MyTPMS Automate Sensors Privacy Policy

This Privacy Policy is published by MyTPMS Australia (ABN: 53 807 701 500), trading as MyTPMS Automate Sensors, with our registered premises at Unit 5-6, 44-50 Westall Road, Springvale VIC 3171, Australia. We operate the website mytpms.com.au, built on WordPress and powered by WooCommerce, through which we supply Tyre Pressure Monitoring System (TPMS) sensors, diagnostic tools, programming tools, DIY TPMS kits, and related automotive accessories to customers in Australia and worldwide.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, place an order, create a customer account, request a compatibility check, contact our support team, submit a warranty or returns claim, or otherwise interact with our business in any way.

By using our website, placing an order, or providing us with your personal information in any way, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you should not use our website or provide us with your personal information.

This Privacy Policy must be read together with our Terms of Service, Cookie Policy, and all other published policy documents. If you have any questions about this Privacy Policy, please contact us at sales@mytpms.com.au or call +61 1300 818 030 during business hours (Monday–Friday, 09:00–17:00 AEST).

We collect only the personal information that is reasonably necessary for our legitimate business functions, or that you voluntarily provide to us. The type and extent of information collected depends on how you interact with our business. We do not collect sensitive information (as defined in the Privacy Act 1988) unless strictly necessary and with your explicit consent.

• Identity Data: Full legal name, company name (for wholesale/trade accounts), title or salutation where provided.
• Contact Data: Email address, phone number (mobile and landline), preferred contact method.
• Delivery & Billing Address Data: Street address, suburb, state, postcode, and country for both delivery and billing purposes.
• Account Credentials: Username, password (stored in hashed, non-recoverable form), account preferences, order history, and saved addresses, if you create a registered customer account.
• Transaction & Order Data: Order numbers, items purchased, order values, payment method type (not full card details), transaction reference numbers, invoices, and order status information.
• Communication Records: Records of all communications between you and our team, including emails, phone call notes, live chat transcripts, WhatsApp messages, website contact form submissions, social media messages, and any other correspondence.
• Returns, Refunds & Warranty Data: Information provided in connection with return requests, refund claims, warranty claims, and product defect reports, including photographs and descriptions of issues.

Because we specialise in TPMS sensors and automotive diagnostic tools, we may collect vehicle-specific technical information that you voluntarily provide to help us confirm product compatibility, provide technical support, or assist with TPMS programming:

• Vehicle Details: Vehicle make, model, model year, series, variant, trim level, and build date, used to confirm correct TPMS sensor and tool compatibility.
• VIN (Vehicle Identification Number): Your 17-character VIN may be requested voluntarily to confirm exact vehicle specifications for compatibility assessment. VIN data is used only for the technical purpose for which it was provided and is not linked to your broader personal profile for marketing or other purposes.
• OE Part Numbers & Sensor IDs: Factory OEM part numbers, sensor frequency and protocol data, and existing sensor IDs that you provide to facilitate sensor cloning, programming, or replacement matching.
• TPMS System Data: Information about your vehicle's TPMS warning light status, sensor battery condition, and any diagnostic tool readouts you share when seeking technical support.
• Photographs: Photos of your vehicle, existing sensors, tyre valve stems, or tool displays that you submit to help us identify the correct product or diagnose a technical issue.

• Device & Browser Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers collected automatically when you visit our website.
• Browsing & Interaction Data: Pages viewed, products browsed, search queries entered on our site, time spent on pages, links clicked, and navigation pathways through our website.
• Commerce & Conversion Data: Shopping cart contents, checkout steps completed, purchase completion events, and abandonment data, collected to improve our checkout process and order fulfilment accuracy.
• Location Data: Approximate geographic location derived from your IP address (country, state, and city level). We do not collect precise GPS location data from your device.
• Referral & Attribution Data: The source through which you arrived at our website (search engine, social media platform, paid advertisement, direct URL), used for advertising attribution and website performance analysis.
• Cookie & Analytics Data: Data collected via cookies, pixels, and analytics tools. See Section 08 (Cookies & Tracking Technologies) for full details.

For customers registering a wholesale or trade account, we additionally collect: business name, ABN (or equivalent international business registration number), business type and description, intended product use, and details of your business operations and key contact persons. This information is used solely to verify wholesale eligibility, set up your trade account, and manage the wholesale business relationship.

