TR TRANSPORT RENTAL PTY LIMITED Privacy Policy

Intent

This policy applies to TR TRANSPORT RENTAL PTY LTD and all Australian based subsidiary companies, including:

TR GROUP AU PTY LTD;
TR GROUP USED VEHICLE SALES PTY LTD; and,
SOUTHERN CROSS INDUSTRIES S.A. PTY LTD.

Any reference to TR TRANSPORT RENTAL PTY LTD (we, us, our) in this document is taken to be inclusive of all subsidiary companies.

We are bound by the Australian Privacy Act 1988 (Cth) (the Act), the Australian Privacy Principles (APP) contained in the Act, the Privacy (Credit Reporting) Code 2025 and other applicable laws in Australia. This Privacy Policy sets out how we will collect, use, disclose and protect your personal information (including credit-related personal information).

This policy does not limit or exclude any of your rights under the Act. For further information on the Act, see the Office of the Australian Information Commissioner.

Requirements

Changes to this Policy

Last updated 11 August 2026.

Your Information we collect

Personal Information

When we refer to personal information, we mean information or an opinion about you, from which you are, or may reasonably be, identified.

We may collect personal information about you, including (but not limited to):

Name
Address
Contact information, including email address or other electronic identifiers
Date of birth
Billing or purchase information
History of interactions with us
Driver License Number
National Student Number
Vehicle and course preferences
IP address, device identifiers, and information collected through cookies and similar tracking technologies
Audit trail information collected when you sign documents electronically, such as IP address, location data, and device information
Location and GPS data, where a vehicle you drive is fitted with a telematics or tracking device(s)

Credit-related personal information

We may also collect credit-related personal information about you as a result of credit checks that you authorise us to carry out.

The kinds of credit-related personal information we may collect about you includes:

information about your identity;
the type and amount of credit sought in each application;
default and payment information;
information about any court proceedings;
information about your personal insolvency; and
credit eligibility information, being credit reporting information supplied to us by a credit reporting body, and any information that we derive from it.

We may also collect any other information we request from you from time to time in relation to our provision of products and services to you.

Information Collected Automatically Through Tracking Technologies

When you interact with our services, we (and our third-party partners, including social media and marketing networks) automatically collect certain Personal Information through cookies, web beacons, pixels, and similar tracking technologies.

This information may include, but is not limited to:

Identifiers: Your IP address, unique device identifiers, account usernames, and email addresses (where provided or associated with your session).
Geolocation Data: General or precise location information derived from your IP address or device settings.
Commercial & Online Activity: Information about your interactions with our website, applications, advertisements, and social media plug-ins or integrations.

We use this data to analyse site traffic, remember your preferences, and deliver personalized content. Additionally, our social media marketing partners may use these cookies to collect data about your online activities over time and across different websites to serve you targeted advertisements.

Cookies

Some of our web pages may use “cookies” and other tracking technologies to collect information about website activity and help you navigate the website. Cookies are small pieces of information stored on your computer, not on our site. Some cookies and other technologies may serve to recall personal information previously entered in your web browser. Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may disable cookies by changing the settings in your browser, although this may mean that you cannot use all the features of the website.

Internet Use

If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information. We suggest you review that site’s privacy policy before you provide personal information.

Employment candidate personal information

If you apply for employment with us, this Privacy Policy applies to the personal information that you share with us, or that is otherwise acquired by us indirectly, during the application and/or recruitment process, including but not limited to:

your name, address, email address, telephone number and other contact information;
personal information contained in your CV, resume, cover letter and other accompanying documents relating to your application;
personal information obtained from interviews and reference checks (including referee checks, national police check and an insolvency check); and
personal information obtained from publicly available sources.

How we collect your information

We collect personal information directly from you in person, by telephone, email, through our website www.trgroupau.com and any related or online services. We also collect personal information through forms and agreements you complete and submit to us, through any registration or subscription process, contact with us or when you buy or use our services and products.

