1. GENERAL
1.1 This is the Privacy Policy of SAIC Motor Australia Pty Ltd (ACN 608 096 519) ('we', 'us', 'our' or 'the Company').
1.2 This Privacy Policy sets out how we collect, store, use and disclose personal information in accordance with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth).
1.3 The Australian Privacy Principles govern the use of "personal information", which is information or an opinion about an identified individual or an individual who is reasonable identifiable. It need not matter that the information is correct or not or whether it is recorded in a material form or not.
1.4 This Privacy Policy applies to all persons who interact with us or our dealer network ('you/your'), including everyone who visits or uses our website, anyone else who uses any of our products and services and our suppliers and service providers.
1.5 This Privacy Policy applies to our collection and use of your personal information. By visiting and/or using our website and our products and services and/or dealing with us or our dealer network, you agree to the terms and conditions of this Privacy Policy.
1.6 This Privacy Policy also includes information about how we handle data collected from MG vehicles (which in some cases may not be "personal information" as it relates to the vehicle rather than any identified or identifiable individual).
2. PERSONAL INFORMATION
2.1 Your Personal Information
Personal information collected and held by us about you, may include:
- name;
- gender;
- date of birth;
- address;
- telephone numbers;
- e-mail address;
- occupation;
- drivers licence number;
- drivers licence state;
- ABN;
- employment application information;
- IP address;
- device identifiers;
- information about how you use our website (including your setting preferences, browser type, operating system, website visited immediately before coming to our site); and
- any other relevant information to enable us or our dealer network to provide services and products to you.
If you choose not to provide us with your personal information, we may not be able to provide you with the services and/or products you require, or the level of service on which we pride ourselves.
2.2 How we collect personal information
We collect personal information in a number of ways, including:
- directly from you, when you provide information by telephone, electronic messages (including email and SMS), in documents or otherwise through our website via website tracking tools such as cookies, Google Analytics, Google Signals or TikTok pixel;
- directly from you, via our website (eg, when you submit requests for information);
- when you buy a new vehicle from our authorised dealers;
- from our authorised dealers if you have your vehicle serviced or repaired by one of our authorised dealers, or book your vehicle with one of our authorised dealers for service or repair;
- directly from you if you make an enquiry about our vehicles, parts, accessories or services, or if you request a test drive, brochure, specification sheet, information or other materials about our vehicles, parts, accessories or services (whether through us or our authorised dealers);
- if you request roadside assistance services;
- from your agents or representatives who act on your behalf;
- from competition entry forms or at our promotional activities or sponsored events;
- from third parties who you have asked or permitted to provide your personal information (including those parties from whom you purchase goods and services);
- from industry databases;
- from publicly-available sources such as the Internet and telephone directories; and
- from law enforcement, dispute resolution, statutory and regulatory bodies.
2.3 Website tracking
Cookies
We may collect cookies from you about your visit to our website to help us to improve our website, deliver advertised content which is relevant to you or be used to track the effectiveness of our ad campaigns on third party websites. Cookies are small information files which are stored on your browsing device when you visit a website, enabling the website to recognise your device on future visits. For example, we may collect the time of your visit, whether you have visited our website previously, whether you used a search engine to find us and some geographical information. For information on disabling these cookies, please go to the privacy settings section within your browser
Google Analytics Advertising Features
We use analytical web tools such as Google Analytics, a web analytics service provided by Google. We use Google Analytics to collect information on how visitors use our website and where visitors have come to our website from for us to better understand how to improve our products and services, to improve our website and to advertise our products and services to you. In addition to the session cookie, Google Analytics uses other data collection methods such as appending query strings to an image request. We store the data generated by Google Analytics securely
In addition, our website also uses Google Signals, which is a service also provided by Google. Google Signals compiles for us data on Google users' cross-device behaviours for Google users that have enabled personalised advertising in their Google accounts. These data reports show for instance which devices users used to click on an advertisement and which devices users used to make purchases of our products. We use these data reports to improve our products and services, to improve our website and to advertise our products and services to users.
You can opt-out of the Google Analytics Advertising Features through Google Ads Settings, Ad Settings for mobile apps and the Google Analytics Opt-Out Browser Add-on.
