The short version: we collect your email address so we can send you a report, the vehicle identifier so we can search for it, and your mobile number only if you ask for an SMS. We don't sell any of it, and a PPSR search is confidential — we don't tell the other party to the sale, or anyone else, that you searched.
Who is responsible
Digital Services International Pty Ltd, ABN 86 677 513 334, is responsible for personal information collected through this website. We handle it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect, and why
| What | Why |
|---|---|
| Email address | To send your report and receipt, and to contact you about that order. Required. |
| Name | To address the report. Required. |
| Australian mobile number | To send the SMS you asked for, and any finance-change alert (these apply only where finance is recorded against the vehicle at your search). Only collected if you choose SMS. |
| Vehicle identifier (VIN, chassis or plate and state) | To run the search. It is not personal information about you, but it is recorded against your order. |
| Payment details | Collected by our payment provider in your browser. Card numbers never reach our servers and we do not store them. We keep the payment reference and the amount. |
| How you use this site | Which pages you view, for how long, what device and browser you use, your approximate location (from your IP address) and how you found us, collected by Google Analytics so we can improve the site. It never includes your search, your contact details or your payment: page addresses are sent to Google without the details that follow the "?" in them. |
| Technical information | IP address, browser and timestamps, for security, fraud prevention and to make the site work. Cloudflare also tells us which Australian state your connection appears to be in, which we use for one thing only: to pre-select a state in the search form so you do not have to. It is a guess, you can change it, we do not store it, and nothing else depends on it. |
| What you send us through the contact form | Your name, your email address, the reference if you give one, and the message itself — so that we can read it and reply. It is held in our search system, encrypted at rest, and is readable only by the staff who answer it. If our search system can't be reached at the moment you send it, we keep a copy in this website's database, unencrypted, so that it isn't lost. We keep it while the matter is open and for as long as we need it afterwards to show how we handled it. |
What we don't do
- We do not sell personal information.
- We do not share it for anyone's marketing, including our own.
- We do not send you marketing email you did not ask for.
- We do not tell the vehicle's owner, dealer or financier that you searched, and a PPSR search does not notify them.
Who it is shared with
Only those who need it to deliver what you ordered:
- The Australian Financial Security Authority (PPSR) — receives the vehicle identifier to perform the search.
- Our vehicle data provider — receives the identifier for the NEVDIS pre-check and, for a plate search, to match the plate to a vehicle.
- Our payment provider — handles the transaction and receives your email address for the receipt.
- Our email and SMS providers — deliver your report.
- Law enforcement or a regulator, where we are required by law to disclose.
How it is protected
The site is served over HTTPS throughout, and access to our systems is limited to those who need it to run the service.
Your contact details are held in two places, and they are not protected in the same way. In the search system that sends your report, your name, email address and mobile number are encrypted at rest. In the order record on this website — which exists so that we can resend your report, let you open it again from Find my report if you lose the link, and send the free finance-change alerts — the same details are stored unencrypted in our database. If you ask us to send your report to a corrected address, we store that address on the order record too, with the time we sent it, so that pressing send twice does not spend one of your resends. Sending to a corrected address does not by itself change your order. There is a box you can tick to say you want that address used from then on; only if you tick it do we replace the address held on your order and in the search system, and only then do the finance-change alerts and anything else we send start going there instead. The address it replaces is not kept. That database is not publicly reachable and is access-controlled, but we would rather tell you exactly what we do than imply more than we do.
We do not store card numbers anywhere. They are collected in your browser by our payment provider and never reach our servers.
How long we keep it
Search records are kept so that we can resend your report, send the free finance-change alerts, meet our record-keeping obligations and reconcile what the register charged us. We keep them for seven years, which matches the period we are required to keep the associated financial records, after which personal information is deleted or de-identified.
Overseas disclosure
Some of the providers we use process information outside Australia:
- Cloudflare — hosts this website and our search system, stores our data and sends our email. It processes and stores data in data centres in Australia and may route or replicate it through facilities in other countries, including the United States.
- Stripe — processes card payments for our payment provider. It operates in the United States and Ireland.
- Google Fonts — serves the typefaces this website uses, so your browser contacts Google's servers, including in the United States, which receive your IP address.
- Google Analytics — measures how this website is used (see Cookies, below). Google processes that information in the United States and other countries.
The Australian Financial Security Authority (PPSR), our vehicle data provider (Blue Flag) and our SMS provider (BeeSMS) are Australian services. By using our service you consent to these disclosures.
Cookies
We set one cookie of our own, rc_order, when you start a check. It holds nothing but an opaque order reference, and it is what lets the browser holding it see that order's progress and report without signing in. It lasts 30 days, the same period your report link stays viewable. If you lose it, Find my report will open your report again and issue a new one: your reference on its own is enough, or the VIN or plate you searched together with the email address you used. Those details are your own, so matching them is all we need in order to show you what you paid for. We rate limit that form and put a bot check in front of it, so it cannot be used to guess at orders.
On the checkout page, our payment provider's card form (Stripe) may set its own cookies to help prevent fraud; those are governed by Stripe's privacy policy.
We use Google Analytics to understand how visitors use this site, so we can improve it. It sets its own cookies (named _ga and _ga_…) that recognise your browser when you come back, and sends Google the pages you view, your device and browser, your approximate location and how you arrived. We use it to measure the site, not for advertising, and we never send it your search, your contact details or your payment details. You can block these cookies in your browser, or use Google's opt-out browser add-on; the site works the same without them. We also use Cloudflare Web Analytics, which sets no cookies and does not identify you.
We do not use advertising cookies. Cloudflare Turnstile, which keeps bots away from our payment, contact and Find my report forms, may set its own short-lived token; it is a privacy-preserving alternative to a CAPTCHA and does not track you across sites.
SMS
If you opt in, we use your mobile number to send the result and any finance-change alert for that search (where alerts apply), and nothing else. Reply STOP to any message to opt out permanently.
Access, correction and complaints
You may ask what we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Use our contact form. We will respond within 30 days.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.