Last updated: 24 February 2026

Introduction

RevsCheckReport.au ("Website") respects your privacy. This Privacy Policy explains how personal information is collected, used, stored, disclosed, and protected when you access the Website or purchase a REVS check / PPSR vehicle history report ("Report").

This policy is designed to comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Privacy and Other Legislation Amendment Act 2024 (Cth). It applies to all information collected through the Website, including via forms, purchases, email communication, and automated technologies.

This Website is operated by Eprotech Pty Ltd (ABN: 43 644 335 535 / ACN: 644 335 535) ("we," "us," "our," or "Company"), with a registered postal address at PO Box 300, DOONSIDE NSW 2767.

When you request a vehicle history report, data is accessed from the Australian Personal Property Securities Register (PPSR) and related government databases (such as NEVDIS) on your behalf. The information retrieved from these sources is used solely to generate your Report and is not used for unrelated marketing purposes. PPSR and NEVDIS are independent government systems operated by the Australian Financial Security Authority (AFSA) and state/territory transport authorities respectively, each with their own data handling practices and limitations.

If you have any questions about this Privacy Policy, please contact us using the details provided at the end of this document.

What Information We Collect

Personal Identification and Contact Details

When you use the Website or purchase a Report, the following personal information may be collected:

Your email address (if you provide it or create an account).

Your name (if you provide it).

Your phone number or postal address (if you choose to provide these).

Any other personal information you voluntarily provide when contacting us or requesting support.

Vehicle Information

To generate a Report, vehicle identifiers you provide are collected:

Vehicle Identification Number (VIN).

Registration number (licence plate).

State or territory of registration.

This information is used solely to search the PPSR and related government databases and deliver your Report. Search details and vehicle identifiers are retained only as long as necessary for service delivery, customer support, dispute resolution, and legal compliance (typically up to 7 years for tax and business record purposes).

Payment Information

When you purchase a Report at the price of $2.00 AUD, payment details are processed by third-party payment providers:

Stripe and/or PayPal, which handle credit card, debit card, and other payment method details.

Important: Full credit card numbers, CVV codes, or other sensitive payment card details are not stored on our systems. These are handled securely by Stripe and PayPal in accordance with the Payment Card Industry Data Security Standard (PCI DSS) and their respective privacy policies.

The following payment-related information is collected and stored:

Transaction identifiers and reference numbers.

Order amounts and dates.

Payment status (successful, failed, refunded).

The last four digits of card numbers (where provided by Stripe/PayPal for customer service purposes).

This information is necessary for invoicing, customer support, refund processing, and tax compliance.

Usage and Analytics Data

Certain information about how you use the Website is automatically collected:

Your Internet Protocol (IP) address.

Device information (operating system, browser type, device type).

Pages you visit and time spent on each page.

Links you click and actions you take.

Referring website and exit pages.

Crash reports and error logs.

This information is collected via cookies, web beacons, pixels, and similar tracking technologies, including through Google Analytics. See the Cookies and Tracking Technologies section below for more details.

How Information Is Collected

Direct Collection

Personal information is collected directly from you when you:

Submit a form to request or purchase a Report.

Create or update an account.

Contact us via email or through a contact form.

Provide feedback or report a problem.

Automatic Collection

Usage and analytics data is collected automatically through:

Cookies and similar technologies that your browser sends to the Website.

Analytics scripts and third-party tracking tools (such as Google Analytics).

Server logs and related system records.

Information from Third Parties

When you request a Report, vehicle history data is retrieved from the PPSR and NEVDIS on your behalf. This data is sourced from Australian government databases and is presented as received; it is not controlled, verified, or altered by us.

Purposes of Collection and Use

Personal information is collected and used for the following purposes, consistent with Australian Privacy Principle 6 (APP 6) which limits use and disclosure to the primary purpose of collection or a directly related secondary purpose:

Service Delivery

To generate, deliver, and display your REVS/PPSR Report.

To process your payment and send transaction confirmations and receipts.

To provide customer support and respond to your enquiries.

PPSR and Government Database Searches

To submit searches to the Personal Property Securities Register (PPSR) and related government vehicle databases on your behalf.

To retrieve official PPSR search certificates issued under section 174 of the Personal Property Securities Act 2009 (Cth) and related vehicle history data.

To compile and present this data in an easy-to-read Report format.

The content of PPSR or government database results is not controlled or modified by us. We act as an intermediary to retrieve and present this information to you.

Website Improvement and Analytics

To analyse how the Website is used and to improve user experience.

To identify and fix technical problems.

