The short version: we collect your email address so we can send you a report, the vehicle identifier so we can search for it, and your mobile number only if you ask for an SMS. We don't sell any of it, and a PPSR search is confidential — we don't tell the other party to the sale, or anyone else, that you searched.
Who is responsible
Digital Services International Pty Ltd, ABN 86 677 513 334, is responsible for personal information collected through this website. We handle it in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect, and why
| What | Why |
|---|---|
| Email address | To send your report and receipt, and to contact you about that order. Required. |
| Name | To address the report. Optional. |
| Australian mobile number | To send the SMS you asked for, and the free re-check alert. Only collected if you choose SMS. |
| Vehicle identifier (VIN, chassis or plate and state) | To run the search. It is not personal information about you, but it is recorded against your order. |
| Payment details | Collected by our payment provider in your browser. Card numbers never reach our servers and we do not store them. We keep the payment reference and the amount. |
| Technical information | IP address, browser and timestamps, for security, fraud prevention and to make the site work. Cloudflare also tells us which Australian state your connection appears to be in, which we use for one thing only: to pre-select a state in the search form so you do not have to. It is a guess, you can change it, we do not store it, and nothing else depends on it. |
| What you send us through the contact form | Your name, your email address, the reference if you give one, and the message itself — so that we can read it and reply. It is held in our search system, encrypted at rest, and is readable only by the staff who answer it. We keep it while the matter is open and for as long as we need it afterwards to show how we handled it. |
What we don't do
- We do not sell personal information.
- We do not share it for anyone's marketing, including our own.
- We do not send you marketing email you did not ask for.
- We do not tell the vehicle's owner, dealer or financier that you searched. A PPSR search is confidential and leaves no trace against the vehicle.
Who it is shared with
Only those who need it to deliver what you ordered:
- The Australian Financial Security Authority (PPSR) — receives the vehicle identifier to perform the search.
- Our vehicle data provider — receives the identifier for the NEVDIS pre-check and, for a plate search, to match the plate to a vehicle.
- Our payment provider — handles the transaction and receives your email address for the receipt.
- Our email and SMS providers — deliver your report.
- Law enforcement or a regulator, where we are required by law to disclose.
How it is protected
The site is served over HTTPS throughout, and access to our systems is limited to those who need it to run the service.
Your contact details are held in two places, and they are not protected in the same way. In the search system that sends your report, your name, email address and mobile number are encrypted at rest. In the order record on this website — which exists so that we can resend your report, let you open it again from Find my report if you lose the link, and honour the free re-check — the same details are stored unencrypted in our database. If you ask us to send your report to a corrected address, we store that address on the order record too, with the time we sent it, so that pressing send twice does not spend one of your resends. Sending to a corrected address does not by itself change your order. There is a box you can tick to say you want that address used from then on; only if you tick it do we replace the address held on your order and in the search system, and only then do the free re-check updates and anything else we send start going there instead. The address it replaces is not kept. That database is not publicly reachable and is access-controlled, but we would rather tell you exactly what we do than imply more than we do.
We do not store card numbers anywhere. They are collected in your browser by our payment provider and never reach our servers.
How long we keep it
Search records are kept so that we can resend your report, honour the free re-check, meet our record-keeping obligations and reconcile what the register charged us. We keep them for seven years, which matches the period we are required to keep the associated financial records, after which personal information is deleted or de-identified.
Overseas disclosure
Our infrastructure runs on Cloudflare, which processes and stores data in data centres in Australia and may route or replicate it through facilities in other countries, including the United States. Our payment processing involves Stripe, which operates in the United States and Ireland. By using the service you consent to these disclosures. [CONFIRM AGAINST FINAL PROVIDER LIST BEFORE LAUNCH.]
Cookies
We set one cookie, rc_order, when you start a check. It holds nothing but an opaque order reference, and it is what lets the browser holding it see that order's progress and report without signing in. It lasts 30 days, the same period your report link stays viewable. If you lose it, Find my report will open your report again and issue a new one: your reference on its own is enough, or the VIN or plate you searched together with the email address you used. Those details are your own, so matching them is all we need in order to show you what you paid for. We rate limit that form and put a bot check in front of it, so it cannot be used to guess at orders.
We do not use advertising or tracking cookies, and we do not run third-party analytics. Cloudflare Turnstile, which keeps bots away from our payment, contact and Find my report forms, may set its own short-lived token; it is a privacy-preserving alternative to a CAPTCHA and does not track you across sites.
SMS
If you opt in, we use your mobile number to send the result and any re-check alert for that search, and nothing else. Reply STOP to any message to opt out permanently.
Access, correction and complaints
You may ask what we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Use our contact form. We will respond within 30 days.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.