Privacy Policy

1. Introduction

ash-bison Pty Ltd ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our vehicle rental services.

We operate in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For visitors from the European Economic Area, we also comply with the General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Complete a booking or quote request form
• Create a corporate account
• Contact us via email or other means
• Subscribe to our communications

This information may include:

• Name and contact details (email address, postal address)
• Driver's licence information
• Payment and billing information
• Company details for corporate bookings
• Travel and rental preferences

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information, including:

• IP address and browser type
• Device information
• Pages visited and time spent
• Referring website addresses

3. How We Use Your Information

We use the information we collect to:

• Process and manage your vehicle rentals
• Communicate with you about your bookings
• Provide customer support
• Process payments and maintain financial records
• Improve our website and services
• Comply with legal and regulatory requirements
• Send promotional communications (with your consent)

4. Legal Basis for Processing (GDPR)

For visitors from the European Economic Area, we process your personal data based on:

• Contract: Processing necessary to fulfil our rental agreement with you
• Legal obligation: Processing required to comply with laws and regulations
• Legitimate interests: Processing for business purposes where not overridden by your rights
• Consent: Where you have given explicit consent for specific purposes

5. Information Sharing and Disclosure

We may share your information with:

• Service providers: Companies that assist us in operating our business (payment processors, IT services, roadside assistance providers)
• Insurance providers: In connection with vehicle insurance and claims
• Legal authorities: When required by law or to protect our rights
• Business transfers: In connection with any merger, sale, or acquisition of our business

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments
• Staff training on data protection

While we strive to protect your information, no method of transmission over the internet is completely secure.

7. Data Retention

We retain your personal information for as long as necessary to:

• Fulfil the purposes outlined in this policy
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

Booking records are typically retained for seven years in accordance with Australian tax law requirements.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Request data portability
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the details below.

9. International Transfers

Your information may be transferred to and processed in countries other than Australia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.