PRIVACY POLICY

When you sign up or post a listing we collect your name, email address, phone number, and any photos or descriptions you choose to attach to the listing. When you pay for a listing, Stripe collects your card details directly — we only receive a tokenised reference and the payment status.

We also collect basic technical information automatically: IP address, browser user agent, and page visit logs. We do not use third-party ad-tracking cookies.

We use your information to publish and manage your listings, to let buyers contact you via our relay, to process payments, to prevent abuse and fraud, and to send transactional emails (listing confirmations, enquiry notifications). We do not sell your data.

Account data and listings are stored in Supabase, hosted in the AWS ap-southeast-2 (Sydney) region. Payment data is held by Stripe under their own privacy policy. Emails are sent via Resend.

You can access, correct, or delete your personal data by signing in to your account and editing your listings, or by emailing support@carsandplates.com.au. We will respond within 30 days. You can complain to the Office of the Australian Information Commissioner if you believe your privacy has been breached.

We retain account and listing data while your account is active and for 12 months after account closure, unless we are required by law to keep it longer. Payment records are kept for 7 years to meet tax and accounting obligations.

All traffic to the site is served over HTTPS. Account passwords are hashed. We restrict access to user data to the minimum personnel needed to operate the service.

Cars & Plates is not directed at children under 18. We do not knowingly collect data from minors.

Privacy questions can be sent to support@carsandplates.com.au.