To view the privacy policies for international documents, please click the relevant link:

We are committed to protect your privacy. We provide this privacy policy under the Privacy Act 1988 (Cth) to provide you details about our practices in relation to the collection, use, disclosure and handling of Personal Information.

1. Privacy Policy
   1. This Privacy Policy is governed by the Australian Privacy Principles under the Privacy Act 1988 (Cth) and where we obtain Personal Information from a citizen of a member state of the European Union, the European Union General Data Protection Regulation (Regulation (EU) 2016/679) (the EU GDPR).
2. Collection of Personal Information
   1. We collect Personal Information when you:
      1. register for membership;
      2. interact with us through the phone, in person or via email and you provide us your details;
      3. purchase or subscribe to our products or services;
      4. subscribe to our mailing list;
      5. enter our competitions or promotions; or
      6. apply for positions with Us or you are our contractor.
   2. We collect Personal Information to:
      1. improve our products and services;
      2. provide our product and/or service to you;
      3. communicate with you;
      4. offer you promotional product or market our product that you are interested in;
      5. keep a record of your order for refund or exchange;
      6. keep our customer database;
      7. to investigate any complaints that you make;
      8. to investigate whether you are in breach of our terms and conditions;
      9. verify your identity;
      10. to notify you of vacant positions if you applied for jobs with Us;
      11. comply with the law or to use your information as permitted under the law; and
      12. use your information for purposes that are related to the above.
   3. We collect and hold following types of Personal Information:
      1. your contact details that may include but are not limited to your name, business name, postal address, email address, and phone number;
      2. optional Personal Information that you consent to provide, including your interests in a particular area, gender, age, transport types you use and general questions relating to the automotive industry we may ask from time to time; and
      3. optional surveys that provide Personal Information including whether you like our Business or Website and what you like or do not like, and your opinion on various transport issues for instance,  cost and safety.
   4. We will only collect your Personal Information using fair and lawful means.
   5. We do not store credit card details as we use payment gateways and/or third party processor.
   6. If we receive unsolicited Personal Information, we may destroy it or ensure that it is de-identified if it is lawful and reasonable to do so.
3. Consent
   1. You understand and acknowledge that the consent you are to provide when submitting Personal Information to us is required in order for us to provide you with our goods and/or services. Failing to provide consent may result in failure to issue you with the good and/or service.
   2. Withdrawal of Consent
      Consent may be withdrawn by contacting us in accordance with clause 12 of this policy.
   3. After having received, reviewed and actioned your request, subject to clause 11, your withdrawal of consent will be noted on our system.
   4. We will use our best commercial endeavours to action your request as soon as possible. However, we note that during the time between receiving your request to processing the withdrawal your Personal Information, you will not hold use liable for the use of your Personal Data during this processing time.
   5. Personal Information will be marked as ‘restricted’ between the time of processing your request to withdraw until the actual time of the withdrawal being actioned.
4. Customer Right to be Forgotten
   1. In addition to the withdrawal of your consent, you may also contact us to erase your Personal Information.
   2. You may contact us in accordance with Clause 12, to have your Personal Data erased and we will use our reasonable discretion to erase same if:
      1. the Personal Information provided is no longer necessary in relation to the purpose of collection;
      2. you have withdrawn your consent for us to hold your Personal Information;
      3. the legal retention period for holding your Personal Information has expired;
      4. you object to the use of your Personal Information; or
      5. the processing of your Personal Information was not in accordance with the EU GDPR.
5. Cookies
   1. We may, from time to time, use ‘cookies’ which are small data file placed on your machine or device to store information.
   2. We use cookies in many ways including:
      1. authentication cookies that monitor whether you are logged in or not;
      2. session cookies that allow you to remain logged in and keep track of your activities until the browser shuts down;
      3. persistent cookies that help us monitor our services by recording your browser activities and they do not expire upon browser shut down; and
      4. flash cookies to personalise your experience.
   3. We use cookies for many reasons including but not limited to:
      1. improve the performance by reporting any errors that occur;
      2. provide statistics about how the Website is used;
      3. remember settings that you used on our Website;
      4. identify that you are logged into the Website;
      5. link to social networks like Facebook and Twitter; and
      6. provide ads that are tailored to you.
   4. Please note that although cookies do not generally store Personal Information, they may contain your IP address. However you are effectively anonymous to us because the data are collected in aggregate.
   5. When providing us with Personal Information and in the event of known tracking cookies being used, we aim to use all reasonable commercial endeavours to notify you and obtain your consent to its use in that situation.
   6. You may disable and delete cookies in your browser if you do not want us to use cookies but doing so may detract from your enjoyment of our Website.
6. Security
   1. All credit card transactions are implemented under industry standard Secure Sockets Layer (SSL) protocol with 128-bit encryption.
   2. For credit card transactions we use a third party processor (e.g. PayPal) and/or payment gateway (e.g. eWay, FatZebra) that we may change from time to time so that:
      1. payments are processed in real time; and
      2. we do not have access to your credit card numbers.
   3. We use database management system to store most of the Personal Information and it contains security features, such as encryption, firewall and anti-virus, to ensure the protection and integrity of our data.
7. Anonymity and Pseudonymity
   1. You may interact anonymously or by using a pseudonym, for example when you:
      1. call us;
      2. use our online forums that does not require membership; or
