Skip to content
WHEELS&BIDS

Privacy policy

Effective: 11 June 2026

1. Who we are

Wheels & Bids is a software product operated by Blu Mint Digital (blumint.com.au). This policy explains how we collect, use, disclose, and protect personal information when you use wheelsandbids.com.au, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What we collect

  • Account information: your email address (used for passwordless sign-in) and the display name you choose.
  • Listing information: vehicle details you provide or that are pre-filled from registration/VIN lookups (including rego, VIN, and state), photos, videos, descriptions, and pricing.
  • Activity:bids, watchlist entries, Q&A comments, seller updates, and notification preferences.
  • Payment information: listing-fee payments are processed by Stripe. We receive confirmation of payment and a payment reference; we never see or store your full card number.
  • Messages: anything you send us through the contact form, including your name and reply email address.
  • Technical data: IP address, device and browser information, and server logs generated when you use the site, used for security and to keep the Service running.

3. How we use your information

  • To operate the Service: accounts, listings, bidding, watchlists, and Q&A.
  • To send transactional email you'd expect: sign-in links, auction results, and the ending-soon reminders you opt into by watching an auction.
  • To protect the integrity of the platform: detecting fraud and shill bidding, and enforcing bans (we keep minimal records about banned accounts so bans stick).
  • To respond to your messages and provide support.
  • To comply with our legal obligations.

We do not sell personal information, and we do not use it for third-party advertising.

4. When we disclose information

  • Between buyer and seller:when an auction ends with a winning bid, we share the seller's and winning bidder's contact details with each other so the sale can be completed. This is a core function of the Service.
  • Public content:your listing, bid amounts (shown against your display name), Q&A comments, and seller updates are visible to anyone viewing the auction page.
  • Service providers: we use a small set of processors to run the platform — cloud hosting and database (Supabase, hosted in Sydney, Australia), website hosting and delivery (Vercel), payments (Stripe), transactional email (Brevo), and vehicle-data/PPSR lookup providers. Each receives only what it needs to perform its function.
  • Legal: where required by law, court order, or to protect our rights, users, or the public.

5. Overseas disclosure

Our primary database is hosted in Australia. Some service providers (for example, website delivery and email infrastructure) process limited data in other countries, including the United States and the European Union. We take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs.

6. Cookies

We use essential cookies only: they keep you signed in and secure the session. We do not run third-party advertising or cross-site tracking cookies. If we add analytics in future, this policy will be updated first.

7. Security

We protect personal information with industry-standard measures: encrypted connections (HTTPS), encrypted storage, row-level access controls in our database, passwordless sign-in (no password database to breach), and least-privilege access to production systems. No system is perfectly secure, but we take the protection of your data seriously and will notify affected users and the OAIC of any eligible data breach as required by law.

8. Retention

We keep account and auction records while your account is active and for as long as needed for the purposes above — including the integrity of the permanent results archive, dispute resolution, and our legal obligations (for example, financial records relating to listing fees). When information is no longer needed, we delete or de-identify it.

9. Access, correction, and deletion

You may request access to or correction of the personal information we hold about you, or ask us to delete your account, by reaching out via the contact form. We will respond within a reasonable period. Note that some records may be retained where the law requires it or where they are necessary for ban enforcement or completed-auction integrity.

10. Complaints

If you believe we have mishandled your personal information, contact us first via the contact form and we will investigate and respond. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new effective date.