Privacy Policy

Shockworks (a trading name of the trustee for the O’Brien Family Trust, ABN: 58 101 176 251) is committed to protecting your personal information. This policy describes how we handle your data in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our website or providing your personal information, you consent to the practices described here.

What we collect

We may collect:

• Your name, email, phone number, and residential address
• Information you provide through forms, email, phone, or social media
• Website usage data via cookies and analytics (IP address, browser, device, pages visited, referring URL)

We don't collect sensitive information (health, religion, political opinions) unless you provide it voluntarily.

How and why we collect it

We collect information directly from you (forms, email, phone, social media), from third parties such as referral partners with your knowledge, and automatically via cookies and analytics.

We use it to provide and manage our coilover and suspension products and services, respond to enquiries, process orders and bookings, improve our website and services, send service information with your consent, and comply with legal obligations.

We won't use your information for a purpose other than the primary purpose of collection unless you consent, the secondary purpose is reasonably expected, or we are required by law.

Marketing and opt-out

We may send marketing communications with your consent under the Spam Act 2003. You can opt out at any time by clicking the unsubscribe link in any email or contacting us directly. We process unsubscribe requests within 5 business days.

We will never sell your personal information to third parties.

Who we share it with

We may share your information with:

• Service providers (website hosting, email, analytics, business operations)
• Advertising platforms (Google, Meta, TikTok and similar), for conversion measurement of form submissions and ad-driven phone calls (hashed email, phone and name only, see "Advertising and conversion measurement" below)
• Professional advisers (legal, accounting)
• Regulatory authorities, where required by law
• Any other party with your consent

Some providers may store data overseas (United States for hosting, email, and analytics). We take reasonable steps to ensure overseas recipients comply with the APPs or equivalent protections.

How we protect it

• Encrypted storage and transmission (SSL/TLS)
• Access controls limiting who can view personal information
• Secure hosting with reputable providers
• Regular security reviews

We destroy or de-identify information when it is no longer needed, unless we are required by law to keep it.

Cookies and analytics

Our website uses cookies and Google Analytics to understand how visitors use the site and improve performance. Strictly necessary cookies (session ID, security tokens) last for the session. Analytics cookies (Google Analytics usage data) last up to 26 months. Functionality cookies (preferences and settings) last up to 12 months.

You can disable cookies in your browser settings. Some features may not work correctly without them.

Advertising and conversion measurement

We run paid advertising across the major platforms, including Google, Meta (Facebook and Instagram) and TikTok, to reach people looking for custom coilovers and suspension work. When you submit an enquiry or order, or call us from one of our ads, these platforms measure whether you arrived from an ad so we know which campaigns are working.

To match form submissions back to an ad click across devices and browsers, your name, email address and phone number are converted into an irreversible hashed value in your browser (SHA-256) before being sent to the platform. The raw values don't leave your device. Each platform uses the hashes only to match against its own records and report aggregated conversion data back to us. We don't receive any personal information about you from these platforms as part of this process.

You can opt out of personalised advertising at any time through each platform's own ad settings (for example, adssettings.google.com for Google), or block this measurement by disabling third-party cookies or installing an ad blocker. Doing so won't affect your ability to use our website, make an enquiry, or place an order.

Each platform processes these hashes under its own data terms, including the Google Ads Customer Data Terms and the Meta Business Tools Terms.

How long we keep it

Contact details are kept for the duration of the relationship plus 2 years. Order and payment records are kept for 7 years per ATO requirements. Website analytics data is kept for 26 months. Form submissions are kept for 12 months.

Automated decision-making

We don't currently use automated systems to make decisions that could significantly affect your rights or interests. If this changes, we will disclose the types of information used and the decisions made.

Your rights

Under the Privacy Act 1988, you can find out what personal information we hold about you, request access to that information, ask us to correct inaccurate, outdated, or incomplete information, and lodge a complaint if you believe we have breached the APPs.

We will respond within 30 days. There is no charge for making a request or correcting information. We may charge a reasonable fee for access requests that require significant effort.

Complaints and contact

If you believe we have handled your personal information inappropriately, contact us. We will acknowledge your complaint within 7 days and respond within 30 days.

Not satisfied with our response? You can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au, phone 1300 363 992, or email enquiries@oaic.gov.au.