Privacy Policy

Prevado Pty Ltd (ABN 92 697 862 203, ACN 697 862 203) 1/6 Geehi Way, Ravenhall VIC 3029, Australia Email: contact@prevado.com

Effective date: July 2026

1. Application

This privacy policy (“Policy”) applies to those instances in which Prevado Pty Ltd (“Prevado”, “we”, “us” or “our”) collects, uses, holds and discloses personal information in the course of operating its business in Australia, including in connection with our website at www.prevado.com (the “Site”) and our fleet management platform, comprising software, mobile applications and associated telematics hardware (collectively, the “Services”).

In this Policy, references to the “Privacy Act” are references to the Privacy Act 1988 (Cth), and “applicable laws” includes the Privacy Act and the Australian Privacy Principles (“APPs”). “Personal information” has the meaning given to that term in the Privacy Act.

The Privacy Act contains exemptions and permitted general situations in relation to certain acts and practices. Where appropriate, Prevado relies on the relevant exemptions available under the Privacy Act.

2. Prevado as controller and as processor

This Policy applies where Prevado determines the purposes and means of handling personal information, namely in respect of:

• visitors to the Site;
• representatives of organisations that use, or are evaluating, the Services, including account administrators, fleet managers and billing contacts (each such organisation, a “Customer”); and
• individuals who correspond with Prevado or receive communications from Prevado.

End Users. Where an individual accesses or is monitored through the Services in their capacity as a driver, employee or contractor of a Customer (an “End User”), the Customer determines the categories of data collected through the Services and the purposes for which that data is used. Prevado processes such data on behalf of, and on the instructions of, the Customer pursuant to its agreement with the Customer, and this Policy does not apply to that processing. Prevado receives limited personal information relating to End Users, such as name and email address, from the Customer for the purpose of provisioning and administering user accounts. The Customer is responsible for ensuring that it has the authority, and has obtained all consents and provided all notices required by applicable laws, in connection with the collection and disclosure of End User personal information through the Services.

End Users seeking information regarding data collected about them through the Services should refer to the privacy policy of their employer or engaging organisation and direct enquiries to that organisation in the first instance. End Users may also contact Prevado at contact@prevado.com, and Prevado will provide reasonable assistance, including by referring the enquiry to the relevant Customer.

3. Collection of personal information

The categories of personal information that Prevado collects and holds depend upon the nature and extent of your interaction with Prevado, and may include:

• Identity and contact information: name, email address, telephone number, position title and employer or organisation name, collected when an account is established, a demonstration or quotation is requested, or you otherwise interact with Prevado.
• Billing and transaction information: billing contact details, order details and transaction records. Payment card transactions are processed by our third-party payment processor; Prevado does not collect or store complete payment card numbers.
• Records of correspondence: the content of enquiries, support requests and other communications with Prevado, together with records of telephone discussions.
• Technical and usage information: internet protocol (IP) address, browser type, device identifiers, operating system, referral source, pages accessed, and actions performed within the Site and the Services, collected by means of cookies and similar technologies.
• Marketing preferences: communication preferences and records of interactions with Prevado’s marketing communications.

Prevado collects personal information:

• directly from you, including when you submit a form, establish an account, place an order or otherwise communicate with Prevado;
• from the Customer with which you are associated, including when the Customer provisions user accounts or supplies contact details;
• automatically, through your use of the Site and the Services; and
• from publicly available sources, including in connection with business development activities.

Where it is reasonable and practicable to do so, Prevado collects personal information directly from the individual concerned.

4. Use of personal information

Prevado collects, holds and uses personal information for the following purposes:

• to provide, operate, maintain and support the Services;
• to establish and administer accounts and to authenticate users;
• to process orders, payments and invoices, and to maintain business records;
• to communicate with you, including in relation to service notifications, updates and support;
• to analyse, improve and develop the Site and the Services;
• to send marketing communications regarding Prevado’s products and services, subject to your right to opt out at any time;
• to detect, investigate and prevent fraudulent transactions, unauthorised access to the Services and other unlawful activities, and to maintain the security and integrity of the Services; and
• to comply with Prevado’s legal and regulatory obligations.

Prevado may also use personal information for any other purpose for which it has obtained your consent, or where the use is otherwise permitted or required by applicable laws.

5. De-identified and aggregated information

Prevado, or its authorised service providers, may de-identify or aggregate personal information and use the resulting information for statistical, analytical, research, benchmarking, product development and other operational purposes. Information that has been de-identified in accordance with applicable laws is no longer personal information for the purposes of the Privacy Act, and this Policy does not restrict Prevado’s use of such information.

6. Disclosure of personal information

Prevado does not sell personal information. Prevado may disclose personal information in the following circumstances:

• Service providers. To third-party providers engaged to support the operation of the Site and the Services, including providers of cloud hosting and infrastructure, identity and authentication, payment processing, invoicing and accounting, mapping, communications delivery, and monitoring and analytics services. Such providers are permitted to use personal information solely for the purpose of providing their services to Prevado and are subject to obligations of confidentiality and security.
• Professional advisers. To Prevado’s accountants, auditors, insurers and legal advisers, where reasonably necessary.
• Legal and regulatory requirements. To governmental or regulatory authorities, in response to subpoenas, court orders or other valid legal processes, or as otherwise required or authorised by law. Where permitted by law, Prevado will notify the affected Customer prior to disclosing information held on the Customer’s behalf.
• Enforcement of rights. To enforce Prevado’s legal rights and to defend against legal claims.
• Corporate transactions. To a buyer or other successor in connection with an actual or proposed merger, acquisition, restructure, reorganisation or sale or transfer of some or all of Prevado’s assets, in which case personal information may be among the assets transferred, subject to the terms of this Policy.