To understand which features are popular and how customers navigate the site.

De-identified, aggregated data is typically used for these purposes.

Marketing and Communication

To send you information about our services, updates, or promotions (only with your consent where required by law, consistent with APP 7).

To conduct surveys or request feedback.

You may opt out of marketing communications at any time by using the unsubscribe link in any email or by contacting us.

Legal Compliance

To comply with legal obligations imposed by Australian law, including the Privacy Act 1988 (Cth), the Competition and Consumer Act 2010 (Cth), and applicable taxation legislation.

To respond to lawful requests from government agencies, regulators, or courts.

To protect our legal rights and to investigate suspected fraud or misuse.

Disclosure of Information

Personal information may be disclosed to the following categories of recipients:

Service Providers

Payment processors: Stripe and PayPal, who process payments on our behalf.

Government data sources: Searches are submitted to the PPSR (operated by the Australian Financial Security Authority) and NEVDIS (operated by state/territory transport authorities) on your behalf.

Hosting and technical providers: Companies that host the Website, provide email services, or manage infrastructure.

Analytics providers: Google Analytics and similar tools that help us understand Website usage.

Customer support platforms: Services used to respond to and manage customer enquiries.

Legal and Regulatory

Government agencies, law enforcement, or courts, where required by law or lawful request.

Professional advisors (such as accountants or lawyers), where necessary for legal or business purposes.

Other Circumstances

Successors or assignees if the business is sold, merged, or transferred.

De-identified, aggregated information may be used internally for analysis and improvement purposes without restriction.

We do not sell or rent your personal information to unrelated third parties for their marketing purposes.

Storage, Security, and Retention

Security Measures

Reasonable steps are taken to protect personal information from misuse, loss, unauthorised access, modification, or disclosure, as required by Australian Privacy Principle 11 (APP 11). These steps include both technical and organisational measures as required by the Privacy and Other Legislation Amendment Act 2024 (Cth):

Encryption of sensitive data in transit (using SSL/TLS protocols).

Encryption of sensitive data at rest where appropriate.

Restricted access to personal information on a need-to-know basis.

Regular security audits and updates.

Secure authentication mechanisms for account access.

Monitoring systems for detecting unauthorised access or suspicious activity.

However, no method of transmission over the internet or electronic storage is completely secure. Absolute security cannot be guaranteed, and any transmission is at your own risk.

Data Retention

Personal information is retained only as long as necessary to:

Provide you with services and deliver your Report.

Fulfil legal or regulatory obligations (for example, taxation records must be kept for at least 5 years under Australian tax law, and business records are typically kept for up to 7 years).

Resolve disputes, process refunds, or enforce our agreements.

Protect our legal rights and investigate suspected fraud.

Typical retention periods are:

Once information is no longer needed, it is securely destroyed or de-identified, except where retention is required by law for a longer period (such as for legal proceedings or regulatory investigations).

Payment Information

Payment-related information is retained by Stripe and PayPal in accordance with their own privacy policies and retention schedules. Transaction records are retained by us for accounting, tax, and customer service purposes.

Notifiable Data Breaches

In the event of an eligible data breach as defined under Part IIIC of the Privacy Act 1988 (Cth), we will:

Take immediate steps to contain the breach and assess whether it is likely to result in serious harm to affected individuals.

Complete an assessment within 30 days of becoming aware of the breach (or sooner if practicable).

If the breach meets the threshold for notification, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches (NDB) scheme.

Provide a description of the breach, the kinds of information involved, and recommendations for steps individuals should take in response.

If you believe your personal information has been compromised, contact us immediately using the details in the Contact Us section below.

Access, Correction, and Your Rights

Under the Australian Privacy Principles (APPs 12 and 13), you have the right to:

Request access to the personal information held about you.

Request correction of personal information that is inaccurate, incomplete, or outdated.

Request deletion of your information (subject to legal obligations to retain records).

Object to certain uses of your information.

Withdraw consent for marketing communications at any time.

Request a copy of your personal information in a portable format, where reasonably practicable.

To exercise these rights, please contact us at:

Email: support@eprotech.com.au

Postal Address: PO Box 300, DOONSIDE NSW 2767

Access requests will be responded to within a reasonable timeframe (typically 30 days). A reasonable fee may be charged for providing copies of information, and requests that are manifestly unfounded or excessive, or that would prejudice the rights and freedoms of others, may be declined with written reasons provided.

Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device that websites can read when you visit them. They help websites remember your preferences and maintain session state.

How We Use Cookies

Cookies are used for the following purposes:

Session management: Keeping you logged in and maintaining your session during a Report purchase.

