15. Contacting us

You can contact us without identifying yourself or by using a pseudonym. However, if you do not identify yourself or provide your contact details, we may not be able to respond to your query or provide you with the assistance you require. For example, we will not be able to provide you the information you have requested if you have not provided us with a valid email address or telephone number.

If you contact us on behalf of another person, we will require evidence of your authority to act on behalf of that other person.

1. INTRODUCTION

This Privacy Policy (“ Policy ”) sets out how Commercial Motor Industries Pty Ltd trading as Lexus of Adelaide (“ Lexus of Adelaide ”) (ABN 56 007 526 963) (" Lexus of Adelaide , we , us , our ") collects, holds, uses, stores, secures, discloses and disposes of your personal information. By providing your personal information to us, you agree to us collecting, holding, using and handling your personal information in accordance with this Policy.

This Policy (as updated from time to time) will be made available on our website. A printed copy of this Policy may also be requested by contacting us at the details shown in Section 11 (“Contact Us”) below.

2. KEY DEFINITIONS

Australian Privacy Principles or APPs – means the Australian Privacy Principles contained in Schedule 1 to the Privacy Act (as amended from time to time).

Commercial credit , consumer credit , consumer credit liability information , CP derived information , credit provider , credit reporting body , credit reporting information , credit worthiness , information request and serious credit infringement – each have the meaning given in the Privacy Act.

Credit-related personal information – has the meaning given in the Privacy (Credit Reporting) Code.

OAIC – means the Office of the Australian Information Commissioner.

OneLexus - comprises: authorised Lexus dealers, Lexus Australia, a division of, Toyota Motor Corporation Australia Limited, Toyota Finance Australia Limited, trading as Lexus Financial Services and Aioi Nissay Dowa Insurance Company Australia Pty Ltd trading as Lexus Insurance.

Personal Information – means information or an opinion about an identified individual, or an individual who is reasonably identifiable:

• whether the information is true or not; and
• whether the information or opinion is recorded in a material form or not,
  
  or as otherwise defined in the Privacy Act.

Policy – means this Privacy Policy (as updated or varied from time to time).

Privacy Act – means the Privacy Act 1988 (Cth) (as amended from time to time).

Privacy (Credit Reporting) Code – means the Privacy (Credit Reporting) Code 2025 (as amended from time to time), which supplements the credit reporting rules in Part IIIA of the Privacy Act.

Privacy Regulation – means the Privacy Regulation 2013 (Cth) (as amended from time to time).

3. COLLECTION OF PERSONAL INFORMATION

3.1 What personal information do we collect and hold?

The types of personal information that we may collect and hold include but are not limited to:

• name;
• signature;
• address(es);
• gender;
• contact details (e.g. telephone and mobile numbers and email address);
• date of birth;
• credit card or bank account details;
• employment details;
• occupation;
• documents relevant to proof of identity (e.g. Drivers Licence Number and Drivers Licence State);
• Australian Business Number;
• photographic image(s), video(s) (including CCTV footage) and/or recording(s) of voices, to the extent Lexus of Adelaide may lawfully record these;
• other kinds of personal information as permitted or required by law or by order or a court or tribunal; and
• other personal information notified or requested at the time of collection.

Most personal information we collect from you is solicited information. This means we have intentionally collected it from you.

Sometimes we receive unsolicited personal information, which is personal information we receive that we have taken no active steps to collect (for example, a job application when no job vacancy is advertised, misdirected emails or extra information provided beyond what was asked for). If this occurs, we will determine if such information may be held by us in accordance with this Policy. If we determine that we are unable to hold such information, we will destroy or de-identify such information in accordance with the APPs.

3.2 What credit-related personal information do we collect and hold?

This Subsection applies if you ask us to or we afford you credit or consider your suitability as a guarantor, or when we act as an agent of a credit provider.

