Privacy Policy.

About this Privacy Policy

This policy describes how KOYA manages personal information in accordance with applicable privacy law, including the Privacy Act 1988 (Cth) and Australian Privacy Principles where they apply.

Personal information is information or an opinion about an identified person, or a person who is reasonably identifiable. It can include information provided directly by you and information created through your dealings with KOYA.

This policy does not apply to third-party websites, payment platforms or services that have their own privacy policies, even where KOYA provides a link to them.

Information we may collect

The information collected depends on how you use the website and interact with us.

We may also collect correspondence, photographs, documents, warranty or refund information, survey responses, marketing preferences and other information you choose to provide.

We do not intentionally collect sensitive information unless it is reasonably necessary, permitted by law and, where required, collected with consent.

How we collect information

We may collect personal information:

• when you create an account, place an order or complete a contact, order, calculator or fitment form;
• when you request a quote or communicate by email, telephone, social media or in person;
• when you make a warranty, refund, shipping or customer-support request;
• automatically through cookies, server logs, security tools and website analytics; and
• from a dealer, payment provider, delivery provider or other party involved in your transaction, where permitted.

If you provide information about another person, you should have authority to provide it and make them aware of this policy where appropriate.

Why we use personal information

KOYA may use personal information to:

• respond to enquiries and prepare quotes or fitment recommendations;
• confirm wheel specifications and manufacture, finish or supply products;
• process payments, orders, accounts, freight and delivery;
• provide customer service and manage warranty, refund or other claims;
• maintain business, tax, accounting and transaction records;
• operate, secure, troubleshoot and improve the website and services;
• detect fraud, misuse, security threats or prohibited activity;
• send service messages and, where permitted, marketing communications; and
• comply with law, court orders and lawful requests from authorities.

Where consent is required for a particular use, you may withdraw that consent, although this will not affect lawful handling that occurred before withdrawal.

Who we may disclose information to

We may disclose relevant personal information to parties that help us operate the business or complete your request, including:

• payment gateways, banks and fraud-prevention providers;
• couriers, freight companies, customs agents and delivery partners;
• manufacturing, finishing, technical and customer-support contractors;
• website hosting, cloud, email, cybersecurity, analytics and IT providers;
• professional advisers such as accountants, insurers and legal advisers;
• related companies or business partners where required to fulfil an order or provide support; and
• regulators, courts, law-enforcement bodies or other persons where authorised or required by law.

We aim to disclose only the information reasonably required for the relevant service or purpose. Service providers may also collect information directly under their own privacy terms.

Payments and checkout information

Payment information may be collected and processed directly by a bank, card network, payment gateway or checkout provider. KOYA generally receives transaction confirmation, payment status and records needed to process and reconcile the order.

The payment provider’s privacy and security terms also apply to information it collects directly. Do not send complete payment-card details through ordinary email, contact forms or social media messages.

We retain payment and transaction records only as reasonably required for order administration, accounting, fraud prevention, disputes and legal obligations.

Cookies, analytics and website security

Cookies and similar technologies are small data files or identifiers used to operate the website, remember a session, understand website use and protect forms or accounts.

You can manage cookies through your browser and, where available, the website’s cookie controls. Blocking essential cookies may prevent account, cart, form or checkout functions from working correctly.

Google Tag Manager and other tag-management tools may load enabled analytics, security or marketing services. Those providers may process technical data under their own privacy policies.

Overseas handling and international customers

Some technology, payment, analytics, manufacturing, support or logistics providers may operate outside Australia or store information using overseas infrastructure. Information may also be disclosed to parties in the destination country when fulfilling an international order.

Likely locations may include New Zealand, Japan, the United States and the destination country for an international order. Provider locations and infrastructure can change over time.

Where Australian privacy law requires it, we take reasonable steps in the circumstances before disclosing personal information to an overseas recipient.

Additional overseas rights

If another privacy law applies to our handling of your information, including the GDPR in relevant circumstances, you may have additional rights such as restriction, objection, deletion or portability. Contact KOYA so the request can be assessed under the law that applies.

Security, retention and data breaches

KOYA takes reasonable administrative, technical and physical steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. No website, network or storage system can be guaranteed completely secure.

We retain personal information for as long as reasonably needed for the purpose collected and for legal, accounting, tax, warranty, dispute, fraud-prevention and recordkeeping requirements. When information is no longer required, we take reasonable steps to delete or de-identify it where appropriate and required by law.

If a data incident occurs, we will assess and respond to it and, where the Notifiable Data Breaches scheme applies, notify affected individuals and the Office of the Australian Information Commissioner as required.

Access, correction, marketing and complaints

Access and correction

You may request access to personal information KOYA holds about you or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity and may refuse or limit a request where permitted by law, giving reasons where required.

Marketing choices

You may opt out of marketing emails using the unsubscribe function or by contacting us. We may still send necessary messages about an account, enquiry, quote, order, delivery or claim.

Privacy complaints

Send your concern to KOYA first with enough detail for us to investigate. We will review the complaint and respond within a reasonable period. If the issue is not resolved, you may be able to complain to the Office of the Australian Information Commissioner.

Policy updates

We may update this policy when our practices, website services or legal requirements change. The current version and effective date will be published on this page.