Privacy Policy
Last updated: 07/10/2025
Who we are
T & H Wreckers (also trading as T & H Auto Repairs) is a family-owned automotive dismantling and parts retailer in Melbourne, Australia.
- Website: https://www.thwreckers.com.au/
- Address: 78 Horne Street, Campbellfield VIC 3061, Australia
- Phone: (03) 9357 1435
- Email: info@thwreckers.com.au
We respect your privacy and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Policy explains what we collect, why we collect it, how we use it, and the choices you have.
What personal data we collect and why
- Order & checkout details (WooCommerce): name, billing/shipping addresses, email, phone, items purchased, order notes, IP address, device info. Used to process orders, deliver goods, provide support, comply with tax and accounting requirements, and prevent fraud.
- Payment information (Stripe/Apple Pay via FunnelKit): cardholder details are processed by our payment processor Stripe. We do not store full card numbers. Stripe may collect device and anti-fraud data. See Stripe’s privacy policy for details.
- Account details (if you create an account): username, password (hashed), order history, saved addresses. Used to provide faster checkout and customer service.
- Contact forms (Contact Form 7 / CFDB7): name, email, phone, message content, attachments. Used to respond to enquiries and provide quotes.
- Support & communications: emails, phone notes, chat messages, social messages. Used to resolve issues and provide customer care.
- Marketing preferences: your consent status for emails/SMS, unsubscribes. Used to honour your choices.
- Technical data: IP address, browser, device type, pages viewed, and events collected by Google Analytics 4 via Site Kit / Google for WooCommerce. Used to measure site performance and improve our services.
- Security & anti-abuse: IP address, request URL, user-agent, country and similar telemetry logged by Wordfence (security) and our CDN/protection provider (Cloudflare). If enabled, Cloudflare Turnstile or similar checks may run on forms to block bots.
Cookies
We use cookies to operate the store (e.g., cart contents, login sessions), remember preferences, measure performance (Analytics), and help prevent fraud (Stripe, Cloudflare, Wordfence). You can control cookies in your browser; blocking some cookies may affect site features.
Embedded content & links
Pages may include embedded content (e.g., YouTube videos) or links to our eBay store and social media. Embedded content from other websites behaves as if you visited those sites and may collect data according to their policies.
Where your data goes (third-party recipients)
- Payments: Stripe Payments / Apple Pay (payment processing, fraud prevention).
- Shipping & logistics: couriers and freight partners receive delivery details to fulfil your order.
- Website hosting & IT: our Australian/overseas hosting providers, backup services, and maintenance tools that process data on our behalf under confidentiality agreements.
- Security & performance: Cloudflare (CDN/protection), Wordfence (firewall/malware scanning).
- Analytics & advertising: Google Analytics 4 and Google services connected via Site Kit / Google for WooCommerce. We do not sell personal information.
- Compliance: government, law enforcement, or regulators if legally required.
Legal bases (if you are in the EEA/UK)
- Contract: to process orders and deliver products/services.
- Legitimate interests: running and securing our website, preventing fraud, improving services, and communicating with customers.
- Consent: for certain marketing and analytics where required. You can withdraw consent at any time.
How long we retain your data
- Orders: 7 years (or as required by tax/accounting law).
- Customer accounts: active while you maintain an account; deleted or anonymised after inactivity in line with our retention schedule.
- Contact form enquiries: up to 24 months (or longer if required to resolve an issue), then deleted/anonymised.
- Security logs: typically 90–180 days unless required for investigation.
- Analytics data: retained per our Google Analytics settings.
What rights you have
Under the Australian Privacy Principles, you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate. If you are located in the EEA/UK, you may also have rights to deletion, restriction, portability and objection in certain circumstances.
To exercise your rights, contact us using the details below. We may need to verify your identity.
Marketing choices
You can opt out of marketing emails by using the unsubscribe link in our messages or by contacting us. Transactional emails (e.g., order updates) will still be sent.
Protecting your data
We use technical and organisational measures such as TLS encryption, access controls, least-privilege permissions, firewalls (Wordfence), and regular updates/backups. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
International transfers
Some service providers may process data outside Australia (e.g., the United States, EU, or other regions). Where required, we take reasonable steps to ensure appropriate safeguards are in place.
Children
Our services are intended for adults. We do not knowingly collect personal information from children under 16.
Complaints
If you have a privacy complaint, please contact us first so we can resolve it. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC).
Contact us
Privacy Officer – T & H Wreckers
78 Horne Street, Campbellfield VIC 3061
Phone: (03) 9357 1435
Email: privacy@thwreckers.com.au
Changes to this Policy
We may update this Policy from time to time. The revised version will be posted here with an updated “Last updated” date.