We collect personal information through the following methods. In all cases, we collect only information that is reasonably necessary for our business functions in accordance with APP 3 (Collection of Solicited Personal Information).

• Website Checkout & Account Registration: When you complete a purchase on mytpms.com.au (either as a registered customer or as a guest), or when you create a registered customer account, you voluntarily provide your name, contact details, delivery and billing address, and payment information.
• Contact Forms & Enquiries: When you submit a contact form on our website, send us an email, call our phone line, use our live chat service, message us via WhatsApp, or contact us through social media (YouTube, Instagram, or Facebook), you provide us with the information you include in that communication.
• Compatibility & Technical Support Requests: When you contact us for help confirming which TPMS sensor or tool is compatible with your vehicle, or for assistance with a TPMS relearn or programming procedure, you provide us with vehicle details, sensor information, and other relevant technical data.
• Returns, Warranty & Complaints: When you submit a return request, warranty claim, product defect report, or formal complaint, you provide us with order details, product information, and a description of the issue.
• Wholesale Registration: When you submit a wholesale or trade account registration via mytpms.com.au/wholesale-registration-form, you voluntarily provide your business name, ABN, business contact details, and business description.
• Marketing Sign-Up: When you opt in to our email marketing list (at checkout or via a website sign-up form), you provide your email address and consent to marketing communications.

• When you visit mytpms.com.au, certain technical information about your device, browser, and browsing activity is collected automatically by our web server, analytics platforms (Google Analytics), and advertising tools. This includes your IP address, device type, browser, pages visited, and time spent on the site. See Section 08 (Cookies & Tracking) and Section 09 (Google Advertising & Analytics) for full details.

• Payment Processors: Our payment gateway (processing Visa, Mastercard, AMEX, PayPal, Afterpay, Zip, Apple Pay, and Google Pay transactions) may provide us with a transaction reference number and payment status confirmation. We do not receive your full card details from the payment gateway.
• Delivery Partners: Our courier and freight partners (including Australia Post, DHL, FedEx, and others) may provide us with updated delivery status, delivery confirmation, and recipient signature information in connection with your order.
• Advertising Platforms: Google Ads and Google Merchant Center may provide us with aggregated, anonymised campaign performance data (such as ad clicks and conversion events). We do not receive identifiable personal information about individual users from advertising platforms.
• Social Media Platforms: If you contact us via Facebook, Instagram, or YouTube, we receive the information you include in your message and your social media profile name. We do not access any other data from your social media account.

We use personal information only for the primary purpose for which it was collected, or for secondary purposes that you would reasonably expect, or where required or authorised by law (APP 6). We do not use personal information in ways that are inconsistent with the purposes for which it was collected.

This section provides specific transparency about how we handle the most privacy-sensitive categories of information collected through our checkout and customer support processes.

All payment transactions on mytpms.com.au are processed by our PCI DSS-certified payment gateway partner. At no point during the checkout process do we receive, store, or process your full credit card number, debit card number, or card security code (CVV/CVC). The payment form on our website is a secure embedded element from our payment gateway provider, which handles all card data within its own PCI-compliant environment. Our website communicates with the payment gateway using industry-standard TLS 1.2/1.3 encryption. You can confirm the security of each page by looking for the padlock icon and “https://” prefix in your browser's address bar.

We do not sell, rent, trade, or otherwise provide your personal information to third parties for their own commercial purposes. We share personal information only with the service providers and partners necessary to operate our business and fulfil your order, as described below. All disclosures are made in accordance with APP 6 (Use or Disclosure of Personal Information).

Some of our service providers and technology platforms are operated by companies based outside Australia. When we disclose personal information to an overseas recipient, we do so in accordance with APP 8 (Cross-border Disclosure of Personal Information). Before disclosing personal information to any overseas recipient, we take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information.

Our website uses cookies, pixels, web beacons, and similar tracking technologies. Our complete Cookie Policy provides full details of every cookie deployed, its purpose, duration, and opt-out instructions. This section provides a summary.

When you first visit mytpms.com.au, you will be presented with a cookie consent banner that allows you to accept all cookies, or customise your preferences by category. You may update your cookie preferences at any time by accessing the cookie settings link in our website footer.

• Browser Settings: You can configure your browser to block or delete cookies. Instructions for major browsers are available at your browser provider's help centre. Note that blocking essential cookies will impair your ability to complete checkout.
• Google Analytics Opt-Out: You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on.
• Google Advertising Opt-Out: You can manage your Google advertising preferences and opt out of personalised advertising at adssettings.google.com.
• Industry Opt-Out Tools: You may opt out of interest-based advertising from multiple providers using the Your Online Choices platform (Australia) or the Network Advertising Initiative opt-out tool.

