Effective date: 27 September 2026
Drive Tribe is a business of Australian Business Holdings Pty Ltd (ACN 628 053 636 / ABN 22 628 053 636) trading as Drive Tribe, of 69 Phillip Street, Parramatta NSW 2150 ("Drive Tribe", "we", "us", "our").
This policy explains what personal information we collect, why we collect it, who we share it with, where it goes, how long we keep it, and how you can access or correct it. It applies to our website (drivetribe.com.au), our booking system, our guest and host portals, our messaging, and every vehicle rental we provide.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Whether or not the Act requires it of a business of our size, we have chosen to comply with the Australian Privacy Principles as if we were bound by them, and our rental agreement commits us to that.
1. What we collect
1.1 Information you give us
| Category | Examples | When |
|---|---|---|
| Identity | Full name, date of birth, residential address | Booking and verification |
| Contact | Mobile number, email address | Booking and enquiries |
| Licence | Driver licence number, card number, expiry, class, conditions, state or country of issue, and an image of the licence | Verification and handover |
| Identity documents | Passport or other photographic identification where required, and a live photograph or selfie of you for identity matching | Verification |
| Payment | Cardholder name and card details, entered directly with a trusted third-party provider; we never see or store your full card number | Booking and handover |
| Booking | Dates, vehicle chosen, pick-up and drop-off locations, additional drivers, options, cover and kilometre packages selected, booking type | Booking |
| Additional drivers | The same identity, contact and licence information for any additional driver you add | Booking and verification |
| Correspondence | Messages, calls, SMS, emails and support enquiries with us, including through our messaging platform | Ongoing |
| Marketing preferences | Whether you have opted in to marketing, and whether you have opted in to us using your photographs or reviews | Booking and later |
1.2 Information we collect from the vehicle
Every vehicle in our fleet is fitted with a GPS tracking, telematics and remote immobilisation device. While you have the vehicle, we collect:
- location and movement, including where the vehicle is and where it has been
- speed
- engine and diagnostic data, including RPM, fault codes and odometer readings
- driving behaviour, including harsh acceleration, harsh braking, sharp cornering and periods of high engine load while the vehicle is stationary or near-stationary
- trip data, including start and end times and distance travelled
- device status, including power, tamper and connection alerts
This is a continuous collection for the duration of your rental. It is not anonymous. It is linked to you and your booking.
We collect it to protect, locate and recover the vehicle, to verify use against your rental agreement, to calculate kilometre charges, to respond to accidents and breakdowns, to detect prohibited use, and for insurance. It may be used as evidence of a breach of your rental agreement.
Dashcams. Some vehicles may carry a forward-facing dashcam that records video of the road ahead. Audio is not recorded. Where a vehicle carries a dashcam, that is disclosed on the vehicle listing and at handover. We do not record video of the vehicle interior.
1.3 Information we collect about the vehicle's condition
At handover and return we photograph the vehicle, its odometer and its fuel gauge, and record its condition with you. Where damage occurs we photograph it. These records are evidence of the vehicle's condition at each point in time and are kept with the booking.
1.4 Information we collect automatically online
Our website and portals collect IP address, browser and device type, pages viewed, approximate location, referring site, and how you interact with the site, through cookies and similar technologies. See section 9.
1.5 Information from others
We may receive information about you from trusted third-party providers that verify identity and licences, the Australian Government Document Verification Service, our insurer, toll operators and road authorities, fraud and risk services, and, where you were referred to us, the person or business that referred you.
1.6 Sensitive information
We do not seek sensitive information as defined in the Privacy Act. Where a licence condition, a verification result or an incident report discloses health information, we collect and use it only as necessary to administer the rental, respond to an incident, or meet a legal obligation.
2. Why we collect it
We collect, hold and use personal information to:
- take and confirm bookings, and provide vehicles
- verify your identity, date of birth and driver licence, and confirm you are eligible to drive the vehicle you booked
- take payment, store a payment card for the booking, place and release the security bond pre-authorisation, and recover amounts you owe under your rental agreement
- protect, locate, immobilise and recover our vehicles
- administer your rental agreement, including assessing damage, kilometres, fuel, tolls, fines and other charges
- respond to accidents, breakdowns, theft and disputes
- nominate you as the responsible driver for a fine or infringement
- deal with insurance claims
- communicate with you about your booking, including confirmations, verification reminders, handover instructions and anything about money you owe
- provide customer support
- improve our service, our website and our fleet
- send you marketing, where you have opted in and have not opted out (see section 8)
- meet our legal obligations and enforce our rights
If you do not provide the information we ask for, we cannot rent you a vehicle. Identity, date of birth, licence and payment card information are conditions of hire, not optional extras.