Analytics: Understanding how visitors use the Website (via Google Analytics).

Security: Detecting and preventing fraud or unauthorised access.

Preferences: Remembering your settings or display choices.

Third-Party Cookies

Google Analytics and similar third-party tools may use cookies to collect information about your browsing behaviour. You can opt out of Google Analytics tracking by:

Installing the Google Analytics Opt-out Browser Add-on.

Adjusting your privacy settings in your browser or device.

Managing Cookies

You can adjust your browser settings to:

Block all cookies.

Allow only certain cookies.

Receive a warning each time a cookie is placed.

Delete cookies when you close your browser.

Please note that blocking cookies may affect the functionality of the Website, and you may not be able to use certain features (such as logging in or completing a Report purchase).

Overseas Disclosure

Some service providers operate from overseas or use infrastructure located outside Australia. These include:

Stripe and PayPal: US-based payment processors that may store payment-related data in the United States, European Union, and other jurisdictions where they maintain data centres.

Google Analytics: US-based analytics platform that processes and stores data on servers in the United States and other countries.

Cloud hosting providers: The Website and email systems may be hosted on servers located in the United States, Singapore, or other jurisdictions (using cloud providers with data centres in Sydney, NSW, where possible).

When personal information is disclosed to overseas recipients:

Reasonable steps are taken to ensure those recipients handle information in accordance with the Australian Privacy Principles, including through contractual protections where practicable (consistent with APP 8).

However, overseas recipients may be subject to foreign laws (such as US law enforcement access provisions) that differ from Australian privacy protections.

By using the Website and purchasing Reports, you acknowledge that your information may be disclosed to, and processed in, the countries listed above.

Note: The PPSR and NEVDIS databases are operated within Australia by Australian government agencies. Vehicle data retrieved from these sources is processed domestically before being included in your Report.

Children's Privacy

The Website and Reports are not directed at, and are not intended for use by, children under the age of 18. Personal information from individuals under 18 is not knowingly collected. If you believe that a child under 18 has provided personal information through the Website, please contact us immediately and we will take reasonable steps to delete that information.

The Privacy and Other Legislation Amendment Act 2024 (Cth) introduced stronger privacy protections for children, and we are committed to complying with these enhanced requirements.

Automated Decision-Making

The Website may use automated systems to process vehicle search requests and generate Reports. These automated processes:

Match the vehicle identifiers you provide (VIN, registration number, state) against PPSR and government databases.

Compile and format the returned data into your Report.

These processes are operational in nature and do not involve automated decision-making that significantly affects your rights or interests beyond the delivery of the Report you have requested.

From 10 December 2026, new transparency obligations under the Privacy and Other Legislation Amendment Act 2024 (Cth) will require additional disclosure where automated decision-making could reasonably be expected to significantly affect the rights or interests of individuals. This Privacy Policy will be updated to reflect those obligations as they come into effect.

Statutory Tort for Serious Invasion of Privacy

The Privacy and Other Legislation Amendment Act 2024 (Cth) introduced a statutory tort for serious invasions of privacy, which came into effect in mid-2025. This provides individuals with a direct legal pathway to seek remedies in court if their privacy has been seriously invaded.

We are committed to handling all personal information responsibly and in compliance with this legislation. If you believe your privacy has been seriously invaded through our handling of your personal information, you may:

Contact us to raise a complaint (see Contact Us below).

Lodge a complaint with the OAIC.

Seek legal advice about your rights under the statutory tort.

Updates to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our practices, technology, or legal requirements (including ongoing reforms to the Privacy Act 1988). The latest version will be posted on this page with an updated "Last updated" date.

Your continued use of the Website after changes are published constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this policy regularly to stay informed about how your information is protected.

Where material changes are made to how personal information is handled, reasonable steps will be taken to notify you (such as by posting a prominent notice on the Website or sending an email notification where practicable).

Contact Us

If you have questions about this Privacy Policy, wish to access or correct your information, or want to lodge a privacy complaint, please contact:

Email: support@eprotech.com.au

Postal Address: PO Box 300, DOONSIDE NSW 2767

We will acknowledge privacy complaints within 7 business days and aim to resolve them within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au

Phone: 1300 363 992

Email: enquiries@oaic.gov.au

Postal Address: GPO Box 5218, Sydney NSW 2001

This Privacy Policy is effective as of the "Last updated" date shown above and applies to all users of RevsCheckReport.au.

© 2026 Eprotech Pty Ltd (ABN: 43 644 335 535). All rights reserved.