The types of credit-related personal information and CP derived information that we may collect, hold or derive from credit reporting information disclosed to us by a credit reporting body may include but are not limited to:

• personal information previously described;
• details of consumer credit or commercial credit (including the name of each relevant credit provider) that you have applied for, the type and amount of that credit and the fact that a credit provider, mortgage insurer or trade insurer has sought information about you from a credit reporting body in relation to an application;
• consumer credit liability information, being details of consumer credit that you have or had including the credit provider, the type of consumer credit, the day on which it was entered into, terms or conditions that relate to the repayment of the amount of consumer credit, the maximum amount of credit available and the day on which the consumer credit is terminated or otherwise ceases;
• repayment history information, which includes whether in relation to your consumer credit facilities you have made payments when due and, if not, when overdue payments have been made;
• default information;
• current and last known employer, and salary details;
• payment information, which includes details of the date on which you have paid overdue amounts that were previously recorded as default information with a credit reporting body;
• whether in our or another credit provider's opinion you have committed a serious credit infringement;
• court proceedings information, which includes information about a judgment against you in proceedings that relate to any credit that has been provided to, or applied for, by you;
• personal insolvency or bankruptcy information;
• certain publicly available information;
• scores, ratings, summaries, evaluations and other information relating to your credit worthiness which is derived by us or by credit reporting bodies wholly or partly on the basis of the information above; and
• certain administrative information relating to credit, such as account and customer numbers.

4. HOW DO WE COLLECT AND HOLD PERSONAL INFORMATION?

4.1 Personal information

We collect personal information in a number of ways, including but not limited to:

• directly from you, such as:
  • when you fill out application forms or provide us with other documents;
  • when you speak to us in person or by telephone and we make a note of your information;
  • by email;
  • from our website, including website cookies;
  • from other digital and electronic communications (for example, SMS or social media); and
  • when you fill out entry forms for any competitions, promotions or prizes that we may run from time to time;
• from people you authorise us to contact;
• from people acting on your behalf; and
• from third parties (where permitted by law).

We may also collect personal information through video or CCTV surveillance.

We collect personal information only by lawful and fair means and only where it is reasonably necessary for us to carry out our business.

You have the right to refuse to provide us with personal information, or for us to obtain your personal information through other means. However, this may result in us being unable to provide you with the goods or services (or both) that you request, communicate with you or
respond to your queries.

In some instances, you may deal with us on an anonymous basis or by using a pseudonym (alias). For example, you can do this if you wish to discuss the features of a product we sell. However, this may restrict or limit the goods or services (or both) that we can provide you with.

For example, if you request a quote for a product we sell, it may be necessary for us to collect personal information to prepare and finalise a quote.

4.2 Credit-related personal information

This Subsection applies if we collect personal information about you (or an entity or person you are associated with) to provide you with credit or consider your suitability as a guarantor, or if we are acting as an agent of a credit provider.

We may collect credit-related personal information directly from details included in your application for credit or other documents and information that you provide to us. We may also collect or confirm this information from third parties such as a credit reporting bodies, government agencies, other credit providers, trade references, people you authorise us to contact, or people acting on your behalf. Where we engage third party service providers to provide credit-related functions, those providers may also collect your credit-related personal information from you and other sources on our behalf.

In accordance with the Privacy Act and the Privacy (Credit Reporting) Code, you should be aware of the following.

• We may collect personal information about you and disclose it to a credit reporting body, where the Privacy Act permits us to do so without obtaining your consent, including disclosure to:
  • Equifax - equifax.com.au
  • Experian - experian.com.au
  • CreditorWatch – creditorwatch.com.au
• Where that disclosure is an information request:
  • your consent to the disclosure being made is not required;
  • a record of the information request may be used and, as relevant, disclosed for the purposes of the credit reporting body or a credit provider assessing your credit worthiness, including calculation of a credit score or credit rating (subject to any other use or disclosure limitations under the Privacy Act, the Privacy Regulation or the Privacy (Credit Reporting) Code); and
  • the information request may affect your credit score or credit rating as calculated by a credit reporting body.
• The credit reporting body may include the information in reports provided to credit providers to assist them to assess your credit worthiness.
• If you fail to meet your payment obligations in relation to consumer credit or you commit a serious credit infringement, we may be entitled to disclose this to the credit reporting body.
• You can obtain a copy of the credit reporting bodies' policies about the management of credit-related personal information at the following websites:
  • https://equifax.com.au/credit-reporting-policy
  • https://experian.com.au
  • https://creditorwatch.com.au/privacy/  
• Trade insurers may obtain credit-related personal information about you from us or a credit reporting body for the purpose of assessing whether to provide insurance to us in relation to the credit we provide.
• You have the right to access your information from us, request us to correct your information and make a complaint to us. The processes for this and how we will deal with such a request or complaint are detailed in Sections 9 and 10 of this Policy.
• You have a right to request a credit reporting body not to use their credit reporting information for the purposes of pre-screening of direct marketing by us.
• You have the right to request a credit reporting body not to use or disclose credit reporting information about you if you believe on reasonable grounds that you have been or are likely to be a victim of fraud.