      3. email us,
      4. and you may refuse to give your details.
   2. You must provide your Personal Information when you:
      1. purchase goods that require delivery;
      2. register for membership;
      3. sign up for mailing list;
      4. lodge a complaint; and
      5. are required to provide Personal Information under the law.
8. Disclosure of Personal Information
   1. We only disclose your Personal Information for purposes that are reasonably related to our Business.
   2. We will not disclose your Personal Information to third parties for payment, profit or advantage.
   3. We may disclose your Personal Information to third parties, from time to time, to assist us in conducting our Business, including:
      1. technology service providers including internet service providers or cloud service providers;
      2. couriers such as Australia Post;
      3. data processors that analyse our website traffic or usage for us;
      4. agents that perform functions on our behalf, such as mailouts, debt collection, marketing or advertising;
      5. our related bodies corporate; and
      6. to persons, entities or courts as required under the law.
   4. We may disclose your Personal Information to third parties:
      1. to provide the service you wish to use;
      2. to improve our Business, services, products and Website;
      3. to customise and promote our services which may be of interest to you;
      4. to comply with or as permitted under the law; or
      5. with your consent.
   5. We may disclose your Personal Information to entities located overseas and will use reasonable endeavours to ensure they are subject to similar privacy legislation when handling such information.
   6. We use our every and best endeavours to ensure each third party we directly contract with, in the dealings of Personal Information, are aware of their processor liability provisions under the EU GDPR and also are aware of privacy obligations in the dealings with Personal Information.
9. Retention of Personal Information
   1. Personal Information held by us is retained until:
      1. such time as we deem this Personal Information to no longer be active, timely or correct (Inactive Personal Information); or
      2. You withdraw your consent to us holding your Personal Information.
   2. Personal Information held by us may undergo review to ascertain whether Personal Information can be classified as Inactive Personal Information. This type of review will take place from time to time, at the reasonable discretion of the Business.
   3. Inactive Personal Information is then deleted after it is no longer required/necessary to be held.
   4. Other types of information (i.e. order number, order date etc) relating to a transaction with us is kept, for the statutory required period of time for record keeping.
10. Direct Marketing to You
    1. We will not send you unsolicited commercial electronic messages in contravention of the Spam Act 2003 (Cth).
    2. We may use the non-sensitive information you gave us for the purpose of promoting and marketing our Business to you if we:
       1. use the information that you reasonably expected us to use for promoting and marketing our Business to you; and
       2. provide you a simple method to opt-out.
    3. We will not contact you to promote or market our Business if you requested us not to.
    4. We may also disclose your Personal Information to our related entities, including our Member Clubs and their related entities, so they may give you information and offers about products and services offered by them.
11. Accessing and Correcting Your Personal Information
    1. Accessing Your Personal Information
       You may request access to your Personal Information that we hold and we will:
       1. verify your identity;
       2. charge you to cover the cost of meeting your request, if any, but not for the request itself; and
       3. within a reasonable period of time, comply with your request.
    2. We may refuse to allow you to access your Personal Information if we are not required to do so under the Australian Privacy Principles.
    3. Correcting Your Information
       You may request to correct your Personal Information that we hold and we will update your Personal Information so that it is up-to-date, accurate, complete, relevant and not misleading.
    4. Members of our Website may change their details online.
    5. How to Contact Us
       If you would like to access or correct your Personal Information, please contact us by:
       1. email: international@aaa.asn.au
       2. writing to: GPO Box 1555 Canberra 2601ACT; or
       3. phone: +61 2 6247 7311
12. Complaints
    1. If you believe we breached the Australian Privacy Principles under the Privacy Act 1988 (Cth) or a registered Australian Privacy Principles Code, or the EU GDPR  you may lodge a complaint as follows:
       1. firstly, contact us in writing to the email or postal address in clause 11.5 and include the following in your complaint:
          1. your contact details;
          2. section or provision of the Australian Privacy Principles or Code or EU GDPR that you believe we breached; and
          3. our practice or policy that you believe breaches the relevant Australian Privacy Principle or Code,
       2. and you must allow us a reasonable time, about 30 days, to reply to your complaint; and
       3. secondly, you may complain to the Office of the Australian Information Commissioner if:
          1. you are not satisfied with our response; or
          2. we do not respond to you within a reasonable time without sufficient explanation.
13. Personal Information Breach
    1. In the unlikely event of a breach of privacy:
       1. we employ practices to notify the relevant bodies under the Privacy Act 1988 (Cth) and the EU GDPR within the required timeframes.
       2. We will notify you without undue delay, should it be found the breach places your rights and freedoms at a high risk.
14. Definitions and Interpretation
    1. Unless contrary intention appears:
       1. Australian Privacy Principles means the principles under the Schedule 1 of the Privacy Act 1988 (Cth).
       2. Business means Australian Automobile Association (AAA) and Member Clubs and related automotive services.
       3. Personal Information means personal information as defined under Privacy Act 1988 (Cth).
       4. Member Club(s) are listed in Table 1 at the end of this Agreement.
       5. Sensitive Information means sensitive information as defined under Privacy Act 1988 (Cth).
       6. We (whether in capitals or not) means Australian Automobile Association (AAA) and our Member Club(s) and Ours have corresponding meanings.
       7. Website means any current or future created Business websites, which may be amended from time to time.
       8. You (whether in capitals or not) means the user of our Website and Your and Yours have corresponding meanings.
    2. The word ‘include’ is used without any limitation.

Table 1 – Member Clubs