Privacy Policy

1. Introduction

TyreShop Software ("we", "us", "our") is a cloud-based shop management platform operated by ELASYN, based in Australia. We are committed to protecting the privacy of our customers and the individuals whose information they store on our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have.

This policy is written in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). It applies to all use of the TyreShop Software platform, website, and related services.

2. Who we are

The entity responsible for TyreShop Software is ELASYN. For any privacy-related enquiries, contact us at info@tyreshopsoftware.com.

When you subscribe to TyreShop Software and use the platform to manage your business, you are the data controller of the business records you store (customers, vehicles, invoices, and so on), and we act as the data processor on your behalf.

3. Information we collect

3.1 Account information

When you create a TyreShop Software account we collect:

• Your name, business name, email address, and phone number
• Your business details including ABN, postal address, and physical address
• Your role within the business (for example, owner, manager, front desk, or technician)
• Authentication information such as passwords (stored as secure hashes, never in plain text)

3.2 Business data you store

As part of using the platform you may store business records including:

• Customer contact details (name, phone, email, address)
• Vehicle records (make, model, year, registration number, service history)
• Product and stock information
• Supplier contact details
• Quotes, work orders, invoices, and payment records
• Staff user accounts and role assignments

This data belongs to your business. We store and process it on your behalf so that the platform can function.

3.3 Usage and technical information

When you use the platform we automatically collect:

• Log data including IP addresses, browser type, device information, and operating system
• Pages visited, features used, and actions performed (for example, creating an invoice)
• Error reports and diagnostic information
• Session tokens used to keep you signed in

3.4 Payment information

We use Stripe to process subscription payments. We do not store your full credit card details on our servers. Stripe collects and stores payment information according to its own privacy policy and PCI-DSS standards.

4. How we use your information

We use the information described above to:

• Provide and operate the TyreShop Software platform
• Authenticate users and secure your account
• Process subscription payments and manage billing
• Send transactional communications such as account confirmations, receipts, and system notifications
• Respond to support requests and enquiries
• Monitor system performance, diagnose problems, and improve reliability
• Detect, prevent, and respond to fraud, abuse, or security incidents
• Comply with legal obligations

We do not sell your personal information or the business data stored in your account. We do not use your business data to train machine learning models.

5. Data storage and security

We use reasonable technical and organisational measures to protect your information, including:

• Access controls and role-based permissions
• Administrative safeguards for platform access
• Monitoring for reliability, abuse and security issues
• Operational procedures for incident response
• Activity logging of key privileged actions

No system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

6. Third-party services

We rely on a small number of trusted third-party services to operate the platform. Each is bound by its own privacy and security obligations.

• Stripe. Processes subscription payments and metered SMS billing. Stripe stores payment method information on its own systems.
• SMS delivery provider. Delivers SMS messages that you choose to send to your customers.
• Email delivery provider. Delivers transactional and branded emails on behalf of your business.
• Cloud hosting provider. Hosts the systems used to operate the platform.

We share personal information with these providers only to the extent necessary for them to deliver the service, and we require them to handle it securely.

7. Data retention and deletion

While your subscription is active we retain your account and business data so that the platform is available to you. If you cancel your subscription:

• Your account remains accessible in a read-only or paused state for a defined retention period, during which you can reactivate at any time.
• After the retention period, your account and its associated business data are deleted from our production systems.
• Backups containing your data are retained for a limited period and then expired on our normal backup rotation.
• Some information must be retained longer to comply with Australian tax and accounting law (typically seven years for financial records).

You may request earlier deletion of your account by contacting us at info@tyreshopsoftware.com. We may need to retain certain information where required by law.

8. Cookies

TyreShop Software uses a minimal set of cookies and browser storage, only for functions that are strictly necessary to operate the platform:

• Authentication tokens that keep you signed in
• Session cookies used to maintain your workflow state
• Preference cookies such as your tenant or shop selection

The TyreShop Software platform itself sets only the cookies listed above. Our marketing website at tyreshopsoftware.com.au is different, and does use third-party advertising and analytics technologies.

On the marketing website we use Google Analytics 4 to understand visits and enquiries. Google Analytics uses cookies such as _ga. When enabled, Google Ads and the Meta pixel also support advertising measurement and remarketing; Meta may use _fbp and _fbc cookies. These services process information such as your browser type, pages viewed and referring website or advertisement, and use your connection's IP address when processing a visit.

We also use Metricool to measure visits to the marketing website. Its website tracker does not set cookies. It sends the page address, referring page where available and browser window dimensions to Metricool; Metricool uses the connection's IP address to determine country. This helps us understand which pages and referral sources bring visitors.

When enhanced advertising measurement is enabled and you send an enquiry through the contact form, we share a scrambled (hashed) version of your email address, and where available your name, with the configured Google or Meta service to help attribute the enquiry. Hashing converts the value into a code before it is sent. We do not include your message, business name or phone number in these advertising conversion payloads.

These providers are located overseas, mainly in the United States and Ireland, so this involves disclosing your personal information outside Australia.

You can opt out. Most browsers let you block or delete cookies in their settings. You can also manage advertising preferences directly with Meta and Google, or install the Google Analytics Opt-out Browser Add-on. If you would prefer we did not collect this information at all, email info@tyreshopsoftware.com and we will tell you how to stop it.

9. Your rights

Under the Australian Privacy Principles you have the right to:

• Access the personal information we hold about you
• Ask for corrections if your information is inaccurate or out of date
• Ask us to delete your personal information, subject to legal retention obligations
• Complain about how we have handled your information

To exercise any of these rights, email info@tyreshopsoftware.com. We will respond within a reasonable time frame and, where required, within the statutory period under the Privacy Act.

If you are an end-customer of a business that uses TyreShop Software (for example, a vehicle owner whose details are stored by a shop) and you want your information corrected or deleted, please contact the shop directly. They are the controller of that information, and we will assist them as the processor.

10. Children

TyreShop Software is a business-to-business platform intended for use by businesses and their staff. It is not directed at children and we do not knowingly collect personal information from children under 16.

11. International users and GDPR

TyreShop Software is an Australian platform designed for Australian tyre retailers. Our servers and primary operations are in Australia. If you access the platform from outside Australia, you understand that your information will be stored and processed in Australia.

If you are located in the European Economic Area, the United Kingdom, or another region with data protection laws that apply to you, we will handle your personal information in a manner consistent with the applicable law's principles, including lawful basis, data minimisation, and individual rights. Contact us if you have specific questions about GDPR or other regimes.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date at the top and, where appropriate, notify account holders by email. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.

13. Contact

If you are not satisfied with our response to a privacy concern, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.