Privacy

If you asked a broker, buyers’ agent or finance broker to find you a car, your relationship is with them. They decide what to collect and how long to keep it. Dealadesk Pty Ltd operates the software they use, and holds the information on their behalf.

So a request to see, correct or delete your information goes to the business you dealt with. They can act on it themselves. If you cannot reach them, write to us and we will help.

If you are buying a car: your name, email address, mobile number, postal address, suburb and postcode, and what you told the business about the car you want, your trade-in, your finance and your delivery. Notes they take about your enquiry.

If a car is being registered to you: your date of birth and driver licence number, state and expiry. This is required to register a vehicle and is given to the dealership supplying it, because they lodge the registration. No photograph of a licence is kept. The screens that once asked for one were removed in September 2026.

If you supply supporting documents such as proof of income, insurance, or proof that you own the car you are trading: the file itself, for fourteen days.

If you sign a document: the email address you signed with and the internet address you signed from, because that is what makes a signature evidence of anything.

If you opt in or out of marketing: which you chose, when, and the internet address it came from.

If you work for a business that uses Dealadesk: your name, email, mobile, your role, and a record of the actions you take in the product, each with the internet address it came from.

Dealadesk sets cookies for one thing: keeping you signed in, and remembering a device you told us to trust so you are not asked for a code every time. They are necessary for the site to work and there is no way to use an account without them.

There are no advertising cookies, no analytics cookies and no tracking pixels. Nothing on this site reports your visit to anybody else, so there is no banner asking you to accept cookies and nothing for you to switch off. If that ever changes, the choice will be offered before the cookie is set, not after.

To do the thing you asked for: put your request to dealerships, compare what they send back, and carry the order through to delivery. A quote request cannot reach a dealership without telling them what car, roughly where you are and when you need it.

Dealadesk does not sell personal information, and does not use one business’s customer records to serve another’s.

Dealerships see what they need to quote: the car, the trade-in, your suburb and the distance to them, and when you need it. They are not told what other dealerships quoted, or that anyone else was asked. Until you choose one, they are not told your full address.

The business you hired sees everything on your record. That is the point of hiring them.

Dealadesk staff can reach records only through the platform’s operator tools, and every such action is recorded against the person who took it.

Our suppliers. These are all of them, and none may use your information for anything but the job named. Supabase hosts the database, the sign-ins and the files, in Sydney. Vercel runs the application, in Sydney. Amazon Web Services delivers our email, in Sydney. Cellcast carries text messages. Stripe handles card payments, and a card number never reaches us. Google suggests addresses as you type one, and OpenStreetMap turns an address into a map point so a business can see which dealerships are near you.

Anthropic is worth naming on its own. When a dealership sends its quote as a PDF our software cannot read, that file is passed to Anthropic’s Claude to be read into figures, and the file can carry your name. It is used to read that one document and not to train anything.

Where a business sends its own mail through its own Google or Microsoft account, that mail passes through their provider rather than ours.

Supporting documents: fourteen days. Proof of income, insurance and trade-in ownership are destroyed automatically overnight once fourteen days have passed. The file name is overwritten as well as the file, because a name like “licence-front-jane-smith.jpg” is personal information in its own right.

Your customer record: until you ask. There is no automatic expiry. A business that found you a car expects to hear from you about the next one, and keeps the record for that. Ask them to delete it and they can, and it goes.

The record of what was done: kept. Who did what and when is not deleted when a record is, because a log that can be edited is not a log. It holds the action and the person who took it, not the contents of your file.

Email and text marketing are separate choices and you can make them separately. Every marketing email carries a way out, and using it stops both.

Messages about a car you are actually buying are not marketing: your quotes, your order, your delivery. Those keep coming, because turning them off would leave you in the dark about your own purchase.

Every record belongs to one business and the database refuses to serve it to another. Signing in requires a link sent to your email address and a code from an authenticator app.

If something goes wrong in a way that is likely to cause you serious harm, we are required to tell you and the Office of the Australian Information Commissioner, and we will.

Dealadesk is for businesses and the people buying a vehicle from them. It is not for children, and we do not knowingly collect information about anyone under 18. If you believe a child’s information has reached us, write to us and we will delete it.

To see what is held about you, correct it, or complain: write to privacy@dealadesk.com. If you asked a business to find you a car, they can answer faster than we can, so start with them.

If you are not satisfied with how we handle a complaint, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.