Privacy Policy

Heartland Mahindra Penrith is committed to safeguarding the privacy of individuals. This Privacy Policy sets out how Heartland Mahindra Penrith manages personal information. It is structured as follows:

1. Personal information Heartland Mahindra Penrith collects
2. Use and disclosure of personal information
3. Automated decision making
4. Cookies
5. Links to other websites
6. Marketing
7. Overseas transfers
8. Access and correction
9. Contacting Heartland Mahindra Penrith and complaints
10. Changes to Privacy Policy

1. Personal information Heartland Mahindra Penrith collects

The main types of personal information Heartland Mahindra Penrith collects and holds are:

• contact and identification information for individuals seeking to buy or sell vehicles with Heartland Mahindra Penrith such as name, date of birth, contact number(s), email address(es), residential and/or business address(es), demographic information (such as postcode, age, gender) and driver's licence details;
• vehicle and servicing details for Heartland Mahindra Penrith's customers including vehicle registration, vehicle purchase details, service appointment bookings;
• finance details for Heartland Mahindra Penrith's customers seeking finance such as financial, insurance or credit information, marital status, employment details and history;
• contact details for individuals working for Heartland Mahindra Penrith's business partners and suppliers;
• information provided by an individual as part of a recruitment process such as name, contact details, prior employment history, qualifications, referee details and, if applicable, details for background checks; and
• other information provided by individuals while interacting with Heartland Mahindra Penrith.

Heartland Mahindra Penrith collects personal information in the course of running its business in a range of different ways, typically through:

• interactions with individuals (e.g. through any records Heartland Mahindra Penrith keeps of telephone calls, or emails received, or messages sent to Heartland Mahindra Penrith or posted on Heartland Mahindra Penrith's pages on social media);
• Heartland Mahindra Penrith's website;
• use of social media;
• employment applications;
• third party service providers; and
• provision of customer service and support.

Where practicable, Heartland Mahindra Penrith collects personal information in connection with running its business directly from the individual concerned. On occasion Heartland Mahindra Penrith may collect personal information from someone else such as when speaking to a referee for a job applicant or doing screening for onboarding a new supplier or customer.

2. Use and disclosure of personal information

Heartland Mahindra Penrith stores personal information in electronic and paper form.

Heartland Mahindra Penrith uses and discloses personal information as follows:

• to source vehicles and sell them to Heartland Mahindra Penrith's customers and to provide other related services to customers such as vehicle servicing and assist with arranging financing to purchase a vehicle;
• to manage arrangements with Heartland Mahindra Penrith's customers and prospective customers;
• to obtain products, services or information from Heartland Mahindra Penrith's suppliers;
• to assess what vehicles a person may be interested in purchasing (e.g., based on the person's interests and other information Heartland Mahindra Penrith knows about them);
• to operate and manage Heartland Mahindra Penrith's website, social media and other communications and media channels;
• subject to applicable laws, to conduct marketing;
• for processing and assessing employment applications; and
• for such other purposes authorised or required by law.

It may be necessary to share personal information with organisations that provide products or services to Heartland Mahindra Penrith. For example, Heartland Mahindra Penrith may use third party service providers for the organisation of customer care, implementation of promotions, development of offers, communication and contact with customers, organization of events and for the purpose of obtaining advice and managing its affairs. Heartland Mahindra Penrith also uses third party service providers for credit card processing/payment and for IT services (hosting services, database maintenance, etc.).

3. Automated decision making

Heartland Mahindra Penrith uses computer programs to make decisions affecting a person's interests to offer products or services that could be of interest. This is typically done via AI Agents within website chat or SMS. The sorts of personal information Heartland Mahindra Penrith uses in the operation of the computer program is browsing history on Heartland Mahindra Penrith's websites, name, contact information, and other information you may input into Heartland Mahindra Penrith's websites. The level of human oversight Heartland Mahindra Penrith provides over these decisions is limited — responses and recommendations may be generated automatically, with human review available where a person requests it or where required for follow-up by Heartland Mahindra Penrith's staff.

4. Cookies

Heartland Mahindra Penrith uses cookies on its website. Cookies are small text files that are stored by the website user's browser when they visit a website. This identifies the browser used and can be recognised by Heartland Mahindra Penrith's web server. Heartland Mahindra Penrith may use cookies to associate a user with social media platforms and, if the user so chooses, enable interaction between the user's activities on Heartland Mahindra Penrith's platforms and those social media platforms. Heartland Mahindra Penrith's website also uses cookies to analyse website traffic and help provide a better website visitor experience. Website users can make certain choices about the use of cookies through their browser settings. However, if the user disables certain cookies, this may prevent the user from taking full advantage of Heartland Mahindra Penrith's website.

5. Links to other websites

Heartland Mahindra Penrith's website may contain links to third party websites. Heartland Mahindra Penrith does not control or otherwise determine the privacy practices of these third party sites. To find out about their privacy practices, you should check their websites for their privacy policy, or otherwise ask them about their privacy practices.

6. Marketing

If you have received a direct marketing communication from Heartland Mahindra Penrith and do not wish to receive these communications from Heartland Mahindra Penrith in the future, just use the “unsubscribe” function in the email or SMS, or tick the opt out box on postal communications and return the mailed item to Heartland Mahindra Penrith.

7. Overseas transfers

Heartland Mahindra Penrith's website/s are hosted in Australia. On occasion, a third party service provider Heartland Mahindra Penrith engages or that Heartland Mahindra Penrith is instructed to provide information to may be outside of Australia however, the location of the third party would depend on the specific situation.

8. Access and correction

An individual may request access to or correction of any of the personal information Heartland Mahindra Penrith holds about them by contacting Heartland Mahindra Penrith during business hours on 02 4725 6555 or via the contact page.

Heartland Mahindra Penrith may require an individual making a request to verify their identity before processing their request.

Heartland Mahindra Penrith will aim to respond to all requests promptly and within 30 days.

Heartland Mahindra Penrith may refuse a request where permitted or required by law. Heartland Mahindra Penrith will comply with any regulatory requirement to give reasons for its decision.

9. Contacting Heartland Mahindra Penrith and complaints

If you have any queries, concerns or complaints about how Heartland Mahindra Penrith handles your personal information please contact Heartland Mahindra Penrith during business hours on 02 4725 6555 or via the contact page. Heartland Mahindra Penrith may require an individual making a request to verify their identity before processing their request.

Please provide sufficient details so that Heartland Mahindra Penrith can understand the nature of your concern. In most cases, Heartland Mahindra Penrith will ask that you put your request in writing.

Heartland Mahindra Penrith takes all complaints seriously and will use reasonable endeavours to investigate and respond to a complaint in writing within 30 days of receiving the written complaint. If you remain unsatisfied by Heartland Mahindra Penrith's response to your complaint, you may be entitled to refer your complaint to the Office of the Australian Information Commissioner.

• Phone: 02 4725 6555
• Mailing Address: 2166 Castlereagh Rd, Penrith, NSW, 2750

10. Changes to Privacy Policy

Heartland Mahindra Penrith may make changes to this Privacy Policy by posting the revised policy on its website. Please check back from time to time to review this Privacy Policy.