Privacy
This policy explains the personal information DRVN collects, why it is used, when it is disclosed and how individuals can exercise privacy rights.
This Privacy Policy explains how the operator of DRVN collects, holds, uses and discloses personal information through the DRVN website, marketplace, owner tools, customer accounts, support channels and related services.
It applies to Customers, Owners, website visitors, support contacts and other people whose information is handled by DRVN.
DRVN aims to handle personal information consistently with the Australian Privacy Principles where they apply and to use similar standards as a matter of good practice where the Privacy Act does not legally apply to a particular activity.
Nothing in this policy limits rights available under applicable privacy law.
DRVN does not generally require sensitive information. Do not submit health, criminal, biometric, government identifier or other sensitive information unless it is reasonably necessary for a specific support, safety or legal matter and you are authorised to provide it.
Information may be collected directly when you create an account, purchase a product, submit a listing, save a vehicle, unlock a contact, complete a form, provide documents, post a review or contact support.
DRVN may also receive information from Shopify, Appstle or another membership provider, payment gateways, Mapbox, hosting providers, email services, analytics tools, other users, public sources and authorities where lawful.
DRVN may disclose information to:
Some service providers may process or store information outside Australia, including in countries where they or their infrastructure providers operate. These locations can change over time.
Where the Australian Privacy Principles apply, DRVN will take reasonable steps required by law in relation to overseas disclosures. Review the privacy notices of Shopify, payment providers, Railway, Mapbox, Appstle and other connected providers for their current processing locations.
Payments are processed through Shopify and the selected payment gateway. DRVN receives transaction and order information needed to provide support and deliver access, but does not ordinarily receive or store complete payment-card numbers.
Owner contact information is kept private from general visitors and is disclosed to authenticated Customers who complete an eligible Contact Unlock purchase. Owners choose the approved contact methods they provide.
DRVN may also access this information for support, safety, fraud prevention and legal compliance.
DRVN and connected services may use cookies, local storage, pixels and similar technologies for authentication, cart and checkout functions, preferences, analytics, fraud prevention, security and marketing where enabled.
You can manage browser controls, but blocking essential cookies may prevent account, checkout or saved-car functions from working.
DRVN may send marketing email or SMS where it has consent or another lawful basis. Messages will identify the sender and provide an unsubscribe method. Service, security, transaction and account messages may still be sent where necessary.
You can unsubscribe using the message link or contact support. Owners must not add Customers to their own marketing lists merely because contact details were unlocked.
DRVN uses reasonable technical and organisational safeguards appropriate to the information and risks involved, including controlled access, secure hosting, encrypted connections, authentication, token protection, logging and service-provider controls.
No online system is completely secure. Users must protect account access, use trusted devices and report suspected compromise promptly.
Information is retained only for as long as reasonably necessary for marketplace operation, customer support, fraud prevention, safety, disputes, accounting, legal compliance and enforcement.
Retention periods vary by record type. Information may be de-identified or securely deleted when no longer required, subject to backups and lawful retention duties.
You may request access to personal information DRVN holds about you or ask for inaccurate information to be corrected. Contact privacy@drvnmarketplace.com.au and verify your identity where reasonably required.
DRVN may refuse or limit a request where permitted by law and will explain the reason where required.
You may request account closure or deletion of information that is no longer required. DRVN may retain limited records where reasonably necessary for completed transactions, disputes, fraud prevention, safety, tax, legal obligations or the establishment, exercise or defence of legal claims.
You may browse public marketplace content without identifying yourself. Identification is generally required for accounts, purchases, owner listings, contact delivery, fraud prevention and support because anonymous operation would be impracticable for those services.
DRVN accounts and purchases are intended for adults. Where an event involves a minor, a parent or guardian should manage the account, purchase and owner communication. DRVN does not knowingly invite children to submit private contact or payment information independently.
DRVN will investigate suspected data breaches, take reasonable containment and remediation steps, and make notifications required by the Notifiable Data Breaches scheme where it applies and an eligible data breach is likely to cause serious harm.
Send privacy complaints to privacy@drvnmarketplace.com.au with enough detail to investigate. DRVN will acknowledge and respond within a reasonable period.
If the Privacy Act applies and you are not satisfied after giving DRVN a reasonable opportunity to respond, you may be able to complain to the Office of the Australian Information Commissioner.
DRVN may update this policy when services, providers, legal obligations or data practices change. The current version and effective date will be published on the website. Material changes may also be notified through account or email channels where appropriate.
