Privacy policy
1. INTRODUCTION
Aeroklas Australia Pty Ltd, Aeroklas Asia Pacific Group Pty Limited, Flexiglass Challenge Pty Ltd (trading under the Flexiglass and BOCAR brands), 4 Way Suspension Products Pty Ltd (trading under the Tough Dog brand), TJM Off-Road Products Inc, Aeroklas Europe BV, and their related bodies corporate (collectively, “Aeroklas Group”, “we”, “us”, or “our”) are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with us, whether online, in-store, through our distributors, stockists, resellers, or otherwise.
We comply with applicable privacy laws in all jurisdictions where we operate, including:
- Australia – Privacy Act 1988 (Cth) & Australian Privacy Principles (APPs)
- European Union / United Kingdom – General Data Protection Regulation (EU) 2016/679 and UK GDPR (GDPR)
- United States – California Consumer Privacy Act 2018 (CCPA), as amended by CPRA, and other applicable state privacy laws
- South Africa – Protection of Personal Information Act 2013 (POPIA)
- Thailand – Personal Data Protection Act B.E. 2562 (PDPA)
By using Aeroklas Group websites, products, or services, or by providing us with your personal information, you consent to the handling of your personal information in accordance with this Privacy Policy.
2. INFORMATION WE COLLECT
We collect and hold personal information necessary to operate our business and provide our products and services, including:
Identifiers & Contact Information – Name, address, phone number, email, account login details, and your nearest store location.
Commercial & Transactional Data – Details of products or services you have enquired about or purchased, service history, warranty claims, and related communications.
Technical & Usage Data – IP address, browser type, operating system, device identifiers, cookies, and website usage data.
Special Category / Sensitive Information – Only collected with your consent or where permitted by law (e.g., medical or health details in the event of a product safety issue).
3. HOW WE COLLECT PERSONAL INFORMATION
We generally collect your personal information directly from you, such as when you:
- Purchase products or services from us or our distributors, stockists, or resellers.
- Contact us by phone, email, post, online forms, or in person.
- Register an account on our websites.
We may also collect personal information:
- From your authorised representatives or referees (e.g., in job applications).
- From publicly available sources.
- From third-party marketing or analytics providers.
If you provide information about another individual, you confirm you have their consent or lawful authority to do so.
4. HOW WE USE YOUR INFORMATION
We use and disclose personal information for:
- Providing products and services – including sales, delivery, fitting, repairs, warranty support, and recalls.
- Customer communications – responding to enquiries, sending service updates, and arranging bookings.
- Marketing and promotions – where permitted by law, informing you about products, special offers, and events.
- Business operations – recruitment, record-keeping, legal compliance, and insurance purposes.
- Improving services – research, analytics, and product development.
- Legal and safety obligations – compliance with applicable laws, fraud prevention, and protection of property and safety.
Legal bases for processing (GDPR/UK GDPR/PDPA/POPIA):
- Your consent.
- Performance of a contract.
- Compliance with legal obligations.
- Our legitimate business interests.
CCPA Notice: Under California law, “personal information” includes the above categories, and you have the right to opt out of the sale or sharing of such information for targeted advertising.
5. MARKETING & YOUR CHOICES
We may use your contact details to send you marketing material by post, phone, email, or SMS. You can opt out at any time by:
- Clicking “unsubscribe” in an email.
- Replying “STOP” to SMS.
- Contacting our Privacy Officer (Section 12).
Where required (GDPR, PDPA), we will obtain your consent before sending marketing communications.
6. COOKIES & TRACKING TECHNOLOGIES
We use cookies and similar technologies to:
- Operate and secure our websites.
- Analyse site usage and improve functionality.
- Deliver targeted advertising through partners such as Google and Facebook.
Where required by law (e.g., EU/UK GDPR ePrivacy rules), we will obtain your consent before placing non-essential cookies. You can manage cookies through your browser settings.
7. DISCLOSURE OF PERSONAL INFORMATION
We may share personal information with:
- Aeroklas Group companies worldwide.
- Distributors, stockists, resellers, contractors, and service providers assisting us in our operations.
- Government regulators, law enforcement, and legal advisers when required by law.
Cross-border transfers:
- APP 8 (Australia): We take reasonable steps to ensure overseas recipients do not breach the APPs.
- GDPR/UK GDPR: Transfers outside the EEA/UK occur under adequacy decisions or Standard Contractual Clauses.
- POPIA: Transfers only where comparable protection is in place.
- PDPA: Transfers only where the receiving country provides adequate data protection or other lawful grounds apply.
8. STORAGE, SECURITY & RETENTION
We hold personal information in both electronic and paper formats, and take reasonable steps to protect it from unauthorised access, modification, disclosure, loss, or misuse.
Retention periods:
- Customer transaction records – 7 years.
- Marketing contact details – 2 years after last engagement unless renewed.
- Technical logs – up to 12 months.
We securely delete or de-identify information once it is no longer needed for legal, business, or safety purposes.
9. YOUR RIGHTS
Depending on your location, you may have the right to:
- Access and obtain a copy of your personal information.
- Request corrections or updates.
- Request deletion (“right to be forgotten”).
- Restrict or object to processing.
- Request data portability.
- Withdraw consent where processing is based on consent.
- Opt out of targeted advertising or sale/sharing of personal information (CCPA).
We will respond within the timeframes required by applicable laws (e.g., 30 days under GDPR, 45 days under CCPA).
10. DATA BREACH NOTIFICATIONS
If a data breach occurs that is likely to result in serious harm, we will notify you and the relevant regulator in accordance with:
- Australia: Notifiable Data Breaches Scheme.
- GDPR/UK GDPR: Supervisory authority within 72 hours.
- CCPA: Without unreasonable delay.
- POPIA/PDPA: As soon as reasonably practicable.
11. COMPLAINTS
If you believe we have mishandled your personal information, please contact our Privacy Officer (Section 12). We will acknowledge your complaint and aim to respond within 14 days.
You may also contact your local regulator:
- Australia: OAIC – www.oaic.gov.au
- UK: ICO – www.ico.org.uk
- EU: See European Data Protection Board list – edpb.europa.eu
- California: CPPA – cppa.ca.gov
- South Africa: Information Regulator – justice.gov.za/inforeg/
- Thailand: Personal Data Protection Committee – pdpc.or.th
12. CONTACT US
Privacy Officer – Aeroklas Asia Pacific Group
17 Johnstone Road, Brendale QLD 4500, Australia
Email: [email protected]
Phone: +61 7 3865 9895
13. CHANGES TO THIS POLICY
We may amend this Privacy Policy from time to time. Any changes will be posted on our website with the “Last Updated” date.
Effective Date: 14 August 2025