This policy is issued by Oakmond Group Pty Ltd (ABN 28 687 140 307), trading as Varenni Motor House ("VARENNI", "we", "us", "our"), of 8 Lambert Road, Indooroopilly QLD 4068.
1. What we collect
We may collect contact and address details, date of birth, driver licence and passport information and images, driving history, emergency contacts, payment and transaction information, communications, booking preferences, vehicle condition records, and information generated through security, fraud-prevention or vehicle telematics systems where disclosed and lawful.
We collect information directly from you and, with authority or where lawful, from additional drivers, payment and identity-verification providers, insurers, service partners and public sources.
2. Why we collect and use it
We use personal information to respond to enquiries; assess identity, licence status, eligibility and risk; prevent fraud; quote, administer and enforce rentals and memberships; arrange handover; process payments and bonds; manage incidents, infringements, tolls, insurance and claims; maintain records; improve services; and comply with law.
Government-related identifiers shown on identity documents are not adopted as VARENNI identifiers.
3. When information may be disclosed
Information may be disclosed where reasonably necessary to insurers and brokers, identity and fraud-prevention providers, payment processors, hosting and secure-storage providers, roadside and repair services, professional advisers, additional parties involved in an incident, government bodies, courts, police, road and toll authorities, and other recipients required or authorised by law. In particular, our booking and rental records — including any photographs of identity documents you provide — are held in Varenni OS, our own booking and rental management system, which we operate ourselves on infrastructure located in Australia. We use Stripe as our payment processor; Stripe acts as a data processor on our behalf and handles personal information only to provide that service to us. Card numbers are entered directly into Stripe and are never held by Varenni.
Some technology providers may process information outside Australia. Before enabling such a provider, we assess its data locations, safeguards and contractual terms.
4. Security and retention
VARENNI takes reasonable steps appropriate to the information to protect it from misuse, interference, loss and unauthorised access, modification or disclosure. Access is limited to authorised personnel and protected with strong authentication, audit logging and secure transmission and storage.
Information is retained only for as long as reasonably needed for the purpose collected, applicable limitation periods, accounting, insurance, dispute and legal obligations. It is then securely destroyed or de-identified where required and lawful. Unsuccessful applicant identity documents are deleted promptly once no longer needed.
5. Access, correction and complaints
You may request access to or correction of personal information, or raise a privacy concern, by writing to Privacy Officer, VARENNI, 8 Lambert Road, Indooroopilly QLD 4068, or emailing the Privacy Officer at hellovarenni@gmail.com. We may need to verify your identity before responding. If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.
6. Website and updates
Our website may use essential technical storage and standard hosting logs. If analytics, advertising cookies or new data practices are added, we will update this policy and any required consent controls. We may update this policy and will show the latest date above.