1. About this policy

Car Dealer Reviews Australia (CDR, we, us or our) is committed to handling personal information responsibly and transparently. This policy explains how we collect, hold, use and disclose personal information when people use our website, submit an enquiry, interact with dealer profiles or communicate with us.

We intend to follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us. Nothing in this policy limits any rights available under applicable law.

2. Information we may collect

Contact and business information, including a name, email address, telephone number, dealership name, job title and information included in an enquiry or correction request.

Technical and usage information, including pages viewed, dealer profiles viewed, outbound dealer clicks, approximate location derived from network information, device type, browser type, operating system, referrer, session information, timestamps, search filters and interaction events.

Correspondence and records of dealings with CDR, including editorial submissions, correction requests, commercial enquiries, consent records and subscription administration information.

We do not intentionally collect precise geolocation, government identifiers, payment card details or sensitive information through ordinary website browsing. Payment providers may process payment information under their own privacy terms if payment functionality is introduced.

3. How information is collected

Information may be provided directly through forms, email, telephone or other communications; collected automatically through first-party analytics, cookies or similar technologies; supplied by a dealership or authorised representative; or obtained from public sources for editorial and directory purposes.

Where practical, people may browse CDR without identifying themselves. Identification is generally required when a person asks us to respond, update a record, manage a commercial relationship or exercise a privacy right.

4. Purposes of collection and use

We may use information to operate and secure the website; respond to enquiries; maintain dealer profiles; research and publish editorial content; administer Featured Dealer subscriptions; measure profile views and outbound referrals; prepare aggregated dealer performance reports; improve search and user experience; prevent misuse; comply with law; and manage disputes or complaints.

We will not use personal information for a materially different purpose unless permitted by law or appropriate consent has been obtained.

5. Analytics and dealer reporting

CDR uses Google Analytics 4 (a service of Google LLC, USA — see our Cookie Policy) to record page views, profile views, article views, outbound clicks, search behaviour, referral channels and device categories. We aim to minimise the information collected and do not design dealer reports to identify individual visitors.

Participating dealerships may receive aggregated measures such as profile views, website clicks, click-through rates, broad referral sources, device categories and approximate geographic areas. These reports are measures of visibility and referral activity, not proof of a sale or customer identity.

Dealer reports contain aggregated counts only — for example, how many visitors viewed a profile, clicked through to the dealership’s website or revealed its phone number, and the general source of those visits — and do not identify individual visitors.

6. Cookies and similar technologies

CDR may use essential, preference and analytics cookies or local storage. More information is set out in our Cookie Policy. Browser controls may be used to restrict cookies, although some features may work differently.

7. Disclosure

We may disclose information to hosting, security, form-processing (including Netlify, Inc. (USA), which processes website forms), analytics (including Google LLC (USA)), email, payment, professional advisory and technology service providers; to a person authorised by the individual; in connection with a business restructure; or where required or authorised by law.

We do not sell personal information. Service providers may only receive information reasonably required to perform their functions and may operate in Australia or overseas.

8. Overseas handling

Some technology providers — including Google LLC and Netlify, Inc. in the United States — may store or process information outside Australia. Where applicable, we take reasonable steps to assess providers and protect information, but overseas laws may differ from Australian law.

9. Security and retention

We use reasonable administrative, technical and organisational safeguards. No internet service can guarantee absolute security.

Information is retained only for as long as reasonably required for the purpose collected, legal obligations, security, dispute management and legitimate business records. We may aggregate or de-identify analytics information for longer-term trend reporting.

10. Access, correction and complaints

A person may request access to or correction of personal information held by CDR, subject to lawful exceptions. We may need to verify identity before responding.

Privacy questions or complaints may be sent through Contact CDR. We will investigate and respond within a reasonable time. A person may also contact the Office of the Australian Information Commissioner where applicable.

11. Direct marketing

CDR will only send commercial electronic messages where permitted, will identify the sender and will provide a functional unsubscribe mechanism. An enquiry alone will not automatically be treated as consent to unrelated ongoing marketing.

12. External websites and children

CDR links to dealer and other third-party websites. Their privacy practices are outside our control.

CDR is intended primarily for adults. We do not knowingly seek personal information from children under 16.

13. Changes

We may update this policy to reflect legal, operational or technology changes. The current version and review date will appear on this page.