Privacy Policy
Last updated: 9 April 2026
This Privacy Policy explains how GATTON AUTOMOTIVE SOLUTIONS PTY LTD (ABN 72 694 305 381), trading as Gatton Automotive Solutions (in this policy, “we”, “us” or “our”), collects, uses, stores and discloses your personal information when you visit this website, contact us, make a booking enquiry, or telephone us.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy describes how we comply with those obligations.
1. About this website
This website is operated on our behalf by a third-party platform provider (AutoPal) which provides website infrastructure, conversion tracking, call routing, and lead-management services. AutoPal acts as a service provider to us and processes your personal information only on our instructions and for the purposes described in this policy.
2. The personal information we collect
2.1 Information you give us directly
When you fill in our online booking or contact form, we collect:
- Your name
- Your email address
- Your telephone number
- Your vehicle’s registration number and the State or Territory in which it is registered
- The services you are enquiring about
- Any additional information you choose to include in free-text fields
When you telephone us, we collect:
- Your telephone number (as presented by your carrier)
- The date, time and duration of your call
- The content of your call, where the call is answered by our automated receptionist service. Our automated receptionist may record the audio of the call and produce a written transcript so that we can respond to your enquiry, schedule a booking, and improve service quality. You will be notified at the start of any such call before the recording begins.
2.2 Information we collect automatically
When you visit this website, our website and the third-party services it uses collect technical information automatically, including:
- Your IP address and approximate location derived from it
- Your browser type, operating system, language and screen size
- The pages you view, the order you view them, and how long you spend on each page
- The website (if any) you arrived from
- If you arrived via an online advertisement, the unique click identifier assigned by the advertising platform (for example, Google’s gclid, gbraid and/or wbraid parameter)
- Whether you clicked a “tap to call” link, and if so the time of that click
2.3 Information we obtain from third parties
If you provide a vehicle registration number on our form, we send that registration number and State to a third-party vehicle data provider (RegCheck.org.uk, located in the United Kingdom) to look up information about your vehicle. The information returned to us may include the vehicle make, model, year of manufacture, vehicle identification number (VIN), engine details, transmission, fuel type, colour, registration status, and insurance expiry date. We use this information solely to confirm the vehicle you are enquiring about and to give you an accurate quote or service appointment.
3. How we use your personal information
We use your personal information for the following purposes:
- To respond to your enquiries and complete bookings you request
- To contact you about your enquiry, booking or vehicle service
- To provide you with quotes and estimates
- To improve our website, services and customer experience
- To measure the effectiveness of our advertising
- To prevent fraud and protect the security of our website
- To comply with our legal obligations
Direct marketing. We will only use your contact details to send you marketing communications if you have given us your express consent to do so, or where the law otherwise allows. You can opt out of receiving any marketing message at any time by replying “STOP”, clicking the unsubscribe link in any email, or contacting us at the address in Section 11.
4. Who we share your personal information with
We share personal information with the following categories of third-party service providers, who process it on our behalf for the purposes described above:
| Service provider | What it does | Information it receives | Where it is located |
|---|---|---|---|
| AutoPal | Operates the website infrastructure, conversion tracking and lead routing on our behalf | All website and form data described in this policy | Australia |
| Google LLC (Google Tag Manager, Google Analytics 4, Google Ads) | Website analytics, advertising performance measurement and conversion tracking | Page views, form events, hashed (one-way encrypted) email and phone, click identifiers, device and browser information | United States and other Google data centres globally |
| GoHighLevel (HighLevel Inc.) | Customer relationship management, booking workflows and marketing automation | Name, email, phone, vehicle details, services requested, booking status | United States |
| Vonage | Telephone call routing and call metadata | Caller telephone number, call duration, call timestamps, called number | United States, with regional points of presence |
| LiveKit | Provides our automated telephone receptionist service. May process call audio in real time and produce a written transcript. | Call audio (during the call) and the resulting transcript | United States |
| n8n | Workflow automation that connects our website, telephone system and customer database | Click identifiers, call metadata, hashed email and phone for advertising attribution | Hosted by our service provider |
| RegCheck.org.uk | Vehicle registration lookup | Registration number and State of registration | United Kingdom |
| WP Engine | Website hosting | All information passing through this website, server access logs | Australia |
We may also disclose personal information where we are required or permitted to do so by law, including in response to a court order, a request from a law enforcement or regulatory authority, or to protect our rights or the safety of any person.
We do not sell your personal information to anyone.