For more information on the use of Google Analytics, including how to opt out, visit https://support.google.com/analytics/answer/2700409?hl=en&utm_id=ad.
TikTok Pixel
We also use the "TikTok pixel" which is a data collection tool provided by TikTok. The TikTok pixel provides us with information about visitors that come to our website via the campaigns we run on TikTok. With the use of TikTok pixel, we can deliver advertised content targeted to TikTok users who have expressed an interest in our products and services. TikTok Pixel also supports our market research and analytics purposes as it allows us to assess the effectiveness of our TikTok Ads by seeing the number of users that visit our website after clicking on our TikTok Ads.
You can reject Cookies used by TikTok pixel by following steps on the page: https://ads.tiktok.com/help/article/tiktok-pixel.
For more information on the use of TikTok pixel, visit https://ads.tiktok.com/help/article/tiktok-advertiser-tools-and-related-terms.
You can also find privacy policy of TikTok by visiting https://www.tiktok.com/legal/page/us/privacy-policy/en.
Other External Service Providers
We also use other external service providers for the following purposes:
- for web hosting services for this website; and/or
- to gather non-personal information (using cookies) in order to evaluate the website's effectiveness, for example online marketing activities.
3. HOW WE USE YOUR PERSONAL INFORMATION
3.1 General
Your personal information may be used in order to:
- provide and market our services and products to you either directly or through our dealer network or service suppliers;
- communicate to you in relation to our products, services and our promotional activities;
- comply with our legal obligations (including in the event of a vehicle safety recall);
- administer your vehicle's warranty;
- facilitate your use of the MG mobile device app;
- facilitate your use of certain in-vehicle services or functionality (as described in section 10 below);
- monitor our performance and to help us manage our services;
- identify and contact individuals who do business with us;
- train our employees, agents and representatives;
- conduct customer and market research and analytics to improve the quality of our products and services;
- assess and process employment applications and manage employment issues;
- handle complaints and disputes;
- detect, investigate and prevent fraud; and
- operate our business, including to manage, develop, maintain and improve our website, software (including MG mobile device apps), products and services.
We may contact and communicate with you via telephone, post, facsimile, email and/or SMS. We may also contact you via our website and social media accounts, and through the MG mobile device app.
3.2 Direct marketing
We will not direct market to you except where permitted by law. If you do not want to receive direct marketing from us, you can opt out at any time by contacting us using our contact details provided below or by using the opt-out function included in those communications. We do not use or disclose sensitive information for the purposes of direct marketing.
3.3 Social Media
We may also, from time to time, use social media platforms to deliver targeted advertisements to you or others who we consider may be interested in our products or services.
For example, we may aggregate your email address together with the email addresses of others, locally hash such data, and transmit the resulting hashed data to third parties including but not limited to Facebook for the purpose of creating "Custom Audiences" (where targeted advertisements are sent to people on Facebook who have already been on our website), and "Lookalike Audiences" (where targeted advertisements are sent to people on Facebook who have similar characteristics to people on our customer list).
4. DISCLOSURE OF PERSONAL INFORMATION
4.1 General
We may disclose your personal information to organisations outside of the Company. These organisations may include:
- our authorised dealers;
- outsourced service providers who manage services we provide to you including, but not limited to: mailing systems and direct marketing; customer relationship service providers (who provide services such as managing customer feedback or enquiries through our website); market research; customer research; payment processors; roadside assistance; training; financial services and insurance;
- government agencies, regulators and law enforcement authorities as required or authorised by law;
- our related bodies corporate;
- the agent(s) of any of those entities referred to above;
- your employer (where applicable); and
- our advisors (including legal and accounting advisors).
Those entities are not authorised by us to use personal information for anything other than the purpose for which we supplied that information to them. We may also disclose personal information where you consent to us doing so. That consent may be written, verbal or implied from your conduct.
We may also collect your personal information from these companies, organisations and individuals. If we do, we will only deal with that information in accordance with this Privacy Policy.