3. Identity verification
After you book, and before you collect the vehicle, you must complete identity and licence verification through a trusted third-party provider. Verification may include checking your identity document and licence, matching a live photograph or selfie to your document, checking your document against the Australian Government Document Verification Service, and a fraud and risk assessment.
Verification must be completed at least 24 hours before your rental starts, or before handover for a booking made inside 24 hours. We send reminders by SMS and email until it is done.
The verified date of birth and licence details are compared with what you declared when booking. A discrepancy that would have changed your eligibility, your price or your cover is treated under the cancellation terms of your rental agreement.
4. Who we share it with
We disclose personal information to:
| Recipient | What they receive | Why |
|---|---|---|
| Trusted third-party provider (payments) | Payment and card data, name, email | Processing payments, storing your card for the booking, and placing and releasing the security bond pre-authorisation |
| Trusted third-party provider (identity verification) | Identity documents, licence, date of birth, live photograph | Verifying who you are and that you are eligible to drive |
| Australian Government Document Verification Service | Licence and identity document details | Confirming your document is genuine and current |
| Our telematics provider [name the provider] | Vehicle location, movement, speed, engine and diagnostic data | Operating the tracking, telematics and immobilisation system |
| Trusted third-party provider (messaging) | Name, mobile number, email, booking details, message history | Sending booking, verification and support messages by SMS and email, and marketing where you have opted in |
| Our insurer and its assessors | Booking, driver, incident and vehicle-use data | Insurance and claims |
| Recovery and immobilisation providers | Location and booking data | Recovering an overdue, abandoned or stolen vehicle |
| Toll operators and road authorities | Your name, address and licence details | Tolls, fines, infringements and driver nomination |
| Vehicle owners and hosts who list with us | The information needed to complete your booking, verify you and hand over the vehicle | Providing the vehicle |
| Google (Analytics, Search Console, Ads) | Online usage data described in section 9 | Measuring how the site is used and how our advertising performs |
| Meta (Facebook and Instagram) | Online usage data collected by the Meta Pixel, described in section 9; a hashed copy of your email address, mobile number and name when you give them to us or pay for a booking; and what you send us when you contact us through Facebook or Instagram | Measuring how our advertising performs, showing our ads to people who have visited our website, and responding to enquiries made through Facebook or Instagram |
| Debt recovery agents and lawyers | As required | Recovering amounts owed |
| Police and government agencies | As required | Where required or authorised by law |
| Professional advisers, and a purchaser of our business | As required | Advice, and a business sale or restructure |
We do not sell your personal information.
4.1 Overseas disclosure
Some of the providers above store or process data outside Australia:
| Provider | Country |
|---|---|
| Trusted third-party provider (payments) | United States |
| United States | |
| Meta | United States |
| Trusted third-party provider (identity verification) | European Union and United States |
| Trusted third-party provider (messaging) | United States |
Our booking system runs on our own WordPress site, hosted in Australia (Sydney). Booking records, condition photographs and handover records are stored there.
Where we disclose personal information overseas we take reasonable steps to ensure the recipient handles it in a way consistent with the Australian Privacy Principles, including by dealing with providers that operate under recognised data protection frameworks and contractual data protection terms. We remain accountable for how those providers handle your information.
5. Automated decisions and monitoring
Verification. Our trusted third-party provider applies automated rules that can approve or decline a verification. Where a result is inconclusive, where you are a driver aged 20 to 24, or where it is your first booking of an Exotic or Supercar vehicle, the result is reviewed by a person before the booking is confirmed or declined. A booking is never declined automatically without a person reviewing it.
Telematics. Where telematics data indicates a breach of your rental agreement or a prohibited use, our systems may send you an automated warning by SMS or email and flag the booking for review.
Immobilisation. We may remotely prevent the vehicle from being re-started in the circumstances set out in your rental agreement. The device is a starter interrupt only. It cannot stop, slow or disable a moving vehicle, and we will not use it in a way that leaves you stranded in an unsafe place.
Charges and future bookings. A decision to charge you, to end a rental, or to refuse you a future booking is made or reviewed by a person. If you want to know why a decision was made, contact us.
6. How we hold it, and for how long
We hold personal information in secure systems with access limited to the people who need it, including our staff and the vehicle host for your booking. We take reasonable steps to protect it from misuse, interference, loss, unauthorised access, modification and disclosure.