We also collect personal information about you from:

your employer or manager, in circumstances where they arrange vehicle hire, or other services for you, or when they set up an account with us on your behalf
other companies within our group of companies, including our parent company in New Zealand, and our dealers, brokers, suppliers, and service partners
credit reporting bodies, credit collection agencies, banks, and finance providers, when we assess or manage credit and payment arrangements
recruitment agencies, referees, and background checking providers if you apply for a role with us
third parties including government agencies and regulators, where this is authorised or required by law
telematics and vehicle data providers, and vehicle manufacturers, where your vehicle is fitted with a telematics or tracking device
advertising, analytics, and social media platforms, about your interactions with our website, applications, and advertising
publicly available sources, such as public registers and publicly accessible websites and social media profiles

Where we collect your personal information from someone other than you, we take reasonable steps to notify you of the matters required under Australian Privacy Principle 5, unless an exception applies.

How we secure your personal information

We hold personal information in electronic form in our business systems, which are hosted by us and by service providers on our behalf, and in paper records. We will take reasonable steps to protect your personal information, including your credit-related personal information, by storing it in a secure environment, and when the information is no longer needed for any purpose for which the information may be used or disclosed, it will be destroyed, permanently de-identified or put beyond use as soon as it becomes practically possible.

How we use your personal information

We will use your personal information to:

Verify your identity
Provide services and products to you
Market our services and products to you, including contacting you electronically (e.g. by text or email for this purpose)
Improve the services and products that we provide to you
Undertake credit checks of you (if necessary)
Bill you and to collect money that you owe us, including authorising and processing credit card transactions
Respond to communications from you, including a complaint
Conduct research and statistical analysis (on an anonymised basis)
Protect and/or enforce our legal rights and interests, including defending any claim
For any other purpose authorised by you or the Act

TR Group may use your personal information for direct marketing, including via email, SMS, and social media platforms. You can opt out at any time by clicking ‘unsubscribe’ in our emails, adjusting your social media ad settings, or contacting us via [email protected]

How we disclose your personal information

We will use and disclose your personal information for the purposes as set out in this Privacy Policy, as well as purposes that are directly related, where you would reasonably expect us to. We may disclose your personal information to and/or collect your personal information from:

Another company within our group of companies
any companies and contractors who we retain to provide services for us, such as IT contractors, call centres, payroll providers, stationery printing houses, mail houses, storage facilities, lawyers, accountants and auditors, who will need to have access to your personal information to provide those services;
trusted third party advertising platforms such as social media, including Google, Meta (Facebook and Instagram) and LinkedIn. For the purposes of delivering targeted advertisements and analysing effectiveness of campaigns
credit reporting bodies for the purpose of credit checking you, and credit collection agencies for the purposes of collecting money that you owe to us
research, analytics, and market insight providers, where the information is anonymised or aggregated so that you cannot be identified
third party service providers that we engage to deliver internal processes and services, where access to your personal information is needed to perform those services
our document management agent (DocuSign, Box) for the purposes of onboarding and completing agreement forms
third parties, including government agencies and regulatory bodies where we are authorised to do so by law, such as under the Anti- Money Laundering and Counter Terrorism Financing Act 2006 (Cth);
Any other individuals or companies authorised by you; and
Anyone where you have provided consent

Overseas Disclosure of Personal Information

Our parent company is located in New Zealand. This means your personal information may be held and processed outside of Australia.

Additionally, a business that supports our services and products may be located outside Australia. This may mean your personal information is held and processed outside Australia. The overseas recipients of your personal information are likely to be located in New Zealand, and in the countries where our technology and service providers host or support our systems, including the United States, the United Kingdom, Ireland, Singapore, and countries within the European Union.

Before we disclose your personal information to an overseas recipient, we take steps that are reasonable in the circumstances to ensure that the recipient does not breach the Australian Privacy Principles in relation to that information, unless an exception under Australian Privacy Principle 8 applies.

Retaining your personal information

We keep your personal information for as long as we need it for the purposes set out in this policy, and for as long as we are required or permitted to keep it under the Act or any other law.