5. Cookies and similar tracking technologies
We use cookies and similar technologies to remember your preferences, measure how you use our website, and attribute your visit to a marketing source. A cookie is a small text file stored in your browser. The main cookies set by this website are:
| Cookie name | Set by | Purpose | Lifespan |
|---|---|---|---|
_ap_gclid, _ap_gbraid, _ap_wbraid |
This website | Records the Google Ads click identifier when you arrive from a Google advertisement, so that any subsequent booking or call can be attributed to that advertisement | 90 days |
_ap_attr_source |
This website | Remembers your traffic source (for example Google Ads or Google Business Profile) for the current browsing session, used to display the corresponding telephone number | End of browser session |
_ga, _ga_*, _gid |
Google Analytics 4 | Distinguishes individual visitors and sessions for analytics reporting | Up to 2 years |
_gcl_au, _gcl_aw |
Google Ads | Conversion tracking and advertising attribution | Up to 90 days |
You can control cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a cookie is set. If you disable cookies, parts of this website may not work correctly.
5.1 Dynamic telephone number display
This website may display different telephone numbers depending on how you arrived. For example, visitors arriving from a Google advertisement may see a different telephone number than visitors arriving from a search engine. All numbers shown route to the same business and are answered the same way; the different numbers exist solely so that we can measure which marketing channels deliver enquiries.
6. Telephone calls
When you telephone us, your call is routed through a tracking number provided by Vonage. We collect your telephone number, the date and time of the call, and the call duration so that we can respond to your enquiry and measure marketing performance. We may also be told which advertisement, if any, prompted you to call.
Your call may be answered by an automated receptionist service operated on our behalf by LiveKit. If your call is answered by the automated receptionist, you will be notified at the start of the call before any recording begins. Audio of the call and a written transcript may be retained so that we can complete your booking, follow up with you, resolve any disputes, and improve service quality.
7. International data transfers
Several of the third-party service providers listed in Section 4 are located outside Australia, primarily in the United States and the United Kingdom. By using this website, telephoning us or submitting our form, you consent to the transfer of your personal information to those countries for the purposes described in this policy.
We take reasonable steps to ensure that overseas service providers handle your personal information consistently with the Australian Privacy Principles, including through the contractual terms in their standard data processing agreements.
8. How we keep your personal information secure
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include:
- Hosting on a managed Australian hosting platform with industry-standard physical and network security
- Encryption of personal information in transit using HTTPS / TLS
- Hashing (one-way encryption) of email and phone before transmission to advertising platforms for conversion measurement
- Access controls limiting which staff and service providers can read personal information
- Regular software updates and security patches
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
9. How long we keep your personal information
We retain personal information for as long as is reasonably necessary for the purposes described in this policy, or for as long as we are required to retain it by law. The actual retention period depends on the nature of the information. For example:
- Booking enquiries and customer contact records are retained for as long as you remain a customer, plus a reasonable period afterwards for legal and accounting purposes
- Website analytics data is retained for the periods set by Google Analytics 4 (currently up to 14 months by default)
- Tracking cookies expire automatically after the periods listed in Section 5
- Telephone call metadata and recordings made by our automated receptionist are retained for as long as necessary to complete your booking, resolve any related dispute, and meet our legal obligations
When we no longer need your personal information, we will delete or de-identify it.
10. Your rights
Under Australian privacy law you have the following rights in relation to the personal information we hold about you:
- Access. You can ask us for a copy of the personal information we hold about you.
- Correction. You can ask us to correct any personal information we hold about you that is inaccurate, out of date, incomplete, irrelevant or misleading.
- Withdraw consent. Where we rely on your consent to process your personal information, you can withdraw that consent at any time.
- Opt out of direct marketing. You can ask us to stop sending you marketing communications at any time, free of charge.
- Complain. You can complain to us about how we have handled your personal information.
To exercise any of these rights, please contact us using the details in Section 11. We will respond to your request within a reasonable time (and in any event within 30 days). We may need to verify your identity before responding to a request.
11. How to contact us
If you have any questions about this policy, or you wish to access, correct or delete your personal information, you can contact us at:
- Gatton Automotive Solutions
- Shop 2, 59 Western Drive, Gatton QLD 4343
- Email: sales@gasauto.com.au
- Telephone: (07) 2112 8532
12. Making a complaint
If you are not satisfied with how we have handled your personal information or your privacy complaint, you can complain to the Office of the Australian Information Commissioner (OAIC):
- Online: www.oaic.gov.au/privacy/privacy-complaints
- Telephone: 1300 363 992
- Post: GPO Box 5288, Sydney NSW 2001
13. Children’s privacy
This website is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe that we have collected personal information about a child, please contact us and we will delete it.
14. Changes to this policy
We may update this policy from time to time to reflect changes in our practices, the services we use, or the law. We will publish the updated policy on this page and revise the “Last updated” date at the top. We recommend that you review this policy periodically.