No system is perfectly secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
6.1 Retention
| Data | Kept for |
|---|---|
| Booking and rental records, including your agreement, invoices, charges and payments | 7 years after the rental ends |
| Identity and licence images, and your verification photograph | 90 days after the rental ends, unless a damage claim, fine, toll or dispute is open, in which case until it is closed |
| Vehicle condition photographs | For the life of the vehicle in the fleet, or until any related dispute is resolved |
| Telematics data | For the period our telematics provider retains it, currently up to 12 months [confirm with telematics provider] |
| Dashcam footage | Overwritten in the ordinary course of use, unless we preserve it for an incident, claim or dispute, in which case until that matter is closed |
| Correspondence and support messages | 7 years |
| Marketing contact details | Until you opt out |
We destroy or de-identify personal information when we no longer need it and are not required by law to keep it.
7. Accessing and correcting your information
You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong or out of date. Contact us using the details in section 11.
We will respond within 30 days. We do not charge for making a request. If we refuse access or correction, we will tell you why in writing and how to complain.
8. Marketing
We may send you marketing about our vehicles, offers and events by email or SMS, but only where you have opted in. Every marketing message includes an unsubscribe. You can opt out at any time and we will stop.
Opting out of marketing does not stop operational messages about a booking you have made. Confirmations, verification reminders, handover details and anything about money you owe are not marketing.
Your photographs and reviews. We will only use a photograph of you, or a review you give us, in our marketing if you have expressly opted in to that use. We never do this by default, and you can withdraw your permission at any time by contacting us.
We comply with the Spam Act 2003 (Cth).
9. Cookies and online tracking
Our website uses cookies and similar technologies to keep the site working, remember your booking as you move through it, and understand how the site is used and how our advertising performs. The services running on drivetribe.com.au are:
| Service | What it does |
|---|---|
| Google Analytics 4 | Measures how visitors use the site: pages viewed, time on site, device, approximate location, referring source. IP addresses are truncated by Google. |
| Google Ads conversion tracking | Records when a visit that started from one of our Google ads leads to a booking or enquiry, so we can measure and improve our advertising |
| Google Search Console | Reports how the site appears in Google search results. Uses aggregated data only. |
| Bing Webmaster Tools | Reports how the site appears in Bing search results. Uses aggregated data only. |
| Meta Pixel and Conversions API | Records the pages you visit, the vehicles you view, and when you start a booking, make an enquiry or pay for a booking. We use it to measure our advertising on Facebook and Instagram and to show our ads to people who have visited our website. Meta receives this information with your browser and device details and may match it to a Facebook or Instagram account you hold. When you give us your email address or mobile number, start a booking or pay for one, our server also sends Meta that event with a hashed (one-way scrambled) copy of your email address, mobile number and name, so it is counted even if your browser blocks the pixel. |
| Booking system cookies | Keep your dates, vehicle and options as you move through the booking, and keep you signed in to the guest or host portal |
Third parties, including Meta and Google, may use cookies, web beacons and similar technologies to collect or receive information from our website and elsewhere on the internet, and use that information to provide measurement services and to target ads. Meta and Google handle that information under their own privacy policies as well as ours.
We also list vehicles on Facebook Marketplace. If you contact us through Facebook or Instagram, Meta handles that interaction under its own privacy policy.
Your choices. You can block or delete cookies in your browser settings. Parts of the booking process may stop working if you do. You can opt out of Google Analytics with the Google Analytics opt-out browser add-on, and manage Google advertising personalisation at adssettings.google.com. To control how Meta uses information from our website to show you ads, use Ad preferences in your Facebook or Instagram Accounts Centre. You can also opt out of interest-based advertising from participating companies at www.aboutads.info/choices.
10. Complaints
If you think we have mishandled your personal information, tell us first. Use the details in section 11 and mark your message "Privacy complaint". We will acknowledge it within 5 business days and respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: GPO Box 5218, Sydney NSW 2001, phone 1300 363 992, oaic.gov.au.
11. Contact us
Privacy Officer, Drive Tribe Australian Business Holdings Pty Ltd (ACN 628 053 636 / ABN 22 628 053 636) trading as Drive Tribe 69 Phillip Street, Parramatta NSW 2150 Post: PO Box 73, Parramatta NSW 2124 Phone: 0468 011 118 Email: info@drivetribe.com.au
12. Changes to this policy
We may update this policy. The current version is always at drivetribe.com.au/privacy-policy/ with its effective date. If we make a change that materially affects how we handle your information, we will tell you by email or SMS before it takes effect.