Privacy policy
This describes what actually happens to the information you give us when you request a vehicle valuation — not a general statement of intent. If anything here does not match your experience, tell us.
Last updated 18 August 2026
What you give us
Everything below is information you type in or upload yourself, or that a firm instructing us supplies on your behalf.
- Who you are — your name, email address, phone number and, where a certificate needs it, your postal address.
- The vehicle — year, make, model, VIN or chassis number, registration, odometer, colour, engine size, transmission, body style, and whether it has Australian compliance and registration.
- Photographs — any images you upload of the vehicle. These are resized on your own device before they are sent.
- Your view of it — your own estimate of value, your reason for it, and any defects you tell us about.
- Who is asking — where a solicitor, insurer or broker instructs us, their firm name and matter reference.
What we collect automatically
We do not use this information to make decisions about you or your valuation. It only tells us which advertising works.
- How you found us — if you arrive from an advertisement, the click identifiers Google and Meta attach to the link (gclid, fbclid) and any campaign tags, stored in a cookie on your browser named pv_attr. This is how we know which advertising is worth paying for.
- Which pages you looked at — through Google Analytics and the Meta pixel, in the ordinary way.
Why we hold it
To produce your valuation and the certificate. To take payment and issue you a tax invoice. To send you your form link, reminders if you have not finished it, your certificate, and a notice before the certificate expires. And to measure which advertising produced genuine enquiries.
We do not sell your information, and we do not send marketing to people who have not asked for it.
Who else sees it
We use a small number of services to run this. Each sees only what it needs.
- Stripe — card payments. Your card details are entered on Stripe's own page and never reach our servers — we only ever learn that a payment succeeded.
- Xero — invoicing. Your name, email and the amount, so an invoice can be raised.
- Resend — email delivery. Your email address and the contents of the emails we send you.
- Vercel and Turso — the hosting and the database the site runs on.
- Google and Meta — advertising measurement. Where we report a completed sale back to them, your email address and phone number are converted into an irreversible code on our own server first — the actual address never leaves us.
Certificate verification
Anyone holding one of our certificates can check it is genuine at our verification page. That check needs both the certificate reference and the vehicle's VIN, so a reference number on its own proves nothing and reveals nothing.
Certificates state a value as at a date and are treated as current for 28 days.
How long we keep it
Valuation records are kept indefinitely at present. Two reasons: tax law requires us to keep records behind the invoices we issue, and a certificate may need to be verified as genuine long after it was issued.
If you want your record removed and there is no legal reason for us to hold it, ask us and we will remove it.
Backups
A copy of our records is taken each night and emailed to our own team so the business can be rebuilt if the database is ever lost. Staff passwords are never included in that copy. Photographs are excluded from the routine nightly copy to keep it small.
Keeping it safe
Everything between your browser and us travels encrypted. The staff area is behind a login, and no part of it is reachable without one. We are a small business and we do not pretend to have the security operation of a bank — what we do have is a system where the information we hold is limited to what a valuation actually needs.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Email or ring us using the details below and we will deal with it.
If you would rather we did not track which advertisement brought you here, blocking cookies in your browser stops it. The valuation itself works either way.
If you are unhappy with how we have handled your information, tell us first. If we cannot sort it out, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If this policy changes we will update the date at the top. We will not quietly start doing something with your information that this page does not describe.
Getting in touch
Top Secret Imports Pty Ltd (ABN 17 116 245 366)
51 Forge Street, Blacktown NSW 2148
+61 2 9622 2333 · sales@topsecretimports.com.au
Valuations are invoiced by Express Vehicle Compliance (ABN 27 632 816 016).