Privacy Policy

Last updated: May 2026 · This is a draft awaiting legal review — final wording will be confirmed before live ad spend.

1. About this policy

Car Sales Express (CSE) takes your privacy seriously. This policy explains what personal information we collect, how we use it, and your rights under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What we collect

When you submit an enquiry through this website, we may collect:

  • Your name, phone number, email address and suburb;
  • What vehicle or finance you're interested in, and your indicative budget;
  • Browser-side analytics signals: page views, click identifiers from ads (Facebook fbclid, Google gclid), referring URL, user agent and IP address;
  • Hashed (SHA-256) mirrors of your contact details, used to match offline outcomes back to ad campaigns.

3. How we use it

  • To respond to your enquiry. Without this we can't get back to you about a finance pre-approval or test drive.
  • For ad-platform attribution. If you've ticked the marketing-consent box, we share hashed identifiers with Meta (Facebook/Instagram) and Google so they can measure ad performance and improve targeting.
  • To send you marketing — only if you've separately opted in. You can opt out at any time.

4. Who we share with

Your personal information may be shared with:

  • Konquer Media Agency, our marketing partner, who operates our CRM (GoHighLevel) and lead-routing on our behalf;
  • Finance lenders we work with, only when you've requested finance and only to the extent needed to get you a pre-approval;
  • Meta (Facebook/Instagram) and Google, in hashed (SHA-256) form for ad-platform attribution — only with your marketing consent.

5. Storage and security

Your contact details are stored on infrastructure operated by Cloudflare in their Sydney region. We apply standard security controls (TLS in transit, access controls at rest). Hashed identifiers and ad-platform mirrors leave Australia when sent to Meta/Google.

6. Retention

We retain enquiry records for up to 90 days for active lead handling, after which detail-level data is reduced to aggregate analytics. You can request deletion at any time by contacting us (details below).

7. Your rights

Under the Privacy Act and the APPs, you have the right to:

  • Access the personal information we hold about you;
  • Ask us to correct anything that's wrong;
  • Ask us to delete your information (subject to any legal record-keeping requirements);
  • Opt out of marketing communications.

8. Cookies & tracking

We use first-party cookies to remember your visit (e.g. ad click attribution) and third-party cookies set by Meta Pixel and Google Tag Manager. You can clear or block cookies through your browser settings. Doing so may limit some functionality.

9. Contact us

For privacy questions or requests, contact us at the dealership (details on the home page) or via our marketing partner Konquer Media Agency.

10. Complaints

If you're not happy with how we've handled your information, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.