4.2 Disclosure to overseas recipients
Our related entities and some of our service providers (including information technology service providers) may be located overseas and, as a result, personal information collected and held by us may be transferred overseas. The countries in which these recipients may be located will vary from time to time, but may include China, the United States, the United Kingdom and Thailand.
When we disclose your personal information to an overseas recipient, we will comply with the Australian Privacy Principles at all times.
5. ELECTRONIC COMMUNICATIONS
The Spam Act 2003 prohibits us from sending you any commercial electronic communications, such as texts and emails containing marketing offers, without your consent.
In line with our commitment to technology, we like to accommodate customers who want to be contacted electronically. We might send you communications for any of the purposes mentioned above.
When we collect your personal information, we might ask you for your mobile phone number or email address. When you provide these details, we'll also request your consent for us to use these details for commercial electronic communications. Whenever such messages are sent, we'll always provide you with the option of opting out of receiving similar communications in the future within the message.
6. DO NOT CALL REGISTER
The Do Not Call Register Act 2006 prohibits the making of telemarketing calls (as defined in the legislation) to numbers listed on the Do Not Call Register. We will only contact numbers that appear on the Do Not Call Register in the limited circumstances allowed by the Do Not Call Register Act 2006 and the Telecommunications (Do Not Call Register) (Telemarketing and Research Calls) Standard 2007, such as where you have given us the requisite consent to do so. Where you give us express consent to contact you by phone, we'll deem it to be supplied for an indefinite period for the purposes of the Do Not Call Register Act 2006, unless otherwise advised or withdrawn by you.
7. STORAGE OF PERSONAL INFORMATION
7.1 General
We may hold your personal information in a number of ways, including:
- in our computer systems or databases, which may involve storing data on storage or computer systems provided by third party suppliers;
- in paper records; and/or
- in telephone recordings.
Where it has been collected from our or your agent, or our service providers, they may also hold copies of your personal information. We may combine personal information we receive about you with other information we hold about you.
We will take reasonable steps to store your personal information in a secure environment. It is protected by a combination of physical and technological measures. We take all reasonable steps to carefully protect your data from loss, misuse, unauthorised access or disclosure, alteration or destruction. However, no system or methodology for data handling can be guaranteed as entirely secure.
7.2 Help us ensure we hold accurate information
We take reasonable precautions to ensure that the personal information we collect, use and disclose is accurate, complete and up-to-date. However, the accuracy of that information depends to a large extent on the information you provide. We recommend that you:
- let us know if there are any errors in your personal information; and
- keep us up to date with changes to this information such as your name and address.
If we are satisfied that any personal information we hold about you is inaccurate, out-of-date, incomplete, irrelevant or misleading, we will amend our records accordingly.
7.3 You can access your personal information
You have a right to access your personal information, subject to some exceptions allowed by law. If you would like to access your information, please contact us using the contact details set out at the end of this document.
You may be required to put your request in writing for security reasons. We may also require you to comply with certain procedures, such as providing satisfactory identification, in order to ensure the integrity and security of the information we hold. We may charge a fee for searching for and providing access to your information, however we will not charge a fee for you to lodge a request for access to or correction of your personal information.
We may refuse to allow access or to amend your personal information if we are legally required or permitted to do so. In that case, we will (unless it is unreasonable to do so) provide you with written reasons for the refusal together with information about the options available to complain about the refusal.
8. UPDATES TO THIS POLICY
This policy will be reviewed from time to time to take account of new laws and technology, changes to our operations and practices and the changing business environment. We will always make our Privacy Policy available to anyone who requests it, whether at our offices or on our website.
9. LINKS TO OTHER SITES
The Company provides access to other sites by way of hyperlinks from this web site. These other sites are not subject to the Company's privacy standards and procedures. You should make your own enquiries as to the privacy standards for each linked site.
10. VEHICLE DATA
We and/or our service providers may collect certain information from your MG vehicle.
In many cases, this will not be "personal information", since it concerns the vehicle rather than any identified or identifiable individual.
