Legal
Privacy Policy
Last updated
1. About this policy
Guru Autocare and Rentals Pty Ltd runs the workshop at Unit 1/11 Capital Drive, Grovedale VIC 3216 and this website. This policy explains what personal information we collect, why we collect it, and what we do with it.
We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth) as our standard for handling personal information.
You can read this policy free of charge on this page. Ask us if you would like it printed, in large print, or read out over the phone.
2. What information we collect
When you make a booking request on this site, we collect:
- Your name, email address and phone number.
- Your vehicle's registration, make, model and year, and its odometer reading if you enter one.
- The services you select, the date, and the drop-off window you choose.
- Anything you write in the “Notes for the workshop” box. This is a free-text field, so avoid entering anything you would not want kept on file.
If you phone us, email us, message us on WhatsApp or come into the workshop, we collect whatever you tell us.
We do not ask for sensitive information such as health details or identity documents. We do not take payment details on this website, and there is no customer account or login.
3. How we collect it
We collect personal information directly from you, either through the booking form or in conversation with our staff.
The booking form is the only part of this website that collects anything. Nothing reaches us until you submit the final step. Until then your answers stay in your browser and are lost if you refresh the page.
We do not buy contact lists and we do not gather information about you from other sources. If someone else books your vehicle in, we hold whatever details they gave us.
4. Why we collect it and what we use it for
We use your information to:
- Check that the time you requested is available, and hold it for you.
- Let a staff member review your request and approve or decline it.
- Email you when your booking is confirmed or cancelled, including the reason for a cancellation.
- Contact you about your vehicle while it is with us.
- Keep a service history for your vehicle.
- Prevent spam and automated abuse of the booking form.
We do not use your information for marketing, and we do not sell or rent it.
6. Where your information is stored, and overseas disclosure
Your booking data is stored in a database hosted in Sydney, Australia, and the code behind this website runs in Sydney. Two things leave Australia.
Resend, which sends our booking emails, is a United States company and processes email on US infrastructure. The details in those emails pass through the United States on the way to your inbox.
Website delivery and logs
Vercel serves this site through a global network and stores its request logs outside Australia. Those logs contain standard web-server information such as IP addresses and requested pages. They do not contain your booking details.
8. How we keep your information safe
Our database denies access by default. Nothing on the public side of this site can read a booking, a customer record or a vehicle record. The booking form can create a request and nothing else.
Bookings are visible only to workshop staff, through a password-protected admin portal. Each staff member has their own account and access level, and accounts are deactivated when someone leaves. Staff sessions use a cookie that browser scripts cannot read and that is only sent over an encrypted connection.
We limit how often the booking form and the staff login can be used. That requires reading the connection you are coming from, but we do not store your IP address. It is converted into a one-way code that cannot be turned back into an address.
The site runs over HTTPS with security headers configured. If a data breach occurred, we would notify the people affected.
9. How long we keep it
We keep your booking, contact and vehicle details for as long as we are servicing your vehicle and maintaining its service history. Some records are also held to meet tax and warranty obligations.
We do not currently delete booking records automatically after a set period. Once a job is complete the booking is removed from our day-to-day list, but the record is retained. We are setting a retention period and will update this page once it is decided. To have your details removed before then, see the next section.
10. Accessing, correcting and deleting your information
Email hello@guruautocare.com or phone 03 5261 2976 to:
- Ask what information we hold about you.
- Ask us to correct anything that is wrong, such as a misspelt name, an old phone number or an incorrect registration.
- Ask us to delete your details.
We will verify your identity before acting on a request. There is no charge.
Deletion is a manual process at present, so allow us some time. If you have a booking scheduled we need your details until that job is complete, and we may be required to retain some records by law. If we cannot act on your request, we will explain why.
11. Making a complaint
If you believe we have mishandled your information, contact us. Email hello@guruautocare.com with “Privacy” in the subject line, or phone the workshop on 03 5261 2976 and ask for the workshop owner.
We will acknowledge your complaint, investigate it, and tell you what we found and what we are doing about it.
If you are not satisfied with our response, you can raise it with the Office of the Australian Information Commissioner:
- oaic.gov.au
- 1300 363 992
- GPO Box 5218, Sydney NSW 2001
12. Changes to this policy
If we change how we handle your information, for example by adding online payment or website analytics, we will update this page and change the date at the top. The version on this page is always the current one.