We may not be able to provide credit in respect of services you require if you do not provide all of the information requested or do not consent to how we collect, use, hold and disclose your credit-related personal information in accordance with this Policy.

5. USE AND DISCLOSURE OF PERSONAL INFORMATION

5.1 Lexus of Adelaide

We collect, hold, use and disclose your personal information (and, as applicable, credit-related personal information) for the primary purpose for which it was collected. By way of example, we may collect, hold, use and disclose personal information to (without limitation):

• provide you with goods or services or both;
• verify your identity;
• administer and manage the goods and services we provide to you, charge and bill you for them and collect any amount you may owe us;
• consider whether to provide you, or an individual or entity associated with you, with credit (with respect to credit-related personal information);
• consider whether to accept you as a guarantor (with respect to credit-related personal information);
• conduct functions directly related to considering an application for credit or whether you should be accepted as a guarantor (with respect to credit-related personal information);
• conduct marketing activities and competitions and provide you with promotional
  material;
• identify and tell you about goods or services that we think may be of interest to you;
• communicate with you and respond to your enquiries;
• manage our business processes, functions and activities;
• protect the security of and manage access to our premises, assets and systems, protect or defend our rights and property, protect against legal liability, or protect the personal safety of our employees, customers or members of the public;
• fulfill our legal and regulatory obligations;
• recruit and screen potential candidates for employment; or
• other purposes notified at the time of collection.

We may also use or disclose personal information for another purpose than the primary purpose for which it was collected, where:

• you consent to the use or disclosure of the personal information for another purpose;
• you would reasonably expect us to use or disclose the personal information for a related purpose;
• we are otherwise permitted to use or disclose the personal information under the Privacy Act or the APPs;
• we are required to comply with a legal obligation, such as a subpoena, or otherwise as required or authorised by law or order of a court or tribunal; or
• where we reasonably believe that the use or disclosure is reasonably necessary for enforcement related activities by or on behalf of an enforcement body.

We may combine personal information held about an individual with other information that we hold about that individual. We do not sell, rent or lease personal information to third parties.

As a franchisee, we may also disclose your personal information to our franchisor, Lexus Australia.

5.2 OneLexus Network

Lexus of Adelaide is part of the OneLexus network of Lexus organisations in Australia (each a OneLexus organisation), comprising:

• authorised Lexus dealers in Australia;
• Lexus Australia, a division of Toyota Motor Corporation Australia Limited;
• Toyota Finance Australia Limited, trading as Lexus Financial Services; and
• Aioi Nissay Dowa Insurance Company Australia Pty Ltd trading as Lexus Insurance.

Lexus of Adelaide and other OneLexus organisations collect and share with each other customer and customer information to provide you an integrated OneLexus customer experience, such as allowing you to be known across the network regardless of which OneLexus organisation you deal with and to provide you with products, services, information and assistance, respond to your enquiries and help keep your information up to date. Your information may be disclosed to OneLexus network service providers in Australia and overseas
for these purposes.

For more information about how Lexus Australia, a division of Toyota Motor Corporation Australia Limited and Toyota Finance Australia Limited, trading as Lexus Financial Services handle your information, please see their combined Privacy Policy at lexus.com.au/privacy. The privacy policies of Lexus Insurance are also available at that address.

