CARBON OFFROAD AUSTRALIA – PRIVACY POLICY

Applies to: carbonoffroad.com.au

Effective Date: June 2026

1. Overview

This Privacy Policy explains how Carbon Offroad Australia collects, uses, stores, discloses, and protects personal information. Carbon Offroad Australia is owned and operated by KPD Industries Pty Ltd (ABN: 80 142 983 382), trading as Carbon Offroad Australia.

By using our website, creating an account, placing an order, contacting us, submitting a form, joining our mailing list, or interacting with us online, you agree to the handling of your personal information as described in this Privacy Policy. We handle personal information in accordance with the Australian Privacy Act 1988, the Australian Privacy Principles (APPs), and other applicable Australian privacy laws.

2. What Personal Information We Collect

We may collect personal information when you interact with Carbon Offroad Australia, including when you browse our website, place an order, contact support, submit a warranty claim, leave a review, join a mailing list, or interact with our advertising or social media channels.

The personal information we collect may include:

• Name and Business/Trade name.

• Billing address and Delivery address.

• Email address and Phone number.

• Order details, payment confirmation details, and product purchase history.

• Account login credentials.

• Customer support messages, troubleshooting notes, and return/refund records.

• Warranty claim information and assessment outcomes.

• Photos, videos, or official documentation you provide for support, warranty, or transit freight claims (including police event numbers or damaged carton evidence).

• Vehicle information you choose to provide (make, model, year, or fitment details).

• Review content, ratings, product feedback, and competition entry details.

• IP address, device data, browser type, cookies, pixels, and analytics identifiers.

We do not intentionally collect sensitive information unless it is reasonably necessary for a specific business purpose and you provide it to us voluntarily.

3. How We Collect Personal Information

We may collect personal information directly from you when you:

• Place an order or create/use a customer account through our website.

• Contact us via email, phone, live chat, SMS, social media, or web forms.

• Subscribe to our newsletters, marketing lists, or cart reminder streams.

• Submit a return, refund, shipping, or warranty claim.

• Upload photos or videos for operational troubleshooting.

• Leave a public product review or enter a promotional giveaway.

We may also collect personal information from trusted third parties where permitted by law, including payment processors, freight and delivery partners, e-commerce infrastructure platforms, review collection hubs, fraud prevention/security suites, and data analytics tools.

4. Why We Collect and Use Personal Information

We collect and use personal information to operate and improve our business, supply products, provide customer support, and communicate with customers. We may use personal information to:

• Process, fulfill, pack, and dispatch your orders.

• Confirm payments and detect/prevent transaction fraud or security threats.

• Arrange delivery freight and pass along accurate tracking updates.

• Respond to customer support enquiries and resolve fitment issues.

• Manage store accounts, promotions, competitions, or product reviews.

• Conduct business analytics, financial reporting, and system optimization.

• Send critical service messages (order adjustments, freight status, safety or recall alerts).

• Send targeted marketing communications and retarget website visitors with digital advertising where legally permitted.

• Comply with statutory tax, accounting, regulatory, and legal record-keeping obligations.

5. Orders, Payments & Fraud Prevention

When you place an order, we collect the exact information needed to process, pack, dispatch, and support your gear. Payments are securely executed via compliance-vetted third-party payment gateways. We do not store full credit card numbers on our internal systems. We utilize industry-standard fraud prevention tools to evaluate risk patterns, protect against unauthorized transactions, and maintain site security.

6. Shipping & Delivery

We disclose essential delivery information to our designated freight and logistics providers (Australia Post, Aramex, FedEx/TNT, etc.) to execute your shipment.

This data includes your name, physical delivery address, contact phone number, email address, specific delivery instructions (such as Authority to Leave parameters), and tracking metadata. Freight providers are strictly authorized to use this information solely to deliver your goods, update shipment milestones, manage localized depot collections, or flag delivery constraints.

7. Customer Support, Returns & Warranty Claims

When you file a claim for standard warranty coverage, a change-of-mind return, or an expedited resolution via Carbon Offroad Shipping Protection, we process and log all data you submit. This includes support tickets, diagnostic media, purchase verifications, and law enforcement documentation (such as State Police Event/Reference Numbers required for theft claims). This data is securely stored to assess your claim, fulfill legal consumer guarantees, improve build quality, and maintain transparent internal corporate records.

8. Marketing Communications

We may send promotional communications via email, SMS, or other electronic channels where you have given consent or where otherwise permitted by law. This includes product launches, sales events, stock alerts, or off-road gear guides.