7. Overseas disclosure

The Prevado platform is hosted in Australia and Customer data is stored primarily within Australia. Certain of Prevado’s service providers, however, are located or maintain infrastructure outside Australia, and personal information may accordingly be disclosed to, or accessed from, recipients located principally in the United States, the United Kingdom and the European Union, and New Zealand.

Where personal information is disclosed to an overseas recipient, Prevado takes reasonable steps, including contractual measures, to ensure that the recipient handles the information in a manner consistent with the APPs, and otherwise makes such disclosures in compliance with applicable laws.

8. Data storage and security

Prevado holds personal information in electronic form within cloud infrastructure operated by established providers, with production infrastructure located in Australia.

Prevado takes reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These measures include encryption of data in transit and at rest, role-based access controls, network segregation of production databases, logging and monitoring, and secure software development practices. Access to personal information is limited to those personnel and service providers who have a legitimate business need for such access.

Notwithstanding these measures, no method of transmission or storage can be guaranteed to be completely secure, and information transmitted over the internet is transmitted at your own risk. Prevado maintains procedures for responding to suspected data breaches. In the event of a data breach that is likely to result in serious harm to affected individuals, Prevado will act in accordance with the Notifiable Data Breaches scheme under the Privacy Act, including by notifying affected individuals and the Office of the Australian Information Commissioner (“OAIC”) where required to do so.

9. Data retention

Prevado retains personal information for as long as reasonably required to fulfil the purposes for which it was collected, or for any secondary purpose permitted under the Privacy Act, including where retention is required by applicable laws. In general terms:

• account information is deleted within 90 days following the conclusion of a Customer’s subscription, unless earlier deletion is requested by the Customer or a longer retention period is required by law;
• billing and financial records are retained for a period of 7 years in accordance with Australian taxation and corporations law requirements; and
• data processed on behalf of a Customer through the Services is retained in accordance with Prevado’s agreement with that Customer.

When personal information is no longer required and retention is not otherwise required by law, Prevado will take reasonable steps to destroy or de-identify the information. If it is not reasonably practicable to destroy or de-identify personal information, Prevado will take reasonable steps to protect the information and isolate it from further use until destruction or de-identification becomes practicable.

10. Cookies and similar technologies

Prevado and its service providers may collect information using cookies, tags, scripts and similar technologies for purposes including enabling core functionality of the Site, retaining preferences, measuring visits and evaluating the effectiveness of the Site and of Prevado’s communications. You may configure your browser to refuse some or all cookies, or to alert you when cookies are being set; however, if you disable or refuse cookies, parts of the Site may become inaccessible or may not function properly.

11. Direct marketing

Where required by law, Prevado will obtain your consent, whether express or implied in accordance with applicable privacy and anti-spam laws, before using your personal information for direct marketing purposes. You may opt out of receiving direct marketing communications from Prevado at any time by using the unsubscribe facility included in each marketing communication or by contacting contact@prevado.com. Operational and service communications relating to your account or the Services are not affected by a marketing opt-out.

12. Third-party websites and services

This Policy does not apply to the collection, use, storage or disclosure of personal information by third parties. The Site and Prevado’s communications may contain links to websites operated by third parties; this Policy does not apply to those websites, and Prevado recommends that you review the privacy policies of any third-party websites you visit in order to understand their information handling practices.

13. Your rights and how to exercise them

Under applicable laws, you have rights in relation to your personal information, including:

• Access. You may request access to the personal information Prevado holds about you.
• Correction. You may request correction of personal information that you believe is inaccurate, out of date, incomplete or misleading.
• Complaint. If you consider that Prevado has breached the Privacy Act or the APPs, or you are dissatisfied with Prevado’s handling of a request or enquiry, you may lodge a complaint with Prevado.

Requests and complaints may be submitted to contact@prevado.com. Prevado may request information from you to verify your identity before actioning a request; this is a security measure to ensure that personal information is not disclosed to a person who has no right to receive it. Prevado aims to respond to all legitimate requests and complaints within one month. If a request is complex, or if you have made multiple requests, a response may take longer, in which case Prevado will keep you informed of progress. If Prevado declines a request, it will provide written reasons for the refusal and the mechanisms available to complain about the refusal.

If you are not satisfied with the outcome of Prevado’s handling of a complaint, you may lodge a complaint with the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au
• Email: enquiries@oaic.gov.au
• Telephone: 1300 363 992

14. Children

The Site and the Services are directed to businesses and are not directed toward minors. Prevado does not knowingly collect personal information directly from individuals under the age of 18. If you have reason to believe that Prevado holds personal information collected directly from a minor, please contact us at contact@prevado.com and we will take reasonable steps to delete the information.

15. Changes to this Policy

Prevado may amend this Policy from time to time. Any updated Policy will be published on the Site and will take effect from the effective date stated in the Policy. You should periodically review the Site for the current version of this Policy. Material changes will be notified by reasonable means.

16. Contact

If you have questions regarding this Policy or Prevado’s privacy practices, or you wish to make a request or complaint, please contact:

Prevado Pty Ltd 1/6 Geehi Way, Ravenhall VIC 3029, Australia Email: contact@prevado.com