Privacy Policy

About this policy

This Privacy Policy explains how INOVIT Pty Ltd (“Hartes Metal”, “we”, “us” or “our”) collects, holds, uses, discloses and protects personal information.

It applies when you:

• visit an Hartes Metal website or storefront;
• purchase or enquire about Hartes Metal products;
• communicate with Hartes Metal;
• contact an Hartes Metal Facebook Page or Instagram account;
• send a message through Messenger, Instagram Direct or another connected channel; or
• otherwise use a service provided by Hartes Metal.

Hartes Metal uses business systems and authorised service providers to manage customer communications and business operations.

Our roles

For customer, sales and messaging information associated with Hartes Metal:

• INOVIT Pty Ltd owns the connected Meta App and relevant business assets;
• Hartes Metal determines why personal information is collected and how it is used;
• Hartes Metal is responsible for its relationship with customers; and
• Hartes Metal is responsible for providing, securing and supporting its business systems.

Hartes Metal may manage account, security, diagnostic and operational information required to operate its services.

Information we collect

Depending on how you interact with Hartes Metal, we may collect:

Contact information

• your name;
• email address;
• telephone number;
• delivery or billing address;
• organisation and job title; and
• communication preferences.

Customer and transaction information

• enquiries and product interests;
• quotes, orders, invoices and payment status;
• delivery and fulfilment information;
• vehicle, wheel, tyre and fitment details;
• warranty or service requests; and
• records of communications with us.

Payment card information may be processed by an authorised payment provider. We do not intentionally store complete payment card numbers unless expressly stated.

Meta and social messaging information

When you communicate with an Hartes Metal Facebook Page, Instagram account, Messenger account or another connected Meta service, we may process:

• your name and username;
• your profile image;
• Meta platform-scoped identifiers;
• messages, replies and comments;
• images, documents and other attachments you send;
• timestamps, reactions and postbacks;
• message delivery and read status;
• conversation and routing metadata; and
• other information Meta provides through its authorised APIs.

We do not request or store your Facebook or Instagram password.

Technical information

We may collect:

• IP address;
• browser and device information;
• session and authentication records;
• cookie and local-storage identifiers;
• application logs and diagnostic information;
• approximate location derived from an IP address; and
• activity performed through an Hartes Metal service.

How we collect information

We may collect information:

• directly from you;
• when you use an Hartes Metal website, storefront or portal;
• when you communicate with an Hartes Metal employee or representative;
• through Facebook, Instagram, Messenger or another connected service;
• through our business systems;
• from authorised service providers and integrations;
• through cookies, logs and similar technologies; and
• where permitted, from publicly available sources.

How we use information

We may use personal information to:

• respond to enquiries and customer messages;
• recommend products and provide fitment information;
• prepare quotes and process orders;
• arrange payment, delivery and fulfilment;
• provide customer service and warranty support;
• maintain customer and transaction records;
• route messages to an appropriate team member;
• prepare or send authorised responses;
• operate integrations selected by Hartes Metal;
• detect fraud, abuse and security incidents;
• comply with legal, accounting and regulatory obligations;
• improve our products, services and customer experience; and
• produce aggregated or de-identified business information.

We do not sell personal information.

Customer conversations are not used for unrelated third-party advertising.

Automated and AI-assisted features

Hartes Metal may enable automated or AI-assisted features within its business systems.

These features may process relevant message content and business information to:

• classify an enquiry;
• retrieve product or order information;
• summarise a conversation;
• prepare a response draft; or
• generate an automated response.

Hartes Metal controls whether these features are enabled and is responsible for their configuration and monitoring.

Automated output may be incomplete or inaccurate. Important product, fitment, pricing, warranty or safety information should be confirmed before relying on it.

Disclosure of information

We may disclose personal information to:

• authorised Hartes Metal employees and representatives;
• software and infrastructure service providers;
• hosting, database and infrastructure providers;
• payment, delivery and fulfilment providers;
• email, communications and customer-support providers;
• security, monitoring and error-reporting providers;
• AI service providers when an authorised AI feature is enabled;
• Meta as required to operate a connected integration;
• professional advisers, auditors and insurers;
• regulators, courts or law-enforcement bodies where legally required; and
• a successor organisation as part of a lawful merger, acquisition or business transfer.

Service providers may only process information for authorised purposes and subject to appropriate contractual, confidentiality and security obligations.

International processing

Hartes Metal and its service providers may process information in Australia and other countries where relevant infrastructure or service providers operate.

Privacy laws in those countries may differ from Australian law. Where required, reasonable steps are taken to ensure overseas recipients handle personal information consistently with applicable privacy obligations.

