Privacy Policy
How we collect, use, and protect your personal information
Last updated: August 2025
Your Privacy Matters
At Sunny Imports, we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, share, and protect your information in compliance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).
Information We Collect
Personal Information:
- Name, email address, phone number
- Mailing address and delivery information
- Payment information (credit card details, bank account info)
- Government-issued ID for import compliance
- Driver's license details for vehicle registration
Vehicle Information:
- Vehicle preferences and search criteria
- Auction bidding history and preferences
- Import and compliance documentation
Automatically Collected:
- Website usage data (pages visited, time spent)
- IP address and browser information
- Device type and operating system
- Cookies and similar tracking technologies
How We Use Your Information
Service Delivery:
- Process vehicle searches and auction bidding
- Handle payments and financial transactions
- Arrange shipping and import documentation
- Provide customer support and communication
Legal Compliance:
- Meet import/export regulatory requirements
- Verify identity for high-value transactions
- Comply with anti-money laundering laws
- Maintain records as required by law
Service Improvement:
- Analyse website usage to improve user experience
- Send relevant updates about vehicles and services
- Provide personalised recommendations
- Conduct customer satisfaction surveys
Data Security & Storage
Security Measures:
- SSL encryption for all data transmission
- Secure servers with regular security updates
- Two-factor authentication for sensitive accounts
- Regular security audits and monitoring
Data Storage:
- Primary servers located in Australia
- Backup systems in secure, encrypted environments
- Payment data never stored on our servers
- Access restricted to authorised personnel only
Retention Periods:
- Active customer data: Duration of business relationship + 7 years
- Financial records: 7 years (Australian tax law requirement)
- Import documentation: 7 years (customs requirement)
- Marketing preferences: Until you opt out
Notifiable Data Breach Response:
- Immediate investigation and containment within 24 hours
- Notification to Office of the Australian Information Commissioner (OAIC) within 72 hours if required
- Direct notification to affected customers within 72 hours for serious breaches
- Public notification if breach poses serious harm to multiple individuals
- Free identity protection services if personal information compromised
- Detailed incident report and remediation plan provided
Your Privacy Rights
Access Rights:
- Request a copy of all personal data we hold
- Obtain information about how your data is used
- Receive data in a portable format
Correction Rights:
- Update or correct inaccurate information
- Complete incomplete personal data
- Request verification of data accuracy
Deletion Rights:
- Request deletion of personal data ("right to be forgotten")
- Note: Some data must be retained for legal compliance
- Anonymisation when deletion isn't possible
Control Rights:
- Opt out of marketing communications
- Restrict certain data processing activities
- Object to automated decision-making
- Withdraw consent for optional data uses
How to Exercise Rights:
- Email: team@sunnyimports.com.au
- Written request with ID verification
- Response within 30 days of verified request
Cross-Border Data Transfers
International Transfers:
- Data transferred to Japan for auction house services
- Shipping companies may receive delivery information
- Payment processors may process data internationally
- All transfers comply with Australian Privacy Principles
Safeguards in Place:
- Binding contractual arrangements with overseas recipients
- Equivalent privacy protection standards required
- Data minimisation - only necessary information shared
- Regular compliance audits of international partners
Countries We Transfer To:
- Japan (auction houses and export documentation)
- United States (payment processing and cloud services)
Your Rights:
- You can request details of any international transfers
- Right to complain to OAIC about cross-border transfers
- We remain responsible for your data even when overseas
Questions About Privacy?
If you have questions or concerns about your privacy, we're here to help.