• You can instantly opt out of marketing emails via the Unsubscribe link provided in the footer of every email.

• You can opt out of SMS marketing by following the stated text prompts (e.g., replying STOP).

Opting out of marketing will never incur a fee. Essential service messages regarding active orders, warranty resolutions, or safety disclosures will continue to be sent regardless of marketing preferences.

9. Cookies, Analytics & Advertising

Our digital store utilizes cookies, tracking pixels, and tags to keep the cart functioning seamlessly, analyze traffic metrics, and serve relevant, targeted ads across networks like Google and Meta. You can restrict or block cookies through your individual browser settings; however, note that disabling cookies may cause specific website checkout features to stop operating correctly.

10. Product Reviews & User Content

If you post a product review, testimonial, or social media comment, you acknowledge that this media is public. We reserve the right to display, syndicate, or use this user-generated content across our marketing, advertising, or store layouts. Please avoid publishing sensitive personal data in public spaces.

11. Who We Share Personal Information With

We do not sell customer personal data as a standalone commercial product. We only share information with trusted operational partners who help us manage and secure our business, including:

• E-commerce infrastructure platforms and payment providers.

• Freight, courier, and third-party logistics (3PL) companies.

• Customer helpdesk, CRM, and SMS/Email marketing engines.

• Accountants, legal advisers, insurers, and risk-management consultants.

• Government, regulatory, or law enforcement entities where strictly required or permitted under Australian law.

12. Overseas Disclosure

Some of our enterprise infrastructure providers may process, store, or back up data on secure servers located outside Australia—including the United States, New Zealand, Canada, the United Kingdom, Singapore, the European Union, and the Philippines. We take all reasonable structural and contractual precautions to ensure these international vendors manage your personal information securely and in accordance with Australian privacy benchmarks.

13. Security of Personal Information

We enforce comprehensive operational security measures to safeguard your personal data from loss, misuse, unauthorized access, modification, or disclosure. This includes secure hosting frameworks, encrypted communication pathways, rigorous password complexity rules, and strict internal staff access permissions.

Because no transmission method over the internet is completely infallible, we advise customers to secure their account login passwords and exercise standard care when sharing data online.

14. Data Retention

We retain personal information only for as long as necessary to satisfy order fulfillment, active customer support cycles, standard tax/accounting audits, fraud mitigation, legal dispute resolution, or long-term structural warranty obligations. When personal information is no longer structurally required for these purposes, it is securely destroyed, deleted, or permanently anonymized.

15. Accessing or Correcting Your Personal Information

You hold an explicit legal right to request access to the personal information we maintain about you, or to demand corrections if you believe that data is inaccurate, incomplete, out-of-date, or misleading.

To submit an access or correction request, please contact our Privacy Officer using the contact details listed below. We will require valid identity verification before releasing or modifying records. We reserve the right to decline access requests where authorized under the Privacy Act (e.g., where disclosure would compromise the privacy of another individual or be unlawful).

16. Complaints

If you believe we have mismanaged your data or breached your privacy rights, please submit a formal complaint directly to us first so we can investigate and resolve the matter. Please include your contact details, order number (if applicable), and a clear summary of the issue. We will audit your claim and respond within a reasonable timeframe.

If you remain unsatisfied with our internal resolution, you are legally entitled to lodge an official complaint with the Office of the Australian Information Commissioner (OAIC) online at www.oaic.gov.au.

17. Children’s Privacy

Our store, heavy winches, and vehicle recovery accessories are intended exclusively for adult consumers. We do not knowingly collect or target data from children. If you believe a child has provided us with personal information without parental consent, please alert us immediately.

18. Business Customers, Dealers & Trade Accounts

If you apply for or operate an authorized trade, B2B wholesale, or commercial dealer account with Carbon Offroad Australia, we collect additional operational business information. This includes your legally registered business name, Australian Business Number (ABN), corporate trade addresses, staff purchase logs, and account payment histories. This data is utilized to evaluate credit eligibility, establish specialized commercial trade structures, and manage corporate accounts.

19. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to match changing legal, structural, or carrier requirements. The most current version will always be accessible via our website footer link.

20. Contact Us

For all privacy inquiries, access requests, or privacy complaints regarding our Australian operations, please contact our team at:

Carbon Offroad Australia

Entity: KPD Industries Pty Ltd

ABN: 80 142 983 382

Primary Privacy Email: privacy@carbonoffroad.com.au

Secondary Contact Email: sales@carbonoffroad.com.au

Phone: 1300 780 141

Business Address: 1a/1 Waterway Dr, Coomera QLD 4209