5.3 Lexus of Adelaide and OneLexus Marketing

We may send you marketing materials and information about Lexus of Adelaide and/or Lexus Australia products, services, special offers, promotions, surveys and events that may be of interest to you. Such marketing may include joint promotions with other promotion partners, and may be sent to you using any contact details provided by you, such as post, telephone, email or SMS.

If you are currently receiving any type of marketing materials or communications from us and wish to be removed from one or more of these services, you may withdraw your consent to receive those materials or communications at any time by following opt-out instructions provided
in electronic communications from us or indicating which messages you no longer wish to receive by writing to: [email protected]  

If you do not provide us with personal information, we may not be able to consider your request, provide products or services to you or perform warranty obligations.

OneLexus organisations may send you marketing to inform you about products or services, special offers, promotions and events that may be of interest to you. These marketing communications may include joint promotions with promotion partners, and may be sent to you using any contact details provided by you, such as post, phone, email or SMS. Please note that each of the OneLexus organisations are separate organisations. If you do not wish to receive marketing from one organisation, you can let that organisation know at any time using the contact details in their privacy policy (available on their website or lexus.com.au/privacy) or using the “unsubscribe” or other opt-out function offered by the organisation.

Your consent to receive marketing from a OneLexus organisation will be deemed to be ongoing if you do not opt out when you are offered the opportunity to do so, or unless and until you advise the relevant organisation otherwise.

For more information about how Lexus Australia handles your information, please see their privacy policy at: lexus.com.au/privacy. We can provide you with printed copies of this policy upon request.

5.4 Connected Services

If your vehicle is fitted with Connected Services functionality, your vehicle will collect and transmit vehicle data for Connected Services unless and until you opt out of Connected Services. Such data is collected, held, used and disclosed by Lexus Australia organisations.

Connected Services may be added or removed by Lexus Australia from time to time. For a list of Connected Services currently being offered by Lexus Australia and information on how you can access these services please visit lexus.com.au/connected.

For information about the types of and how personal information is collected, held, used and disclosed when Connected Services is used, please refer to lexus.com.au/connected.

For information on how to opt out of Connected Services, please refer to the Lexus Australia Privacy Policy at Lexus.com.au/privacy.

If your vehicle’s Connected Services functionality is enabled, you must inform passengers and drivers of your vehicle that vehicle data is collected, held, used and disclosed by OneLexus organisations for Connected Services.

5.5 Disclosure to other third parties and overseas recipients

We and other OneLexus organisations may disclose your personal information to third parties such as:

• Their contractors or agents in Australia and overseas*, Toyota Motor Corporation Japan (parent company of Lexus Australia and Lexus Financial Services), to fulfil any of the purposes referred to above, including Section 5.4 ;
• financial institutions for payment purposes;
• other third parties so they can supply you with products or services you require; and
• government authorities, for example for the purposes of vehicle registration or compulsory third-party insurance.

* Some of these contractors and agents are located overseas, including in Singapore, Japan, United States of America, United Kingdom and Sweden, and as a result your personal information may be disclosed overseas.

If you do not provide Lexus of Adelaide particular information, Lexus of Adelaide and/or other OneLexus organisations may not be able to consider your request, provide products or services to you or perform their warranty obligations.

We may engage external service providers and other third parties to undertake tasks such as marketing, processing payments, collecting accounts, assisting with promotions, providing technical services or assisting with other functions or services as reasonably necessary in the
course of our business. These third parties may be provided with access to your personal information for the purposes of performing those tasks, functions or services. We may also engage external service providers and other third parties to undertake credit-
related tasks and functions, such as credit or guarantee assessments, conducting checks for credit worthiness or fraud, establishing credit accounts, managing credit provided to our customers or debt collection. These third parties may be provided with access to your credit-related personal information for the purposes of performing those tasks and functions.

We may disclose your personal information to our related bodies corporate. In the event that we sell all or a part of our business to another party, that sale may include the disclosure or transfer of your personal information.

Some of the third parties to whom we disclose personal information are located outside of Australia, and as a result your personal information may be disclosed, transferred and/or stored overseas, for example in third party storage or cloud facilities. The countries in which overseas recipients may be located may vary from time to time and are likely to include, at least, Singapore, Japan, Germany, the United States of America, the United Kingdom and Sweden. Where we disclose personal information to overseas recipients, we take all steps reasonable in the circumstances to ensure that your personal information is treated in accordance with the APPs.