Data retention

We retain personal information only for as long as reasonably required to:

• provide products or services;
• respond to enquiries;
• complete and support transactions;
• satisfy contractual, accounting or legal obligations;
• maintain necessary security and audit records;
• resolve disputes; and
• enforce applicable agreements.

Retention periods may vary according to the record type and legal obligation.

When personal information is no longer reasonably required, we take reasonable steps to delete or de-identify it.

Residual copies may remain in protected backups until those backups are rotated or securely destroyed.

Security

Hartes Metal uses administrative, technical and organisational safeguards designed to protect personal information from loss, misuse, interference and unauthorised access, modification or disclosure.

These safeguards may include:

• tenant isolation and role-based access controls;
• encryption in transit and, where appropriate, at rest;
• authentication and session controls;
• system logging and security monitoring;
• backup and recovery controls; and
• access restrictions for personnel and service providers.

No online service can guarantee absolute security. Please notify us promptly if you believe your information or account has been accessed without authorisation.

Access and correction

You may request access to or correction of personal information associated with you.

We may request enough information to verify your identity and locate the relevant records. We will never ask for your Facebook or Instagram password.

A request may be limited or refused where permitted or required by law. Where legally permitted, we will explain the reason for a refusal.

Meta Data Deletion

You may request deletion of personal information received or created through Facebook, Instagram, Messenger or another Meta service.

How to submit a request

You may:

• contact the relevant Hartes Metal Facebook Page or Instagram account through the same channel; or
• email [email protected] with the subject:

Hartes Metal Meta Data Deletion Request

Include:

• your name;
• the Facebook Page or Instagram account involved;
• your platform username or profile URL, if available;
• the approximate date of the conversation;
• the country in which you are located; and
• a description of the information you want deleted.

Do not send your password, access token, payment card number or other authentication secret.

Privacy requests are handled by INOVIT Pty Ltd for information processed through its business systems.

Verification

To prevent unauthorised deletion, we may verify:

• your association with the relevant profile or conversation;
• control of a relevant email address or account;
• your authority to act for another person; and
• information reasonably required to locate the relevant records.

Verification information will only be used to assess and complete the request.

Information that may be deleted

Subject to applicable law and valid retention requirements, deletion may include:

• Meta platform-scoped identifiers;
• names, usernames and profile images stored in Hartes Metal systems;
• messages, replies, comments and attachments;
• delivery, read, reaction and conversation metadata;
• linked customer or contact records;
• stored webhook events;
• automated classifications and summaries;
• AI-generated response drafts; and
• other derived records associated with the conversation.

Information we may retain

We may retain limited information where reasonably necessary to:

• comply with legal, accounting or regulatory obligations;
• establish, exercise or defend legal claims;
• detect fraud, abuse or security incidents;
• preserve necessary audit records;
• document completion of the deletion request; or
• satisfy another lawful retention requirement.

De-identified information that can no longer reasonably identify a person may also be retained.

Residual copies may remain in protected backups until the applicable backup is rotated or securely destroyed.

Processing and confirmation

We will process a verified request without unreasonable delay.

When processing is complete, we will provide confirmation or explain any information that could not lawfully be deleted.

Deleting information from Hartes Metal does not automatically delete information held independently by Meta. To manage information held by Meta, use the privacy and account controls provided by the relevant Meta service.

Cookies

Hartes Metal websites and services may use cookies and similar technologies for:

• authentication and session continuity;
• security and fraud prevention;
• shopping cart and user preferences;
• website operation and performance; and
• permitted analytics.

Where legally required, optional cookies will only be used after consent is obtained.

Marketing communications

We may send service-related messages required to respond to an enquiry or administer a transaction.

Marketing communications will only be sent where permitted. You may unsubscribe using the link in the communication or by contacting us.

Unsubscribing from marketing does not prevent necessary order, transaction, security or legal notices.

Children

Hartes Metal provides products and services intended for businesses and adult customers. Its services are not directed to children under 16.

If you believe a child has provided personal information without appropriate authority, contact us so that we can investigate.

Privacy complaints

You may contact us with a question or complaint about how personal information has been handled.

Please provide enough information for us to understand and investigate the issue. We will acknowledge and respond within a reasonable period.

If you are not satisfied with our response, you may have the right to contact the Office of the Australian Information Commissioner or another applicable privacy regulator.

Changes to this policy

We may update this policy when our services, practices or legal obligations change.

The current version will be published on this page with its effective date. If a change is material, we will provide additional notice where reasonably appropriate.

Contact

Privacy contact

INOVIT Pty Ltd

Email: [email protected]

Telephone: +61 2 9191 2644

Address: 26/10 Straits Ave, South Granville NSW 2142, Australia