Some examples of data that may be collected from an MG vehicle include:
- if the user chooses to use satellite navigation functionality in the vehicle, the vehicle's location and destination data will be collected and transmitted to our navigation service provider in order to provide satellite navigation functionality to the vehicle;
- if the user chooses to access their music streaming account in the vehicle, the user's log-in credentials (account name and password) for the music service will be collected and transmitted to the music streaming service provider; and
- if the user chooses to activate onboard intelligent mobility vehicle services (which provide access to information and functionality through the MG mobile device app paired with the vehicle), then certain vehicle data such as battery voltage, remaining fuel or EV charge, lock status (ie, whether vehicle doors are locked), vehicle security information (e.g, if the vehicle is started) will be collected and used to provide this information to the user. The user's log-in credentials (account name and password) will be collected through the app to facilitate secure access to the vehicle's data. Encrypted tokens are used in communications to ensure a valid and secure connection between the vehicle and the app. Further information about the app is set out below.
We collect this vehicle data in order to provide in-car services and functionality. Users of MG vehicles may opt-in or opt-out of using these services and accessing this functionality. If users opt-out of the collection of data necessary to provide a service or functionality, that service or functionality may cease. If you prefer that data is not collected from your MG vehicle, you can choose to not enable the functions that require it, or turn them off.
All vehicle data is encrypted to safeguard its security and integrity during transmission.
The Company does not collect vehicle data other than where it is required to deliver a service or function that the user requests and has consented to receive, or if required by law. The Company and its related entities do not, for instance, monitor vehicle movement generally or disclose information of that kind to third parties (other than to provide functionality as discussed above, for example mapping or navigation services).
Beyond disclosures necessary to fulfil the relevant service or functionality, the Company does not disclose vehicle data to third parties except with the relevant individual's consent or where required to do so by law. Vehicle data may be stored on servers located in various countries but it remains under the effective control of the Company. Our data server for Australian users is located in Sydney. Some third-party service providers, eg those providing mapping and voice recognition services, may use servers in Europe or other countries.
11. APP DATA
We and/or our service providers may collect certain information if you choose to use our app (called ISMART).
Some examples of information that may be collected using our app are:
- information such as the user's name, address, email address and password, which is used to create an account, which in turn enables provision of the functionality offered by the app (including the functions described below);
- data to allow your vehicle to be bound to your account (and unbound if you choose);
- data to allow functionality of checking and controlling various vehicle states and functions;
- data to enable the "Find My Car" function; and
- data to enable message centre functions.
We collect this information in order to provide these app services and functionality. Users may opt-in or opt-out of using these services and accessing this functionality. If users opt-out of the collection of data necessary to provide a service or functionality, that service or functionality may cease. If you prefer that data is not collected from your MG vehicle, you can choose to not enable the functions that require it, or turn them off.
To enable app and vehicle functions, data is exchanged between your mobile phone and our servers as well as between your vehicle and our servers via the Internet. All app data is encrypted to safeguard its security and integrity during transmission.
The Company does not collect app data other than where it is required to deliver a service or function that the user requests and has consented to receive, or if required by law. Beyond disclosures necessary to fulfil the relevant service or functionality, the Company does not disclose app data to third parties except with the relevant individual's consent or where required to do so by law. App data may be stored on servers located in various countries but it remains under the effective control of the Company.
SAIC overseas intelligent mobility technology CO. Ltd, which is a member of the corporate group to which we belong, provides technical services to support app and vehicle functionality.
12. CONTACT US
12.1 How to contact us
If you wish to notify us of your new contact details, update your personal information, opt out of direct marketing, make a complaint about a breach of privacy or have any questions in relation to the accuracy of your information or privacy, please contact our Information and Privacy Officer by:
E-mail: privacy@mgmotor.com.au
Mail: PO BOX 354NORTH SYDNEY NSW 2059
Website: www.mgmotor.com.au
12.2 Making a complaint
If you believe that we have interfered with your privacy in our handling of your personal information, you may lodge a complaint with us using the contact details in section 12.1 above. We will endeavour to resolve your complaint in accordance with our internal complaints resolution process. Please allow us a reasonable time to respond to a complaint. If you are not satisfied with our response, you may make a complaint to the OAIC (whose contact details can be found at: https://www.oaic.gov.au/).