This Privacy Policy explains how Trace By Tested Pty Ltd (ABN 77 683 499 210), trading as GeoTrace ("we", "us", "our"), handles personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs).
1. Who we are
We supply GPS tracking devices and operate the GeoTrace tracking platform. We are an APP entity for the purposes of the Privacy Act.
2. Personal information we collect
- Account & contact information: name, email address, phone number, password (hashed by our authentication provider).
- Order & billing information: billing and shipping address, order history, items purchased. Card details are entered directly with our payment processor and are never stored on our servers.
- Device telemetry: where you use a GeoTrace device, we receive GPS coordinates, speed, heading, ignition state, fuel-level signals (where supported), and diagnostic data from that device.
- Technical information: IP address, browser user-agent, log timestamps, and basic device/browser information needed to operate the site securely.
- Support correspondence: messages you send us via email or our forms.
3. How we collect it
We collect personal information directly from you when you create an account, place an order, request a bulk quote, contact support, or use a GeoTrace device. Some information (such as IP address) is collected automatically when you visit our site.
4. Why we collect it
- To fulfil your orders and deliver hardware.
- To operate the GeoTrace platform and display live and historical telemetry to you.
- To provide customer support and respond to your enquiries.
- To process payments and detect fraud.
- To send transactional emails (order confirmations, shipping updates, account notices).
- To comply with our legal obligations (tax, accounting, lawful requests from authorities).
- With your consent, to send marketing communications about new products or features.
5. Disclosure to third parties
We disclose personal information to a small number of trusted service providers, only as needed to operate the service:
- Stripe — payment processing.
- Supabase — database hosting and authentication.
- Teltonika and our cellular connectivity providers — device firmware, network connectivity, and diagnostics.
- Couriers and logistics providers — to ship hardware to you.
- Email and analytics providers — to send transactional emails and understand aggregate site usage.
- Professional advisers (accountants, lawyers) under confidentiality obligations.
- Government, regulators, and law enforcement where required or authorised by law.
We do not sell your personal information.
6. Overseas disclosure (APP 8)
Some of our service providers (including Stripe and Supabase) may store or process data on servers located outside Australia, including in the United States and the European Union. We take reasonable steps to ensure these recipients handle personal information in a manner consistent with the APPs.
7. Storage and security
We protect personal information with industry-standard safeguards including TLS encryption in transit, encryption at rest at our database provider, role-based access controls, and row-level security policies. We retain personal information only for as long as needed to provide the service and to meet our legal obligations (e.g. seven years for tax records under the Income Tax Assessment Act 1997 (Cth)).
8. Cookies
We use a small number of cookies and similar local storage to keep you signed in, remember your cart, and operate checkout securely. See our Cookies Policy for details.
9. Marketing and the Spam Act
Where we send commercial electronic messages we comply with the Spam Act 2003 (Cth). Every marketing email includes a one-click unsubscribe link. You can also opt out at any time by emailing tracebytested@gmail.com.
10. Access, correction, and complaints (APPs 12 & 13)
You may ask us to access or correct the personal information we hold about you. Contact tracebytested@gmail.com and we will respond within a reasonable time (usually within 30 days). We may need to verify your identity before releasing information.
If you believe we have breached the APPs, please contact us first so we can investigate. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
11. Children
The GeoTrace service is not directed at individuals under 16 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated by email or a prominent notice on the site.
13. Contact us
Trace By Tested Pty Ltd (ABN 77 683 499 210), trading as GeoTrace
Email: tracebytested@gmail.com