Privacy Policy

Last Updated: 02 September 2025

Effective Date: 02 September 2025

Revision: 1.8

Woodwin Auto Tips (“we”, “our”, “us”) respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, share, and protect your personal information in line with:

• Australian Privacy Principles (APPs) under the Privacy Act 1988 (as amended 2024)
• General Data Protection Regulation (GDPR) – EU/EEA & UK
• California Consumer Privacy Act (CCPA) – applies if you are a California resident and we meet CCPA thresholds

This Policy applies to all visitors, users, and customers worldwide who access or use https://www.glzwoodw.com.

Table of Contents

1. Who We Are
2. What Counts as Personal Information
3. Information We Collect
4. How We Use Your Information
5. Legal Basis for Processing
6. Consent and User Control
7. Your Privacy Rights
8. Comments and User-Generated Content
9. Cookies and Tracking
10. Google Analytics and AdSense
11. Embedded Content and Third-Party Links
12. Data Sharing and International Transfers
13. Data Retention and Destruction
14. Data Security
15. Data Breach Response
16. Automated Decision-Making and Profiling
17. Children’s Privacy
18. California Consumer Rights
19. Complaints and Contact
20. Updates and Change Log

1. Who We Are

• Website: https://www.glzwoodw.com
• Contact Person: Dave
• Postal Address: PO Box 784, Muswellbrook, NSW, Australia, 2333
• Email: admin@glzwoodw.com
• Role: We determine the purposes and means of processing your personal information and act as the primary data controller.

2. What Counts as Personal Information

Under current law, this includes names, email addresses, postal addresses, phone numbers, metadata, cookie IDs, IP addresses, and any data that could reasonably identify you.

3. Information We Collect

3.1 Information You Provide

• Comments and forms: name, email, website URL, message content
• Accounts/subscriptions: username, email, newsletter preferences
• Direct communications: information sent by email, phone, or surveys

3.2 Information Collected Automatically

• Technical data: IP address, device identifiers, browser type, operating system, screen resolution
• Usage data: pages visited, time on page, navigation paths, search terms
• Location data: approximate location from IP address
• Interaction data: clicks, scroll depth, engagement metrics

3.3 Information from Third Parties

• Analytics services (e.g., Google Analytics)
• Advertising networks (e.g., Google AdSense, if enabled)
• Social media platforms (interaction data when you engage with our content)

4. How We Use Your Information

• Website operation: functionality, troubleshooting, analytics, optimisation
• Engagement: responding to enquiries, sending newsletters (with consent), enabling comments
• Security and compliance: fraud prevention, spam detection, legal obligations
• Advertising and marketing: relevant ads, performance measurement, remarketing (with consent)

5. Legal Basis for Processing

• Consent: newsletters, non-essential cookies
• Legitimate interests: analytics, site security, service improvement
• Legal obligation: regulatory, tax, or record-keeping requirements
• Contract performance: providing requested services or responses

6. Consent and User Control

• Consent is explicit, unbundled, documented, and revocable.
• No pre-ticked boxes or default opt-ins are used.
• You may withdraw consent at any time by:
  • Adjusting cookie preferences via the consent banner
  • Unsubscribing via email links or contacting us directly

7. Your Privacy Rights

Depending on your location, you may:

• Access, correct, or delete your personal data
• Request data portability
• Object to certain processing (including marketing)
• Withdraw consent at any time
• Lodge a complaint with the OAIC or relevant authority

Note: Due to current health challenges, responses to verified requests will be made within 30 days where practicable and physically possible.

8. Comments and User-Generated Content

• Information shared in comments is publicly visible.
• Do not post sensitive or personal information.
• Comments are moderated for community standards; privacy-violating content may be removed.
• We are not responsible for disclosures made voluntarily in public comments.

9. Cookies and Tracking

We use cookies for:

• Essential site functionality
• Performance and analytics (e.g., Google Analytics)
• Advertising/targeting (e.g., Google AdSense, if enabled)
• Social media/embedded content

Control options:

• Manage via our consent banner
• Reject non-essential cookies
• Adjust browser settings or use opt-out tools

10. Google Analytics and AdSense

• Google Analytics helps us understand website usage.
• Google AdSense displays ads, subject to consent.
• We do not send personally identifiable information to Google.
• Opt-outs are available via the Google Analytics Opt-Out Add-On and Google Ads Settings.

11. Embedded Content and Third-Party Links

• Third-party sites (e.g., YouTube, LinkedIn) may collect data through embeds, even without interaction.
• We do not control these platforms; review their privacy policies before use.

12. Data Sharing and International Transfers

We share data only with trusted providers (e.g., Google, email hosting). If data is transferred overseas, it is protected by:

• Adequacy decisions
• Standard Contractual Clauses
• Other legally recognised safeguards

Where protections differ, we will notify you and seek explicit consent if required.

13. Data Retention and Destruction

• Contact queries: 6–12 months
• Analytics data: 26 months (or anonymised sooner)
• Comment metadata: as long as comments remain public
• Legal obligations: as required by law

We securely erase or de-identify data when no longer required.

14. Data Security

• Encryption, firewalls, secure hosting, multi-factor authentication
• Access restrictions on a need-to-know basis
• Regular privacy audits and breach simulations
• Secure third-party vendor agreements

15. Data Breach Response

If a notifiable breach occurs, we will:

1.    Contain and assess immediately

2.    Notify affected individuals and the OAIC within 30 days (or sooner where practicable)

3.    Provide guidance to protect your information

4.    Document the breach, impact, and remediation steps

16. Automated Decision-Making and Profiling

• Currently limited to spam filtering, analytics, and ad targeting
• No significant decisions are made solely by automated means
• From December 2026, we will disclose all significant automated decisions; you may request human review where applicable

17. Children’s Privacy

• Not directed at children under 16
• Any data collected from children will be deleted promptly

18. California Consumer Rights

California residents may have rights to:

• Know categories of data collected
• Access or delete personal data
• Opt out of “sale” or “sharing” of personal data
• Non-discrimination for exercising privacy rights

19. Complaints and Contact

• Email: admin@glzwoodw.com
• Postal: PO Box 784, Muswellbrook, NSW, Australia
• Phone: 0448 687 451

If you are not satisfied with our response, you may escalate to the Office of the Australian Information Commissioner (OAIC) or the relevant authority in your jurisdiction.

20. Updates and Change Log

We may update this policy to reflect legal, technical, or business changes.

Change Log:

• 1.8 (02-Sep 2025): Updated Table of Contents