providers

We may disclose relevant information to third-party providers that support our operations, including providers of:

• Cloud hosting and data storage
• Booking and dispatch systems
• Payment processing
• Email, SMS and push notifications
• Maps, navigation and location services
• Application performance monitoring and analytics
• Customer support and technical services

These providers may process personal information on our behalf. We take reasonable steps to ensure that appropriate privacy and security protections are in place.

6.3 Corporate Clients and Booking Representatives

If your journey is arranged through an employer, corporate account, travel agent or authorised representative, we may share relevant booking information with that organisation or representative as necessary to manage the booking, administer the account or meet applicable obligations.

6.4 Legal Requirements

We may disclose personal information where required or authorised by law, including to courts, regulators, law enforcement agencies or other public authorities.

6.5 Business Transactions

If we are involved in a merger, acquisition, restructuring, financing or sale of business assets, personal information may be disclosed or transferred as part of that transaction, subject to applicable privacy requirements.

6.6 With Your Consent

We may disclose your personal information for another purpose where you have provided the required consent or where otherwise permitted by law.

We do not disclose personal information to third parties for unrelated purposes unless permitted or required by applicable law.

7. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing our Services, maintaining booking and financial records, resolving disputes, protecting our Services and meeting legal obligations.

Retention periods may vary depending on the type of information and the applicable legal requirements.

When personal information is no longer required, we will take reasonable steps to securely destroy or de-identify it, unless we are required or authorised by law to retain it.

8. Overseas Disclosure and Storage

Some of our technology providers or service providers may store or process information outside Australia.

Where personal information is disclosed overseas, we will take the steps required by applicable privacy laws, which may include assessing the recipient's privacy protections and taking reasonable steps to ensure that personal information is handled appropriately.

The countries in which information may be processed depend on the service providers we use.

If you require further information about overseas disclosures, please contact us using the details in Section 16.

9. Data Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure.

Depending on the information and the systems involved, these measures may include access controls, authentication, secure data transmission, system monitoring and other appropriate technical and organisational safeguards.

However, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

If a data breach occurs, we will respond in accordance with applicable legal requirements, including any obligations under Australia's Notifiable Data Breaches scheme.

10. Access, Correction and Deletion of Personal Information

Subject to applicable law, you may request access to the personal information we hold about you and ask us to correct information that is inaccurate, incomplete, out of date or misleading.

You may also request deletion of your personal information or closure of your account from your customer profile after logging in. Confirm the request with your password in the Account deletion section. We aim to complete deletion within 30 days after verification, subject to required retention and resolution of outstanding transactions or disputes.

To make a request, contact us using the details in Section 16. We may need to verify your identity before processing your request.

We will respond within a reasonable period and in accordance with applicable legal requirements. In some circumstances, we may be unable to delete certain information because we are required or authorised to retain it by law, or because it is necessary to resolve a dispute or establish, exercise or defend a legal claim.

Where we cannot fulfil a request, we will explain the reason where required or appropriate.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functionality, remember preferences, analyse website traffic and improve user experience.

These technologies may include:

Essential cookies: Support website operation, security and core functionality. Preference cookies: Remember settings or choices where supported. Analytics technologies: Help us understand how visitors use our website and identify areas for improvement.

Our mobile Application may use device identifiers, software development kits (SDKs) or similar technologies for functionality, diagnostics, analytics or security, depending on the features implemented.

You can manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

The use of cookies and similar technologies will be subject to applicable consent and privacy requirements.

12. Third-Party Services and Links

Our Services may integrate with or link to third-party services, including payment providers, map services, notification platforms and external websites.

These third parties may collect or process information in accordance with their own privacy policies.

We do not control the privacy practices of independent third parties and encourage you to review their privacy policies where relevant.

Our responsibility for information handled by third parties is subject to applicable law and the arrangements governing those services.

13. Children's Privacy

Our Services are not intended to be used independently by children under the age of 13 to create an account.

We do not knowingly collect personal information directly from children under 13 for account registration without an appropriate legal basis.

A parent, guardian or authorised adult may arrange transport for a child and provide information reasonably necessary for that booking, subject to applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us so we can assess the matter and take appropriate action.

14. Your Privacy Rights and Complaints

Depending on your circumstances and the applicable law, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information, subject to legal exceptions.
• Withdraw consent where processing relies on consent.
• Opt out of direct marketing communications.
• Make a privacy complaint.

To raise a concern, contact us using the details in Section 16.

We will review and respond to your complaint within a reasonable period. If you are not satisfied with our response, you may be able to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Website: https://www.oaic.gov.au/

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, business practices or legal obligations.

When we make changes, we will publish the updated Privacy Policy and revise the “Last updated” date.

Where required by law, we will provide additional notice or seek consent before implementing relevant changes.

We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have any questions, requests or complaints about this Privacy Policy or how we handle your personal information, please contact us.

Corporate Cars Australia Email: bookings@corporatecarsaustralia.com.au

Address: 83 Mount Street North Sydney, NSW 2060 Australia

Website: https://corporatecarsaustralia.com.au/contact-us/

We will review privacy enquiries and respond in accordance with applicable privacy laws.