Privacy Policy

1. What information we collect

Buyers

When you create a vehicle request, we may collect information including:

• your first name;
• email address and, if provided, phone number;
• your location;
• your intended purchase timeframe;
• the type of vehicle you are looking for and your preferences and requirements;
• budget and payment or finance preferences;
• trade-in information, if applicable;
• additional information you choose to provide about your vehicle requirements; and
• your preferences about receiving follow-up communications from AutoMatch.

We may also create structured information from your request to help AutoMatch understand your requirements, distribute your request to suitable dealers and evaluate dealer proposals.

Please do not include personal contact information or other unnecessary personal information in fields intended for describing your vehicle requirements.

Dealers

If you participate in AutoMatch as a dealer, we may collect information including:

• dealership and legal entity details;
• names and contact details of dealership representatives and salespeople;
• dealership locations, coverage areas and stock preferences;
• onboarding and commercial information;
• dealer proposals and vehicle information;
• acceptance of AutoMatch terms and commercial conditions; and
• billing and subscription information.

Payment information may be processed by our payment provider. AutoMatch may retain relevant payment identifiers, billing status and transaction information but does not need to store complete payment-card details.

Information collected when you use AutoMatch

We may also collect technical or usage information associated with your use of AutoMatch, including:

• the page or source through which you reached AutoMatch;
• referral information;
• campaign information such as UTM parameters;
• advertising click identifiers such as gclid or fbclid, where present;
• partner or referral identifiers;
• timestamps associated with requests and activity; and
• information used to detect abuse, duplicate submissions or misuse of the service.

AutoMatch may process an IP address when a request is submitted for security and abuse-prevention purposes. Where retained for this purpose, the application stores a protected hash rather than the raw IP address.

2. How we use your information

We use information collected through AutoMatch to:

• provide and operate the AutoMatch service;
• understand a buyer's vehicle requirements;
• connect buyer requests with suitable participating dealers;
• enable dealers to prepare proposals in response to buyer requests;
• evaluate and rank eligible dealer proposals against the buyer's requirements;
• present buyers with their selected AutoMatch results;
• communicate with buyers and dealers about requests, proposals and the operation of the service;
• administer dealer participation, subscriptions and billing;
• provide customer support;
• understand how buyers find AutoMatch and assess the effectiveness of partnerships or promotional activity;
• protect AutoMatch from spam, abuse, duplicate submissions and misuse;
• maintain and improve the service; and
• comply with applicable legal and regulatory obligations.

We do not sell personal information to third parties.

3. Buyer privacy and dealers

Protecting buyer privacy is an important part of how AutoMatch operates.

When a buyer submits a request, participating dealers may receive the information they reasonably need to understand the vehicle being sought and prepare a suitable proposal. This can include the buyer's first name, general location, purchase timeframe, vehicle requirements, budget, relevant trade-in information and other information relevant to the request.

A buyer's email address and phone number are not provided to dealers simply because the buyer submits an AutoMatch request.

AutoMatch presents selected proposals to the buyer. The buyer then chooses whether they want to contact a dealer.

When a buyer chooses to contact a dealer, AutoMatch provides the dealer's relevant contact information to the buyer so that the buyer can initiate contact directly.

Buyers should avoid including identifying or contact information in free-text vehicle requirement fields. AutoMatch uses safeguards intended to prevent obvious contact information from being included in dealer-facing free text.

4. Artificial intelligence

AutoMatch uses artificial intelligence to help interpret and structure vehicle requests and vehicle information.

Information submitted in relevant fields may be processed using third-party AI services for this purpose. For example, the description of what a buyer is looking for may be processed by an AI model so AutoMatch can convert it into structured vehicle criteria.

AI processing assists AutoMatch in operating the service but does not change our responsibility for how personal information is handled.

We ask users not to include unnecessary personal or sensitive information in free-text descriptions.

5. Email and communications

We use email to communicate information necessary to operate AutoMatch, including buyer request confirmations, results, dealer request notifications, onboarding information and other service-related communications.

Where you separately choose to receive follow-up communication from AutoMatch, we may contact you in accordance with that choice.

If you provide your email address through our pre-launch notification form, we will use it to notify you about the launch or availability of AutoMatch. Providing an email address through that form does not by itself mean you have agreed to unrelated marketing communications.

Where applicable, communications may include an unsubscribe option.

6. Attribution and browser storage

AutoMatch may record information about how you reached our website, such as campaign parameters, referral source, advertising click identifiers or partner links.

We use this information to understand where AutoMatch users come from and to evaluate marketing and partnership activity.

AutoMatch currently uses browser session storage to support the buyer journey and attribution process. Session storage may temporarily hold information entered during a vehicle request and information about how you reached AutoMatch.

AutoMatch does not currently use third-party analytics or advertising tracking cookies.

7. Service providers

We use third-party service providers to operate AutoMatch. These may include providers of:

• database and cloud infrastructure;
• website hosting and delivery;
• artificial intelligence services;
• email delivery;
• payment processing; and
• other technical infrastructure required to operate and secure the service.

These providers may process information on our behalf as necessary to provide their services.

Our current technology providers include Supabase, Lovable and associated infrastructure, Google AI services, Stripe and Cloudflare.

Some providers or their infrastructure may be located outside New Zealand or may process information using infrastructure in other countries.

Where personal information is processed or disclosed outside New Zealand, we take reasonable steps to ensure it is handled appropriately and in accordance with applicable privacy requirements.

8. Security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration or disclosure.

These measures include restricted database access, server-side processing, access controls, secure token-based links for relevant buyer and dealer functions, encrypted network connections and protected identifiers for certain abuse-prevention information.

No internet-based service can guarantee absolute security, but we aim to use safeguards appropriate to the information we hold and the way AutoMatch operates.

9. How long we keep information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including operating AutoMatch, supporting buyers and dealers, maintaining appropriate business and transaction records, resolving disputes, preventing abuse and meeting legal or regulatory obligations.

Different types of information may need to be retained for different periods.

When information is no longer reasonably required for these purposes, we may delete or anonymise it, subject to any legal or legitimate business requirements to retain it.

10. Accessing or correcting your information

You may ask us to provide access to personal information we hold about you or to correct information that you believe is inaccurate.

You may also contact us if you have questions about information we hold or wish to ask whether information can be deleted.

We may need to verify your identity before acting on a request, and there may be circumstances where information must be retained or where access or deletion is limited by law.

To make a privacy-related request, contact:

support@automatch.co.nz

11. Privacy breaches

If we become aware of a privacy breach involving personal information, we will assess the breach and take appropriate steps to contain and address it.

Where notification is required under applicable privacy law, we will notify affected individuals and the relevant authorities as required.

12. Changes to this policy

We may update this Privacy Policy as AutoMatch develops, our services change or our privacy obligations evolve.

The current version will be published on the AutoMatch website. Where changes are significant, we may take additional reasonable steps to bring them to the attention of affected users.

13. Contact us

If you have questions or concerns about this Privacy Policy or how AutoMatch handles personal information, please contact:

AutoMatch Limited
Email: support@automatch.co.nz
New Zealand