We are not likely to disclose credit-related personal information to entities that do not have an Australian link.

Web traffic information is disclosed to Google Analytics or its related entities when you visit our websites. Google stores information across multiple countries.

When you communicate with us through a social media service, the social media provider and its partners, who may be located overseas, may collect and hold your personal information.

6. STORAGE AND SECURITY

We take reasonable steps, including technical and organisational measures, to protect your personal information (and credit-related personal information) from misuse, interference or loss and from unauthorised access, use, modification or disclosure.

We have in place computer software and hardware, electronic protection and physical security measures, to protect and secure the personal information (and credit-related personal information) that we hold. We store that information securely, in physical form (such as a paper file), electronic form (such as on computer databases operated either by us or our external service providers), or a combination of both. Our employees and authorised agents are obliged to maintain the confidentiality of any such information held by us.

In the event of a data breach, we will take relevant steps in accordance with applicable legal obligations.

We will take reasonable steps to destroy or de-identify information once we no longer require it for the purposes for which it was collected, for any secondary purpose permitted under the Privacy Act or the APPs, or as otherwise required by law or order of a court or tribunal.

7. WEBSITE COOKIES

We use cookies on our websites.

A cookie is a small text file placed on your computer by a web page server which may later be retrieved by a web page server. Like most other websites, our websites use cookies to collect information about your use of those websites.

Cookies allow website operators to assign a unique identity to a computer, which can be used to associated requests made to the website by that computer. Cookies indicate to a website that a computer has been there before and can be used to record things such as what parts of a website or other websites have been visited by that computer.

We use cookies for various purposes. A cookie is allocated to each internet browser that visits a web page belonging to us. This cookie is used:

• to allocate an identification number to your internet browser (you cannot be identified from this number);
• to determine if you have previously visited the website;
• to track and report on website and online campaign performance;
• to identify other pages or third party websites you have accessed; and
• for security purposes.

We also use cookies to personalise your web browsing experience, including your access to services that we provide on our websites.

Our websites may use flash cookies for the purpose of fraud detection and investigation. These cookies are not used for marketing or tracking of individuals.

If cookies are of concern, they can be turned off from your computer.

If you do configure your computer so that you do not receive cookies, some of the functionality of our websites may not be available.

Our websites may from time to time contain links to other sites that are controlled by third parties. Individuals should consult the privacy policies for those other sites. Please be aware that we do not accept responsibility for any collection or use of personal information by websites other than our own websites.

8. ARTIFICIAL INTELLIGENCE AND AUTOMATED DECISIONS

We use artificial intelligence products where they provide efficiencies and/or other advantages.

Where we decide to use artificial intelligence products, we will comply with applicable laws and regulations.

We do not currently use personal information about any individual in any solely or partially automated processes involving decisions which would significantly affect the rights and interests of any individual.

9. ACCESS AND CORRECTION

9.1 Personal information

We take reasonable steps to ensure that all personal information collected, used and disclosed by us is accurate, complete, up to date, relevant and not misleading.

You have the right to access, or make a request to correct, your personal information.

If we hold personal information about you, we must, on your request, give you access to the personal information. Exceptions include where:

• giving access would pose a serious threat to the life, health or safety of any individual, or to public health or public safety;
• giving access would have an unreasonable impact on the privacy of other / another individual(s);
• the request for access is frivolous or vexatious;
• the personal information relates to existing or anticipated legal proceedings between us and you and would not be accessible by the process of discovery in those legal proceedings;
• giving access would reveal our intentions in relation to negotiations with you in such a way as to prejudice those negotiations;
• giving access would be unlawful;
• denying you access is required or authorised by or under an Australian law or order of a court or tribunal;
• we have reason to suspect that unlawful activity or misconduct of a serious nature that relates to our functions or activities has been, is being or may be engaged in, and giving access would be likely to prejudice the taking of appropriate action in relation to that matter;
• giving access would be likely to prejudice one or more enforcement related activities conducted by or on behalf of an enforcement body; or
• giving access would reveal evaluative information generated by us in connection with a commercially sensitive decision-making process.