MyTPMS Australia uses Google services to operate our online store, advertise our products, and analyse our website performance. This section specifically addresses privacy practices related to Google Shopping and Google Advertising to ensure full compliance with Google's merchant privacy requirements and applicable Australian privacy law.

We use Google Analytics 4 to collect anonymised data about how visitors use our website. Google Analytics collects data via cookies and sends it to Google's servers. We have configured our GA4 implementation with IP anonymisation enabled, meaning no full IP addresses are transmitted to Google. The data collected by Google Analytics is used exclusively by us to understand aggregate website usage patterns and improve our website content, product listings, and checkout experience.

• We have entered into Google's Data Processing Amendment, which governs how Google processes personal data on our behalf as a data processor.
• We do not share identifiable customer data (names, email addresses, order details) with Google Analytics.
• We use Google Consent Mode v2, which adjusts how Google tags behave based on the consent choices made by individual users on our cookie consent banner. When a user declines analytics cookies, no analytics data is collected for that user's session.

Our products are listed on Google Shopping via Google Merchant Center. When you click on one of our Google Shopping advertisements and visit our website, Google may set an advertising cookie on your device to measure the click and any subsequent purchase conversion. This data is reported back to us in aggregated, anonymised form only (e.g. “X purchases resulted from Y ad clicks”) and does not identify you personally.

• Our Google Shopping product feeds contain only product information (title, price, description, availability, images, GTIN/MPN) and do not include any customer personal information.
• We comply with Google's requirements for merchant privacy by maintaining this Privacy Policy, linking it from every page of our website, and disclosing all data collection practices related to Google services in this section.
• We do not use customer email addresses collected from orders to upload customer match lists to Google Ads without obtaining separate explicit consent from the customer for that specific use.

If you have consented to advertising cookies on our website, we may use Google Ads remarketing to show advertisements for our TPMS products to previous visitors of our website when those visitors browse other websites or use Google services. Remarketing audiences are built using pseudonymous cookie IDs and do not include your name, email address, or other directly identifiable personal information.

• Remarketing is only activated for users who have accepted advertising cookies via our cookie consent banner.
• You can opt out of Google remarketing at any time at adssettings.google.com or by declining advertising cookies.
• For EU/EEA customers, remarketing is only activated where valid consent has been obtained in accordance with the GDPR and Google's EU User Consent Policy.

We take the security of your personal information seriously and implement a range of technical and organisational security measures in accordance with APP 11 (Security of Personal Information) as updated by the Privacy and Other Legislation Amendment Act 2024 (Cth), which now explicitly requires both technical and organisational measures as part of the “reasonable steps” obligation.

• TLS/SSL Encryption: All data transmitted between your browser and our website is encrypted using TLS 1.2/1.3. The padlock icon in your browser confirms an encrypted connection is active. All pages of mytpms.com.au, including product pages, account pages, and checkout, are served over HTTPS.
• PCI DSS-Compliant Payment Processing: Payment card data is handled exclusively by our PCI DSS-certified payment gateway partner. We maintain SAQ-A compliance as a merchant who does not directly process, store, or transmit card data.
• Password Security: Customer account passwords are stored as one-way cryptographic hashes (bcrypt). We cannot view or recover your password. Lost password recovery is via a secure reset link sent to your registered email address.
• Database Security: Our WooCommerce/WordPress database is stored on a secured hosting environment with restricted access controls, regular security patching, and automated vulnerability scanning.
• Regular Security Updates: We maintain current versions of WordPress, WooCommerce, and all installed plugins, applying security updates promptly to address known vulnerabilities.
• Access Controls: Access to systems containing personal information is restricted to authorised personnel only, using role-based access controls and unique login credentials. Administrative access to our website backend requires multi-factor authentication.

• Staff Training & Awareness: All staff members who handle personal information receive privacy awareness training and are bound by confidentiality obligations.
• Third-Party Contracts: All third-party service providers who handle personal information on our behalf are required to maintain appropriate security standards and are bound by contractual data protection obligations.
• Minimum Data Collection: We collect only the personal information that is reasonably necessary for our business functions. We do not collect or retain information that we do not need.
• Regular Privacy Reviews: We periodically review our data handling practices, this Privacy Policy, and our security measures to ensure ongoing compliance with the APPs and updated Australian privacy legislation.