Some information is kept for longer periods to meet our legal, regulatory, tax, and record keeping obligations, or where it is needed to establish, exercise, or defend legal claims. Where we no longer need your personal information and we are not required to retain it, we take reasonable steps to destroy it or ensure it is de-identified.

Accessing and correcting your personal information

You have the right to ask for access to the personal information we hold about you, and to ask us to correct it. These rights are set out in Australian Privacy Principles 12 and 13, which also set out the limited grounds on which we may refuse a request.

We will respond to your request within a reasonable period, which in most cases will be within 30 calendar days of receiving it.

We will take reasonable steps to correct your personal information where we are satisfied it is inaccurate, out of date, incomplete, irrelevant, or misleading, or where you ask us to correct it. If we have previously disclosed that information to another entity, you may ask us to notify them of the correction, and we will take reasonable steps to do so unless it is impracticable or unlawful.

If we refuse to give you access, or refuse to correct your personal information, we will give you a written notice setting out the reasons for the refusal, except where it would be unreasonable to do so, and the complaint mechanisms available to you. If we refuse to correct your personal information, you may ask us to associate a statement with that information noting that you believe it is inaccurate, out of date, incomplete, irrelevant, or misleading, and we will take reasonable steps to do so.

We do not charge you for making a request for access or correction, for correcting your personal information, or for associating a statement with your personal information. We may charge you a reasonable amount for giving you access, and that charge will not be excessive. We will tell you about any charge before we proceed so that you can decide whether to continue.

To make a request, email us at [email protected] with enough detail for us to identify you and to understand what you are asking for.

Updating your Personal Information

It is important that the personal information we hold about you or any other person is accurate, up to date, and complete. Please let us know us as soon as you can if there have been any changes to the information you have provided us with, or if you believe that the information we hold about you may be inaccurate or incomplete. During the course of our relationship with you we may also ask you to inform us if any of your personal information has changed.

Credit-Related Personal Information

Statement of notifiable matters

The law requires us to advise you of 'notifiable matters' in relation to how we may handle your credit-related personal information. You may request to have these notifiable matters (and this Privacy Policy) provided to you in an alternative form.

Credit checks and your credit score

If you are applying for commercial credit, or if you are a guarantor in relation to an application for credit, we may carry out a credit check about you with your consent.
For further information, contact:

Creditor Watch – www.creditorwatch.com.au – contact on 1300 50 13 12; see privacy policy at https://www.creditorwatch.com.au/privacy;

Further information and complaints

If you would like further information about how we manage your personal information, or if you wish to make a complaint about a potential breach of your privacy, you may contact us on [email protected].

We will acknowledge and investigate any complaint you make about the handling of your personal information. We aim to provide a response within 15 working days, provided that we have all necessary information and have completed any investigation required. In cases where further information, assessment or investigation is required, we will notify you to seek to agree an alternative timeframe.

External Complaint Bodies

If you are dissatisfied with our response to your complaint, you may refer the matter to the relevant external privacy regulatory authority:

Office of the Australian Information Commissioner

Phone: 1300 363 992

Website: www.oaic.gov.au

Mail: GPO Box 5218 Sydney NSW 2001

Data Breach Notification

In the event of a data breach, we will:

comply with our obligations under the Notifiable Data Breaches scheme under the Privacy Act, including promptly investigating the breach;
where required, prepare a statement outlining the breach and provide it to the Office of the Australian Information Commissioner, and notify affected individuals; and
include details in that statement about the nature of the breach, the types of information involved, steps we recommend you take to protect yourself, and how you can contact us for further information.

If you have any questions about how we manage data breaches, please contact us by using our privacy contact details set out in section ‘Contacting Us’.

Changes to this policy

We may change this policy from time to time by uploading a revised policy onto the website. The change will apply from the date that we upload the revised policy. You can request a copy of this policy in an alternate form by contacting us on [email protected].

Contacting us

If you have any questions about this privacy policy, our privacy practices, or if you would like to request access to, or correction of, your personal information, you can contact us at [email protected].

Governance

Policy Owner: Group IT Manager
Approved: August 2026