You may request access to your personal information, or make a request to correct your personal information held by us by submitting a request to the contact details shown in Section 11 (“Contact Us”) below. We will require proof of identification before providing you with, or
correcting, the requested information.

We reserve the right to charge you a reasonable fee for providing access to your personal information. However, we will not charge you for making an application for access to, or to correct, personal information.

We will respond to a request to access or correct your personal information within 30 days or, if longer, as soon as reasonably practicable. If the request is refused, we will, within a reasonable timeframe, notify you in writing of the reasons for that refusal and mechanisms available to complain about the refusal. If we need more time to resolve your request we will notify you as to the delay and the reasons for it and seek your written agreement to a longer period.

We will take reasonable steps to correct personal information held about you to ensure that it is accurate, up to date, correct, relevant and not misleading, where requested by you. We will also do so where we are otherwise satisfied, having regard to a purpose for which the personal information is held, that the information is inaccurate, out of date, incomplete, irrelevant or misleading.

For more information about how other franchisors handle your personal information, please refer to their own privacy policies. Each organisation's privacy policy contains information about how you can seek access to or correction of the personal information they hold about you (if any). Their privacy policies also contain information about how you can make a privacy complaint and how each organisation will deal with it.

9.2 Credit-related personal information

We take reasonable steps to ensure that your credit-related personal information is accurate, complete, up to date, relevant and not misleading

Subject to certain exceptions set out in the Privacy Act and the Privacy (Credit Reporting) Code, you have the right to access your credit related personal information that is held by us. You also have the right to make a request for correction of your credit-related personal information.

You may request access to, or correction of, your credit-related personal information by submitting a request to in the manner shown in Section 11 (“Contact Us”) below. Before responding to your request, we will require proof of identification and (as appliable) any other evidence reasonably required to satisfy ourselves of your identity and your entitlement to access the information.

We will respond to a request to access or correct your personal information within 30 days (except in unusual circumstances and in such a case, as soon as reasonably practicable). If the request is refused, we will, within a reasonable timeframe, notify you in writing of the reasons for that refusal and mechanisms available to complain about the refusal. If we need more time to resolve your request we will notify you as to the delay and the reasons for it and seek your written agreement to a longer period.

If we consider it necessary in order to deal with your request, we may consult with a credit reporting body or another credit provider.

10. QUERIES OR COMPLAINTS

If you have any queries, feedback or complaints about this Policy, the Privacy Act or the APPs, or our compliance with the foregoing or the Privacy (Credit Reporting) Code, please contact us at the details shown in Section 11 (“Contact Us”) below, specifying the nature of your complaint.

If we are unable to resolve the complaint or we have not resolved it to your satisfaction, you may contact the OAIC at the details shown further below.

If your complaint is in respect of credit-related personal information about you, we will attend to your complaint in the following manner.

• You will receive an acknowledgment of your complaint within 7 days after we receive it.
• We will investigate all complaints and aim to resolve them within 30 days.
• If we cannot resolve your complaint within this period we will notify you as to the reasons why, specify a date when we expect a resolution and seek your agreement to extend this 30 day period.
• If we consider it necessary in order to deal with your complaint, we may consult with a credit reporting body or another credit provider. If, while the complaint remains unresolved, we are disclosing information subject to the complaint to a third party, we may advise the third party about the complaint.
• Depending on the nature of the complaint, sometimes we will be required to notify a credit reporting body or credit provider of the making of the complaint and our decision.
• If we are unable to resolve the complaint, or have not resolved it to your satisfaction, you may contact the OAIC:
  
  Telephone: 1300 363 992
  Post: GPO Box 5288, Sydney NSW 2001
  Website: https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us

11. CONTACT US

For the purpose of this Policy, you may contact us at:

To: The General Manager
Phone: (08) 8238 5400
Email: [email protected]  
Post: Lexus of Adelaide
PO Box 6152
Halifax St, Adelaide SA 5000

12. CHANGES TO THIS POLICY

This Policy is reviewed periodically and may be amended at any time. It was last updated on 4 September 2026.