We retain personal information only for as long as it is required for the purpose for which it was collected, or as required by Australian law. Once personal information is no longer needed and retention is not required by law, we take reasonable steps to destroy it or de-identify it in accordance with APP 11.2.

Under the Privacy Act 1988 (Cth) and the Privacy and Other Legislation Amendment Act 2024 (Cth), you have the following rights in relation to the personal information we hold about you. Additional rights may apply to customers located in the European Union, United Kingdom, or other jurisdictions — see Section 17.

To exercise any of the above rights, or to ask questions about the personal information we hold about you, please contact our Privacy Officer:

Please include your full name, email address, order number (if applicable), and a clear description of the information you are requesting access to, or the correction you are requesting. We may need to verify your identity before processing your request to protect against fraudulent access to another person's data.

We comply fully with APP 7 (Direct Marketing) of the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth) in all marketing communications. We only send marketing emails to individuals who have provided express, opt-in consent.

• Consent Required: We will only send you marketing communications if you have specifically opted in — either by ticking the marketing consent checkbox at checkout, or by signing up via our website newsletter form. We never add customers to our marketing list without their explicit consent.
• Clear Identification: Every marketing email will clearly identify that it is from MyTPMS Australia / MyTPMS Automate Sensors, and will include our business name, registered address, ABN, and contact details.
• Unsubscribe Mechanism: Every marketing email we send includes a clearly visible, one-click unsubscribe link as required by the Spam Act 2003 (Cth). We will process unsubscribe requests promptly — within 5 business days.
• No Selling of Email Lists: We will never sell, rent, or share your email address with third-party marketers. We will never provide your personal information to a third party for the purpose of that third party's own direct marketing.
• Transactional Emails Are Not Marketing: Order confirmation emails, Tax Invoice emails, dispatch notifications, tracking updates, warranty response emails, and support communications are transactional in nature and will continue to be sent regardless of your marketing preferences, as they are necessary for the fulfilment of your order or the resolution of a service request.
• Canadian Customers — CASL: For customers located in Canada, we comply with the Canadian Anti-Spam Legislation (CASL). Marketing emails to Canadian addresses are only sent where express consent has been obtained and all CASL identification and unsubscribe requirements are met.

The Privacy and Other Legislation Amendment Act 2024 (Cth) introduces new transparency obligations requiring organisations to disclose when personal information is used in automated decision-making processes that significantly affect individuals. Full compliance obligations commence on 10 December 2026. We are voluntarily disclosing our current automated processes in this Policy ahead of the mandatory compliance date.

The MyTPMS Automate Sensors website and all products we sell are intended for adults aged 18 years and over. Our TPMS sensors, diagnostic tools, and automotive accessories are professional and technical automotive products not directed at or intended for children or minors.

• We do not knowingly collect personal information from any person under the age of 18. If you are under 18, you must not submit any personal information to us or place an order. Any purchase made on behalf of a person under 18 must be completed by a parent or legal guardian.
• We do not direct marketing communications at children or persons under 18.
• If we become aware that we have inadvertently collected personal information from a child under 18, we will take immediate steps to securely delete that information from our systems and notify the parent or guardian where practicable.
• POLA Act 2024 — Children's Online Privacy Code: The Privacy and Other Legislation Amendment Act 2024 (Cth) requires the OAIC to develop a Children's Online Privacy Code (COP Code) for online services directed at children. As our website is not directed at children, we do not anticipate that the COP Code will impose specific obligations on our business. We will review our practices and update this Policy when the COP Code is finalised and published by the OAIC.

If you believe a child under 18 has submitted personal information to our website, please contact us immediately at sales@mytpms.com.au and we will promptly investigate and take appropriate action.

We are subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth), as strengthened by the Privacy and Other Legislation Amendment Act 2024 (Cth) (which enhanced security, retention, and breach notification obligations from 10 December 2024).

A notifiable data breach occurs when: (1) there is unauthorised access to or disclosure of personal information, or personal information is lost in circumstances where unauthorised access or disclosure is likely; and (2) the breach is likely to result in serious harm to any of the individuals whose information was involved.

• Assess: Upon becoming aware of a suspected data breach, we will promptly assess whether the incident constitutes an eligible data breach under the NDB scheme. This assessment will be completed as quickly as possible, and no later than 30 days after we become aware of the suspected breach.
• Notify the OAIC: If the assessment confirms an eligible data breach, we will notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable using the OAIC's notification form at oaic.gov.au.
• Notify Affected Individuals: We will notify affected individuals whose information was involved in the breach and who are at likely risk of serious harm. Notification will be provided by email (to the email address in our records) and, where email is not practicable, by other reasonable means including a notice on our website.
• Breach Notification Content: Our notification to affected individuals will include: a description of the breach; the kinds of information involved; the steps we recommend you take in response; and our contact details for further assistance.
• Containment & Review: We will take immediate steps to contain the breach, mitigate harm, and review and improve our security measures to prevent recurrence.

MyTPMS Australia ships to customers in over 100 countries worldwide. While this Privacy Policy is governed by Australian law, we recognise that customers in certain jurisdictions may have additional privacy rights under their local legislation. This section provides a summary of the most significant additional rights by region.

For customers located in the European Economic Area (EEA) or the United Kingdom, in addition to the rights described in Section 12, you also have:

• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g. CSV), and the right to transmit that data to another controller where technically feasible.
• Right to Erasure (“Right to Be Forgotten”): You may request erasure of your personal data where it is no longer necessary, where you withdraw consent, where you object and there is no overriding legitimate ground, or where it has been unlawfully processed — subject to our legal retention obligations.
• Right to Object: You may object to processing of your personal data for direct marketing purposes (always upheld) or based on legitimate interests (subject to our assessment of whether our legitimate interest overrides your interest or rights).
• Lawful Basis for Processing: Our processing of EU/UK personal data is based on: (a) Contract — processing necessary to fulfil your order; (b) Legal Obligation — processing required by applicable law; (c) Legitimate Interests — fraud prevention, security; (d) Consent — marketing communications.
• Right to Lodge a Complaint with a Supervisory Authority: EU customers may lodge a complaint with your national data protection authority. UK customers may lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

California residents have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete, the right to opt out of the “sale” or “sharing” of personal information, and the right to non-discrimination for exercising privacy rights. We do not “sell” or “share” personal information as defined by the CCPA/CPRA. To exercise CCPA/CPRA rights, contact us at sales@mytpms.com.au.

We take privacy complaints seriously and are committed to resolving them promptly, fairly, and transparently in accordance with APP 1.2 and the NDB scheme. If you believe we have interfered with your privacy or mishandled your personal information, please follow the process below.

Your first step should always be to contact our Privacy Officer directly. Most concerns can be resolved quickly by our team without the need for external escalation:

Please include in your complaint: your full name, contact details, a detailed description of the privacy concern, and any relevant supporting information. We will acknowledge receipt of your complaint within 2 business days and provide a full written response within 30 days.

If your complaint is not resolved to your satisfaction after following Step 1, you have the right to escalate your complaint to the following external bodies depending on your location:

We may update this Privacy Policy from time to time to reflect changes in our data handling practices, changes in applicable Australian or international privacy legislation, or changes to our business operations. All updates will be published on this page with a revised “Last Updated” date at the top of the document.

• Material Changes: For changes that materially affect how we handle your personal information, we will provide notice via a prominent banner on our website homepage. Where we hold your email address for marketing communications and you have opted in, we will also send a notification email alerting you to the update.
• Continued Use: Your continued use of our website or placement of an order after any updated Privacy Policy has been published constitutes your acknowledgement of the updated policy as it applies to information collected after the effective date of the update.
• Previous Versions: If you would like to review a previous version of this Privacy Policy, please contact us at sales@mytpms.com.au and we will make our best efforts to provide it.
• Upcoming Changes — POLA Act 2024: We will update this Privacy Policy before 10 December 2026 to fully comply with the automated decision-making disclosure requirements introduced by the Privacy and Other Legislation Amendment Act 2024 (Cth). We will also update this policy when the Children's Online Privacy Code (COP Code) is finalised by the OAIC.

We recommend bookmarking this page and reviewing our Privacy Policy periodically. The current version is always the governing version and supersedes all prior versions. Current effective date: 09 June 2026.

This section summarises how MyTPMS Australia complies with each of the 13 Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth). This summary is provided as required by APP 1.4(b), which requires our Privacy Policy to address how we manage personal information.

This Privacy Policy should be read together with all of our other published legal and policy documents, which collectively govern your relationship with MyTPMS Australia.